$ rpki-client -vvf rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft File: 46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft (raw, json) Hash identifier: 2OPo5kOQRGhzrGtOtOaWPEa1qwM/q334OhnKCmNtHQg= Subject key identifier: 6A:17:FF:DF:9D:C5:7D:9A:0A:3F:E7:FE:D5:25:6E:BD:D0:52:A5:61 Authority key identifier: 46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17 Certificate issuer: /CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17 Certificate serial: 25FE30AE4EE00FA03D70413A7F94214CB62818A8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer Subject info access: rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft Manifest number: 01EA Signing time: Thu 10 Apr 2025 12:05:02 +0000 Manifest this update: Thu 10 Apr 2025 12:00:02 +0000 Manifest next update: Fri 11 Apr 2025 12:30:02 +0000 Files and hashes: 1: 323830343a313733343a3a2f33322d3438203d3e203532383639.roa (hash: 74BdjGN3yA4ht22QxCqslkKGevvn+bBlN5pFgMtvUxk=) 2: 3137372e3132382e36342e302f32312d3234203d3e203532383639.roa (hash: 8gzEWDF8i42eHf686Ra5Hy4/vvSVtAxDn3ySTpNWsmo=) 3: 46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl (hash: TT8XAlxjgXrAImWWM1h9dduInnhweKOYSPN6twzhbU0=) 4: 3137372e39332e3138342e302f32322d3234203d3e203532383639.roa (hash: tvRic0kMMAl10dH+h0klz4g3tSflPxU0EbeB037XKr0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 11 Apr 2025 12:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:fe:30:ae:4e:e0:0f:a0:3d:70:41:3a:7f:94:21:4c:b6:28:18:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17 Validity Not Before: Apr 10 12:00:02 2025 GMT Not After : Apr 11 12:30:02 2025 GMT Subject: CN=6A17FFDF9DC57D9A0A3FE7FED5256EBDD052A561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:45:09:75:fb:2e:c0:78:86:30:53:14:8e:d7: 86:b7:6f:f3:ab:20:33:4f:c6:f8:d8:bb:df:12:a7: 8f:e5:e7:63:8f:8e:89:1a:28:b2:f5:08:7b:b6:3b: f6:05:01:8e:4d:3c:ec:94:81:10:3d:22:0a:0e:dd: 21:36:36:93:ea:a6:76:26:c6:7b:b9:30:df:f0:af: 36:1f:42:92:c3:68:3e:33:5e:14:9c:0b:2b:40:9e: 94:88:2a:a6:82:3c:c0:91:0d:4a:94:db:28:8e:db: 81:29:0e:44:46:35:87:7d:8d:94:9c:04:b4:86:8f: bf:cf:55:83:fb:84:c4:d7:bf:bb:86:cf:53:af:f9: 3f:d9:b8:8d:c3:08:9d:e1:16:ef:4e:c7:97:a1:ce: 35:0a:2d:d4:37:67:e4:55:b2:44:58:de:0e:b0:85: cb:e8:af:2e:ab:b2:45:60:2b:e5:e3:70:10:5f:a9: 08:be:98:8d:1a:20:2a:ac:be:11:13:de:21:88:86: 0a:f2:f1:f3:24:2b:68:f6:ca:93:1e:8f:0f:0e:0a: 69:d9:98:9a:5e:4b:65:41:ba:d8:3c:b5:4f:b4:c5: dc:40:f3:6f:f3:dc:20:c3:72:14:b8:47:23:b0:a2: b0:20:7c:09:7e:7d:0c:57:fd:5b:9b:0a:43:82:d8: f8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:17:FF:DF:9D:C5:7D:9A:0A:3F:E7:FE:D5:25:6E:BD:D0:52:A5:61 X509v3 Authority Key Identifier: keyid:46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:40:ec:3e:9f:34:d1:52:ca:79:b1:46:55:25:2e:55:96:b5: 58:56:6c:33:8e:17:7a:03:48:28:69:61:53:a4:9e:b2:4a:7b: f5:18:8b:1f:b2:c6:ee:83:1b:82:24:23:bb:76:d4:55:fd:a6: b6:a7:9f:46:de:6a:23:b4:c3:1a:53:b8:2e:20:f3:b2:cb:60: bc:48:10:82:fb:67:11:f6:1a:7b:24:d7:07:0a:21:3e:c4:ad: a5:ec:d2:27:3b:4f:a2:b0:7e:56:44:16:61:3c:cc:63:14:46: 02:43:5f:b8:9a:7a:87:a7:1d:ee:e3:80:f8:d5:47:6e:dc:a0: 06:09:ed:a3:13:53:78:92:b4:4b:c3:f3:47:89:fe:e3:5e:70: 0f:71:9c:1a:b9:58:13:76:77:b1:5f:73:e9:d6:60:63:d4:11: 01:c5:8b:d8:0c:82:ab:44:2c:80:51:a9:2b:47:73:7b:1c:5c: f4:0e:5a:fd:94:4c:3c:fb:d5:8e:ca:84:d1:41:7f:5c:f2:fa: d8:bf:b8:91:9b:63:f3:37:36:82:e2:b3:85:a7:53:76:a5:6a: f3:52:3a:40:9e:df:70:97:d1:a3:22:c3:ac:f1:e1:92:ea:04: 29:81:ba:e0:15:cd:40:d0:90:88:d2:e3:39:b8:e1:98:e0:bd: 38:1c:d2:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJf4wrk7gD6A9cEE6f5QhTLYoGKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY0MzVDMDdCREVGOUVGNjZFQTNGOUFDNTE2QjM5OEZF NDg3QUYxNzAeFw0yNTA0MTAxMjAwMDJaFw0yNTA0MTExMjMwMDJaMDMxMTAvBgNV BAMTKDZBMTdGRkRGOURDNTdEOUEwQTNGRTdGRUQ1MjU2RUJERDA1MkE1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcRQl1+y7AeIYwUxSO14a3b/Or IDNPxvjYu98Sp4/l52OPjokaKLL1CHu2O/YFAY5NPOyUgRA9IgoO3SE2NpPqpnYm xnu5MN/wrzYfQpLDaD4zXhScCytAnpSIKqaCPMCRDUqU2yiO24EpDkRGNYd9jZSc BLSGj7/PVYP7hMTXv7uGz1Ov+T/ZuI3DCJ3hFu9Ox5ehzjUKLdQ3Z+RVskRY3g6w hcvory6rskVgK+XjcBBfqQi+mI0aICqsvhET3iGIhgry8fMkK2j2ypMejw8OCmnZ mJpeS2VButg8tU+0xdxA82/z3CDDchS4RyOworAgfAl+fQxX/VubCkOC2PgFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUahf/353FfZoKP+f+1SVuvdBSpWEwHwYDVR0j BBgwFoAURkNcB73vnvZuo/msUWs5j+SHrxcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjg0WlhwcldGNlF6N1M1QmJqM1pHcG5iRlJIclFVbTlLWDRVckhDNWNT UGsvMS80NjQzNUMwN0JERUY5RUY2NkVBM0Y5QUM1MTZCMzk4RkU0ODdBRjE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2NDM1QzA3QkRFRjlFRjY2 RUEzRjlBQzUxNkIzOThGRTQ4N0FGMTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mjg0WlhwcldGNlF6N1M1QmJqM1pHcG5iRlJIclFVbTlLWDRVckhDNWNTUGsvMS80 NjQzNUMwN0JERUY5RUY2NkVBM0Y5QUM1MTZCMzk4RkU0ODdBRjE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGEDsPp800VLKebFGVSUuVZa1WFZsM44XegNIKGlhU6Seskp79RiLH7LG7oMb giQju3bUVf2mtqefRt5qI7TDGlO4LiDzsstgvEgQgvtnEfYaeyTXBwohPsStpezS JztPorB+VkQWYTzMYxRGAkNfuJp6h6cd7uOA+NVHbtygBgntoxNTeJK0S8PzR4n+ 415wD3GcGrlYE3Z3sV9z6dZgY9QRAcWL2AyCq0QsgFGpK0dzexxc9A5a/ZRMPPvV jsqE0UF/XPL62L+4kZtj8zc2guKzhadTdqVq81I6QJ7fcJfRoyLDrPHhkuoEKYG6 4BXNQNCQiNLjObjhmOC9OBzS4g== -----END CERTIFICATE-----Generated at Thu Apr 10 18:36:22 2025 by rpki-client