$ rpki-client -vvf rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft File: 244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft (raw, json) Hash identifier: Cmztufo+dMoVSZ+V7Lb1uqcEHFcq2UCMS2lVUbsLR/M= Subject key identifier: 96:5A:35:44:38:75:AA:1B:A4:E0:A6:4E:A1:72:8B:64:DA:A3:42:12 Authority key identifier: 24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F Certificate issuer: /CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F Certificate serial: 39DCB669CA4E4B45491508D9B95AAF56EFC2744A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer Subject info access: rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft Manifest number: 020D Signing time: Wed 30 Apr 2025 12:03:49 +0000 Manifest this update: Wed 30 Apr 2025 11:58:49 +0000 Manifest next update: Thu 01 May 2025 13:03:49 +0000 Files and hashes: 1: 323830343a3433633a3a2f33322d3430203d3e20323632343232.roa (hash: PLKMLaZ2a7H9L5imphdZ9G/Nf2BRc20xdttKf+egV64=) 2: 3134332e3230382e3230342e302f32322d3234203d3e20323632343232.roa (hash: TgRt4L6a8pOv3SCwRQclmf3KBjiND8STFDG66uENJ+A=) 3: 3137372e33392e38302e302f32312d3234203d3e20323632343232.roa (hash: +VsihtT40UXUDslQFosRezPR5S+3EFSwp+A0r5iVJB0=) 4: 244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl (hash: jbXdpyAI0+9162JwmkyidfJv1PXk6qZlMYxoltwEBP8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 May 2025 13:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:dc:b6:69:ca:4e:4b:45:49:15:08:d9:b9:5a:af:56:ef:c2:74:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F Validity Not Before: Apr 30 11:58:49 2025 GMT Not After : May 1 13:03:49 2025 GMT Subject: CN=965A35443875AA1BA4E0A64EA1728B64DAA34212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0d:2d:7d:e8:18:53:81:8d:e7:6c:b2:97:f8: f8:3a:9c:df:df:ff:4c:52:8f:8c:01:03:12:cc:f8: bf:3b:dc:65:dd:04:8e:bd:2f:23:0d:d4:a0:c5:7e: 6a:88:55:eb:30:3c:6c:bc:1d:19:8a:a1:99:05:90: cf:23:c8:03:1a:49:9e:cc:9a:47:d5:87:05:d4:f2: fd:32:f4:b9:83:63:2c:13:e8:7d:1a:0b:9f:f1:af: 25:04:28:46:a5:f6:0d:05:f9:01:83:c7:ce:99:94: 74:fa:2e:61:fe:40:59:dd:8e:e3:35:c6:5e:52:d8: 9d:aa:72:9f:66:f2:9b:65:4c:ad:26:34:af:25:df: bd:df:3d:fd:92:bf:fd:95:23:3e:ae:f5:2b:79:29: ec:cd:27:15:f3:cc:5c:0b:76:c9:ee:8f:ec:c9:3e: 24:c3:59:1a:f8:19:3e:87:53:e5:64:73:92:51:43: dd:de:66:21:e1:a7:81:96:bc:d6:12:f8:f2:09:d7: 0d:9f:17:a1:73:cf:31:9f:96:0e:e2:16:9f:dc:0b: da:8d:41:ec:df:d9:51:5f:78:a7:11:63:18:ec:a0: 18:33:f5:1a:bb:7c:84:88:f3:71:25:54:e9:1c:99: 33:26:52:51:21:37:61:a9:a8:c8:1e:b9:94:55:44: 57:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5A:35:44:38:75:AA:1B:A4:E0:A6:4E:A1:72:8B:64:DA:A3:42:12 X509v3 Authority Key Identifier: keyid:24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:45:f4:85:6c:74:13:ac:0e:6c:46:3b:97:da:39:47:47:b6: f1:d6:a0:28:e0:30:99:a8:2b:04:89:d8:fe:81:95:8a:d7:91: f6:f3:8d:f0:33:06:e5:5a:ee:67:d4:0a:f7:bf:37:14:e2:df: d4:06:03:42:e6:bb:a7:db:39:7a:5b:78:7e:77:20:f4:a0:69: 5e:9b:73:98:7a:55:48:41:20:26:4b:b4:57:bc:e2:e0:8c:44: 7d:54:10:59:78:98:b2:3e:40:93:1c:f9:92:80:9d:43:8b:d4: fa:07:57:09:80:22:94:b0:c5:54:83:ef:26:eb:98:14:e7:be: 39:14:b7:57:bb:c7:82:31:aa:12:68:20:8a:88:65:ec:0d:9c: 22:fd:68:96:81:32:e3:f9:d7:31:8f:91:76:52:d3:90:2b:52: 9f:01:fc:95:28:1e:f8:7d:60:bf:19:98:6f:9d:ee:3c:13:f3: eb:ff:36:a3:2a:8a:a1:4b:b8:90:47:22:d8:ef:e6:5e:27:bf: 83:28:03:c5:25:d2:91:14:f6:50:8e:93:6d:3d:69:b0:e2:c8: 18:ce:80:0c:83:99:af:35:13:79:ce:48:07:c9:e3:31:d5:98: ac:aa:3b:0b:58:f7:e7:f4:3c:8e:26:15:46:1a:65:9a:03:3f: bf:67:95:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOdy2acpOS0VJFQjZuVqvVu/CdEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ0Mzg4RERGRTlBOTlENzFDRUIyN0NEQjZDNzY2MzdE MjJDQUI4RjAeFw0yNTA0MzAxMTU4NDlaFw0yNTA1MDExMzAzNDlaMDMxMTAvBgNV BAMTKDk2NUEzNTQ0Mzg3NUFBMUJBNEUwQTY0RUExNzI4QjY0REFBMzQyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIDS196BhTgY3nbLKX+Pg6nN/f /0xSj4wBAxLM+L873GXdBI69LyMN1KDFfmqIVeswPGy8HRmKoZkFkM8jyAMaSZ7M mkfVhwXU8v0y9LmDYywT6H0aC5/xryUEKEal9g0F+QGDx86ZlHT6LmH+QFndjuM1 xl5S2J2qcp9m8ptlTK0mNK8l373fPf2Sv/2VIz6u9St5KezNJxXzzFwLdsnuj+zJ PiTDWRr4GT6HU+Vkc5JRQ93eZiHhp4GWvNYS+PIJ1w2fF6FzzzGflg7iFp/cC9qN Qezf2VFfeKcRYxjsoBgz9Rq7fISI83ElVOkcmTMmUlEhN2GpqMgeuZRVRFfbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUllo1RDh1qhuk4KZOoXKLZNqjQhIwHwYDVR0j BBgwFoAUJEOI3f6amdcc6yfNtsdmN9Isq48wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2Vrb0FxUWVYek5LRUFYcUdNZHdxWmY5VGc3TmRKUXJiU2FlaHgxZEtn bWcvMS8yNDQzODhEREZFOUE5OUQ3MUNFQjI3Q0RCNkM3NjYzN0QyMkNBQjhGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0NDM4OERERkU5QTk5RDcx Q0VCMjdDREI2Qzc2NjM3RDIyQ0FCOEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2Vrb0FxUWVYek5LRUFYcUdNZHdxWmY5VGc3TmRKUXJiU2FlaHgxZEtnbWcvMS8y NDQzODhEREZFOUE5OUQ3MUNFQjI3Q0RCNkM3NjYzN0QyMkNBQjhGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFEX0hWx0E6wObEY7l9o5R0e28dagKOAwmagrBInY/oGViteR9vON8DMG5Vru Z9QK9783FOLf1AYDQua7p9s5elt4fncg9KBpXptzmHpVSEEgJku0V7zi4IxEfVQQ WXiYsj5Akxz5koCdQ4vU+gdXCYAilLDFVIPvJuuYFOe+ORS3V7vHgjGqEmggiohl 7A2cIv1oloEy4/nXMY+RdlLTkCtSnwH8lSge+H1gvxmYb53uPBPz6/82oyqKoUu4 kEci2O/mXie/gygDxSXSkRT2UI6TbT1psOLIGM6ADIOZrzUTec5IB8njMdWYrKo7 C1j35/Q8jiYVRhplmgM/v2eVAA== -----END CERTIFICATE-----Generated at Wed Apr 30 18:13:38 2025 by rpki-client