$ rpki-client -vvf rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft File: BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft (raw, json) Hash identifier: NAWOnom/WW3Izrp2icXvoToSSCx7DMMjuh1ICwqjKpA= Subject key identifier: C3:BC:77:A0:AA:ED:32:76:73:37:F4:98:4E:27:54:F2:81:FC:3F:B8 Authority key identifier: BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29 Certificate issuer: /CN=BBD11DF49273D1C5B130165EBD7161A3E93D1629 Certificate serial: 29AE436A17FB34D99B0D3DDC02B02D91301519E4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer Subject info access: rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft Manifest number: 0203 Signing time: Sun 27 Apr 2025 11:12:50 +0000 Manifest this update: Sun 27 Apr 2025 11:07:50 +0000 Manifest next update: Mon 28 Apr 2025 13:43:50 +0000 Files and hashes: 1: BBD11DF49273D1C5B130165EBD7161A3E93D1629.crl (hash: 43qC8qWnaz6hHNzm32EVbMLL6838lOY/mUcDz73WdVk=) 2: 323830343a363763343a3a2f33322d313238203d3e20323639363439.roa (hash: sx66GdN/o8ObU+kS4UdT85uvRj7R169FGRhEutZKWEQ=) 3: 34352e3138392e32302e302f32322d3332203d3e20323639363439.roa (hash: x3F9fr3M1wUnR699QYfCg0kaN9QGK+XJRuVDMxUGoQQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.crl rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 06:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ae:43:6a:17:fb:34:d9:9b:0d:3d:dc:02:b0:2d:91:30:15:19:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBD11DF49273D1C5B130165EBD7161A3E93D1629 Validity Not Before: Apr 27 11:07:50 2025 GMT Not After : Apr 28 13:43:50 2025 GMT Subject: CN=C3BC77A0AAED32767337F4984E2754F281FC3FB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d3:d8:07:05:50:b5:2b:00:4d:69:e7:f7:34: 95:3a:d4:f2:0d:cf:f6:c2:16:f7:9a:22:8d:a7:92: cb:f3:f2:b5:b3:56:15:38:3a:3a:b0:b8:89:b3:f0: d5:2f:39:de:5b:1d:75:49:ad:12:b6:f4:bf:9f:cc: 08:17:be:41:29:a1:01:ae:3f:00:7a:6d:2c:c4:51: 0e:38:36:98:8e:f7:ee:10:e6:62:c3:7c:af:39:e3: d8:2f:db:89:b7:fe:06:8e:26:26:e8:3f:a8:ea:11: 41:1a:0f:50:b4:55:a1:a5:ca:ed:48:03:c8:bb:73: 48:a9:45:a8:7a:ca:22:d4:bc:ba:59:42:47:1e:01: 69:b9:f3:a1:f3:c9:49:47:02:c3:80:20:92:e1:52: 1e:9d:c6:c1:e7:d9:9c:c8:c3:5a:3e:d8:1c:44:3b: 10:54:e0:e6:e8:be:ab:59:45:1f:40:10:65:ae:a0: 84:5f:09:0c:a0:e7:90:e5:ea:f8:b6:0a:73:c3:44: c6:c1:86:12:55:70:33:fd:dd:41:4f:4c:90:28:cc: 2f:ee:16:23:0d:36:12:d6:5b:18:e2:3c:77:a0:62: 10:8a:01:e4:03:5f:51:f0:9d:04:89:5c:c4:6f:05: 1b:dd:27:7a:1a:cd:dc:a5:dc:d9:14:4d:40:ba:cd: 23:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BC:77:A0:AA:ED:32:76:73:37:F4:98:4E:27:54:F2:81:FC:3F:B8 X509v3 Authority Key Identifier: keyid:BB:D1:1D:F4:92:73:D1:C5:B1:30:16:5E:BD:71:61:A3:E9:3D:16:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/1/BBD11DF49273D1C5B130165EBD7161A3E93D1629.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:8c:e7:cc:af:f7:19:fc:bf:92:d4:82:d5:d8:7d:22:75:cb: 7a:7d:f0:f2:4f:84:cf:4c:20:78:31:a8:5b:81:0e:74:a4:5a: 11:03:d9:48:4e:96:86:3d:2d:68:26:01:db:d3:10:77:00:fb: 27:d2:7a:4a:14:56:22:08:2e:b2:e7:bc:94:63:28:af:8b:74: 65:cd:7f:0b:e8:98:1d:7e:b0:d5:b9:0c:40:93:6c:c1:3d:9a: fe:4a:e6:d8:5b:5e:7d:a2:eb:e8:be:ad:76:fc:3c:45:1e:50: de:fe:c7:c0:2a:44:64:ec:4c:76:ec:52:46:35:0d:99:ec:5e: 28:c6:c3:5c:b8:a9:0a:39:10:4f:d8:19:57:b8:a0:3a:4c:10: da:e9:24:17:7f:50:98:ca:75:38:45:6e:2d:4a:e9:5d:b4:33: 99:26:67:87:ce:ac:a1:f4:78:04:1f:80:3d:f8:99:3d:8a:8c: 10:50:ae:30:9b:1d:a3:82:c5:83:bb:b0:f9:97:b7:9b:c3:86: 92:f1:24:ef:eb:ad:ef:52:d2:bf:83:97:f9:aa:56:88:26:d3: a6:00:97:54:80:c0:79:26:46:4a:5c:38:43:92:fe:2f:f0:48: bd:03:2d:79:12:2e:b4:f9:58:44:e0:a3:fb:f6:90:64:14:94: c9:60:d3:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKa5Dahf7NNmbDT3cArAtkTAVGeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJEMTFERjQ5MjczRDFDNUIxMzAxNjVFQkQ3MTYxQTNF OTNEMTYyOTAeFw0yNTA0MjcxMTA3NTBaFw0yNTA0MjgxMzQzNTBaMDMxMTAvBgNV BAMTKEMzQkM3N0EwQUFFRDMyNzY3MzM3RjQ5ODRFMjc1NEYyODFGQzNGQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY09gHBVC1KwBNaef3NJU61PIN z/bCFveaIo2nksvz8rWzVhU4OjqwuImz8NUvOd5bHXVJrRK29L+fzAgXvkEpoQGu PwB6bSzEUQ44NpiO9+4Q5mLDfK8549gv24m3/gaOJiboP6jqEUEaD1C0VaGlyu1I A8i7c0ipRah6yiLUvLpZQkceAWm586HzyUlHAsOAIJLhUh6dxsHn2ZzIw1o+2BxE OxBU4ObovqtZRR9AEGWuoIRfCQyg55Dl6vi2CnPDRMbBhhJVcDP93UFPTJAozC/u FiMNNhLWWxjiPHegYhCKAeQDX1HwnQSJXMRvBRvdJ3oazdyl3NkUTUC6zSNPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUw7x3oKrtMnZzN/SYTidU8oH8P7gwHwYDVR0j BBgwFoAUu9Ed9JJz0cWxMBZevXFho+k9FikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUJwZVpMcXZVZFo4V1VjUU16Uml5QXRDdjRTWktQTDVWdFZUTHZaRmlD Y04vMS9CQkQxMURGNDkyNzNEMUM1QjEzMDE2NUVCRDcxNjFBM0U5M0QxNjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCRDExREY0OTI3M0QxQzVC MTMwMTY1RUJENzE2MUEzRTkzRDE2MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUJwZVpMcXZVZFo4V1VjUU16Uml5QXRDdjRTWktQTDVWdFZUTHZaRmlDY04vMS9C QkQxMURGNDkyNzNEMUM1QjEzMDE2NUVCRDcxNjFBM0U5M0QxNjI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA4znzK/3Gfy/ktSC1dh9InXLen3w8k+Ez0wgeDGoW4EOdKRaEQPZSE6Whj0t aCYB29MQdwD7J9J6ShRWIggusue8lGMor4t0Zc1/C+iYHX6w1bkMQJNswT2a/krm 2FtefaLr6L6tdvw8RR5Q3v7HwCpEZOxMduxSRjUNmexeKMbDXLipCjkQT9gZV7ig OkwQ2ukkF39QmMp1OEVuLUrpXbQzmSZnh86sofR4BB+APfiZPYqMEFCuMJsdo4LF g7uw+Ze3m8OGkvEk7+ut71LSv4OX+apWiCbTpgCXVIDAeSZGSlw4Q5L+L/BIvQMt eRIutPlYROCj+/aQZBSUyWDT4w== -----END CERTIFICATE-----Generated at Sun Apr 27 12:56:41 2025 by rpki-client