$ rpki-client -vvf rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft File: 3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft (raw, json) Hash identifier: FhGI9NcqHoFyIHNTwKDy1DGq+K6ydx6Iu8IV4lHelZ4= Subject key identifier: A1:61:BB:F3:F8:71:A7:9A:01:FF:C0:60:DB:2E:E3:27:A6:28:DC:E9 Authority key identifier: 3F:0E:E5:1E:CF:C0:D1:D8:4B:14:A1:FD:0B:1E:17:78:46:F2:F8:5A Certificate issuer: /CN=3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A Certificate serial: 409CA526752B78437B434B3FDA79DEBF6B3FB2CD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer Subject info access: rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft Manifest number: 0206 Signing time: Mon 28 Apr 2025 07:44:12 +0000 Manifest this update: Mon 28 Apr 2025 07:39:12 +0000 Manifest next update: Tue 29 Apr 2025 10:35:12 +0000 Files and hashes: 1: 323830343a376334633a3a2f33322d3438203d3e20323731343837.roa (hash: Hkh/bssDQXLhbOeayDj5BFG93FYbm2DrxU1FgB0KK2A=) 2: 3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.crl (hash: ZBfvKtk5GZO9tzNiH+fToNhYOie/zBxo53VKKjsGK5E=) 3: 3230312e39342e3134342e302f32322d3234203d3e20323731343837.roa (hash: S3YhKXxvh11ZqYBDin+iLZcG1YldK4Ocmqm+d0Zp85g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.crl rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 10:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:9c:a5:26:75:2b:78:43:7b:43:4b:3f:da:79:de:bf:6b:3f:b2:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A Validity Not Before: Apr 28 07:39:12 2025 GMT Not After : Apr 29 10:35:12 2025 GMT Subject: CN=A161BBF3F871A79A01FFC060DB2EE327A628DCE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:92:c8:4a:4c:4c:a1:2c:1e:9e:06:18:5a:5b: 1f:d7:a9:57:bd:b6:fd:61:93:12:65:57:3e:6b:ee: a3:a7:04:c5:79:22:80:ba:ff:70:63:64:a8:63:23: 59:a4:72:69:36:43:98:b4:0b:15:2f:2c:a2:92:5e: 08:c0:bf:a1:00:38:c7:4c:ce:c9:97:ed:6b:a1:53: f4:b7:8b:53:65:08:6e:e7:76:9e:5c:8a:5c:fd:ec: bb:6e:72:83:86:40:38:b9:50:55:0e:a9:ab:30:f0: 5d:21:e0:74:41:a4:9f:ac:ed:18:3b:b4:c2:25:d2: 5f:34:8f:38:05:7a:cd:5d:13:f0:60:7b:da:2d:30: 15:d2:e9:24:e9:57:22:26:50:e1:65:0c:e3:da:66: a6:6b:d1:d0:e9:0a:3f:06:6a:25:96:5a:e7:aa:a9: 92:c2:ec:91:fe:ac:76:2f:23:38:a6:c9:37:1d:15: 92:90:f6:9a:ee:a7:41:a3:78:9f:66:e9:a3:52:b8: 2b:54:f2:9b:a6:30:58:b5:7f:05:16:7c:33:ca:32: 2a:48:57:fe:ce:1f:bc:d1:44:b8:54:be:2d:04:0b: 33:65:27:f8:04:8c:c9:41:e9:8c:05:f3:e3:e8:ba: 87:15:45:76:12:5e:9f:31:ad:f7:87:ab:64:69:2f: ff:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:61:BB:F3:F8:71:A7:9A:01:FF:C0:60:DB:2E:E3:27:A6:28:DC:E9 X509v3 Authority Key Identifier: keyid:3F:0E:E5:1E:CF:C0:D1:D8:4B:14:A1:FD:0B:1E:17:78:46:F2:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d1:ec:98:20:76:c4:db:9b:2d:66:ed:2b:5c:f1:c7:13:89: 01:c7:46:b0:fc:3b:4d:0b:7e:e5:21:48:42:ad:38:66:b7:b9: bb:fe:6d:2e:4d:e9:3e:0c:8c:31:e1:69:0e:98:d4:d8:eb:74: 10:9c:f0:dd:0b:33:97:c7:7e:4d:b6:e9:d3:21:a4:e6:79:48: f0:59:6b:6b:1b:0a:d0:8d:fd:2a:d9:49:17:a8:1f:09:c9:91: b8:f8:e9:fb:1d:92:34:ef:09:f6:e0:0f:e8:86:51:14:3f:a4: fe:7e:ef:8a:0a:42:71:cc:5a:21:57:6a:4f:2f:15:da:d5:f6: ea:28:79:48:3a:69:a8:ea:7f:fe:c1:e4:e9:59:c2:4a:74:c5: f8:bb:4b:d5:b2:38:1c:59:3d:48:1a:6b:97:f3:df:11:6d:51: a9:4d:07:31:ef:75:b1:79:94:d2:f8:ce:20:30:f9:44:df:29: cf:39:a3:51:28:a9:df:89:5c:19:9e:75:dc:bb:69:fa:90:e7: fc:b7:d3:03:fe:10:5e:51:63:17:58:26:e7:9d:9b:d2:1a:3b: 48:92:d7:a5:32:9f:26:4f:b3:81:21:9d:bb:7f:39:ef:2b:3e: e9:ca:b9:88:29:57:d7:b6:1c:9f:0e:7a:e3:99:b4:e9:fa:39: e3:5a:90:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQJylJnUreEN7Q0s/2nnev2s/ss0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwRUU1MUVDRkMwRDFEODRCMTRBMUZEMEIxRTE3Nzg0 NkYyRjg1QTAeFw0yNTA0MjgwNzM5MTJaFw0yNTA0MjkxMDM1MTJaMDMxMTAvBgNV BAMTKEExNjFCQkYzRjg3MUE3OUEwMUZGQzA2MERCMkVFMzI3QTYyOERDRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlkshKTEyhLB6eBhhaWx/XqVe9 tv1hkxJlVz5r7qOnBMV5IoC6/3BjZKhjI1mkcmk2Q5i0CxUvLKKSXgjAv6EAOMdM zsmX7WuhU/S3i1NlCG7ndp5cilz97LtucoOGQDi5UFUOqasw8F0h4HRBpJ+s7Rg7 tMIl0l80jzgFes1dE/Bge9otMBXS6STpVyImUOFlDOPaZqZr0dDpCj8GaiWWWueq qZLC7JH+rHYvIzimyTcdFZKQ9prup0GjeJ9m6aNSuCtU8pumMFi1fwUWfDPKMipI V/7OH7zRRLhUvi0ECzNlJ/gEjMlB6YwF8+PouocVRXYSXp8xrfeHq2RpL/+bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoWG78/hxp5oB/8Bg2y7jJ6Yo3OkwHwYDVR0j BBgwFoAUPw7lHs/A0dhLFKH9Cx4XeEby+FowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0xUZFV0UDRBUGVIWHpwSHAyc1lXbzZ1cjhXU2txSFppTDY1MUc1dHRv VkQvMS8zRjBFRTUxRUNGQzBEMUQ4NEIxNEExRkQwQjFFMTc3ODQ2RjJGODVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGMEVFNTFFQ0ZDMEQxRDg0 QjE0QTFGRDBCMUUxNzc4NDZGMkY4NUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0xUZFV0UDRBUGVIWHpwSHAyc1lXbzZ1cjhXU2txSFppTDY1MUc1dHRvVkQvMS8z RjBFRTUxRUNGQzBEMUQ4NEIxNEExRkQwQjFFMTc3ODQ2RjJGODVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAItHsmCB2xNubLWbtK1zxxxOJAcdGsPw7TQt+5SFIQq04Zre5u/5tLk3pPgyM MeFpDpjU2Ot0EJzw3Qszl8d+Tbbp0yGk5nlI8FlraxsK0I39KtlJF6gfCcmRuPjp +x2SNO8J9uAP6IZRFD+k/n7vigpCccxaIVdqTy8V2tX26ih5SDppqOp//sHk6VnC SnTF+LtL1bI4HFk9SBprl/PfEW1RqU0HMe91sXmU0vjOIDD5RN8pzzmjUSip34lc GZ513Ltp+pDn/LfTA/4QXlFjF1gm552b0ho7SJLXpTKfJk+zgSGdu3857ys+6cq5 iClX17Ycnw5645m06fo541qQ/g== -----END CERTIFICATE-----Generated at Mon Apr 28 17:35:48 2025 by rpki-client