$ rpki-client -vvf rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft File: D4B92897692C4F611B738C6728923C318CA5378D.mft (raw, json) Hash identifier: h5ZsYidgWTUaltR5FnPAwzdx9GpaqcjlTzODkMRpjiY= Subject key identifier: 29:AF:B9:D0:A8:FA:DB:C7:6B:50:24:92:C2:F8:12:BD:73:18:A4:39 Authority key identifier: D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D Certificate issuer: /CN=D4B92897692C4F611B738C6728923C318CA5378D Certificate serial: 12678526F443F1E4A898A6D0A305731707AAE181 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer Subject info access: rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft Manifest number: 01EE Signing time: Sun 27 Apr 2025 13:26:55 +0000 Manifest this update: Sun 27 Apr 2025 13:21:55 +0000 Manifest next update: Mon 28 Apr 2025 14:41:55 +0000 Files and hashes: 1: 323830343a386133343a3a2f33382d3338203d3e20323733363534.roa (hash: F8C1M9ExsKqvOiXN93YJ+GMs5GM54Va82EHzWjYNmOI=) 2: 323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa (hash: 7nFV3a+hQjLyzppGzpIflRodGqWB/Ue6XkXpTxIfQY4=) 3: D4B92897692C4F611B738C6728923C318CA5378D.crl (hash: tEzZm1nleEtOtBRvdWCrwdfHVPvKhwJrJon2tGIYsHI=) 4: 323830343a386133343a666330303a3a2f33382d3338203d3e20323733363534.roa (hash: Cz6E9/3ppBWDY1aQmtRNWMr0zzfNkr0yKTQZi86JYiA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 14:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:67:85:26:f4:43:f1:e4:a8:98:a6:d0:a3:05:73:17:07:aa:e1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4B92897692C4F611B738C6728923C318CA5378D Validity Not Before: Apr 27 13:21:55 2025 GMT Not After : Apr 28 14:41:55 2025 GMT Subject: CN=29AFB9D0A8FADBC76B502492C2F812BD7318A439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:7e:d7:97:0a:aa:00:2d:40:78:96:e5:30: 0e:a6:c7:2a:96:02:a3:87:f3:3c:5e:08:b8:c7:3c: 1f:9e:ab:2e:f5:e8:19:a0:a4:a1:cd:ea:da:a1:ea: ca:af:63:b3:66:12:4b:79:d1:62:2c:70:ff:d0:9e: 7d:77:bc:c0:09:40:87:41:6a:ed:5a:24:c5:a7:88: 1b:46:ee:85:47:75:a9:0b:e5:79:e7:e9:40:46:54: ae:2e:61:6e:4e:7e:a2:f6:57:07:33:1a:57:6e:a4: bc:1f:7f:85:d9:dd:21:bf:92:44:59:f1:6e:80:11: 12:7d:f5:66:cc:b8:42:10:2e:70:84:30:1c:67:26: 28:28:08:98:58:95:a7:12:b4:6b:7a:64:5b:76:ec: df:cc:cf:65:6e:44:e1:70:98:25:52:d5:a0:8b:d0: 7a:86:e2:55:36:e9:c5:6f:f4:ec:3e:04:6b:ce:db: b5:95:47:f9:7c:23:92:28:0c:67:85:c6:b4:d6:91: 8a:b8:f5:a3:f9:9c:de:81:c1:b9:f4:9a:e0:25:25: ac:51:a3:4a:5c:2e:93:33:8f:66:60:c6:3c:c6:02: d1:06:c4:9e:6c:d7:d7:03:95:90:55:17:3a:a0:90: a5:b3:ac:ae:f1:16:37:ac:2f:3c:51:ce:1c:bb:05: db:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AF:B9:D0:A8:FA:DB:C7:6B:50:24:92:C2:F8:12:BD:73:18:A4:39 X509v3 Authority Key Identifier: keyid:D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ed:68:bd:ed:ee:d7:09:da:e9:aa:53:45:eb:52:82:1e:67: 6d:c8:d7:7c:4d:f7:29:76:fa:35:40:6c:33:4a:aa:d8:d5:ba: c1:a9:e0:a2:7b:31:6d:13:bb:ce:f7:eb:79:09:3a:04:9a:93: 73:d8:ea:68:a6:c8:fe:78:01:aa:27:8c:4e:8e:27:69:37:94: d5:fa:d7:66:76:10:de:5d:c9:0d:cc:f0:ff:9e:d8:a2:a7:3a: 10:69:17:76:da:c0:56:1f:62:25:01:99:a0:b4:1d:98:80:47: 03:ea:cc:27:04:2d:32:34:10:87:74:cf:3a:39:70:7a:80:a0: f7:cb:c4:47:0a:f9:79:11:b7:bb:d9:03:1c:fe:3c:99:33:01: 74:cb:ea:2d:c8:47:62:34:98:00:67:3a:71:7f:c6:03:f9:51: 48:82:e3:39:63:d4:d7:7e:ec:5b:53:a0:77:a5:d3:6a:76:5f: 0a:e4:0a:7b:56:ce:f6:65:7b:30:6d:c0:55:e6:3d:19:1e:63: f2:94:28:70:74:17:81:00:1e:fd:e2:d7:69:6a:61:f3:fe:d2: 02:73:13:a0:57:4e:dd:b2:0b:7b:a1:16:50:4f:44:63:bc:ee: 47:77:3d:03:02:7f:fd:2d:da:8e:23:c5:ce:6b:1f:48:59:ee: 8c:f8:59:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEmeFJvRD8eSomKbQowVzFweq4YEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRCOTI4OTc2OTJDNEY2MTFCNzM4QzY3Mjg5MjNDMzE4 Q0E1Mzc4RDAeFw0yNTA0MjcxMzIxNTVaFw0yNTA0MjgxNDQxNTVaMDMxMTAvBgNV BAMTKDI5QUZCOUQwQThGQURCQzc2QjUwMjQ5MkMyRjgxMkJENzMxOEE0MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhH7XlwqqAC1AeJblMA6mxyqW AqOH8zxeCLjHPB+eqy716BmgpKHN6tqh6sqvY7NmEkt50WIscP/Qnn13vMAJQIdB au1aJMWniBtG7oVHdakL5Xnn6UBGVK4uYW5OfqL2VwczGldupLwff4XZ3SG/kkRZ 8W6AERJ99WbMuEIQLnCEMBxnJigoCJhYlacStGt6ZFt27N/Mz2VuROFwmCVS1aCL 0HqG4lU26cVv9Ow+BGvO27WVR/l8I5IoDGeFxrTWkYq49aP5nN6Bwbn0muAlJaxR o0pcLpMzj2ZgxjzGAtEGxJ5s19cDlZBVFzqgkKWzrK7xFjesLzxRzhy7BdtjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKa+50Kj628drUCSSwvgSvXMYpDkwHwYDVR0j BBgwFoAU1Lkol2ksT2Ebc4xnKJI8MYylN40wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2hucUJoRU1oUk5TVnlodmNLbkNjamU0dW9qRDFFTHB3VGREV2ViTUh6 ZzMvMS9ENEI5Mjg5NzY5MkM0RjYxMUI3MzhDNjcyODkyM0MzMThDQTUzNzhELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QjkyODk3NjkyQzRGNjEx QjczOEM2NzI4OTIzQzMxOENBNTM3OEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2hucUJoRU1oUk5TVnlodmNLbkNjamU0dW9qRDFFTHB3VGREV2ViTUh6ZzMvMS9E NEI5Mjg5NzY5MkM0RjYxMUI3MzhDNjcyODkyM0MzMThDQTUzNzhELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACe1ove3u1wna6apTRetSgh5nbcjXfE33KXb6NUBsM0qq2NW6wangonsxbRO7 zvfreQk6BJqTc9jqaKbI/ngBqieMTo4naTeU1frXZnYQ3l3JDczw/57Yoqc6EGkX dtrAVh9iJQGZoLQdmIBHA+rMJwQtMjQQh3TPOjlweoCg98vERwr5eRG3u9kDHP48 mTMBdMvqLchHYjSYAGc6cX/GA/lRSILjOWPU137sW1Ogd6XTanZfCuQKe1bO9mV7 MG3AVeY9GR5j8pQocHQXgQAe/eLXaWph8/7SAnMToFdO3bILe6EWUE9EY7zuR3c9 AwJ//S3ajiPFzmsfSFnujPhZEA== -----END CERTIFICATE-----Generated at Mon Apr 28 01:13:24 2025 by rpki-client