$ rpki-client -vvf rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft File: 4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft (raw, json) Hash identifier: fHI1lDECsyVPT5obr2sQD7giU1VoQ1429k+ldxgz/i4= Subject key identifier: 0F:F2:74:90:5E:5E:A5:7F:22:16:12:C6:15:B1:98:52:F7:D9:16:E6 Authority key identifier: 4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33 Certificate issuer: /CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133 Certificate serial: 1273D1FD9268D833D5C02D305DE64383F584139E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer Subject info access: rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft Manifest number: B1 Signing time: Mon 28 Apr 2025 18:21:16 +0000 Manifest this update: Mon 28 Apr 2025 18:16:16 +0000 Manifest next update: Tue 29 Apr 2025 21:12:16 +0000 Files and hashes: 1: 4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl (hash: FG0+VGDyv0FVdQFuM886gvc4TuM+v8K7yNTUXrENbiM=) 2: 323830343a383732633a3a2f33322d3438203d3e20323732363932.roa (hash: kHLoRmafAK4uIGoyJ2MIAaX2srnBBGsfGchJnwrFwCA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 21:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:73:d1:fd:92:68:d8:33:d5:c0:2d:30:5d:e6:43:83:f5:84:13:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133 Validity Not Before: Apr 28 18:16:16 2025 GMT Not After : Apr 29 21:12:16 2025 GMT Subject: CN=0FF274905E5EA57F221612C615B19852F7D916E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:75:7f:eb:a4:6f:54:c2:87:0f:d5:c2:78: 7a:d2:7d:4e:88:f9:86:8c:ef:d8:4d:fe:fc:df:aa: e3:29:59:02:8a:46:c2:78:55:68:b1:10:86:e0:6d: cc:2c:b9:8f:bb:b7:89:fe:ab:40:c9:c5:d5:52:82: b4:73:5c:bd:bd:f1:c2:59:f5:b3:68:31:6a:06:32: f7:b2:76:52:93:62:ff:aa:8b:a5:90:cc:04:d5:8e: 23:53:5b:2a:2a:ce:64:f9:cb:fb:ca:ce:55:7a:72: 50:9a:b8:de:3a:c4:4c:f1:7f:76:89:09:90:8d:52: bf:e6:82:cf:55:97:d5:d0:7f:50:91:9f:a8:08:75: ce:ce:69:14:f6:f5:ac:3c:0d:53:3c:d8:6c:8c:74: a6:85:59:e0:fb:37:c8:f2:ae:fa:04:a6:4c:14:c4: bc:07:ae:e7:d5:ca:7d:d6:03:52:0a:be:0d:e1:3e: 19:68:16:bf:f6:8d:d5:47:d9:e3:c4:7a:38:aa:fe: d8:de:c3:e2:d9:f8:05:ec:55:bb:31:b3:75:98:cd: 3e:8c:ed:ff:85:9b:87:a5:e5:e8:9e:3c:ad:af:95: 36:21:16:6e:e1:21:00:97:fd:26:33:80:28:66:ad: 8f:0a:20:02:ac:58:ff:c1:d5:c3:f2:ba:ad:60:73: 93:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F2:74:90:5E:5E:A5:7F:22:16:12:C6:15:B1:98:52:F7:D9:16:E6 X509v3 Authority Key Identifier: keyid:4B:7D:00:90:A6:F4:C7:B2:FB:DF:9D:D5:BD:BE:78:B1:45:8D:11:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4B7D0090A6F4C7B2FBDF9DD5BDBE78B1458D1133.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7c:8b:1b:d1:ed:a5:0a:1d:da:72:39:fd:3b:6b:52:49:c8: b5:f6:02:96:5e:e0:f4:19:2a:1d:45:ef:09:fe:d2:b6:75:35: 0d:27:25:4c:6c:cd:d1:65:2c:6d:f9:c6:e8:91:24:79:21:32: b9:1c:cf:91:fc:5a:57:f8:09:73:47:50:2e:4a:a0:00:01:ba: b1:57:b2:89:cd:27:6b:12:8b:0a:79:51:3f:24:6c:c0:4b:b7: 95:20:ca:40:2b:99:24:22:e2:9f:45:d5:6e:92:39:48:c3:78: bb:ef:d1:28:cf:4c:5b:25:bf:ae:61:28:d0:60:52:2d:25:97: 0c:7e:35:a1:99:ba:98:d8:d2:be:eb:2d:7b:dd:9b:0e:74:77: aa:03:0b:c4:32:f5:f1:6b:29:81:33:3b:c9:58:ed:66:b5:35: d3:28:f9:a1:f4:c7:39:1c:39:64:ea:88:37:eb:b1:2e:a3:cb: 2a:b1:4d:f0:6c:dd:58:b2:73:4c:e7:1d:a9:28:56:ef:38:f1: 26:4d:ba:1f:d9:60:65:d2:6c:9c:80:ec:79:5c:8f:34:13:41: 7f:ce:09:48:85:84:b7:09:37:c8:24:7f:d6:e5:02:d2:24:90: dd:fb:e6:7f:bc:02:40:3c:d5:22:b3:68:af:0c:83:d0:ee:81: a3:8c:9b:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEnPR/ZJo2DPVwC0wXeZDg/WEE54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI3RDAwOTBBNkY0QzdCMkZCREY5REQ1QkRCRTc4QjE0 NThEMTEzMzAeFw0yNTA0MjgxODE2MTZaFw0yNTA0MjkyMTEyMTZaMDMxMTAvBgNV BAMTKDBGRjI3NDkwNUU1RUE1N0YyMjE2MTJDNjE1QjE5ODUyRjdEOTE2RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC703V/66RvVMKHD9XCeHrSfU6I +YaM79hN/vzfquMpWQKKRsJ4VWixEIbgbcwsuY+7t4n+q0DJxdVSgrRzXL298cJZ 9bNoMWoGMveydlKTYv+qi6WQzATVjiNTWyoqzmT5y/vKzlV6clCauN46xEzxf3aJ CZCNUr/mgs9Vl9XQf1CRn6gIdc7OaRT29aw8DVM82GyMdKaFWeD7N8jyrvoEpkwU xLwHrufVyn3WA1IKvg3hPhloFr/2jdVH2ePEejiq/tjew+LZ+AXsVbsxs3WYzT6M 7f+Fm4el5eiePK2vlTYhFm7hIQCX/SYzgChmrY8KIAKsWP/B1cPyuq1gc5PpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUD/J0kF5epX8iFhLGFbGYUvfZFuYwHwYDVR0j BBgwFoAUS30AkKb0x7L7353Vvb54sUWNETMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjdLSlVQdXpIRkhmanBrbWYyRzFNaWdvWjhGN2phQzMzR2QyS2FYd0RL TFEvMC80QjdEMDA5MEE2RjRDN0IyRkJERjlERDVCREJFNzhCMTQ1OEQxMTMzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCN0QwMDkwQTZGNEM3QjJG QkRGOURENUJEQkU3OEIxNDU4RDExMzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RjdLSlVQdXpIRkhmanBrbWYyRzFNaWdvWjhGN2phQzMzR2QyS2FYd0RLTFEvMC80 QjdEMDA5MEE2RjRDN0IyRkJERjlERDVCREJFNzhCMTQ1OEQxMTMzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPHyLG9HtpQod2nI5/TtrUknItfYCll7g9BkqHUXvCf7StnU1DSclTGzN0WUs bfnG6JEkeSEyuRzPkfxaV/gJc0dQLkqgAAG6sVeyic0naxKLCnlRPyRswEu3lSDK QCuZJCLin0XVbpI5SMN4u+/RKM9MWyW/rmEo0GBSLSWXDH41oZm6mNjSvuste92b DnR3qgMLxDL18WspgTM7yVjtZrU10yj5ofTHORw5ZOqIN+uxLqPLKrFN8GzdWLJz TOcdqShW7zjxJk26H9lgZdJsnIDseVyPNBNBf84JSIWEtwk3yCR/1uUC0iSQ3fvm f7wCQDzVIrNorwyD0O6Bo4yb0A== -----END CERTIFICATE-----Generated at Tue Apr 29 00:36:55 2025 by rpki-client