$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft File: 2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft (raw, json) Hash identifier: C2N23UvwxVqsR8Ph+A1CiYqoXDjGhMHCAl95ymS36nk= Subject key identifier: 40:D4:F8:7E:F0:5B:1F:18:97:D3:9F:03:3A:BB:7F:A9:98:91:58:C3 Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A Certificate issuer: /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A Certificate serial: 7586E26B89FE5C1C1C66A08EC5B35D0D9204D6C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer Subject info access: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft Manifest number: 0288 Signing time: Fri 02 May 2025 02:51:06 +0000 Manifest this update: Fri 02 May 2025 02:46:06 +0000 Manifest next update: Sat 03 May 2025 04:28:06 +0000 Files and hashes: 1: 3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa (hash: mvqMiFShrhl429jJZ2MEPX47X4Tu0n+8cbWaLIFXD74=) 2: 2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl (hash: wLBFDak5L8v3LKsF2GWTvl5muKZhbx2KJE0IXRhc0gs=) 3: 3230312e34392e3232342e302f32302d3234203d3e203532353332.roa (hash: CNJSlWtatUN4HSdkuVeA3UaPEokKP4ThP14ovzAF/c0=) 4: 3230312e34392e3232342e302f32342d3234203d3e20323634383836.roa (hash: aAcskGlGmP8AQ7qs2cBaT1+bvYjC59f6aR7MspSUM2s=) 5: 323830343a326635633a3a2f33322d3438203d3e20323634383836.roa (hash: EtAFZVftso22tPfn5dl/88WB9YQ7x3P4uwE8iBRdUJk=) 6: 3230312e34392e3232362e302f32342d3234203d3e20323634383836.roa (hash: /Bqgdv/wF+ru9WBmwhXO8Kmck4O1wcfAaIl22CcZyRo=) 7: 3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa (hash: ZEOE1aModZQn//F6rEGH/N341h+IAF+P3KvayKztGlw=) 8: 3230312e34392e3232352e302f32342d3234203d3e20323730393539.roa (hash: KiQwHqW4L5k313W7Ix2tqfggra0fzCmTud2HSdaR8Rc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 May 2025 04:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:86:e2:6b:89:fe:5c:1c:1c:66:a0:8e:c5:b3:5d:0d:92:04:d6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A Validity Not Before: May 2 02:46:06 2025 GMT Not After : May 3 04:28:06 2025 GMT Subject: CN=40D4F87EF05B1F1897D39F033ABB7FA9989158C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bc:58:cc:95:ab:74:79:a0:52:67:61:66:4d: 54:d5:c0:29:ad:69:56:c6:ba:1f:b8:3c:11:e3:6d: da:15:a9:c9:61:5f:84:78:5d:72:2a:88:1f:92:1a: ea:0e:2b:02:31:89:80:90:9c:2a:97:70:fa:c4:52: 91:a3:2e:ac:1a:fd:5a:03:82:1e:eb:2f:c7:aa:2d: c4:8b:91:2f:d9:e3:5a:05:95:e6:36:d2:d0:74:ca: 8a:b4:1b:85:3f:ba:62:5b:b5:e7:dd:d2:8e:19:9e: e4:59:36:11:e4:eb:f3:33:f7:33:59:6e:ac:c0:dc: 0d:90:46:b4:30:8e:63:f3:a3:eb:87:05:c1:c2:f7: b8:64:f9:8e:ca:11:9e:d9:a7:6d:15:d5:4a:5a:f3: c8:3c:71:61:b7:34:ed:21:fa:c7:0c:eb:53:79:af: f4:07:4c:ea:4e:c4:20:0a:48:95:3d:55:65:f8:24: db:ff:2f:15:c8:5f:48:95:a4:67:7a:4a:7f:ea:26: f6:b0:6f:46:e8:b0:b0:6f:11:52:9a:fe:3a:90:cb: 26:2c:98:17:2d:e6:20:1d:c2:af:71:1a:24:f4:37: 8f:3c:39:73:30:b7:16:78:a5:87:e0:75:8b:69:62: 25:dd:d1:34:fd:25:74:0e:45:e5:02:16:92:9e:70: 71:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D4:F8:7E:F0:5B:1F:18:97:D3:9F:03:3A:BB:7F:A9:98:91:58:C3 X509v3 Authority Key Identifier: keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:21:07:74:1c:fd:b3:f0:f1:f3:28:ea:0d:aa:a9:f9:ef:7b: 36:68:68:f3:f1:06:00:da:61:de:d4:7c:74:59:57:68:16:3e: fe:68:18:70:2a:0c:53:e2:14:8d:14:22:28:17:79:48:78:f4: b7:e7:5d:2a:3d:7c:6d:3e:45:77:65:24:ec:d3:cc:b9:d3:39: 13:4e:b3:db:f9:b8:e3:13:9b:bc:bb:f2:08:14:4c:0c:23:a5: b1:5a:05:7d:f7:19:4d:c8:11:90:22:d1:c4:4e:d3:a8:22:e2: 46:6b:0d:ec:36:9d:2d:dc:c2:43:f7:1c:fa:fb:c8:6c:16:48: e9:47:bb:b4:23:4f:5c:89:63:eb:07:c4:7e:f5:8a:a1:c6:9a: a7:93:0a:a8:57:cd:7e:fc:9a:41:1d:93:bd:d0:29:43:a2:e1: b4:10:c6:00:5e:d4:f9:f8:3f:ff:b6:a2:4b:25:ca:82:fc:53: a0:f8:74:ae:3b:9d:ff:bc:24:c1:36:59:03:71:66:f8:f4:bb: df:0b:c7:d0:79:6d:4a:b9:27:51:69:0d:1f:93:94:d8:f0:9c: 0f:fe:8c:ab:ca:87:e5:88:8a:4b:fa:7c:90:80:76:5a:2b:16: 73:1b:03:08:0a:52:57:b2:b5:2b:12:3b:91:a9:33:60:08:0a: 04:69:48:38 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUdYbia4n+XBwcZqCOxbNdDZIE1sgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJB ODlDMkQxQTAeFw0yNTA1MDIwMjQ2MDZaFw0yNTA1MDMwNDI4MDZaMDMxMTAvBgNV BAMTKDQwRDRGODdFRjA1QjFGMTg5N0QzOUYwMzNBQkI3RkE5OTg5MTU4QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpvFjMlat0eaBSZ2FmTVTVwCmt aVbGuh+4PBHjbdoVqclhX4R4XXIqiB+SGuoOKwIxiYCQnCqXcPrEUpGjLqwa/VoD gh7rL8eqLcSLkS/Z41oFleY20tB0yoq0G4U/umJbtefd0o4ZnuRZNhHk6/Mz9zNZ bqzA3A2QRrQwjmPzo+uHBcHC97hk+Y7KEZ7Zp20V1Upa88g8cWG3NO0h+scM61N5 r/QHTOpOxCAKSJU9VWX4JNv/LxXIX0iVpGd6Sn/qJvawb0bosLBvEVKa/jqQyyYs mBct5iAdwq9xGiT0N488OXMwtxZ4pYfgdYtpYiXd0TT9JXQOReUCFpKecHEVAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUQNT4fvBbHxiX058DOrt/qZiRWMMwHwYDVR0j BBgwFoAULBzJQ1N+cqpZm8m5QPsYC6icLRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp LzEvMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJBODlDMkQxQS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzFDQzk0MzUzN0U3MkFBNTk5 QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2Fm WEZNa1F5cEpqYVNhVXp0M0VRUW9KTmNWdXpoaG1kQk51MVc0WEVvM2kvMS8yQzFD Qzk0MzUzN0U3MkFBNTk5QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA CyEHdBz9s/Dx8yjqDaqp+e97Nmho8/EGANph3tR8dFlXaBY+/mgYcCoMU+IUjRQi KBd5SHj0t+ddKj18bT5Fd2Uk7NPMudM5E06z2/m44xObvLvyCBRMDCOlsVoFffcZ TcgRkCLRxE7TqCLiRmsN7DadLdzCQ/cc+vvIbBZI6Ue7tCNPXIlj6wfEfvWKocaa p5MKqFfNfvyaQR2TvdApQ6LhtBDGAF7U+fg//7aiSyXKgvxToPh0rjud/7wkwTZZ A3Fm+PS73wvH0HltSrknUWkNH5OU2PCcD/6Mq8qH5YiKS/p8kIB2WisWcxsDCApS V7K1KxI7kakzYAgKBGlIOA== -----END CERTIFICATE-----Generated at Fri May 2 14:40:01 2025 by rpki-client