$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft File: CA2ED340034D0368230850867C30E245990118A2.mft (raw, json) Hash identifier: pBxe2fUN1ZlHbkQOognoVSrh/DEZgRUBP3X6Ml4PyKw= Subject key identifier: 39:E2:9C:02:40:98:85:C3:47:BB:4A:73:23:6B:DA:04:DD:FF:52:40 Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2 Certificate issuer: /CN=CA2ED340034D0368230850867C30E245990118A2 Certificate serial: 1DE93B6D94DC41C62721EBA3A768F534D6DE2CD6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft Manifest number: 024D Signing time: Tue 29 Apr 2025 11:10:00 +0000 Manifest this update: Tue 29 Apr 2025 11:05:00 +0000 Manifest next update: Wed 30 Apr 2025 11:10:00 +0000 Files and hashes: 1: 3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (hash: 5e4gcNEn5VL2vN7iW7nA5Df4Xfu26IOs2pc5B0p4lXc=) 2: 3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (hash: bJTEqeP16XCpCH5JZabT/MCNKPhW6t9nzCk4I/T1oI0=) 3: 3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (hash: rStpDynGRR2uvmjQkNNftRfa83aI9CFXepHd5ccjIOo=) 4: 3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (hash: yjU6PAJwL/lIZeEtQEZbUNPm0Zr33QD1yFw6wjO3p2g=) 5: 3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (hash: k3rhtpDLwoW36HfhrQiYO+psfP/HD50OXGIZu2C/YjE=) 6: 3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (hash: lZ9umGE5NlyJckpUrEcRBf2qnDy03PIbFuZNB7UkcM4=) 7: 323830343a336438303a3a2f33322d3438203d3e20323636353335.roa (hash: tpoXD4T4EUi9EwpxT41fxDYxhlTzas0mOmEydCxj8EA=) 8: CA2ED340034D0368230850867C30E245990118A2.crl (hash: Kt/1C55BqCDfLsazAvdICwxATIf36TnJlJgJ5++qFPA=) 9: 3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (hash: dTVML3Vbzw4YnIZhgLmRkiNFb188p4H6d/auTvRDB4A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 11:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e9:3b:6d:94:dc:41:c6:27:21:eb:a3:a7:68:f5:34:d6:de:2c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA2ED340034D0368230850867C30E245990118A2 Validity Not Before: Apr 29 11:05:00 2025 GMT Not After : Apr 30 11:10:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:f2:6b:80:71:41:b4:2e:56:87:4d:74:6d: ee:72:e3:24:50:5c:1f:4e:68:4c:26:c1:39:5d:03: 78:47:83:12:bc:e4:98:44:23:d9:c7:de:b5:13:92: 03:b6:b1:2a:88:2c:a8:15:1b:97:57:36:61:d8:52: f2:d1:85:2d:27:0f:e5:7a:9a:cd:f0:56:b3:b4:b4: c2:3e:8a:de:98:4f:45:1f:99:0c:6b:7c:3d:5a:c7: bb:84:89:a7:3f:da:e2:f6:92:2a:59:ca:84:1c:73: 03:64:53:9c:07:78:5d:24:b2:78:84:de:78:08:4c: 41:c8:b6:e7:17:81:66:ff:b3:2b:08:5b:24:c9:cf: 1e:59:84:ce:b8:a3:ab:dd:46:9d:09:9f:92:c6:ad: 6a:c6:c1:14:67:57:49:40:8c:28:f7:c2:68:33:1b: 50:ab:22:61:00:cf:9b:5c:da:35:5b:b8:6c:1e:28: 5e:ce:18:d2:4b:93:55:50:64:2c:59:98:8f:4d:45: 6f:0e:e5:91:3c:9d:b1:3a:63:7d:af:54:f1:b1:ad: 29:7c:10:d6:67:71:bf:df:86:94:c1:81:cb:cc:da: 25:7f:76:e4:62:6f:44:32:60:41:9c:31:70:c3:35: 66:95:8b:6d:07:1f:89:22:c5:18:dc:d1:87:75:99: 91:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E2:9C:02:40:98:85:C3:47:BB:4A:73:23:6B:DA:04:DD:FF:52:40 X509v3 Authority Key Identifier: keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:41:95:b5:51:4b:7e:55:d7:2b:b2:e7:f2:77:a8:df:18:69: e8:e2:05:47:22:f5:57:7b:ea:a1:2d:8f:ae:20:4e:27:48:db: 19:0c:af:a8:01:da:f9:df:92:09:c3:16:d7:40:ea:b0:21:c6: 73:f7:c6:cd:c1:1c:fc:9c:f6:91:3b:39:0f:40:15:15:07:48: fb:40:81:20:0c:04:bd:d8:2d:5a:2e:e9:cf:a4:9e:a3:68:6a: 68:ec:a0:49:e0:67:f0:30:bb:e2:a0:d0:2f:8a:01:6e:af:2b: 9a:c5:1d:15:06:61:95:dd:42:42:23:f5:cd:4f:58:b8:58:03: 09:9e:51:4b:4b:8f:ea:d7:0e:f3:75:5d:47:bd:7a:7a:45:95: b1:9a:48:8f:75:79:79:79:6d:fc:0d:ad:c5:08:02:7d:f0:2b: 23:3e:8a:f5:2f:5e:9b:90:66:1d:9e:c9:77:00:d5:c8:d3:1e: 3e:61:c8:08:9b:a8:15:0a:3d:91:34:ea:a7:b9:10:f0:3c:05: b0:ba:2b:b8:66:70:1d:c2:f5:86:d1:52:1e:6f:b9:cd:68:1c: 7e:db:51:c5:11:24:9b:44:24:c5:6c:9a:52:4b:cf:3f:18:9b: a7:cf:bd:fa:23:be:45:b0:23:1a:6c:45:34:ca:e5:98:be:48: 8c:18:38:9a -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUHek7bZTcQcYnIeujp2j1NNbeLNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyRUQzNDAwMzREMDM2ODIzMDg1MDg2N0MzMEUyNDU5 OTAxMThBMjAeFw0yNTA0MjkxMTA1MDBaFw0yNTA0MzAxMTEwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjBDNkYyNkI4MDcxNDFCNDJF NTY4NzRENzQ2REVFNzJFMzI0NTA1QzFGNEU2ODRDMjZDMTM5NUQwMzc4NDc4MzEy QkNFNDk4NDQyM0Q5QzdERUI1MTM5MjAzQjZCMTJBODgyQ0E4MTUxQjk3NTczNjYx RDg1MkYyRDE4NTJEMjcwRkU1N0E5QUNERjA1NkIzQjRCNEMyM0U4QURFOTg0RjQ1 MUY5OTBDNkI3QzNENUFDN0JCODQ4OUE3M0ZEQUUyRjY5MjJBNTlDQTg0MUM3MzAz NjQ1MzlDMDc3ODVEMjRCMjc4ODRERTc4MDg0QzQxQzhCNkU3MTc4MTY2RkZCMzJC MDg1QjI0QzlDRjFFNTk4NENFQjhBM0FCREQ0NjlEMDk5RjkyQzZBRDZBQzZDMTE0 Njc1NzQ5NDA4QzI4RjdDMjY4MzMxQjUwQUIyMjYxMDBDRjlCNUNEQTM1NUJCODZD MUUyODVFQ0UxOEQyNEI5MzU1NTA2NDJDNTk5ODhGNEQ0NTZGMEVFNTkxM0M5REIx M0E2MzdEQUY1NEYxQjFBRDI5N0MxMEQ2Njc3MUJGREY4Njk0QzE4MUNCQ0NEQTI1 N0Y3NkU0NjI2RjQ0MzI2MDQxOUMzMTcwQzMzNTY2OTU4QjZEMDcxRjg5MjJDNTE4 RENEMTg3NzU5OTkxRDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAsMbya4BxQbQuVodNdG3ucuMkUFwfTmhMJsE5XQN4R4MSvOSYRCPZ x961E5IDtrEqiCyoFRuXVzZh2FLy0YUtJw/leprN8FaztLTCPoremE9FH5kMa3w9 Wse7hImnP9ri9pIqWcqEHHMDZFOcB3hdJLJ4hN54CExByLbnF4Fm/7MrCFskyc8e WYTOuKOr3UadCZ+Sxq1qxsEUZ1dJQIwo98JoMxtQqyJhAM+bXNo1W7hsHihezhjS S5NVUGQsWZiPTUVvDuWRPJ2xOmN9r1Txsa0pfBDWZ3G/34aUwYHLzNolf3bkYm9E MmBBnDFwwzVmlYttBx+JIsUY3NGHdZmR1wIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FDninAJAmIXDR7tKcyNr2gTd/1JAMB8GA1UdIwQYMBaAFMou00ADTQNoIwhQhnww 4kWZARiiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4 RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2 ODIzMDg1MDg2N0MzMEUyNDU5OTAxMThBMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9DQTJFRDM0MDAzNEQwMzY4MjMwODUwODY3QzMwRTI0NTk5MDEx OEEyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4RXZIVEhX aWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2ODIzMDg1 MDg2N0MzMEUyNDU5OTAxMThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFtBlbVRS35V1yuy5/J3qN8Y aejiBUci9Vd76qEtj64gTidI2xkMr6gB2vnfkgnDFtdA6rAhxnP3xs3BHPyc9pE7 OQ9AFRUHSPtAgSAMBL3YLVou6c+knqNoamjsoEngZ/Awu+Kg0C+KAW6vK5rFHRUG YZXdQkIj9c1PWLhYAwmeUUtLj+rXDvN1XUe9enpFlbGaSI91eXl5bfwNrcUIAn3w KyM+ivUvXpuQZh2eyXcA1cjTHj5hyAibqBUKPZE06qe5EPA8BbC6K7hmcB3C9YbR Uh5vuc1oHH7bUcURJJtEJMVsmlJLzz8Ym6fPvfojvkWwIxpsRTTK5Zi+SIwYOJo= -----END CERTIFICATE-----Generated at Tue Apr 29 17:40:52 2025 by rpki-client