$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft File: FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft (raw, json) Hash identifier: L9a1QquZB2E25qbGamE525wAU0b5GXwHgqfeUNce7eo= Subject key identifier: E2:2E:25:FE:89:12:6A:79:31:B1:7A:D8:50:3F:54:82:DD:7B:EA:3D Authority key identifier: FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1 Certificate issuer: /CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1 Certificate serial: 4723DE1B9FCA7A1D4937071B3010A75BC8B2E2F7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft Manifest number: 0208 Signing time: Mon 28 Apr 2025 22:40:00 +0000 Manifest this update: Mon 28 Apr 2025 22:35:00 +0000 Manifest next update: Wed 30 Apr 2025 01:24:00 +0000 Files and hashes: 1: 3136382e3232372e3234302e302f32322d3234203d3e203238333334.roa (hash: MuxS4BnEz3OAvZyyhAb2CZ4pf0m9nzjE5a7zG2BLklI=) 2: 323830343a316235633a3a2f33322d3438203d3e203238333334.roa (hash: OjmYpyPCNRdUo3HTUoQwsotpmoD6ojtzqY9oBeEsPlE=) 3: 3137372e38372e38382e302f32322d3234203d3e203238333334.roa (hash: e64n4sLZBtLeJPeUzLEY+EYUZXoppfs/ossgmDdTEPQ=) 4: FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl (hash: C8EW5PvQG+fF6/+hrijRw6EiV3muwzu+7hgClYXj15w=) 5: 3138362e3139342e36342e302f32302d3234203d3e203238333334.roa (hash: ssF7lgdVeYo4WoEu0Et1cOFiGEBQ1Y4fCwwN0djQC5c=) 6: 3138392e35302e3232342e302f31392d3234203d3e203238333334.roa (hash: 0oCO5z3FprGuhSLc5dn263bOouL+eHY+61Llwm2MUbY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 01:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:23:de:1b:9f:ca:7a:1d:49:37:07:1b:30:10:a7:5b:c8:b2:e2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1 Validity Not Before: Apr 28 22:35:00 2025 GMT Not After : Apr 30 01:24:00 2025 GMT Subject: CN=E22E25FE89126A7931B17AD8503F5482DD7BEA3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:10:0a:c9:9d:d9:78:9d:47:c4:0f:c6:a3:30: 21:ca:d8:32:7d:2e:e2:7b:31:e8:42:03:dd:19:a3: c2:44:64:a4:d1:f9:28:d8:1b:57:0d:0e:05:ca:8d: e7:65:76:63:84:c3:58:bb:48:85:c8:30:db:25:a7: 27:c2:7c:80:ec:c2:33:d4:36:d6:b9:12:0b:9d:3d: 49:2e:db:6e:d8:1c:d0:23:f1:25:a1:58:ec:e7:95: 3c:e4:b3:9e:a2:d9:c0:87:44:93:cf:da:30:d9:ef: 19:f9:b6:10:e8:55:72:a5:96:cf:08:e8:f5:43:fc: 87:fb:af:f6:31:0a:56:f1:c1:af:8d:73:f0:ae:4e: 10:e8:75:b8:0a:d3:d7:49:55:7f:b7:a2:c4:8d:16: 52:b9:8e:b2:11:9a:90:c8:a3:5c:db:4f:36:a7:47: f8:4c:d2:1c:1b:fc:25:b7:0a:eb:b3:95:69:c9:8d: ba:bf:31:30:df:57:0b:1e:fb:db:76:85:73:62:4e: e4:bb:e6:1f:dd:65:71:ae:a2:0e:b0:59:1c:1e:b3: f4:59:15:57:f4:41:90:a8:68:e5:2b:35:c8:c7:87: ff:00:54:d8:ec:e6:32:7f:b1:a7:30:13:7a:8b:c8: 5e:ff:92:51:cf:c4:c6:a3:b5:de:24:40:be:74:ca: f4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2E:25:FE:89:12:6A:79:31:B1:7A:D8:50:3F:54:82:DD:7B:EA:3D X509v3 Authority Key Identifier: keyid:FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:76:4c:06:b3:bc:02:77:00:8e:ee:e4:db:d5:e5:53:80:2c: f6:0b:d4:aa:c3:55:dc:1b:f8:ba:ef:c8:94:91:f4:d4:9c:82: e0:b7:f6:ae:94:df:f5:35:40:8f:f5:51:c4:dc:53:57:c5:a6: 82:35:9a:46:f2:45:e9:06:e9:ab:08:dc:6e:41:f7:68:88:90: a8:f9:39:68:4e:76:99:dd:66:69:d1:31:91:0c:2f:15:8f:22: 0d:1f:43:86:5e:3f:86:03:02:23:a2:d2:2e:f1:b9:bb:e2:c1: 1b:b3:06:5a:66:a7:55:ff:5e:65:01:0a:64:72:93:64:dc:57: 2d:f5:64:14:5c:46:c6:7e:3f:c8:6e:ca:02:15:e3:52:83:b6: 9a:0b:77:87:c5:2e:40:55:ce:8c:b2:ef:8e:dd:fc:08:46:a8: d6:aa:3d:a9:75:68:26:15:3c:b2:85:ad:32:66:44:f2:92:33: 75:01:69:dc:68:1a:39:e3:1d:84:8b:51:f3:68:ab:75:fe:08: d3:67:cf:c6:76:f2:e4:07:cc:73:4b:8c:89:a0:b7:a8:92:da: 1d:e2:ff:ee:26:0a:d7:4d:18:95:b9:84:dc:7a:f9:52:8b:59: 4f:ac:4c:fd:8c:fe:ee:b4:e5:9b:39:31:ab:62:9a:aa:1a:4c: 85:5f:13:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURyPeG5/Keh1JNwcbMBCnW8iy4vcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI0NDUxRUZGOUQxQTc0RjJCQTZDMzdDRTYwOUU3MTYy Q0M0NzZFMTAeFw0yNTA0MjgyMjM1MDBaFw0yNTA0MzAwMTI0MDBaMDMxMTAvBgNV BAMTKEUyMkUyNUZFODkxMjZBNzkzMUIxN0FEODUwM0Y1NDgyREQ3QkVBM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnEArJndl4nUfED8ajMCHK2DJ9 LuJ7MehCA90Zo8JEZKTR+SjYG1cNDgXKjedldmOEw1i7SIXIMNslpyfCfIDswjPU Nta5EgudPUku227YHNAj8SWhWOznlTzks56i2cCHRJPP2jDZ7xn5thDoVXKlls8I 6PVD/If7r/YxClbxwa+Nc/CuThDodbgK09dJVX+3osSNFlK5jrIRmpDIo1zbTzan R/hM0hwb/CW3CuuzlWnJjbq/MTDfVwse+9t2hXNiTuS75h/dZXGuog6wWRwes/RZ FVf0QZCoaOUrNcjHh/8AVNjs5jJ/sacwE3qLyF7/klHPxMajtd4kQL50yvQpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4i4l/okSankxsXrYUD9Ugt176j0wHwYDVR0j BBgwFoAU+0RR7/nRp08rpsN85gnnFizEduEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUtvYjNaWG9tMlVWMlFDVEpGQ1VhdkxQTkdKcUhuaEJlb0VvQTk1ajVo UjUvMS9GQjQ0NTFFRkY5RDFBNzRGMkJBNkMzN0NFNjA5RTcxNjJDQzQ3NkUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCNDQ1MUVGRjlEMUE3NEYy QkE2QzM3Q0U2MDlFNzE2MkNDNDc2RTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUtvYjNaWG9tMlVWMlFDVEpGQ1VhdkxQTkdKcUhuaEJlb0VvQTk1ajVoUjUvMS9G QjQ0NTFFRkY5RDFBNzRGMkJBNkMzN0NFNjA5RTcxNjJDQzQ3NkUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOXZMBrO8AncAju7k29XlU4As9gvUqsNV3Bv4uu/IlJH01JyC4Lf2rpTf9TVA j/VRxNxTV8WmgjWaRvJF6QbpqwjcbkH3aIiQqPk5aE52md1madExkQwvFY8iDR9D hl4/hgMCI6LSLvG5u+LBG7MGWmanVf9eZQEKZHKTZNxXLfVkFFxGxn4/yG7KAhXj UoO2mgt3h8UuQFXOjLLvjt38CEao1qo9qXVoJhU8soWtMmZE8pIzdQFp3GgaOeMd hItR82irdf4I02fPxnby5AfMc0uMiaC3qJLaHeL/7iYK100YlbmE3Hr5UotZT6xM /Yz+7rTlmzkxq2KaqhpMhV8T9Q== -----END CERTIFICATE-----Generated at Tue Apr 29 17:28:06 2025 by rpki-client