$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft File: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft (raw, json) Hash identifier: Gu4Euu4j5FPmU/CR4p3K+JtyWpBiUBBYz81BKhX4GEw= Subject key identifier: B3:B9:39:F6:82:6F:9C:13:B6:56:07:FA:22:AE:13:14:6A:C1:F4:4C Authority key identifier: 3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56 Certificate issuer: /CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156 Certificate serial: 65F2AE22CD91A836A48110754F820983376A247F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer Subject info access: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft Manifest number: 021D Signing time: Mon 12 May 2025 01:15:28 +0000 Manifest this update: Mon 12 May 2025 01:10:28 +0000 Manifest next update: Tue 13 May 2025 03:56:28 +0000 Files and hashes: 1: 34352e3233302e39322e302f32322d3234203d3e20323637313734.roa (hash: pqluJp9dP8BehPp8wAJ7d4shVc60G8J0RZCSVM3YKrY=) 2: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl (hash: eT8faBo+5vKfZUowvCRT2M/61FUYP3pGnGC7I/V2Rx8=) 3: 323830343a343934343a3a2f33322d3438203d3e20323637313734.roa (hash: /98gqYovjRwsWAOUZz7FJqYoYsB4E7lW4Ll5DwBrRaQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 01:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f2:ae:22:cd:91:a8:36:a4:81:10:75:4f:82:09:83:37:6a:24:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156 Validity Not Before: May 12 01:10:28 2025 GMT Not After : May 13 03:56:28 2025 GMT Subject: CN=B3B939F6826F9C13B65607FA22AE13146AC1F44C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:68:c2:86:be:c5:1b:ee:c9:d3:09:17:9b:2b: 02:5e:95:54:60:65:4e:20:05:e6:e9:d0:e7:1c:20: 33:b6:8b:f3:32:25:64:f8:0e:93:8a:f4:36:59:84: 86:7b:af:0e:29:97:4d:7e:b2:4d:0e:8a:3c:4b:be: 2b:26:19:31:7f:6a:17:73:27:07:4e:98:80:e8:3f: 19:cf:5b:0e:af:f6:87:e7:5b:41:62:9e:5b:fd:c6: 0b:0c:c7:7a:a3:2d:e7:6a:26:de:f5:2c:4c:be:3f: 7f:e9:23:cc:c9:82:b5:86:19:64:c9:4a:48:42:0b: 59:f1:22:11:b4:c2:6d:04:e8:b0:db:b7:cf:94:1f: f5:0a:c8:c4:2b:d1:4d:a3:6b:3d:ac:88:3d:2e:68: 05:e3:c5:a4:ac:4a:00:19:73:a4:c8:ec:3b:ec:b3: 31:17:56:23:2d:bc:08:f9:a4:ab:94:70:aa:c3:be: 34:fc:11:fe:78:eb:e6:2f:cf:c3:67:ee:59:27:bf: e7:4c:02:2f:27:c0:7b:74:0c:7c:f4:f2:5e:7f:72: 2a:a7:c2:17:0a:d9:4d:5f:30:57:f5:d2:ef:70:7c: 76:b1:8e:21:d2:41:39:65:1e:89:fa:52:09:c2:3a: 35:1c:07:4f:67:78:89:0b:35:d6:54:80:07:3e:bc: 42:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B9:39:F6:82:6F:9C:13:B6:56:07:FA:22:AE:13:14:6A:C1:F4:4C X509v3 Authority Key Identifier: keyid:3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4c:33:c1:dc:9e:90:62:46:88:66:e2:bf:7c:97:2a:67:7b: a2:37:4f:2c:be:17:93:9d:1e:3a:e5:24:89:f8:77:39:eb:3a: 65:94:8e:79:ec:8f:e0:f5:12:cd:bb:b1:8d:3e:ee:f0:fe:b2: f2:f1:d6:4b:54:19:74:fd:52:90:67:e3:16:3c:f9:8d:dc:50: f3:d6:d0:64:bf:e6:78:4e:42:65:55:8b:96:a1:b2:8b:29:2d: ec:8c:2e:a1:b2:fc:9d:80:d4:a7:04:30:20:56:e3:03:f5:2c: d9:86:60:78:87:bd:55:80:62:fb:54:64:5d:b4:bc:03:18:f8: f0:20:34:c0:0c:c1:0e:2e:11:90:ee:30:53:18:01:f9:ab:47: 97:e8:a0:11:39:39:62:cc:d0:5b:6e:50:82:80:12:4f:a3:5c: f1:d0:90:4d:50:00:83:4d:22:3a:ce:97:d4:77:94:5d:24:1a: ab:ec:f7:6f:d7:cc:3d:76:0f:e5:d5:d5:1b:72:9d:04:78:d4: c6:3c:7a:fe:41:bd:05:21:32:f4:87:f2:d8:cd:5d:cf:b6:72: da:2c:24:11:b6:a7:30:8a:c1:63:87:2f:4e:c8:88:65:70:cd: 1e:ba:0f:cd:5a:d9:b5:0f:8d:d4:cf:ad:4d:ec:67:a4:c1:8f: 2a:f8:de:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZfKuIs2RqDakgRB1T4IJgzdqJH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFMjdFOTM4MjREMUE4Q0JCQThDOUE0RUYxMTVFRjlE Q0EwMDE1NjAeFw0yNTA1MTIwMTEwMjhaFw0yNTA1MTMwMzU2MjhaMDMxMTAvBgNV BAMTKEIzQjkzOUY2ODI2RjlDMTNCNjU2MDdGQTIyQUUxMzE0NkFDMUY0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxaMKGvsUb7snTCRebKwJelVRg ZU4gBebp0OccIDO2i/MyJWT4DpOK9DZZhIZ7rw4pl01+sk0OijxLvismGTF/ahdz JwdOmIDoPxnPWw6v9ofnW0Finlv9xgsMx3qjLedqJt71LEy+P3/pI8zJgrWGGWTJ SkhCC1nxIhG0wm0E6LDbt8+UH/UKyMQr0U2jaz2siD0uaAXjxaSsSgAZc6TI7Dvs szEXViMtvAj5pKuUcKrDvjT8Ef546+Yvz8Nn7lknv+dMAi8nwHt0DHz08l5/ciqn whcK2U1fMFf10u9wfHaxjiHSQTllHon6UgnCOjUcB09neIkLNdZUgAc+vELzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUs7k59oJvnBO2Vgf6Iq4TFGrB9EwwHwYDVR0j BBgwFoAUPOJ+k4JNGoy7qMmk7xFe+dygAVYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVhKTEJhbXZ5c2h6WVBnQkVzeXdwUnJHNUZvRWVaTm12Z0FEYzZleDg4 bmUvMS8zQ0UyN0U5MzgyNEQxQThDQkJBOEM5QTRFRjExNUVGOURDQTAwMTU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRTI3RTkzODI0RDFBOENC QkE4QzlBNEVGMTE1RUY5RENBMDAxNTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVhKTEJhbXZ5c2h6WVBnQkVzeXdwUnJHNUZvRWVaTm12Z0FEYzZleDg4bmUvMS8z Q0UyN0U5MzgyNEQxQThDQkJBOEM5QTRFRjExNUVGOURDQTAwMTU2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi0wzwdyekGJGiGbiv3yXKmd7ojdPLL4Xk50eOuUkifh3Oes6ZZSOeeyP4PUS zbuxjT7u8P6y8vHWS1QZdP1SkGfjFjz5jdxQ89bQZL/meE5CZVWLlqGyiykt7Iwu obL8nYDUpwQwIFbjA/Us2YZgeIe9VYBi+1RkXbS8Axj48CA0wAzBDi4RkO4wUxgB +atHl+igETk5YszQW25QgoAST6Nc8dCQTVAAg00iOs6X1HeUXSQaq+z3b9fMPXYP 5dXVG3KdBHjUxjx6/kG9BSEy9Ify2M1dz7Zy2iwkEbanMIrBY4cvTsiIZXDNHroP zVrZtQ+N1M+tTexnpMGPKvjeVw== -----END CERTIFICATE-----Generated at Mon May 12 04:55:29 2025 by rpki-client