$ rpki-client -vvf rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/2/5705E4372A8B28EB99913B22E4D866ED49A551A4.mft File: 5705E4372A8B28EB99913B22E4D866ED49A551A4.mft (raw, json) Hash identifier: UivwECmz5ovJf0tGucuUnn+z9LSj9G8Woc91bmX4A0o= Subject key identifier: 03:4A:15:F7:98:47:34:B5:0A:BF:56:9F:84:9D:13:9B:44:4A:BC:BA Authority key identifier: 57:05:E4:37:2A:8B:28:EB:99:91:3B:22:E4:D8:66:ED:49:A5:51:A4 Certificate issuer: /CN=5705E4372A8B28EB99913B22E4D866ED49A551A4 Certificate serial: 5AD5F7B10DCBBF71D1C3D596D6984CB364FE5885 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5705E4372A8B28EB99913B22E4D866ED49A551A4.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/2/5705E4372A8B28EB99913B22E4D866ED49A551A4.mft Manifest number: 01B7 Signing time: Mon 28 Apr 2025 16:11:28 +0000 Manifest this update: Mon 28 Apr 2025 16:06:28 +0000 Manifest next update: Tue 29 Apr 2025 19:14:28 +0000 Files and hashes: 1: 323830343a363761303a3a2f33322d3438203d3e20323639363430.roa (hash: k5ZQq84Uc8Gy6GqYRYsErS7C1VYdEsr95V3RHqbuUwk=) 2: 34352e3139302e36382e302f32322d3234203d3e20323639363430.roa (hash: g4cRK/Vyt1KSJw+77mXOxXTUMqdse8My3NidTKYQ8Eo=) 3: 5705E4372A8B28EB99913B22E4D866ED49A551A4.crl (hash: omhAgMOM2BE28ivERBQmMikqSoi0VeVzuetRaP78vyk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/2/5705E4372A8B28EB99913B22E4D866ED49A551A4.crl rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/2/5705E4372A8B28EB99913B22E4D866ED49A551A4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5705E4372A8B28EB99913B22E4D866ED49A551A4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 19:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d5:f7:b1:0d:cb:bf:71:d1:c3:d5:96:d6:98:4c:b3:64:fe:58:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5705E4372A8B28EB99913B22E4D866ED49A551A4 Validity Not Before: Apr 28 16:06:28 2025 GMT Not After : Apr 29 19:14:28 2025 GMT Subject: CN=034A15F7984734B50ABF569F849D139B444ABCBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:cb:3e:8a:81:2d:fb:b0:05:34:43:22:f7: b6:0f:17:a1:ee:86:3a:1f:8e:79:49:85:b5:1c:a7: 3b:29:04:3d:3e:76:0d:3a:9a:46:4c:b0:1f:13:c1: 25:ca:d9:7e:c7:77:2c:10:39:9c:4d:b4:68:f6:f9: 50:1a:e6:d4:52:7d:e0:3d:ca:07:32:bb:f2:67:18: c2:9e:6d:c5:7c:f4:8e:2c:a0:80:3d:2d:39:d3:f7: 17:e7:89:96:58:8b:e7:4c:ac:f8:1f:ff:59:6a:6a: 1e:c0:37:17:8d:2b:6e:f3:ec:2d:f0:3b:8a:1d:c5: 6f:36:96:ec:2c:3d:57:e5:86:c9:74:51:91:aa:82: e3:b9:18:65:d5:de:33:de:96:32:56:6f:89:26:90: 80:4b:ba:3a:98:64:2d:b2:88:67:7c:d0:f8:70:d3: 39:20:ae:e3:ed:fa:2c:c6:59:7e:78:99:95:2f:97: 58:c7:83:f1:5c:d6:64:e1:45:c6:e9:c3:bc:09:42: 36:4d:68:4d:60:f9:5c:c7:a3:ce:9a:dc:5b:5d:42: eb:35:68:5e:5f:97:ee:65:f1:ef:15:0e:83:70:37: 48:66:08:e0:4c:4d:15:c8:3f:a2:c6:83:a3:a3:1d: 91:73:61:a9:87:54:e7:9c:83:ba:80:c0:8b:b4:30: 7c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4A:15:F7:98:47:34:B5:0A:BF:56:9F:84:9D:13:9B:44:4A:BC:BA X509v3 Authority Key Identifier: keyid:57:05:E4:37:2A:8B:28:EB:99:91:3B:22:E4:D8:66:ED:49:A5:51:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/2/5705E4372A8B28EB99913B22E4D866ED49A551A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5705E4372A8B28EB99913B22E4D866ED49A551A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/2/5705E4372A8B28EB99913B22E4D866ED49A551A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:c1:77:8d:2e:1a:b1:43:a0:38:1c:49:92:c5:e8:73:8c:95: 75:ea:6d:f8:82:43:ef:ad:4b:bb:7c:e8:bb:83:b3:5b:52:d9: 1e:ae:c9:4d:34:f6:2b:13:fc:f8:dd:36:c7:74:4e:23:1f:bc: ee:38:67:17:89:e0:3a:77:ed:85:f4:d0:ee:7d:96:42:b9:df: 26:d5:59:76:d7:bd:04:47:b8:43:03:db:4a:0e:ab:32:f4:e1: ab:88:8e:2b:8e:ef:ea:a9:96:7f:93:74:09:9b:8b:99:c0:d7: 83:42:d8:3f:3c:fb:8c:60:20:c4:91:af:95:90:6c:e4:bb:5c: 83:d2:3f:9c:09:84:c9:a4:f5:a2:46:92:36:fb:fb:8d:ad:7b: ec:41:35:ff:36:ee:f3:0d:cb:4c:01:de:c6:c7:79:61:75:1b: bc:74:5e:7e:f7:22:35:d4:bb:6d:97:bc:18:cb:47:80:5d:91: 9c:13:01:94:3b:bf:c3:cf:2d:4d:2b:db:d9:81:49:18:22:5d: fc:18:73:34:8e:66:31:22:d3:9e:61:9b:72:36:d1:51:65:9d: 1d:8c:3d:5b:b1:02:e7:46:9c:cf:ad:11:45:26:d4:0c:fb:52: ae:a2:0d:52:e4:42:17:43:63:30:07:c2:71:d1:98:8f:4f:ee: d5:7d:c7:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWtX3sQ3Lv3HRw9WW1phMs2T+WIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcwNUU0MzcyQThCMjhFQjk5OTEzQjIyRTREODY2RUQ0 OUE1NTFBNDAeFw0yNTA0MjgxNjA2MjhaFw0yNTA0MjkxOTE0MjhaMDMxMTAvBgNV BAMTKDAzNEExNUY3OTg0NzM0QjUwQUJGNTY5Rjg0OUQxMzlCNDQ0QUJDQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBK8s+ioEt+7AFNEMi97YPF6Hu hjofjnlJhbUcpzspBD0+dg06mkZMsB8TwSXK2X7HdywQOZxNtGj2+VAa5tRSfeA9 ygcyu/JnGMKebcV89I4soIA9LTnT9xfniZZYi+dMrPgf/1lqah7ANxeNK27z7C3w O4odxW82luwsPVflhsl0UZGqguO5GGXV3jPeljJWb4kmkIBLujqYZC2yiGd80Phw 0zkgruPt+izGWX54mZUvl1jHg/Fc1mThRcbpw7wJQjZNaE1g+VzHo86a3FtdQus1 aF5fl+5l8e8VDoNwN0hmCOBMTRXIP6LGg6OjHZFzYamHVOecg7qAwIu0MHw9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUA0oV95hHNLUKv1afhJ0Tm0RKvLowHwYDVR0j BBgwFoAUVwXkNyqLKOuZkTsi5Nhm7UmlUaQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTN1UHkydkthd3hMU3ZRZ3JlZFlxSzkzVXdnUTlFYmZVYkU4cjJhVmlo cDMvMi81NzA1RTQzNzJBOEIyOEVCOTk5MTNCMjJFNEQ4NjZFRDQ5QTU1MUE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MDVFNDM3MkE4QjI4RUI5 OTkxM0IyMkU0RDg2NkVENDlBNTUxQTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTN1UHkydkthd3hMU3ZRZ3JlZFlxSzkzVXdnUTlFYmZVYkU4cjJhVmlocDMvMi81 NzA1RTQzNzJBOEIyOEVCOTk5MTNCMjJFNEQ4NjZFRDQ5QTU1MUE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQMF3jS4asUOgOBxJksXoc4yVdept+IJD761Lu3zou4OzW1LZHq7JTTT2KxP8 +N02x3ROIx+87jhnF4ngOnfthfTQ7n2WQrnfJtVZdte9BEe4QwPbSg6rMvThq4iO K47v6qmWf5N0CZuLmcDXg0LYPzz7jGAgxJGvlZBs5Ltcg9I/nAmEyaT1okaSNvv7 ja177EE1/zbu8w3LTAHexsd5YXUbvHRefvciNdS7bZe8GMtHgF2RnBMBlDu/w88t TSvb2YFJGCJd/BhzNI5mMSLTnmGbcjbRUWWdHYw9W7EC50acz60RRSbUDPtSrqIN UuRCF0NjMAfCcdGYj0/u1X3HQA== -----END CERTIFICATE-----Generated at Tue Apr 29 04:27:01 2025 by rpki-client