$ rpki-client -vvf rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft File: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft (raw, json) Hash identifier: AWCoaogBUpaWodZhENh3xsTtMMR1cHLnMFaxZK/3XGQ= Subject key identifier: 83:3C:88:75:D4:10:EC:44:10:9B:2E:F5:5C:72:29:11:34:16:EE:24 Authority key identifier: 99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54 Certificate issuer: /CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554 Certificate serial: 5A2B0ED44F4F65568697AB296300A267B2043CBF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer Subject info access: rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft Manifest number: 020A Signing time: Fri 02 May 2025 13:16:10 +0000 Manifest this update: Fri 02 May 2025 13:11:10 +0000 Manifest next update: Sat 03 May 2025 15:17:10 +0000 Files and hashes: 1: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl (hash: MfRG/MG5eN4VkVSDsdPKo0x4u2qQlr4WhQf5wwWUVtw=) 2: 3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa (hash: 59L2ncly+4CTUTyhWleTXAijjeUxtcEeHxk7ZbQ1Y/o=) 3: 323830343a313635633a3a2f33322d3438203d3e20323633323834.roa (hash: 2PI5RKymGmz8mUp+uI2zB9l9pOFqFN2mMalTTIpWkw4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 May 2025 15:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2b:0e:d4:4f:4f:65:56:86:97:ab:29:63:00:a2:67:b2:04:3c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554 Validity Not Before: May 2 13:11:10 2025 GMT Not After : May 3 15:17:10 2025 GMT Subject: CN=833C8875D410EC44109B2EF55C7229113416EE24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:14:38:b5:05:25:f4:17:f2:3a:c2:e1:85:0e: 30:db:ed:99:28:7b:43:a1:25:52:39:71:22:bb:2e: 91:47:3d:60:85:49:87:1f:56:0d:12:00:80:85:fb: 07:a5:00:56:e2:ee:03:62:b6:1e:30:b0:f3:41:3d: 3a:9e:01:55:cd:13:dc:8e:6c:29:11:47:c9:fc:fb: d9:87:ca:77:9e:8e:8f:32:d4:7e:94:c9:21:cd:f5: 9a:46:36:8c:cc:3e:b3:f0:dc:27:8e:7a:8d:b8:8f: ec:48:c7:79:4a:03:61:a3:8f:e9:30:6b:a8:26:bc: 66:40:0f:e3:50:48:aa:2f:fc:8c:11:45:13:68:ce: 4d:75:c8:6f:25:21:cd:16:7f:a7:8b:57:9e:ca:fd: d6:9a:d1:5b:06:e6:8f:e5:21:41:98:bd:30:a5:9b: e4:a1:2e:95:2f:47:48:2f:d0:cf:18:c8:b2:50:70: 55:6a:1a:ca:91:ca:bb:6a:b1:80:d1:83:c3:a4:22: 6f:b3:31:eb:ba:92:71:0f:46:51:06:91:12:95:82: f2:40:8f:3f:d9:80:a9:a7:e6:48:0b:68:f6:4d:df: c3:b6:06:9b:35:2f:8d:29:d0:01:69:1e:d9:04:e0: 5d:65:02:81:08:16:d0:77:02:ab:d6:87:e8:6d:74: 5a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3C:88:75:D4:10:EC:44:10:9B:2E:F5:5C:72:29:11:34:16:EE:24 X509v3 Authority Key Identifier: keyid:99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e4:a5:a0:64:e1:f3:3d:af:de:5f:5a:e6:e3:92:2c:05:f5: 53:c3:8a:55:36:c9:12:93:d8:35:55:8f:17:f4:8d:97:cb:e9: 41:23:64:d7:95:b5:2f:9a:e9:37:69:bd:a0:18:74:cf:a2:3b: 74:7b:57:38:90:39:eb:6e:fb:a7:91:5c:77:d0:c4:e5:30:65: 70:91:ef:86:20:1b:f3:57:cc:3c:b4:e9:d9:80:4c:6d:6f:07: 93:8d:a0:b3:73:6c:15:8d:92:fb:25:66:bf:ee:f5:e9:83:97: 17:1a:82:36:bd:d2:95:33:76:14:5d:8e:48:ab:a5:d1:5c:e9: c2:ed:0e:00:85:16:9c:49:ea:41:7a:39:70:e2:b9:59:db:db: 5f:cf:f9:ec:1b:c0:40:1d:e2:bd:21:bf:17:91:b3:d2:c3:e1: a4:cb:97:e3:a0:a3:17:b9:1c:d7:38:a8:82:a0:2b:a8:e5:5f: ad:fc:1a:28:b9:31:f5:3a:27:21:d6:bd:5a:5a:c8:3a:00:72: 00:1a:a9:ea:e5:e6:2b:4b:1b:3d:93:6c:4f:76:f0:d6:b9:10: f0:7a:aa:9d:a8:23:55:cd:06:ef:d2:72:67:82:e6:81:0c:e5: 05:c9:d1:42:6c:f5:9b:b4:27:ba:90:28:2e:e1:ce:5e:26:58: 68:d4:04:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWisO1E9PZVaGl6spYwCiZ7IEPL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlBOEY1M0YzNDI2Qzk4M0NBODdENUQ3QUNGNkFCNUUx NDM3MTU1NDAeFw0yNTA1MDIxMzExMTBaFw0yNTA1MDMxNTE3MTBaMDMxMTAvBgNV BAMTKDgzM0M4ODc1RDQxMEVDNDQxMDlCMkVGNTVDNzIyOTExMzQxNkVFMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFDi1BSX0F/I6wuGFDjDb7Zko e0OhJVI5cSK7LpFHPWCFSYcfVg0SAICF+welAFbi7gNith4wsPNBPTqeAVXNE9yO bCkRR8n8+9mHyneejo8y1H6UySHN9ZpGNozMPrPw3CeOeo24j+xIx3lKA2Gjj+kw a6gmvGZAD+NQSKov/IwRRRNozk11yG8lIc0Wf6eLV57K/daa0VsG5o/lIUGYvTCl m+ShLpUvR0gv0M8YyLJQcFVqGsqRyrtqsYDRg8OkIm+zMeu6knEPRlEGkRKVgvJA jz/ZgKmn5kgLaPZN38O2Bps1L40p0AFpHtkE4F1lAoEIFtB3AqvWh+htdFrhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgzyIddQQ7EQQmy71XHIpETQW7iQwHwYDVR0j BBgwFoAUmaj1PzQmyYPKh9XXrParXhQ3FVQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR25HZUREMmJnYk5RSmdkRVp2a3dLTGRIcm9nc0poam16eng5NUVSSnRG aXUvMS85OUE4RjUzRjM0MjZDOTgzQ0E4N0Q1RDdBQ0Y2QUI1RTE0MzcxNTU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5QThGNTNGMzQyNkM5ODND QTg3RDVEN0FDRjZBQjVFMTQzNzE1NTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R25HZUREMmJnYk5RSmdkRVp2a3dLTGRIcm9nc0poam16eng5NUVSSnRGaXUvMS85 OUE4RjUzRjM0MjZDOTgzQ0E4N0Q1RDdBQ0Y2QUI1RTE0MzcxNTU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmuSloGTh8z2v3l9a5uOSLAX1U8OKVTbJEpPYNVWPF/SNl8vpQSNk15W1L5rp N2m9oBh0z6I7dHtXOJA56277p5Fcd9DE5TBlcJHvhiAb81fMPLTp2YBMbW8Hk42g s3NsFY2S+yVmv+716YOXFxqCNr3SlTN2FF2OSKul0Vzpwu0OAIUWnEnqQXo5cOK5 WdvbX8/57BvAQB3ivSG/F5Gz0sPhpMuX46CjF7kc1ziogqArqOVfrfwaKLkx9Ton Ida9WlrIOgByABqp6uXmK0sbPZNsT3bw1rkQ8HqqnagjVc0G79JyZ4LmgQzlBcnR Qmz1m7QnupAoLuHOXiZYaNQEug== -----END CERTIFICATE-----Generated at Fri May 2 21:57:48 2025 by rpki-client