$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft File: 0688357ED433C0A60770FB474BDB2C72796B78BD.mft (raw, json) Hash identifier: Kj2n49x+joWVv7SYEWbNnwQm5oPqk3h5hv/0xGcEsVI= Subject key identifier: 2A:1F:66:43:B1:B7:A1:E0:AF:43:86:36:ED:1B:88:0F:15:34:D6:0F Authority key identifier: 06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD Certificate issuer: /CN=0688357ED433C0A60770FB474BDB2C72796B78BD Certificate serial: 23E9B828EE8852DEBEA2D86F91191F5962698E88 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft Manifest number: 0B Signing time: Mon 21 Apr 2025 22:16:00 +0000 Manifest this update: Mon 21 Apr 2025 22:10:59 +0000 Manifest next update: Tue 22 Apr 2025 23:47:59 +0000 Files and hashes: 1: 323830343a316165303a3a2f33322d3634203d3e203631363936.roa (hash: MNi0hCQVw5LiwCn26uDAV8DWpcneKIoS1bbRQFE26gw=) 2: 0688357ED433C0A60770FB474BDB2C72796B78BD.crl (hash: XTezF9QGTlZR7KqBayJSkYI92k/yKmh1mFnjiCxrATU=) 3: 3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa (hash: IaTZ4i3zNgWw2pTgrax+ua0Htv3rIzLefPo79rSHOwM=) 4: 3133382e33362e3233322e302f32322d3332203d3e203631363936.roa (hash: 0PAGB5C8H6IcqwDv00MSTHzGTYgYIUYZIqOHywJKqvU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Apr 2025 23:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e9:b8:28:ee:88:52:de:be:a2:d8:6f:91:19:1f:59:62:69:8e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0688357ED433C0A60770FB474BDB2C72796B78BD Validity Not Before: Apr 21 22:10:59 2025 GMT Not After : Apr 22 23:47:59 2025 GMT Subject: CN=2A1F6643B1B7A1E0AF438636ED1B880F1534D60F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ce:d7:2c:f6:16:62:ec:35:bc:b5:8f:f5:e5: 80:21:02:9b:af:00:ca:91:f2:41:d0:6d:b1:4d:84: 7f:67:8c:f7:39:e9:dd:d7:e3:07:d8:0b:6f:f3:6f: a3:76:96:59:e4:78:29:53:96:2d:81:5b:d8:27:7f: 4a:2d:49:02:e2:07:9d:40:9b:28:5e:a0:2e:db:70: 68:e2:1d:b2:77:78:fd:49:f6:9b:22:b6:18:66:79: 8c:9d:ee:8b:97:b2:df:ef:b3:39:a1:6d:23:5c:59: 40:9d:88:09:bb:a7:b1:be:c4:d9:06:49:ba:81:6c: a0:a4:ec:94:b3:31:f0:83:a5:d9:76:66:bd:e9:f5: fd:b1:04:31:5b:3b:68:b7:2f:ac:c6:6d:aa:33:c5: 3b:4b:20:2b:ce:b0:13:f7:da:81:67:63:a9:3a:85: 9f:80:19:d3:39:0e:43:5e:a0:a3:44:58:dd:17:27: 95:6e:10:3d:aa:d8:fc:7b:57:20:24:69:88:aa:ce: a7:ea:ba:c7:83:91:28:4d:b3:b5:cb:2d:d7:4a:6f: 31:00:bf:b1:e4:dc:bf:bd:b6:96:e2:16:59:f6:23: 21:4f:c9:8d:24:d9:72:c1:e8:e7:3d:a7:79:dd:79: c5:f6:bd:0e:4e:fe:3f:e7:f3:7b:aa:72:80:c5:50: 55:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1F:66:43:B1:B7:A1:E0:AF:43:86:36:ED:1B:88:0F:15:34:D6:0F X509v3 Authority Key Identifier: keyid:06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:71:8f:a8:85:73:b3:08:01:6e:62:38:ce:aa:c5:3a:56:fc: 3f:ac:eb:5f:2b:ec:ce:18:3b:fa:86:b8:30:3b:26:32:8a:7d: cc:7e:a9:24:67:2b:4b:9c:f4:63:42:fc:8b:ce:f2:a3:d6:2b: fd:78:bc:5e:63:d7:6b:61:8a:c2:28:d2:3d:e1:74:5a:b7:01: 02:52:85:9f:28:16:88:ec:07:0b:54:b8:cb:e2:55:55:05:05: eb:db:f0:9d:10:b1:9f:f9:db:92:08:ad:5e:ea:cf:3c:d7:3f: 75:6a:ec:d2:1e:69:cc:d0:8e:1f:3f:73:d1:0a:33:ea:b5:7a: 3a:86:94:e9:cb:fa:ac:36:93:07:2a:31:43:bc:b1:05:b4:69: 1e:3a:03:d3:55:0d:f1:c9:65:e0:b5:e0:7e:cc:95:01:00:8e: 9e:5e:1b:e5:dc:af:e4:32:52:4a:20:2e:43:b2:32:c3:cb:ca: ab:1f:25:9a:ae:b4:1f:af:8e:d9:47:22:1c:a3:f6:16:3d:32: 4f:e9:2d:a0:96:84:f0:47:94:27:c9:ba:30:56:a8:95:95:57: a0:b6:31:91:61:cd:29:0e:e8:ec:9f:f7:6b:f2:9b:3e:1d:81: dd:0c:ad:df:85:fa:df:22:ae:1f:3d:56:1a:ed:0e:a2:db:6b: 3b:e4:12:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI+m4KO6IUt6+othvkRkfWWJpjogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4ODM1N0VENDMzQzBBNjA3NzBGQjQ3NEJEQjJDNzI3 OTZCNzhCRDAeFw0yNTA0MjEyMjEwNTlaFw0yNTA0MjIyMzQ3NTlaMDMxMTAvBgNV BAMTKDJBMUY2NjQzQjFCN0ExRTBBRjQzODYzNkVEMUI4ODBGMTUzNEQ2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJztcs9hZi7DW8tY/15YAhApuv AMqR8kHQbbFNhH9njPc56d3X4wfYC2/zb6N2llnkeClTli2BW9gnf0otSQLiB51A myheoC7bcGjiHbJ3eP1J9psithhmeYyd7ouXst/vszmhbSNcWUCdiAm7p7G+xNkG SbqBbKCk7JSzMfCDpdl2Zr3p9f2xBDFbO2i3L6zGbaozxTtLICvOsBP32oFnY6k6 hZ+AGdM5DkNeoKNEWN0XJ5VuED2q2Px7VyAkaYiqzqfquseDkShNs7XLLddKbzEA v7Hk3L+9tpbiFln2IyFPyY0k2XLB6Oc9p3ndecX2vQ5O/j/n83uqcoDFUFUBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKh9mQ7G3oeCvQ4Y27RuIDxU01g8wHwYDVR0j BBgwFoAUBog1ftQzwKYHcPtHS9sscnlreL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNX c3gvMC8wNjg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODgzNTdFRDQzM0MwQTYw NzcwRkI0NzRCREIyQzcyNzk2Qjc4QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNXc3gvMC8w Njg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApHGPqIVzswgBbmI4zqrFOlb8P6zrXyvszhg7+oa4MDsmMop9zH6pJGcrS5z0 Y0L8i87yo9Yr/Xi8XmPXa2GKwijSPeF0WrcBAlKFnygWiOwHC1S4y+JVVQUF69vw nRCxn/nbkgitXurPPNc/dWrs0h5pzNCOHz9z0Qoz6rV6OoaU6cv6rDaTByoxQ7yx BbRpHjoD01UN8cll4LXgfsyVAQCOnl4b5dyv5DJSSiAuQ7Iyw8vKqx8lmq60H6+O 2UciHKP2Fj0yT+ktoJaE8EeUJ8m6MFaolZVXoLYxkWHNKQ7o7J/3a/KbPh2B3Qyt 34X63yKuHz1WGu0OottrO+QSYg== -----END CERTIFICATE-----Generated at Tue Apr 22 02:50:10 2025 by rpki-client