$ rpki-client -vvf rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft File: BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft (raw, json) Hash identifier: Nra3eBnabnlfgQznWSD7WksKhSbHqAJImDTv5B0/IE4= Subject key identifier: DF:4D:98:D4:DD:3B:0F:B5:27:F0:8D:6C:25:58:EE:8F:42:D8:C0:89 Authority key identifier: BF:D9:9D:DF:13:2C:A7:F4:F3:8E:7D:EE:A4:F6:EB:DD:D2:E8:F7:41 Certificate issuer: /CN=BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741 Certificate serial: 49BFCCAE8475DDFA85F26C6DB5B88A9D03DB5146 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.cer Subject info access: rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft Manifest number: 0209 Signing time: Wed 30 Apr 2025 07:50:00 +0000 Manifest this update: Wed 30 Apr 2025 07:45:00 +0000 Manifest next update: Thu 01 May 2025 10:26:00 +0000 Files and hashes: 1: 323830343a386465383a3a2f33322d3332203d3e20323733333839.roa (hash: UiXjDidkD0nAk2B9x3CihHP/bHAmAf6Pe10O64bz2Pk=) 2: BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.crl (hash: cVTsBNfc92sec4esleMt6a4n1Ok6fPnsE5PgC9f+Opw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.crl rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 May 2025 10:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:bf:cc:ae:84:75:dd:fa:85:f2:6c:6d:b5:b8:8a:9d:03:db:51:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741 Validity Not Before: Apr 30 07:45:00 2025 GMT Not After : May 1 10:26:00 2025 GMT Subject: CN=DF4D98D4DD3B0FB527F08D6C2558EE8F42D8C089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:12:19:39:2f:aa:7a:97:67:af:f2:c1:c5: 78:bc:0c:68:52:11:91:2b:cf:de:90:13:74:ae:09: d9:0e:86:c4:10:75:b1:a7:f2:8f:e1:4d:64:0e:b1: 21:b0:da:9a:f0:54:f0:24:1d:80:89:ed:89:aa:0b: dc:06:f8:c7:f7:fd:70:c2:6a:16:de:0a:06:fc:13: 11:8d:ae:f7:1e:cd:e6:00:6e:5d:bd:53:f1:93:6a: 1e:04:1d:75:41:ac:91:a0:98:a7:e1:36:9e:69:80: d7:23:e6:26:5d:49:af:1b:c2:4e:58:b4:03:38:a4: 22:35:05:2b:fa:22:08:be:f2:33:5a:d3:99:3e:4d: fa:4d:50:2c:03:ca:82:b6:39:8f:a3:74:4f:5f:de: ce:7a:97:9d:c8:d9:16:b2:cc:b2:9e:a4:d9:6a:5d: 41:3b:f2:aa:d7:95:e4:54:c5:04:cc:0d:d6:2c:d0: 79:c1:db:42:1b:2d:a1:df:d0:db:07:3f:07:b7:1c: 17:65:0f:ee:61:ad:3e:86:e9:8e:ee:f7:0d:01:21: be:e9:6e:22:5f:3f:a0:58:9c:b2:09:ba:e8:f4:55: 95:ab:c3:ab:c0:b8:10:b6:d4:c9:5c:61:7b:3e:30: 8a:2b:f1:81:a5:17:96:b4:67:7d:9a:14:f3:3e:94: 23:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4D:98:D4:DD:3B:0F:B5:27:F0:8D:6C:25:58:EE:8F:42:D8:C0:89 X509v3 Authority Key Identifier: keyid:BF:D9:9D:DF:13:2C:A7:F4:F3:8E:7D:EE:A4:F6:EB:DD:D2:E8:F7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f7:3a:7f:9c:b3:fd:18:99:a2:24:55:ed:a2:0e:94:c3:49: 23:2b:83:bf:7a:67:5e:5b:c6:0f:bd:15:9b:af:f2:4a:d8:fa: 28:96:2d:03:16:b7:d5:af:aa:97:7b:0a:72:20:92:9d:38:32: 69:c3:31:66:4d:ba:60:51:48:d7:a3:ce:e3:3e:cb:95:22:80: 64:2b:d2:2b:0a:3d:f5:52:17:92:58:b0:9c:77:f3:1a:54:a7: da:52:09:73:67:bf:81:19:0d:ea:ab:f6:e9:28:f4:71:32:dc: 71:ce:3c:9b:20:a8:37:27:b0:f9:dc:0c:43:81:41:6a:26:a3: d3:bc:f7:af:08:a5:df:74:69:cd:16:57:71:61:98:6a:9d:9b: 5c:32:09:d3:91:5f:7c:6d:0d:40:ab:63:12:f9:c4:7e:73:d5: c1:83:84:4f:33:4d:e3:9f:ea:03:7d:08:6f:fd:40:b5:3c:bb: 3c:1c:98:b3:5b:c9:dd:37:6d:b5:40:33:9e:8f:31:69:fa:88: 0a:a7:4f:14:a2:69:5f:72:0f:18:9d:64:c0:93:68:ca:2a:69: e3:7b:95:f9:89:9f:67:62:07:fc:f1:52:44:be:b3:13:73:f8: 43:60:17:03:a2:65:74:e8:f6:27:0e:14:52:66:0b:12:e1:6e: 5e:a5:4d:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSb/MroR13fqF8mxttbiKnQPbUUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZEOTlEREYxMzJDQTdGNEYzOEU3REVFQTRGNkVCRERE MkU4Rjc0MTAeFw0yNTA0MzAwNzQ1MDBaFw0yNTA1MDExMDI2MDBaMDMxMTAvBgNV BAMTKERGNEQ5OEQ0REQzQjBGQjUyN0YwOEQ2QzI1NThFRThGNDJEOEMwODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSBxIZOS+qepdnr/LBxXi8DGhS EZErz96QE3SuCdkOhsQQdbGn8o/hTWQOsSGw2prwVPAkHYCJ7YmqC9wG+Mf3/XDC ahbeCgb8ExGNrvcezeYAbl29U/GTah4EHXVBrJGgmKfhNp5pgNcj5iZdSa8bwk5Y tAM4pCI1BSv6Igi+8jNa05k+TfpNUCwDyoK2OY+jdE9f3s56l53I2RayzLKepNlq XUE78qrXleRUxQTMDdYs0HnB20IbLaHf0NsHPwe3HBdlD+5hrT6G6Y7u9w0BIb7p biJfP6BYnLIJuuj0VZWrw6vAuBC21MlcYXs+MIor8YGlF5a0Z32aFPM+lCM/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU302Y1N07D7Un8I1sJVjuj0LYwIkwHwYDVR0j BBgwFoAUv9md3xMsp/Tzjn3upPbr3dLo90EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3dlSHJZN3RyN2J0aDVxZmRibkRIRjd5OXlacEd4Ulk3NDlxN1NVMTZp elgvMS9CRkQ5OURERjEzMkNBN0Y0RjM4RTdERUVBNEY2RUJEREQyRThGNzQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGRDk5RERGMTMyQ0E3RjRG MzhFN0RFRUE0RjZFQkRERDJFOEY3NDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3dlSHJZN3RyN2J0aDVxZmRibkRIRjd5OXlacEd4Ulk3NDlxN1NVMTZpelgvMS9C RkQ5OURERjEzMkNBN0Y0RjM4RTdERUVBNEY2RUJEREQyRThGNzQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOPc6f5yz/RiZoiRV7aIOlMNJIyuDv3pnXlvGD70Vm6/yStj6KJYtAxa31a+q l3sKciCSnTgyacMxZk26YFFI16PO4z7LlSKAZCvSKwo99VIXkliwnHfzGlSn2lIJ c2e/gRkN6qv26Sj0cTLccc48myCoNyew+dwMQ4FBaiaj07z3rwil33RpzRZXcWGY ap2bXDIJ05FffG0NQKtjEvnEfnPVwYOETzNN45/qA30Ib/1AtTy7PByYs1vJ3Tdt tUAzno8xafqICqdPFKJpX3IPGJ1kwJNoyipp43uV+YmfZ2IH/PFSRL6zE3P4Q2AX A6JldOj2Jw4UUmYLEuFuXqVNQw== -----END CERTIFICATE-----Generated at Wed Apr 30 17:05:04 2025 by rpki-client