$ rpki-client -vvf rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft File: C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft (raw, json) Hash identifier: kezSNbj/e508jfdaUKSUYXT2Wom1qTpeWj94Qix3sCM= Subject key identifier: 86:5D:C6:56:D5:6B:8C:62:A8:BB:90:88:7C:DA:1A:80:4A:33:01:2D Authority key identifier: C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3 Certificate issuer: /CN=C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3 Certificate serial: 3B2759688A5BC58AC2A0886F06F3BF48A8237142 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer Subject info access: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft Manifest number: 7E Signing time: Sun 27 Apr 2025 13:54:05 +0000 Manifest this update: Sun 27 Apr 2025 13:49:05 +0000 Manifest next update: Mon 28 Apr 2025 17:40:05 +0000 Files and hashes: 1: C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl (hash: hyCjLBibVYTz+2tFT3nDs5kd7fbseIMEiJzXvHKlb2w=) 2: 323830343a363933303a3a2f33322d3338203d3e20323730323534.roa (hash: Vi58jILCPaGdfjCNKSlfegkMsczPE3KoQ/bs4WgeL5s=) 3: 34352e3139312e34302e302f32322d3234203d3e20323730323534.roa (hash: +ELc/cdHA6pm2kddxyuB8cT9ZxmW8xhCo1C9X8j7nOc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 17:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:27:59:68:8a:5b:c5:8a:c2:a0:88:6f:06:f3:bf:48:a8:23:71:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3 Validity Not Before: Apr 27 13:49:05 2025 GMT Not After : Apr 28 17:40:05 2025 GMT Subject: CN=865DC656D56B8C62A8BB90887CDA1A804A33012D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:80:b7:fb:cc:7d:c4:de:00:ce:ad:c4:97:2f: a6:16:40:13:a6:a4:c1:d3:be:99:3d:3d:65:50:35: 0e:07:c1:34:e1:14:b0:da:f5:c6:a6:cf:9e:ba:17: 51:a2:48:e7:33:d2:39:7b:d0:6d:5d:61:b0:fd:d1: b1:7d:b3:55:ec:31:89:c2:8c:44:d5:69:70:7a:ee: f4:d8:3b:91:29:30:d9:16:0a:8c:ae:2e:b4:c0:fb: 73:53:8f:cf:b9:3f:aa:c6:19:79:3f:b2:d9:2f:1a: 34:89:96:84:60:0b:25:7a:d9:16:cf:90:4e:35:33: 3e:c6:51:75:76:28:0c:2a:ce:f3:73:a9:b8:7d:9a: 9f:41:eb:5c:6a:88:ac:ca:7c:4b:2a:e8:b0:04:87: 9e:1a:78:8f:eb:33:c9:5d:c5:8a:95:5b:60:ed:98: bb:58:c2:a1:ae:1f:17:8e:83:4e:2d:32:35:96:d6: 1f:a3:f1:be:98:41:99:12:9d:78:73:65:75:3f:f7: ee:4e:44:52:73:9c:6a:3c:82:ef:59:22:da:02:21: 38:cf:1d:17:0e:39:09:30:c1:f0:42:9a:cb:2d:2c: f5:97:a2:75:aa:ad:50:69:32:60:6c:17:ee:f8:6e: 6b:1c:c8:78:f7:7f:93:2d:cc:f1:0d:40:03:72:54: f8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5D:C6:56:D5:6B:8C:62:A8:BB:90:88:7C:DA:1A:80:4A:33:01:2D X509v3 Authority Key Identifier: keyid:C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:81:a3:c2:e5:17:90:bf:1b:6e:d5:3e:df:55:0f:01:20:5b: 79:ad:e3:b0:60:c6:12:a2:34:51:54:77:6d:fc:86:ee:a8:ce: 93:6b:37:bb:9f:90:c6:9e:9b:f8:bb:24:8f:09:1f:80:48:e7: 54:63:11:2e:8e:32:43:6e:1b:d3:f0:7f:34:f3:70:50:23:b0: 93:69:ab:b8:ce:ce:24:ad:2d:7d:d6:54:94:33:40:d0:c1:4a: e0:e7:bd:d9:96:08:7c:98:3c:98:57:49:1f:da:9e:e2:b6:bf: 80:d5:c1:ad:64:bc:94:a6:8b:20:ad:cf:f6:0b:de:4e:ed:b8: f9:29:a2:26:d5:dc:1f:83:b0:3f:08:bf:de:47:23:45:d2:f6: f4:ac:b5:c6:6c:b9:02:a8:4a:1f:bb:2d:4c:57:d2:a3:ef:ef: d3:76:dd:4c:2d:7f:62:a3:c0:7e:e6:6f:d2:df:49:28:f9:40: 35:20:54:9c:b8:35:60:be:ea:17:08:54:4c:bf:10:f6:9e:a8: c6:4c:60:9e:c7:37:0f:5b:e0:be:5d:7a:5a:52:2d:28:be:60: 98:24:bc:b6:81:fc:62:f5:00:9f:8a:51:aa:eb:52:0d:5d:77: cd:e9:0b:e9:a1:76:0c:2b:c9:99:ca:5f:c0:db:dc:de:0c:b9: af:89:8a:ec -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUOydZaIpbxYrCoIhvBvO/SKgjcUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNEYyQ0NDOUFDQjlFQzAxQTI2RUZBRkY1M0ExNUJC MzA5RUNFMzAeFw0yNTA0MjcxMzQ5MDVaFw0yNTA0MjgxNzQwMDVaMDMxMTAvBgNV BAMTKDg2NURDNjU2RDU2QjhDNjJBOEJCOTA4ODdDREExQTgwNEEzMzAxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTgLf7zH3E3gDOrcSXL6YWQBOm pMHTvpk9PWVQNQ4HwTThFLDa9camz566F1GiSOcz0jl70G1dYbD90bF9s1XsMYnC jETVaXB67vTYO5EpMNkWCoyuLrTA+3NTj8+5P6rGGXk/stkvGjSJloRgCyV62RbP kE41Mz7GUXV2KAwqzvNzqbh9mp9B61xqiKzKfEsq6LAEh54aeI/rM8ldxYqVW2Dt mLtYwqGuHxeOg04tMjWW1h+j8b6YQZkSnXhzZXU/9+5ORFJznGo8gu9ZItoCITjP HRcOOQkwwfBCmsstLPWXonWqrVBpMmBsF+74bmscyHj3f5MtzPENQANyVPgnAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUhl3GVtVrjGKou5CIfNoagEozAS0wHwYDVR0j BBgwFoAUwATyzMmsuewBom76/1OhW7MJ7OMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YRHZicVQ4RmdoUEJ4NVBMTlpFUDNkMndrNDd4N1o2ZG9DZ1hWOGlrZktz LzAvQzAwNEYyQ0NDOUFDQjlFQzAxQTI2RUZBRkY1M0ExNUJCMzA5RUNFMy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMDA0RjJDQ0M5QUNCOUVDMDFB MjZFRkFGRjUzQTE1QkIzMDlFQ0UzLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1hE dmJxVDhGZ2hQQng1UExOWkVQM2Qyd2s0N3g3WjZkb0NnWFY4aWtmS3MvMC9DMDA0 RjJDQ0M5QUNCOUVDMDFBMjZFRkFGRjUzQTE1QkIzMDlFQ0UzLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA l4GjwuUXkL8bbtU+31UPASBbea3jsGDGEqI0UVR3bfyG7qjOk2s3u5+Qxp6b+Lsk jwkfgEjnVGMRLo4yQ24b0/B/NPNwUCOwk2mruM7OJK0tfdZUlDNA0MFK4Oe92ZYI fJg8mFdJH9qe4ra/gNXBrWS8lKaLIK3P9gveTu24+SmiJtXcH4OwPwi/3kcjRdL2 9Ky1xmy5AqhKH7stTFfSo+/v03bdTC1/YqPAfuZv0t9JKPlANSBUnLg1YL7qFwhU TL8Q9p6oxkxgnsc3D1vgvl16WlItKL5gmCS8toH8YvUAn4pRqutSDV13zekL6aF2 DCvJmcpfwNvc3gy5r4mK7A== -----END CERTIFICATE-----Generated at Sun Apr 27 20:19:59 2025 by rpki-client