$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft File: D95738A14AD98B305087E048FD2E4821E5E2299A.mft (raw, json) Hash identifier: ZLZEiBfSbZMt5E6oN6DRn3zTE7hMs87zJrtLrv2q1D0= Subject key identifier: E4:06:8B:A3:EA:68:2C:EE:A4:79:C3:9C:7C:42:11:C5:94:5B:97:32 Authority key identifier: D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A Certificate issuer: /CN=D95738A14AD98B305087E048FD2E4821E5E2299A Certificate serial: 30763BFAB96F0807EF2F658559508702ABBA6658 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft Manifest number: 1C Signing time: Mon 28 Apr 2025 15:48:19 +0000 Manifest this update: Mon 28 Apr 2025 15:43:19 +0000 Manifest next update: Tue 29 Apr 2025 18:18:19 +0000 Files and hashes: 1: D95738A14AD98B305087E048FD2E4821E5E2299A.crl (hash: lKCnQaeEBr8IOekHLN4QFdeTw7+5OuTP465HURhzkyI=) 2: 3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa (hash: g6mPrnM05WB2yDxH6Zlq8hbCsk4V+orsbGR3GF+AKT8=) 3: 3137302e38332e3230302e302f32322d3232203d3e20323633343730.roa (hash: SX8AbXi+iS5u/zSkop95o2gqo5aPGoTATj6GIZpeIko=) 4: 323830343a313235343a3a2f33322d3332203d3e20323633343730.roa (hash: ELWb7rC3fgvn1sa3PxipINIruhW615Gy+69ajKYPWzI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 18:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:76:3b:fa:b9:6f:08:07:ef:2f:65:85:59:50:87:02:ab:ba:66:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D95738A14AD98B305087E048FD2E4821E5E2299A Validity Not Before: Apr 28 15:43:19 2025 GMT Not After : Apr 29 18:18:19 2025 GMT Subject: CN=E4068BA3EA682CEEA479C39C7C4211C5945B9732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:b0:c0:52:9e:c5:3b:77:af:4d:aa:44:34: b9:cb:36:b5:a7:dc:f2:17:2f:e9:63:8d:e8:ee:e6: a6:cf:6b:26:81:c5:dc:34:28:04:4f:be:0b:49:20: 08:fb:9e:9d:76:7c:cd:02:ae:ff:93:06:89:66:e6: 4d:35:a5:9b:93:6b:e8:8b:13:bc:e8:5e:8e:2a:fe: ce:65:db:c4:aa:a5:a5:aa:eb:4b:57:32:cf:af:81: cf:dd:c0:9a:74:03:2d:34:72:06:c5:11:4b:b9:26: 3e:db:86:07:0a:48:8c:71:73:29:a3:48:18:bc:8e: b8:11:11:b8:0a:f1:8c:f4:fb:6d:d2:ca:7b:09:06: d5:50:97:d2:2c:be:aa:e7:96:97:34:ba:e4:a5:12: 40:01:bd:60:90:9e:55:9c:5f:7a:9a:84:9a:5f:6b: b8:33:00:f4:2f:b4:29:b0:f3:cf:1b:e3:03:30:49: 8f:cf:18:a7:41:ad:1f:f8:78:de:f8:84:6a:09:82: 19:68:3a:b9:c0:c9:8c:6b:6f:14:6a:60:cf:bb:a4: 58:bf:18:7e:7f:f0:47:f9:03:83:b9:6f:12:93:c6: ee:35:dd:ed:2d:60:d7:6d:75:c4:ec:3c:fc:a9:c4: ff:75:30:f1:53:5a:94:45:54:e2:9a:9d:ef:25:b8: 39:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:06:8B:A3:EA:68:2C:EE:A4:79:C3:9C:7C:42:11:C5:94:5B:97:32 X509v3 Authority Key Identifier: keyid:D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a8:c1:18:43:0c:80:0b:c8:f1:30:bf:6e:52:3d:26:5c:4c: 23:8e:da:97:2d:57:3b:9d:fb:e5:22:5a:00:c7:8b:a8:1a:bb: e7:7d:28:75:49:5b:56:1a:b2:29:76:cb:a7:43:d1:9e:26:5b: 49:c0:28:af:7a:6d:3e:7e:43:50:7d:5f:df:41:bc:63:d2:a8: 0e:4c:6a:6b:61:22:44:9e:85:a0:d2:61:d5:fd:4a:45:10:c0: dd:79:97:83:04:14:35:5f:62:4a:0e:bd:f5:21:d1:20:11:66: 24:eb:91:7d:47:e3:06:06:eb:d9:ce:c6:5c:4d:86:7a:66:e7: 40:84:ab:a8:c1:d7:92:35:a1:da:a2:60:6b:cc:bc:de:94:3b: 66:ba:71:76:00:a6:ad:5c:b5:52:b8:62:23:f7:f3:d0:0b:a4: fd:d8:a1:49:85:2f:60:f8:dd:18:d4:86:6f:85:0b:f4:82:02: 59:01:98:70:e3:2b:38:bc:f0:1e:c3:15:5d:71:e7:49:34:f5: 5f:98:be:5e:73:b5:7a:5d:ce:ae:2e:df:56:fc:89:de:04:2f: 8a:76:a0:62:de:93:78:30:6e:69:1c:c0:94:4a:0b:38:79:15: fa:ce:a0:5a:28:25:81:ab:6a:08:63:0b:ac:c6:7f:16:c7:0f: c6:30:09:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMHY7+rlvCAfvL2WFWVCHAqu6ZlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk1NzM4QTE0QUQ5OEIzMDUwODdFMDQ4RkQyRTQ4MjFF NUUyMjk5QTAeFw0yNTA0MjgxNTQzMTlaFw0yNTA0MjkxODE4MTlaMDMxMTAvBgNV BAMTKEU0MDY4QkEzRUE2ODJDRUVBNDc5QzM5QzdDNDIxMUM1OTQ1Qjk3MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUrDAUp7FO3evTapENLnLNrWn 3PIXL+ljjeju5qbPayaBxdw0KARPvgtJIAj7np12fM0Crv+TBolm5k01pZuTa+iL E7zoXo4q/s5l28SqpaWq60tXMs+vgc/dwJp0Ay00cgbFEUu5Jj7bhgcKSIxxcymj SBi8jrgREbgK8Yz0+23SynsJBtVQl9Isvqrnlpc0uuSlEkABvWCQnlWcX3qahJpf a7gzAPQvtCmw888b4wMwSY/PGKdBrR/4eN74hGoJghloOrnAyYxrbxRqYM+7pFi/ GH5/8Ef5A4O5bxKTxu413e0tYNdtdcTsPPypxP91MPFTWpRFVOKane8luDlnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5AaLo+poLO6kecOcfEIRxZRblzIwHwYDVR0j BBgwFoAU2Vc4oUrZizBQh+BI/S5IIeXiKZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2 UFkvMC9EOTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NTczOEExNEFEOThCMzA1 MDg3RTA0OEZEMkU0ODIxRTVFMjI5OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2UFkvMC9E OTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd6jBGEMMgAvI8TC/blI9JlxMI47aly1XO5375SJaAMeLqBq7530odUlbVhqy KXbLp0PRniZbScAor3ptPn5DUH1f30G8Y9KoDkxqa2EiRJ6FoNJh1f1KRRDA3XmX gwQUNV9iSg699SHRIBFmJOuRfUfjBgbr2c7GXE2GembnQISrqMHXkjWh2qJga8y8 3pQ7ZrpxdgCmrVy1UrhiI/fz0Auk/dihSYUvYPjdGNSGb4UL9IICWQGYcOMrOLzw HsMVXXHnSTT1X5i+XnO1el3Ori7fVvyJ3gQvinagYt6TeDBuaRzAlEoLOHkV+s6g WiglgatqCGMLrMZ/FscPxjAJGw== -----END CERTIFICATE-----Generated at Mon Apr 28 22:25:28 2025 by rpki-client