$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft File: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft (raw, json) Hash identifier: P0HZMOIjqD01agEjrRw6e7Tlr17sym3Mqod74otFZJI= Subject key identifier: 95:35:E5:49:72:D7:64:84:47:BA:F8:0C:E8:8C:99:50:38:17:0B:1E Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7 Certificate issuer: /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7 Certificate serial: 36D1CD4838BC3CBE197D45B1620AC9AE5B83E002 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer Subject info access: rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft Manifest number: 0207 Signing time: Sun 27 Apr 2025 13:21:05 +0000 Manifest this update: Sun 27 Apr 2025 13:16:05 +0000 Manifest next update: Mon 28 Apr 2025 14:54:05 +0000 Files and hashes: 1: 3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa (hash: J9JKS/uOVSTf4lxE2/X712ak1j9CChp3U8mi1+Az2NM=) 2: 323830343a6138633a3a2f33322d3438203d3e20323632323939.roa (hash: EeO9rj+ZkVIkb2Nu0/KE+IFQ8hNAOE0eB+Vu/g/K8/8=) 3: 3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa (hash: zzuAYXVxZSPy90ckTABafh3wBDFSIA6yCF8t1bKcPTw=) 4: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl (hash: Jw3vtn23tmYv9dhRkDQxjHqjV5F2DIGYGiPEbJ1WQDU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 14:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d1:cd:48:38:bc:3c:be:19:7d:45:b1:62:0a:c9:ae:5b:83:e0:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7 Validity Not Before: Apr 27 13:16:05 2025 GMT Not After : Apr 28 14:54:05 2025 GMT Subject: CN=9535E54972D7648447BAF80CE88C995038170B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:32:24:a5:1b:42:5c:b4:5e:51:24:ab:48: d0:c3:b5:bd:49:9a:45:40:3b:9d:e8:fe:0a:8b:0b: 84:07:69:8d:e7:74:30:74:c6:af:ca:a2:07:c7:ae: 85:3e:11:5b:7e:ab:83:f7:8f:22:0b:e9:67:1e:17: 39:19:e0:e4:3c:a9:67:82:75:74:61:ca:89:7b:ff: af:5d:40:ec:b3:61:9b:a3:2b:49:62:b3:c5:d5:e1: 9e:3b:00:a0:88:55:d4:0f:05:55:20:b6:89:a1:c5: 99:91:6f:9b:64:16:97:32:4d:a0:e2:fd:a8:5c:93: 6e:15:47:cc:ae:76:3b:e1:81:66:56:af:87:09:21: eb:22:2b:c6:1e:24:a8:3e:de:da:c0:4d:01:28:7c: 4e:9f:bc:19:8e:97:3b:f3:25:51:c8:27:c1:2b:78: 2c:91:e9:73:07:1f:5c:3e:6c:ab:af:d5:0f:d5:21: 5d:6e:43:ba:77:fc:a9:51:88:6f:e7:49:fd:48:2b: ea:d0:43:e1:14:42:34:1b:70:82:84:14:03:87:70: fa:c7:dd:10:22:2c:ca:97:a8:06:7d:0c:77:e1:c7: 67:53:e6:69:2a:c8:d9:7a:fe:41:40:d1:c0:22:5f: db:4c:0a:06:a0:42:9b:c0:35:f9:9d:72:9d:82:77: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:35:E5:49:72:D7:64:84:47:BA:F8:0C:E8:8C:99:50:38:17:0B:1E X509v3 Authority Key Identifier: keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:92:b0:97:57:9b:41:6a:ae:60:cb:61:c7:13:02:a3:5b:cb: 81:dc:9b:37:f4:0f:9b:19:95:65:d7:da:71:96:1f:db:65:ea: 1a:ad:f2:1a:3f:d1:4e:63:88:5d:ca:91:0f:cd:12:ca:43:d6: 25:90:4a:09:90:66:dd:06:8c:82:a9:e3:d8:31:6e:9c:d1:4b: 61:04:47:6e:bc:5e:ee:08:5a:70:89:02:9d:09:17:33:51:bb: b9:97:d6:c6:45:32:15:38:92:c9:84:7e:75:95:5f:6d:77:cf: fd:8a:4a:bf:25:78:d1:3c:ca:ed:9f:b0:f9:0a:62:6f:2f:1a: 48:3d:c0:6f:a7:3e:17:a4:d1:ac:08:70:e6:25:25:e5:b2:f3: 5b:53:98:2c:a8:dd:cf:07:6f:43:8f:7e:ff:42:00:9e:35:9d: 06:45:8b:04:2b:2e:e5:3b:47:2c:ea:56:c9:fc:0c:a0:9a:f4: 5b:06:ce:ea:ee:bb:e5:aa:b5:2a:63:6d:8f:7a:d5:8b:bc:81: fc:20:5b:00:8d:bd:e1:13:4b:1d:39:2b:db:8c:5b:3e:0e:6e: 4b:80:9b:1f:6a:ef:b9:f9:a6:c3:a0:ac:13:52:57:7e:d8:3b: 4f:3e:1e:25:d0:09:31:75:29:e1:a7:b8:89:9e:15:15:08:8e: 8a:ba:f5:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNtHNSDi8PL4ZfUWxYgrJrluD4AIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAzRENDQTdERTc5QzhDNERBQkFBMTBBNkNBOUU5M0VB N0QzOURGNzAeFw0yNTA0MjcxMzE2MDVaFw0yNTA0MjgxNDU0MDVaMDMxMTAvBgNV BAMTKDk1MzVFNTQ5NzJENzY0ODQ0N0JBRjgwQ0U4OEM5OTUwMzgxNzBCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC53TIkpRtCXLReUSSrSNDDtb1J mkVAO53o/gqLC4QHaY3ndDB0xq/KogfHroU+EVt+q4P3jyIL6WceFzkZ4OQ8qWeC dXRhyol7/69dQOyzYZujK0lis8XV4Z47AKCIVdQPBVUgtomhxZmRb5tkFpcyTaDi /ahck24VR8yudjvhgWZWr4cJIesiK8YeJKg+3trATQEofE6fvBmOlzvzJVHIJ8Er eCyR6XMHH1w+bKuv1Q/VIV1uQ7p3/KlRiG/nSf1IK+rQQ+EUQjQbcIKEFAOHcPrH 3RAiLMqXqAZ9DHfhx2dT5mkqyNl6/kFA0cAiX9tMCgagQpvANfmdcp2Cd9S9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlTXlSXLXZIRHuvgM6IyZUDgXCx4wHwYDVR0j BBgwFoAUID3Mp955yMTauqEKbKnpPqfTnfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BH U0UvMS8yMDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwM0RDQ0E3REU3OUM4QzRE QUJBQTEwQTZDQTlFOTNFQTdEMzlERjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BHU0UvMS8y MDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHZKwl1ebQWquYMthxxMCo1vLgdybN/QPmxmVZdfacZYf22XqGq3yGj/RTmOI XcqRD80SykPWJZBKCZBm3QaMgqnj2DFunNFLYQRHbrxe7ghacIkCnQkXM1G7uZfW xkUyFTiSyYR+dZVfbXfP/YpKvyV40TzK7Z+w+Qpiby8aSD3Ab6c+F6TRrAhw5iUl 5bLzW1OYLKjdzwdvQ49+/0IAnjWdBkWLBCsu5TtHLOpWyfwMoJr0WwbO6u675aq1 KmNtj3rVi7yB/CBbAI294RNLHTkr24xbPg5uS4CbH2rvufmmw6CsE1JXftg7Tz4e JdAJMXUp4ae4iZ4VFQiOirr1MA== -----END CERTIFICATE-----Generated at Mon Apr 28 01:30:46 2025 by rpki-client