$ rpki-client -vvf rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.mft File: 4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.mft (raw, json) Hash identifier: oeasmnm5yZ3YsGGlNarrXRhBT7ig/qkrb68770/sxLE= Subject key identifier: 06:95:A2:AA:D1:F9:04:98:80:BC:13:E5:E6:E3:FE:9C:1E:DE:A9:13 Authority key identifier: 4C:0D:87:E5:1A:B5:4C:98:BF:00:8C:45:7C:F7:E0:1E:22:66:F9:AB Certificate issuer: /CN=4C0D87E51AB54C98BF008C457CF7E01E2266F9AB Certificate serial: 59EB16B6A6698CC50A365B142D4B62876BA585FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.mft Manifest number: 0116 Signing time: Tue 29 Apr 2025 03:43:02 +0000 Manifest this update: Tue 29 Apr 2025 03:38:02 +0000 Manifest next update: Wed 30 Apr 2025 05:58:02 +0000 Files and hashes: 1: 323830343a38343a3a2f33322d313238203d3e203134323832.roa (hash: 7mg1LGrDDu/k/S5i1yDSV1en9uy/1nZ2zPC3yyyj6dA=) 2: 4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.crl (hash: dGNd0EFx9Ow+YgDttdd5woZe04Xu1YVGec6L6Wbv/eg=) 3: 3230302e3138392e35362e302f32312d3332203d3e203134323832.roa (hash: SBocdGOnhVYdeBFMJ/roaS3W9EhJeA2FXhvkhBoxh20=) 4: 3138392e31342e3234302e302f32302d3332203d3e203134323832.roa (hash: i3kA8mST9ObugRiKbqsN1LRuBV7yCZT9qicHwVmDH0o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.crl rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 03:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:eb:16:b6:a6:69:8c:c5:0a:36:5b:14:2d:4b:62:87:6b:a5:85:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0D87E51AB54C98BF008C457CF7E01E2266F9AB Validity Not Before: Apr 29 03:38:02 2025 GMT Not After : Apr 30 05:58:02 2025 GMT Subject: CN=0695A2AAD1F9049880BC13E5E6E3FE9C1EDEA913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:52:86:c1:e7:9f:15:a3:f0:bf:0b:fa:6f: 07:0c:1d:91:d6:00:80:02:97:02:02:2c:c4:da:89: 90:70:6a:4c:f1:19:ea:d8:69:ed:d6:53:64:9d:53: 00:df:c7:07:47:1f:76:3a:3b:dc:67:af:16:18:95: 8d:56:6b:a4:33:ea:ee:23:ba:0a:ad:cd:e7:e0:64: f5:5c:a6:70:c5:13:fd:54:74:eb:bd:ce:ef:6e:90: 14:2f:59:66:a9:3b:f7:e4:71:8a:2d:3e:fb:e5:c9: 5c:4f:1c:25:03:9a:8f:98:52:dd:a8:99:07:d5:b0: 9a:a9:bf:60:c0:27:ef:09:26:f3:e5:d2:de:dc:04: 65:2c:98:5d:81:e5:b7:4b:d6:a3:3c:0b:62:cc:e0: db:07:6f:6e:e2:a0:a0:10:40:d0:c2:de:c6:b0:ac: 3d:60:98:65:08:e3:6e:67:99:ec:bd:fd:25:85:35: 62:0a:84:a3:e7:7b:00:8b:8c:87:e4:47:04:0c:39: 21:71:2b:5c:a7:a5:29:28:1b:56:17:21:82:5b:bd: fc:d1:9b:e9:cd:50:b2:f8:8d:81:b9:ab:b7:47:fa: 86:37:9b:f1:df:aa:cd:c5:3b:fd:ee:83:80:d7:61: a9:fc:a9:c9:b4:52:b6:a5:08:38:57:c6:cf:99:e7: f7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:95:A2:AA:D1:F9:04:98:80:BC:13:E5:E6:E3:FE:9C:1E:DE:A9:13 X509v3 Authority Key Identifier: keyid:4C:0D:87:E5:1A:B5:4C:98:BF:00:8C:45:7C:F7:E0:1E:22:66:F9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:93:9b:e8:2a:a9:2d:30:be:3d:f4:e3:c6:13:a5:ca:92:81: 1e:fd:07:b7:a7:27:4e:89:a4:44:88:de:a7:52:03:cb:14:c5: 85:c2:87:62:1c:35:ba:87:23:3c:cb:5b:d7:64:de:69:59:22: 6a:83:3e:30:b8:df:7a:ba:13:bd:dc:f5:6a:6e:95:1f:0c:05: 61:64:86:ea:37:04:03:e9:9c:2d:62:36:f4:dc:10:5a:fa:33: 37:12:49:74:60:6f:5a:6d:ed:62:42:04:38:00:fe:82:af:54: 4c:7c:68:a3:6b:cb:35:b9:32:39:8e:ff:49:0a:fe:c7:80:b8: 2b:27:a5:2e:f9:33:f7:26:4a:93:1c:0c:eb:17:30:08:bb:0b: 8e:8d:22:a6:92:62:df:4d:0e:94:b1:25:fd:3d:bd:9b:c1:f2: 66:ce:c4:0f:20:0f:51:58:48:ef:5b:80:e9:04:e8:06:df:4e: 71:82:4f:14:62:51:d7:1f:56:df:cf:b0:10:68:4c:1d:11:eb: 50:7f:55:f6:4c:fe:c7:71:0e:66:af:74:af:d7:e2:44:00:12: dd:52:98:78:10:21:01:0c:e6:f6:6e:17:a3:8f:74:4c:c7:e0: e6:b0:ed:31:eb:5c:a8:d3:c0:cf:60:c1:8a:32:d7:70:98:7b: c6:af:76:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWesWtqZpjMUKNlsULUtih2ulhf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwRDg3RTUxQUI1NEM5OEJGMDA4QzQ1N0NGN0UwMUUy MjY2RjlBQjAeFw0yNTA0MjkwMzM4MDJaFw0yNTA0MzAwNTU4MDJaMDMxMTAvBgNV BAMTKDA2OTVBMkFBRDFGOTA0OTg4MEJDMTNFNUU2RTNGRTlDMUVERUE5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSFKGweefFaPwvwv6bwcMHZHW AIAClwICLMTaiZBwakzxGerYae3WU2SdUwDfxwdHH3Y6O9xnrxYYlY1Wa6Qz6u4j ugqtzefgZPVcpnDFE/1UdOu9zu9ukBQvWWapO/fkcYotPvvlyVxPHCUDmo+YUt2o mQfVsJqpv2DAJ+8JJvPl0t7cBGUsmF2B5bdL1qM8C2LM4NsHb27ioKAQQNDC3saw rD1gmGUI425nmey9/SWFNWIKhKPnewCLjIfkRwQMOSFxK1ynpSkoG1YXIYJbvfzR m+nNULL4jYG5q7dH+oY3m/Hfqs3FO/3ug4DXYan8qcm0UralCDhXxs+Z5/cFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBpWiqtH5BJiAvBPl5uP+nB7eqRMwHwYDVR0j BBgwFoAUTA2H5Rq1TJi/AIxFfPfgHiJm+aswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3c4VEVIRm94UHk5UnhpanlhUHhWU1ZSanRhS21WOUdXOWJvaTdnUTdy YnIvMC80QzBEODdFNTFBQjU0Qzk4QkYwMDhDNDU3Q0Y3RTAxRTIyNjZGOUFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDMEQ4N0U1MUFCNTRDOThC RjAwOEM0NTdDRjdFMDFFMjI2NkY5QUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3c4VEVIRm94UHk5UnhpanlhUHhWU1ZSanRhS21WOUdXOWJvaTdnUTdyYnIvMC80 QzBEODdFNTFBQjU0Qzk4QkYwMDhDNDU3Q0Y3RTAxRTIyNjZGOUFCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcpOb6CqpLTC+PfTjxhOlypKBHv0Ht6cnTomkRIjep1IDyxTFhcKHYhw1uocj PMtb12TeaVkiaoM+MLjferoTvdz1am6VHwwFYWSG6jcEA+mcLWI29NwQWvozNxJJ dGBvWm3tYkIEOAD+gq9UTHxoo2vLNbkyOY7/SQr+x4C4KyelLvkz9yZKkxwM6xcw CLsLjo0ippJi300OlLEl/T29m8HyZs7EDyAPUVhI71uA6QToBt9OcYJPFGJR1x9W 38+wEGhMHRHrUH9V9kz+x3EOZq90r9fiRAAS3VKYeBAhAQzm9m4Xo490TMfg5rDt MetcqNPAz2DBijLXcJh7xq92og== -----END CERTIFICATE-----Generated at Tue Apr 29 06:02:28 2025 by rpki-client