$ rpki-client -vvf rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.mft File: 72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.mft (raw, json) Hash identifier: qAFlXJ636s+mY+J2e+V+ZyJvKe/MTfamOXOZK+fhglU= Subject key identifier: 39:A0:2A:A5:88:60:97:1F:45:62:77:24:2C:78:55:E6:FB:72:71:85 Authority key identifier: 72:BE:3C:82:AB:3E:A6:1E:2E:88:36:DF:A2:3D:41:05:FA:F2:06:FE Certificate issuer: /CN=72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE Certificate serial: 155855219AF920861618E494ED6B696A61F19575 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.cer Subject info access: rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.mft Manifest number: 4D Signing time: Thu 01 May 2025 14:10:09 +0000 Manifest this update: Thu 01 May 2025 14:05:09 +0000 Manifest next update: Fri 02 May 2025 17:37:09 +0000 Files and hashes: 1: 34352e352e3137372e302f32342d3234203d3e20323636313934.roa (hash: dKB18HpdmoAKc9oDclDfe7nylJvI9+3Phqr+LGfln4c=) 2: 72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.crl (hash: arRNHW7MddLbr5WinieVMYvvPudLwMr4YqktWab3iaU=) 3: 34352e352e3137392e302f32342d3234203d3e20323636313934.roa (hash: SaCzzyet1u9S08XZ8bvTakpESdkC9GTO/gLU68HkvlI=) 4: 34352e352e3137382e302f32342d3234203d3e20323636313934.roa (hash: dnQNbDAEspcdJFrNQSosHN5WXlOJxlSOwk1QqH/EbuU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.crl rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 14:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:58:55:21:9a:f9:20:86:16:18:e4:94:ed:6b:69:6a:61:f1:95:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE Validity Not Before: May 1 14:05:09 2025 GMT Not After : May 2 17:37:09 2025 GMT Subject: CN=39A02AA58860971F456277242C7855E6FB727185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:0a:66:39:f3:72:16:66:2a:5a:1c:f1:c0: 98:f2:9e:a4:be:20:66:87:dc:7a:cc:09:13:6b:e9: 4a:ba:00:31:98:21:56:83:11:d9:0e:ce:4a:8b:a7: e8:16:f1:d6:17:ad:82:3c:61:22:34:04:af:db:5e: 84:f3:8b:76:b0:20:c1:39:c9:f4:f4:d7:3d:88:26: b9:96:5e:87:5a:d9:b6:5f:a1:fb:7f:08:2d:79:77: 0c:32:56:4c:b3:f8:27:c8:a1:0f:c8:e6:16:67:fe: 1e:62:f9:14:99:53:47:ca:40:6c:5b:91:c2:4e:30: 39:00:42:31:a9:55:87:9c:9b:cb:2a:4b:09:de:9b: 7f:4b:7a:ce:be:23:2b:e6:7f:94:8e:55:f5:b0:35: de:1d:93:f0:1d:5a:4a:9f:ff:89:1d:32:f9:35:d1: 2f:75:f2:15:c8:76:19:b2:f0:f9:59:ae:6f:21:21: c5:b3:d0:ad:55:e7:e5:b1:94:91:2a:b1:14:64:fa: 70:a4:b8:56:1c:00:9b:f3:ca:d9:fb:1e:37:dd:53: 2d:e9:51:b0:13:6d:ee:88:03:e1:f8:9d:aa:80:77: 3e:4e:52:08:0a:2d:0c:99:2f:cb:c6:a6:65:40:de: 77:1c:95:73:39:34:5d:1e:95:84:16:3c:b8:85:33: b8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A0:2A:A5:88:60:97:1F:45:62:77:24:2C:78:55:E6:FB:72:71:85 X509v3 Authority Key Identifier: keyid:72:BE:3C:82:AB:3E:A6:1E:2E:88:36:DF:A2:3D:41:05:FA:F2:06:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:02:ed:ae:e7:de:05:ac:a1:47:14:1a:50:a4:e6:67:51:50: 5e:eb:47:16:a3:34:b4:8f:75:b4:19:e4:c6:6f:d4:d0:9a:f8: 50:7c:cf:8e:45:f0:40:d2:86:96:54:53:92:50:d5:e8:50:f5: 65:7e:d2:7d:12:52:67:cb:e4:21:c8:79:26:d5:20:17:ab:29: a7:73:44:7c:7a:26:d5:27:02:98:96:08:ff:6b:cd:bc:d4:2e: ef:d0:aa:a1:c2:29:83:90:01:a0:b2:d5:6d:55:ea:21:ee:d3: 83:3b:71:20:05:ef:61:c9:b5:aa:2a:23:2e:ff:99:dd:52:ff: 22:85:ea:d9:0f:6d:90:89:77:38:ce:df:55:ee:7f:db:5a:41: 80:3f:27:0b:3b:f2:2d:b9:9b:25:b7:0c:95:0e:7a:a5:4f:c2: 2c:46:ad:16:e8:b9:db:c1:bb:d1:a2:6e:16:46:3b:24:63:ad: ee:2c:bd:55:8a:89:bf:b1:07:91:28:9d:30:d0:0a:3a:b3:78: d8:07:04:d7:60:7d:97:5b:d0:d3:6d:83:70:cd:b0:22:5b:73: 9b:2b:4a:53:52:15:db:46:7c:f3:7e:d9:b2:ce:ec:6c:6b:6c: c3:3b:0b:ed:0b:3a:3b:46:43:f8:3e:b9:b2:a3:0f:eb:07:1a: 75:32:b5:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFVhVIZr5IIYWGOSU7WtpamHxlXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCRTNDODJBQjNFQTYxRTJFODgzNkRGQTIzRDQxMDVG QUYyMDZGRTAeFw0yNTA1MDExNDA1MDlaFw0yNTA1MDIxNzM3MDlaMDMxMTAvBgNV BAMTKDM5QTAyQUE1ODg2MDk3MUY0NTYyNzcyNDJDNzg1NUU2RkI3MjcxODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgXQpmOfNyFmYqWhzxwJjynqS+ IGaH3HrMCRNr6Uq6ADGYIVaDEdkOzkqLp+gW8dYXrYI8YSI0BK/bXoTzi3awIME5 yfT01z2IJrmWXoda2bZfoft/CC15dwwyVkyz+CfIoQ/I5hZn/h5i+RSZU0fKQGxb kcJOMDkAQjGpVYecm8sqSwnem39Les6+Iyvmf5SOVfWwNd4dk/AdWkqf/4kdMvk1 0S918hXIdhmy8PlZrm8hIcWz0K1V5+WxlJEqsRRk+nCkuFYcAJvzytn7HjfdUy3p UbATbe6IA+H4naqAdz5OUggKLQyZL8vGpmVA3ncclXM5NF0elYQWPLiFM7hDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOaAqpYhglx9FYnckLHhV5vtycYUwHwYDVR0j BBgwFoAUcr48gqs+ph4uiDbfoj1BBfryBv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQm9Ha2Y2YzFUN2tUN3ZLY1Z6b0d1cEhiOVBaWUs0azZUQzQ1THlTekJ3 VTQvMC83MkJFM0M4MkFCM0VBNjFFMkU4ODM2REZBMjNENDEwNUZBRjIwNkZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyQkUzQzgyQUIzRUE2MUUy RTg4MzZERkEyM0Q0MTA1RkFGMjA2RkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qm9Ha2Y2YzFUN2tUN3ZLY1Z6b0d1cEhiOVBaWUs0azZUQzQ1THlTekJ3VTQvMC83 MkJFM0M4MkFCM0VBNjFFMkU4ODM2REZBMjNENDEwNUZBRjIwNkZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfwLtrufeBayhRxQaUKTmZ1FQXutHFqM0tI91tBnkxm/U0Jr4UHzPjkXwQNKG llRTklDV6FD1ZX7SfRJSZ8vkIch5JtUgF6spp3NEfHom1ScCmJYI/2vNvNQu79Cq ocIpg5ABoLLVbVXqIe7TgztxIAXvYcm1qiojLv+Z3VL/IoXq2Q9tkIl3OM7fVe5/ 21pBgD8nCzvyLbmbJbcMlQ56pU/CLEatFui528G70aJuFkY7JGOt7iy9VYqJv7EH kSidMNAKOrN42AcE12B9l1vQ022DcM2wIltzmytKU1IV20Z8837Zss7sbGtswzsL 7Qs6O0ZD+D65sqMP6wcadTK1wQ== -----END CERTIFICATE-----Generated at Thu May 1 18:30:28 2025 by rpki-client