$ rpki-client -vvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft File: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft (raw, json) Hash identifier: Ub/7H6HsN9bKEKocrKREPerCgJ2xDDGUhVpSbW+OYt8= Subject key identifier: 35:FA:E7:50:49:E9:37:41:91:F0:6B:62:4C:9F:ED:A6:41:90:1A:38 Authority key identifier: AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E Certificate issuer: /CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Certificate serial: 14D395B6053ACA9A72581A6CCD37D075DC17ECBD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject info access: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft Manifest number: 0207 Signing time: Mon 28 Apr 2025 12:44:35 +0000 Manifest this update: Mon 28 Apr 2025 12:39:35 +0000 Manifest next update: Tue 29 Apr 2025 15:14:35 +0000 Files and hashes: 1: 34352e3138302e38342e302f32322d3234203d3e20323639313339.roa (hash: jySJyY9nMaQG7UMWI0p3ckE9o6HbVEUcBaHE9eU8jt8=) 2: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl (hash: KU7PtE2ozvgxOgXOmNDXNBLOME3zyRjaZFY1OkH213I=) 3: 323830343a363030303a3a2f33322d3438203d3e20323639313339.roa (hash: 1Iz71HTjnZ/0tWUvLlErPh/P2JU2jJxgWc0Sff2RsME=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 15:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d3:95:b6:05:3a:ca:9a:72:58:1a:6c:cd:37:d0:75:dc:17:ec:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Validity Not Before: Apr 28 12:39:35 2025 GMT Not After : Apr 29 15:14:35 2025 GMT Subject: CN=35FAE75049E9374191F06B624C9FEDA641901A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:56:4c:f3:84:ae:90:fe:1d:f4:bb:87:c9:14: 8c:db:fc:71:40:32:a9:15:c5:ba:22:1b:21:1e:83: 8e:b3:c0:4f:c0:fe:fa:fe:87:c0:8e:79:15:50:4b: e4:b0:e0:12:15:0c:9f:e6:c1:5a:dd:57:b7:19:3e: 62:61:bb:75:27:0b:a4:c1:3d:1a:9b:e3:9d:5f:8c: e3:b4:f0:5c:eb:89:ac:92:29:23:a4:ab:ab:83:e5: 95:5f:1c:3d:6a:87:72:23:1a:61:08:f9:34:31:02: 65:ba:50:98:0a:ca:c6:92:f6:03:a4:f8:e7:83:a8: a1:a1:d3:20:66:70:8e:f0:26:bf:c5:79:5b:c3:00: a7:03:89:3f:e6:f8:42:64:13:78:11:36:19:89:27: 3a:8f:e2:96:0e:39:4c:30:80:c4:c7:90:a9:cd:d3: 88:17:9a:94:92:24:d5:c2:3f:cc:04:34:5a:75:43: f8:6b:e8:bd:a8:a3:81:cb:0e:1a:92:ea:7d:eb:47: 22:b8:1e:56:3c:91:d4:02:a9:9c:41:22:9d:04:d8: 80:d2:9a:e7:44:41:cb:10:30:54:67:60:36:43:60: 2a:e5:08:3e:35:6f:8a:48:a8:05:97:dc:f6:96:67: be:f8:b8:c1:04:b5:02:54:df:14:ec:23:50:c2:d4: 6a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FA:E7:50:49:E9:37:41:91:F0:6B:62:4C:9F:ED:A6:41:90:1A:38 X509v3 Authority Key Identifier: keyid:AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:72:0a:63:7d:34:31:85:62:23:28:aa:fb:e2:e3:4e:48:c2: 3c:d9:51:7b:c3:69:06:fa:85:17:d7:02:8b:47:87:76:38:d4: b9:5e:3e:01:62:50:1c:71:ef:f6:f7:45:90:e8:2b:dc:ee:f0: c4:61:7d:f5:83:ab:d5:d2:b1:d9:e5:98:d7:0c:d7:ce:ec:66: 2f:a6:da:24:93:64:ef:38:ba:02:86:37:14:30:7e:03:c4:db: 0c:dc:25:cf:f6:02:16:a3:7c:7f:fc:2c:6c:97:c1:93:b4:08: 7d:14:f6:11:8e:49:82:2c:ba:0a:d4:61:52:65:a5:8a:1a:d5: e5:5c:9c:ea:e6:ce:81:e3:98:6d:2e:6d:08:26:ac:e7:b1:2e: 69:4b:7d:4a:50:6d:eb:67:3d:3b:8f:7f:41:ec:d9:75:4f:80: d7:8e:0a:d8:f9:9d:0f:e6:81:78:13:5c:1e:c0:d4:06:d1:76: 80:bc:72:53:cc:c4:47:64:01:28:0f:fc:b4:11:b0:25:b1:14: 87:46:b5:6d:4d:13:03:fd:b8:5c:23:48:f8:32:84:58:94:98: 6b:0a:13:28:9f:d2:33:e3:b7:12:e3:d6:50:c2:81:c8:54:ce: 2e:ee:5d:cf:b4:80:98:3b:28:39:45:9b:32:a6:f9:ca:d9:80: 12:b9:ba:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFNOVtgU6yppyWBpszTfQddwX7L0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGMkRFODRBMTZBQUY2QjExQkU3MUU0MTY1QTUzRjhB M0FDMTk3RTAeFw0yNTA0MjgxMjM5MzVaFw0yNTA0MjkxNTE0MzVaMDMxMTAvBgNV BAMTKDM1RkFFNzUwNDlFOTM3NDE5MUYwNkI2MjRDOUZFREE2NDE5MDFBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVkzzhK6Q/h30u4fJFIzb/HFA MqkVxboiGyEeg46zwE/A/vr+h8COeRVQS+Sw4BIVDJ/mwVrdV7cZPmJhu3UnC6TB PRqb451fjOO08FzriaySKSOkq6uD5ZVfHD1qh3IjGmEI+TQxAmW6UJgKysaS9gOk +OeDqKGh0yBmcI7wJr/FeVvDAKcDiT/m+EJkE3gRNhmJJzqP4pYOOUwwgMTHkKnN 04gXmpSSJNXCP8wENFp1Q/hr6L2oo4HLDhqS6n3rRyK4HlY8kdQCqZxBIp0E2IDS mudEQcsQMFRnYDZDYCrlCD41b4pIqAWX3PaWZ774uMEEtQJU3xTsI1DC1Gr5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNfrnUEnpN0GR8GtiTJ/tpkGQGjgwHwYDVR0j BBgwFoAUr/LehKFqr2sRvnHkFlpT+KOsGX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202 WDMvMS9BRkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjJERTg0QTE2QUFGNkIx MUJFNzFFNDE2NUE1M0Y4QTNBQzE5N0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202WDMvMS9B RkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV3IKY300MYViIyiq++LjTkjCPNlRe8NpBvqFF9cCi0eHdjjUuV4+AWJQHHHv 9vdFkOgr3O7wxGF99YOr1dKx2eWY1wzXzuxmL6baJJNk7zi6AoY3FDB+A8TbDNwl z/YCFqN8f/wsbJfBk7QIfRT2EY5Jgiy6CtRhUmWlihrV5Vyc6ubOgeOYbS5tCCas 57EuaUt9SlBt62c9O49/QezZdU+A144K2PmdD+aBeBNcHsDUBtF2gLxyU8zER2QB KA/8tBGwJbEUh0a1bU0TA/24XCNI+DKEWJSYawoTKJ/SM+O3EuPWUMKByFTOLu5d z7SAmDsoOUWbMqb5ytmAErm6YA== -----END CERTIFICATE-----Generated at Mon Apr 28 19:21:43 2025 by rpki-client