$ rpki-client -vvf rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft File: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft (raw, json) Hash identifier: FkWijbsZecN0rJFye5PaA5/g832hNZxq7z9F29fpGzw= Subject key identifier: E0:18:6F:7C:8E:4B:98:FD:A5:0B:F1:A7:48:32:D3:C4:D1:6B:11:71 Authority key identifier: 40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD Certificate issuer: /CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD Certificate serial: 22D4A18DD198550230B1E4A2B1F33516B75C8CBA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer Subject info access: rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft Manifest number: 0209 Signing time: Sun 27 Apr 2025 08:45:10 +0000 Manifest this update: Sun 27 Apr 2025 08:40:10 +0000 Manifest next update: Mon 28 Apr 2025 09:55:10 +0000 Files and hashes: 1: 3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa (hash: mF0u/vAyNOeoPPNVDLbnxzMdhqwwSdgGBBg/m8ai89U=) 2: 40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl (hash: IiBSwnrG/yyNF4rCRlDGl927yWh749VfmU7GA9o2huk=) 3: 323830343a343236633a3a2f33322d3438203d3e20323637343939.roa (hash: 25SAOXwAX4L8AMZJng8zABZRivbLO/GLBh3G1AeqA58=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 09:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d4:a1:8d:d1:98:55:02:30:b1:e4:a2:b1:f3:35:16:b7:5c:8c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD Validity Not Before: Apr 27 08:40:10 2025 GMT Not After : Apr 28 09:55:10 2025 GMT Subject: CN=E0186F7C8E4B98FDA50BF1A74832D3C4D16B1171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:02:e9:6c:75:12:e2:ba:f9:0b:d3:2c:6e:06: 1f:a9:19:80:51:e1:0b:18:6a:a2:07:5e:14:89:52: f1:7b:7a:f2:e3:58:1e:7e:74:d4:6c:57:ff:05:56: 36:8d:46:14:b0:89:6b:6b:a9:f8:94:a6:34:4f:58: 79:62:71:2d:b7:19:6e:29:e5:94:f4:58:b0:a5:7e: 6e:c1:2c:47:0a:bc:90:fe:6f:57:b2:2d:23:7d:8e: 00:61:05:6a:a0:6a:06:f5:41:64:74:cb:ac:e7:18: 4d:08:d1:32:dd:5b:2d:6e:34:b8:9f:60:e0:dc:c6: 50:d0:ce:54:ea:d6:0e:ee:fd:57:0d:c5:1f:83:00: 08:5d:af:3c:07:e1:85:88:7f:4a:3c:a0:3b:6c:60: 2f:c1:26:54:62:ee:57:37:b8:9e:4e:61:f6:91:fa: bc:f5:47:1d:78:00:50:46:dd:48:d0:fa:b5:38:e3: 46:23:12:c1:9e:61:1a:8a:91:0e:ab:b5:96:f8:d0: 5f:65:26:16:33:9c:b2:41:ec:30:01:99:a5:88:39: 55:94:07:ed:5f:d1:0a:be:d5:77:3d:6e:15:e4:ba: 3c:20:2d:0f:a6:78:cc:2d:40:49:b4:53:76:c3:96: 74:a0:ee:fb:dd:27:87:ac:7f:ac:16:61:b4:03:09: 0b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:18:6F:7C:8E:4B:98:FD:A5:0B:F1:A7:48:32:D3:C4:D1:6B:11:71 X509v3 Authority Key Identifier: keyid:40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:8f:e0:44:09:d7:d7:06:01:f3:0e:07:37:a6:0d:a6:54:3d: 8b:c4:e0:ac:5a:3c:12:58:c8:27:6d:27:d5:c4:8f:a0:57:84: cc:d7:6c:ff:19:32:17:bb:cf:1b:ce:de:28:74:f0:6b:8d:36: 53:ef:0d:9d:05:dd:c0:0e:8c:1a:a8:d0:27:c0:1d:eb:a2:08: d6:f8:58:2d:8c:08:de:2f:44:4d:b6:83:d5:68:17:f9:7d:9e: 05:1b:3d:82:e1:2e:c8:26:c5:c0:f0:9d:2b:e8:76:44:cc:01: dd:59:48:bf:0b:ab:a7:b0:d4:01:da:10:44:8d:6c:ab:db:24: b6:4b:1a:e4:9a:b7:ff:80:f5:95:8b:3c:86:d0:27:33:4a:da: c3:c4:2e:aa:5b:e0:cd:8a:af:dd:c6:e9:b8:7c:29:f9:e0:d4: d9:ac:21:99:2b:4a:03:c2:a0:9d:d2:9a:7d:9b:c0:5e:5d:cc: 19:2a:b5:8f:aa:a6:30:8b:2f:1b:52:52:55:c6:03:99:c9:f2: 99:06:53:7f:66:b9:12:6b:89:71:1e:6f:e9:fa:33:a5:fe:62: bc:d3:49:de:aa:63:30:c6:b8:b5:e4:24:38:1d:ba:8a:cc:5e: d9:a6:8f:56:fb:29:38:8e:3c:ff:41:14:1e:a5:9a:58:fa:b8: 82:28:b6:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUItShjdGYVQIwseSisfM1FrdcjLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBDQUEyQkM1N0IzM0RGQkU1NUIzRUI0RUE1OEE3RTlB MTcxNTVERDAeFw0yNTA0MjcwODQwMTBaFw0yNTA0MjgwOTU1MTBaMDMxMTAvBgNV BAMTKEUwMTg2RjdDOEU0Qjk4RkRBNTBCRjFBNzQ4MzJEM0M0RDE2QjExNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrAulsdRLiuvkL0yxuBh+pGYBR 4QsYaqIHXhSJUvF7evLjWB5+dNRsV/8FVjaNRhSwiWtrqfiUpjRPWHlicS23GW4p 5ZT0WLClfm7BLEcKvJD+b1eyLSN9jgBhBWqgagb1QWR0y6znGE0I0TLdWy1uNLif YODcxlDQzlTq1g7u/VcNxR+DAAhdrzwH4YWIf0o8oDtsYC/BJlRi7lc3uJ5OYfaR +rz1Rx14AFBG3UjQ+rU440YjEsGeYRqKkQ6rtZb40F9lJhYznLJB7DABmaWIOVWU B+1f0Qq+1Xc9bhXkujwgLQ+meMwtQEm0U3bDlnSg7vvdJ4esf6wWYbQDCQt3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4BhvfI5LmP2lC/GnSDLTxNFrEXEwHwYDVR0j BBgwFoAUQMqivFezPfvlWz606lin6aFxVd0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjRaaGlhUmtYODlkYkRWcUhNRzN1dWszc1pDNzU1dWcxV3A3UjFMUXBV SmcvMS80MENBQTJCQzU3QjMzREZCRTU1QjNFQjRFQTU4QTdFOUExNzE1NURELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQ0FBMkJDNTdCMzNERkJF NTVCM0VCNEVBNThBN0U5QTE3MTU1REQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SjRaaGlhUmtYODlkYkRWcUhNRzN1dWszc1pDNzU1dWcxV3A3UjFMUXBVSmcvMS80 MENBQTJCQzU3QjMzREZCRTU1QjNFQjRFQTU4QTdFOUExNzE1NURELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh4/gRAnX1wYB8w4HN6YNplQ9i8TgrFo8EljIJ20n1cSPoFeEzNds/xkyF7vP G87eKHTwa402U+8NnQXdwA6MGqjQJ8Ad66II1vhYLYwI3i9ETbaD1WgX+X2eBRs9 guEuyCbFwPCdK+h2RMwB3VlIvwurp7DUAdoQRI1sq9sktksa5Jq3/4D1lYs8htAn M0raw8QuqlvgzYqv3cbpuHwp+eDU2awhmStKA8KgndKafZvAXl3MGSq1j6qmMIsv G1JSVcYDmcnymQZTf2a5EmuJcR5v6fozpf5ivNNJ3qpjMMa4teQkOB26isxe2aaP VvspOI48/0EUHqWaWPq4gii2Ew== -----END CERTIFICATE-----Generated at Mon Apr 28 00:55:19 2025 by rpki-client