$ rpki-client -vvf rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.mft File: 3845FCC306058DF56E24A27FE05C403B0CF9597A.mft (raw, json) Hash identifier: UimmG24hyKAByfQd595PTCbVkkWlE5BufHLy5YUlOi4= Subject key identifier: 17:A9:77:33:18:00:EC:04:4D:C5:D7:15:84:ED:E2:C4:72:59:0D:09 Authority key identifier: 38:45:FC:C3:06:05:8D:F5:6E:24:A2:7F:E0:5C:40:3B:0C:F9:59:7A Certificate issuer: /CN=3845FCC306058DF56E24A27FE05C403B0CF9597A Certificate serial: 767596A511912C9787A8777F7ECC9ED16FC751D4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.cer Subject info access: rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.mft Manifest number: 020B Signing time: Sun 27 Apr 2025 17:50:21 +0000 Manifest this update: Sun 27 Apr 2025 17:45:21 +0000 Manifest next update: Mon 28 Apr 2025 18:44:21 +0000 Files and hashes: 1: 3845FCC306058DF56E24A27FE05C403B0CF9597A.crl (hash: y6PMr/m6eLmKnvsoXrPnvbiPV3qK/IGrIscdO2BEt0Q=) 2: 323830343a313238303a3a2f33322d3438203d3e20323633343830.roa (hash: hSuvKjeqad6bOQr4GenPJdxVrQ60GclVGkNW1bLpnCs=) 3: 3139312e3234322e3230342e302f32322d3234203d3e20323633343830.roa (hash: qYbJ+s+v4as8Tkn3cc5BQl3DUNfCUvrZ4/ne27A5SWM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.crl rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 18:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:75:96:a5:11:91:2c:97:87:a8:77:7f:7e:cc:9e:d1:6f:c7:51:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3845FCC306058DF56E24A27FE05C403B0CF9597A Validity Not Before: Apr 27 17:45:21 2025 GMT Not After : Apr 28 18:44:21 2025 GMT Subject: CN=17A977331800EC044DC5D71584EDE2C472590D09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:52:54:6d:8b:9b:c2:a3:d5:8c:c5:5e:59:d5: 94:c2:39:bf:92:cd:06:6c:5d:68:4a:81:be:17:ed: ea:9d:4e:6c:7c:57:f0:b0:f1:77:03:07:e7:b0:87: 45:f7:8b:8c:91:b4:b3:3c:fe:08:46:81:95:99:f8: 74:fc:50:86:7b:48:64:93:31:7e:43:7b:ce:79:65: a5:bf:dc:42:bc:d5:4f:dc:06:2b:01:e0:d6:95:e9: 3f:d2:17:3e:a0:8f:0a:ef:32:c6:71:55:2a:03:ca: 7a:1a:bc:ac:2c:3a:b1:c3:a8:54:73:83:6a:a5:2a: fc:49:ce:84:99:20:76:9b:1d:57:3c:f8:d2:69:7a: d6:27:b8:f1:59:03:09:1c:41:72:af:fe:c3:a5:f5: f9:f7:0c:65:9c:23:35:15:a1:77:26:e5:75:f6:aa: 88:b5:37:71:14:3a:00:3d:52:12:ed:10:7b:d0:05: dc:a2:74:5b:90:a4:f6:12:54:e3:d3:3c:18:e1:52: b1:5c:2b:62:cd:c0:64:4a:0a:69:cb:b1:63:d0:99: 7b:e5:22:ce:94:25:24:1e:36:46:c1:74:25:f1:13: cc:6e:71:7e:47:ad:b5:e1:d4:81:74:61:5d:d0:9d: 46:6d:9d:fa:d4:1e:2a:82:0a:04:1e:06:12:a8:84: dc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A9:77:33:18:00:EC:04:4D:C5:D7:15:84:ED:E2:C4:72:59:0D:09 X509v3 Authority Key Identifier: keyid:38:45:FC:C3:06:05:8D:F5:6E:24:A2:7F:E0:5C:40:3B:0C:F9:59:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/1/3845FCC306058DF56E24A27FE05C403B0CF9597A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:45:a8:46:37:de:fe:a3:43:87:c2:0c:6d:c8:7f:6a:08:ec: dc:68:cc:7a:d2:13:09:80:32:27:cf:ef:51:d4:6b:13:9f:6b: 12:a5:ac:a4:a6:72:4d:4f:c1:b1:e3:25:69:75:dd:10:0b:90: 34:d6:a2:9b:fa:06:41:f3:27:d0:61:89:7f:de:23:9c:a0:a3: 4a:8d:35:30:6c:9d:a8:b7:a0:14:1e:72:fe:ed:d9:0c:50:00: ac:50:f8:5a:82:36:2b:b9:8d:85:6f:47:4c:c6:2f:9f:de:3a: 3e:04:00:e3:2c:9e:f4:ab:f0:13:c3:dd:13:70:1d:a9:ec:07: 2a:d3:0b:78:7e:59:0a:2d:90:23:54:f3:22:cc:e8:03:a1:65: ca:c0:e2:93:5b:65:4a:f2:da:be:05:21:e1:9e:81:5c:30:bd: bc:d9:86:e7:07:98:14:47:27:23:06:5a:bb:f9:e9:c0:d2:50: a7:97:d5:68:3d:4a:c4:b7:55:73:f8:54:36:cf:ba:72:4d:19: 7d:b5:ab:f5:8f:48:11:9c:1b:d2:30:b4:99:2b:b0:43:cd:4a: fd:34:72:0e:e6:c1:6e:75:d3:f2:ea:5e:b9:9b:c5:90:91:54: 81:f1:fd:0b:bf:dc:b5:7b:ee:9f:c0:54:cd:58:0e:2c:dc:d9: 6d:c6:47:30 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUdnWWpRGRLJeHqHd/fsye0W/HUdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg0NUZDQzMwNjA1OERGNTZFMjRBMjdGRTA1QzQwM0Iw Q0Y5NTk3QTAeFw0yNTA0MjcxNzQ1MjFaFw0yNTA0MjgxODQ0MjFaMDMxMTAvBgNV BAMTKDE3QTk3NzMzMTgwMEVDMDQ0REM1RDcxNTg0RURFMkM0NzI1OTBEMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUlRti5vCo9WMxV5Z1ZTCOb+S zQZsXWhKgb4X7eqdTmx8V/Cw8XcDB+ewh0X3i4yRtLM8/ghGgZWZ+HT8UIZ7SGST MX5De855ZaW/3EK81U/cBisB4NaV6T/SFz6gjwrvMsZxVSoDynoavKwsOrHDqFRz g2qlKvxJzoSZIHabHVc8+NJpetYnuPFZAwkcQXKv/sOl9fn3DGWcIzUVoXcm5XX2 qoi1N3EUOgA9UhLtEHvQBdyidFuQpPYSVOPTPBjhUrFcK2LNwGRKCmnLsWPQmXvl Is6UJSQeNkbBdCXxE8xucX5HrbXh1IF0YV3QnUZtnfrUHiqCCgQeBhKohNw9AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUF6l3MxgA7ARNxdcVhO3ixHJZDQkwHwYDVR0j BBgwFoAUOEX8wwYFjfVuJKJ/4FxAOwz5WXowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9uSHJ2cDM5cDRlUmNEWnA4RlFoZW9uanpHQWtxa2RydjRaM3JpVGNFRjZK LzEvMzg0NUZDQzMwNjA1OERGNTZFMjRBMjdGRTA1QzQwM0IwQ0Y5NTk3QS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zODQ1RkNDMzA2MDU4REY1NkUy NEEyN0ZFMDVDNDAzQjBDRjk1OTdBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25I cnZwMzlwNGVSY0RacDhGUWhlb25qekdBa3FrZHJ2NFozcmlUY0VGNkovMS8zODQ1 RkNDMzA2MDU4REY1NkUyNEEyN0ZFMDVDNDAzQjBDRjk1OTdBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA vUWoRjfe/qNDh8IMbch/agjs3GjMetITCYAyJ8/vUdRrE59rEqWspKZyTU/BseMl aXXdEAuQNNaim/oGQfMn0GGJf94jnKCjSo01MGydqLegFB5y/u3ZDFAArFD4WoI2 K7mNhW9HTMYvn946PgQA4yye9KvwE8PdE3AdqewHKtMLeH5ZCi2QI1TzIszoA6Fl ysDik1tlSvLavgUh4Z6BXDC9vNmG5weYFEcnIwZau/npwNJQp5fVaD1KxLdVc/hU Ns+6ck0ZfbWr9Y9IEZwb0jC0mSuwQ81K/TRyDubBbnXT8upeuZvFkJFUgfH9C7/c tXvun8BUzVgOLNzZbcZHMA== -----END CERTIFICATE-----Generated at Mon Apr 28 11:16:28 2025 by rpki-client