$ rpki-client -vvf rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft File: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft (raw, json) Hash identifier: DgrhofBi9KZhq1TSZMJW99EtpQd+cyI30fYK+Klbh9E= Subject key identifier: 1F:69:36:A7:D2:BA:A5:60:26:4D:67:D3:24:4C:BE:07:AE:87:C2:C7 Authority key identifier: 1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 Certificate issuer: /CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Certificate serial: 72E0ACEE2A9947A62DF717FF95CB506158724E40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft Manifest number: 01FC Signing time: Tue 22 Apr 2025 11:23:12 +0000 Manifest this update: Tue 22 Apr 2025 11:18:12 +0000 Manifest next update: Wed 23 Apr 2025 14:40:12 +0000 Files and hashes: 1: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl (hash: z5LZFQTHBzS2cIF23acLyRtH8gbEuXPau1Q/EPMmehs=) 2: 323830343a346566383a3a2f33322d3335203d3e20323638323935.roa (hash: BstW0UlvH2wEHgaNKCbfIv8DXJSe7M/kYqDRbvgjc5k=) 3: 34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa (hash: 1C/jOWt5ZHfKspqIFOUeY8exgTDIPGSvNHULSTIuARE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Apr 2025 14:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e0:ac:ee:2a:99:47:a6:2d:f7:17:ff:95:cb:50:61:58:72:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Validity Not Before: Apr 22 11:18:12 2025 GMT Not After : Apr 23 14:40:12 2025 GMT Subject: CN=1F6936A7D2BAA560264D67D3244CBE07AE87C2C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:98:f4:32:96:c8:74:e9:95:ca:29:77:ee:51: 6d:25:51:d7:b9:67:da:19:08:39:39:78:c9:33:f2: 9a:d1:58:47:7e:f0:b1:db:18:c5:99:7a:4c:78:3e: 2c:25:07:20:fb:ea:6b:51:d3:cc:45:bf:f7:dd:0e: 7b:69:5e:6a:29:72:ff:31:82:6f:a1:e3:38:c9:9d: 8c:ef:53:7b:f3:1d:f2:8c:c9:3e:5b:8c:98:c4:d4: b9:a8:29:69:6c:4e:97:e6:20:a6:0c:87:ba:f9:8d: 51:dd:f4:3a:d5:31:2a:78:50:0d:0f:97:a5:19:72: d8:4f:a7:05:5c:ba:3b:fb:09:f3:14:2e:2c:48:57: a1:e8:09:6e:3b:4d:8b:f4:7e:8a:09:d3:dc:8a:52: 7a:fb:ae:46:87:af:c7:cc:e1:95:fa:ac:f2:d9:c8: 6b:a3:ae:e8:8a:e3:29:1d:8f:8c:c0:d5:8a:14:0b: e8:1a:fd:6a:1b:9c:78:52:3c:4e:3b:e2:c9:5d:72: a0:6a:06:08:dc:10:c1:4c:76:04:84:fb:40:f2:d0: ea:f3:1b:63:fa:c6:01:f2:fe:35:a8:07:f0:b8:10: c7:47:3b:b6:38:36:28:4f:3d:18:db:27:33:40:96: bf:04:07:ea:ff:4a:62:a6:97:b0:45:53:b1:55:e8: 8f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:69:36:A7:D2:BA:A5:60:26:4D:67:D3:24:4C:BE:07:AE:87:C2:C7 X509v3 Authority Key Identifier: keyid:1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d4:e9:9c:9d:ff:5d:46:59:3b:5c:85:6e:9f:f3:e2:07:c0: 93:0e:52:cf:32:95:92:22:b4:ef:ef:7b:39:7c:49:ef:fe:54: cf:18:39:67:a3:84:80:bb:09:8b:95:c2:23:08:dd:fb:b2:64: 2f:b0:ca:c1:f9:ec:70:39:7e:bd:7a:89:53:a7:99:b4:6e:bd: 48:c9:70:2f:09:18:f6:ef:ea:ba:a1:f7:22:8a:0d:ad:7e:0d: 88:9d:2f:46:a8:86:e4:23:ec:96:19:0e:ed:60:39:51:27:33: 43:6a:23:03:37:57:c4:6f:f7:31:14:54:ee:75:3e:90:6a:35: ac:7e:e8:03:de:0a:5c:7d:85:35:e4:bf:71:18:95:73:12:a1: ad:48:33:06:4c:7a:dd:aa:9e:25:37:d6:00:ee:b1:fa:4a:b9: 5c:0e:7e:09:b5:59:d4:34:53:14:ce:08:de:90:54:41:cb:47: e1:32:8f:8a:4d:4d:3d:42:c9:86:6c:17:46:46:27:43:d5:40: 73:cf:a1:57:ef:1f:11:2f:dd:97:9e:13:3d:06:b7:fb:11:de: b5:03:00:33:da:18:29:4d:d0:81:5f:7f:53:7c:a2:32:31:dc: d3:b2:93:0f:1a:a8:2c:ea:ef:a8:8f:94:7c:bd:be:93:a1:4b: 5e:22:f5:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcuCs7iqZR6Yt9xf/lctQYVhyTkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMzYwOUQ5NjZERDhCMjJFNUZENTY2N0U0QkFDQUNF RkY4RDFGMDAeFw0yNTA0MjIxMTE4MTJaFw0yNTA0MjMxNDQwMTJaMDMxMTAvBgNV BAMTKDFGNjkzNkE3RDJCQUE1NjAyNjRENjdEMzI0NENCRTA3QUU4N0MyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDamPQylsh06ZXKKXfuUW0lUde5 Z9oZCDk5eMkz8prRWEd+8LHbGMWZekx4PiwlByD76mtR08xFv/fdDntpXmopcv8x gm+h4zjJnYzvU3vzHfKMyT5bjJjE1LmoKWlsTpfmIKYMh7r5jVHd9DrVMSp4UA0P l6UZcthPpwVcujv7CfMULixIV6HoCW47TYv0fooJ09yKUnr7rkaHr8fM4ZX6rPLZ yGujruiK4ykdj4zA1YoUC+ga/WobnHhSPE474sldcqBqBgjcEMFMdgSE+0Dy0Orz G2P6xgHy/jWoB/C4EMdHO7Y4NihPPRjbJzNAlr8EB+r/SmKml7BFU7FV6I8ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUH2k2p9K6pWAmTWfTJEy+B66HwscwHwYDVR0j BBgwFoAUG6NgnZZt2LIuX9VmfkusrO/40fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FI cm8vMS8xQkEzNjA5RDk2NkREOEIyMkU1RkQ1NjY3RTRCQUNBQ0VGRjhEMUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCQTM2MDlEOTY2REQ4QjIy RTVGRDU2NjdFNEJBQ0FDRUZGOEQxRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FIcm8vMS8x QkEzNjA5RDk2NkREOEIyMkU1RkQ1NjY3RTRCQUNBQ0VGRjhEMUYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARNTpnJ3/XUZZO1yFbp/z4gfAkw5SzzKVkiK07+97OXxJ7/5Uzxg5Z6OEgLsJ i5XCIwjd+7JkL7DKwfnscDl+vXqJU6eZtG69SMlwLwkY9u/quqH3IooNrX4NiJ0v RqiG5CPslhkO7WA5USczQ2ojAzdXxG/3MRRU7nU+kGo1rH7oA94KXH2FNeS/cRiV cxKhrUgzBkx63aqeJTfWAO6x+kq5XA5+CbVZ1DRTFM4I3pBUQctH4TKPik1NPULJ hmwXRkYnQ9VAc8+hV+8fES/dl54TPQa3+xHetQMAM9oYKU3QgV9/U3yiMjHc07KT DxqoLOrvqI+UfL2+k6FLXiL1IA== -----END CERTIFICATE-----Generated at Tue Apr 22 20:39:41 2025 by rpki-client