$ rpki-client -vvf rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.mft File: 6B4CC171DFBE7D197B119332192B5E7E9C131C42.mft (raw, json) Hash identifier: 74HjqlEOAv4uAJEoQqQzkCJw1HABMd7u3YpEJjCgIwI= Subject key identifier: 79:73:77:6E:F5:B8:5C:EC:C1:BC:DB:6F:59:8C:22:20:7A:56:49:7B Authority key identifier: 6B:4C:C1:71:DF:BE:7D:19:7B:11:93:32:19:2B:5E:7E:9C:13:1C:42 Certificate issuer: /CN=6B4CC171DFBE7D197B119332192B5E7E9C131C42 Certificate serial: 3BE924692B9D4BCD7D27BBCF81CDEAA754AB6753 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B4CC171DFBE7D197B119332192B5E7E9C131C42.cer Subject info access: rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.mft Manifest number: 1D Signing time: Mon 28 Apr 2025 13:54:24 +0000 Manifest this update: Mon 28 Apr 2025 13:49:24 +0000 Manifest next update: Tue 29 Apr 2025 14:12:24 +0000 Files and hashes: 1: 6B4CC171DFBE7D197B119332192B5E7E9C131C42.crl (hash: MzbKtaXs/sNZ8s5v+VhS/1diVx/lX8xuiALj00RHZBE=) 2: 323830343a336238633a3a2f33322d3634203d3e20323636313536.roa (hash: qfgQw0mr88KgK6lzZ+6bRYBWlRfte5WLPXqVcuUoehc=) 3: 3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa (hash: Jbqm2cYTFZqnVwhYv9MtcLfLescp6uZnHERY1nohyOQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.crl rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B4CC171DFBE7D197B119332192B5E7E9C131C42.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 14:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e9:24:69:2b:9d:4b:cd:7d:27:bb:cf:81:cd:ea:a7:54:ab:67:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B4CC171DFBE7D197B119332192B5E7E9C131C42 Validity Not Before: Apr 28 13:49:24 2025 GMT Not After : Apr 29 14:12:24 2025 GMT Subject: CN=7973776EF5B85CECC1BCDB6F598C22207A56497B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:50:6a:0d:35:3d:38:dc:bf:4c:5f:23:4c:d2: 33:29:23:10:13:9f:d2:b8:c8:cb:51:3b:67:b4:fd: f1:b5:6a:2d:03:5a:40:91:53:a2:c2:64:46:5b:46: ec:a9:d1:7d:19:7b:e2:61:a7:77:b4:9a:44:3f:33: 6c:da:82:74:41:73:1b:a0:b9:1a:d9:bf:05:cd:fc: 1c:c9:bc:78:f4:f0:97:00:b6:4a:c4:0c:f4:f8:4b: 37:c1:0e:20:98:80:42:f1:18:ad:6e:7b:5d:f7:6e: 1d:76:c1:a1:8f:1d:64:94:b3:df:66:ff:77:ec:c8: d7:6f:15:2f:78:45:37:97:18:d9:7b:6d:2c:b8:68: 1a:dc:ee:77:29:dd:0f:ed:3a:63:d2:59:f3:df:35: 5a:e4:89:ad:38:56:27:23:d6:9d:66:53:c9:95:4a: b3:95:a4:1b:aa:a8:67:be:28:4f:f8:ab:e3:87:76: b8:f1:8f:9d:06:b7:71:ed:e2:90:1f:1d:67:de:e1: c9:57:ed:4e:2f:b1:48:9b:4d:c8:e0:1f:42:a4:79: 8a:64:b3:13:d3:55:21:e0:53:57:87:fb:0c:f3:d8: 9a:e3:03:b1:68:b0:cf:2e:bf:e9:79:0b:4b:11:6e: 9c:a7:8f:15:44:1d:dc:6d:6e:05:70:0d:8e:01:24: ac:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:73:77:6E:F5:B8:5C:EC:C1:BC:DB:6F:59:8C:22:20:7A:56:49:7B X509v3 Authority Key Identifier: keyid:6B:4C:C1:71:DF:BE:7D:19:7B:11:93:32:19:2B:5E:7E:9C:13:1C:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B4CC171DFBE7D197B119332192B5E7E9C131C42.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c0:9a:4c:93:dc:55:f9:e3:59:7f:95:29:2b:57:a0:0a:01: b7:f6:92:b7:da:8c:0c:18:5f:ba:15:77:c9:da:a4:a7:d1:70: 78:71:dc:22:b3:28:e6:e2:1e:61:89:14:aa:11:9e:ad:20:76: 01:89:33:f8:b7:6e:b8:13:f1:3e:35:8c:7a:b3:48:16:70:11: 5a:e4:c5:2d:96:78:e9:14:4e:ab:9f:81:55:fa:22:80:2a:97: 09:0a:6a:e9:19:fb:81:d6:74:88:8d:e7:1e:ff:a0:de:56:71: af:36:32:84:bf:75:0a:a8:7d:70:af:8c:33:cd:33:29:bc:1b: ca:e0:1b:47:e8:cc:f8:19:c3:14:a2:e9:51:cf:eb:8d:9b:6b: dd:d6:ad:6d:48:d6:9a:d6:93:77:18:d4:44:53:db:c1:83:96: 24:4b:a5:60:4e:88:ca:0d:ec:b2:c4:ab:31:17:d1:5d:ca:9f: 61:7d:b7:b1:b5:f4:54:d4:90:be:21:c7:2b:52:fd:92:44:53: 2f:43:9a:2c:f6:60:af:57:96:52:99:c3:37:8c:c8:01:c7:0c: f0:a8:fa:9f:3a:1b:7c:77:1b:c3:d2:2c:7b:2a:d0:72:4d:cf: 22:b9:5b:5c:81:24:08:e6:85:8c:92:6c:22:e8:d9:97:70:3d: 77:f4:87:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO+kkaSudS819J7vPgc3qp1SrZ1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI0Q0MxNzFERkJFN0QxOTdCMTE5MzMyMTkyQjVFN0U5 QzEzMUM0MjAeFw0yNTA0MjgxMzQ5MjRaFw0yNTA0MjkxNDEyMjRaMDMxMTAvBgNV BAMTKDc5NzM3NzZFRjVCODVDRUNDMUJDREI2RjU5OEMyMjIwN0E1NjQ5N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdUGoNNT043L9MXyNM0jMpIxAT n9K4yMtRO2e0/fG1ai0DWkCRU6LCZEZbRuyp0X0Ze+Jhp3e0mkQ/M2zagnRBcxug uRrZvwXN/BzJvHj08JcAtkrEDPT4SzfBDiCYgELxGK1ue133bh12waGPHWSUs99m /3fsyNdvFS94RTeXGNl7bSy4aBrc7ncp3Q/tOmPSWfPfNVrkia04Vicj1p1mU8mV SrOVpBuqqGe+KE/4q+OHdrjxj50Gt3Ht4pAfHWfe4clX7U4vsUibTcjgH0KkeYpk sxPTVSHgU1eH+wzz2JrjA7FosM8uv+l5C0sRbpynjxVEHdxtbgVwDY4BJKyFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUeXN3bvW4XOzBvNtvWYwiIHpWSXswHwYDVR0j BBgwFoAUa0zBcd++fRl7EZMyGStefpwTHEIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTRKQ1NzUlF0Vnp4S3RLd0U5emZFRmVnZ2NjVlY4TkRSQ1ZKYWQ4d3dk dm0vMC82QjRDQzE3MURGQkU3RDE5N0IxMTkzMzIxOTJCNUU3RTlDMTMxQzQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCNENDMTcxREZCRTdEMTk3 QjExOTMzMjE5MkI1RTdFOUMxMzFDNDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTRKQ1NzUlF0Vnp4S3RLd0U5emZFRmVnZ2NjVlY4TkRSQ1ZKYWQ4d3dkdm0vMC82 QjRDQzE3MURGQkU3RDE5N0IxMTkzMzIxOTJCNUU3RTlDMTMxQzQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEcCaTJPcVfnjWX+VKStXoAoBt/aSt9qMDBhfuhV3ydqkp9FweHHcIrMo5uIe YYkUqhGerSB2AYkz+LduuBPxPjWMerNIFnARWuTFLZZ46RROq5+BVfoigCqXCQpq 6Rn7gdZ0iI3nHv+g3lZxrzYyhL91Cqh9cK+MM80zKbwbyuAbR+jM+BnDFKLpUc/r jZtr3datbUjWmtaTdxjURFPbwYOWJEulYE6Iyg3sssSrMRfRXcqfYX23sbX0VNSQ viHHK1L9kkRTL0OaLPZgr1eWUpnDN4zIAccM8Kj6nzobfHcbw9IseyrQck3PIrlb XIEkCOaFjJJsIujZl3A9d/SH9Q== -----END CERTIFICATE-----Generated at Mon Apr 28 16:48:07 2025 by rpki-client