$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft File: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft (raw, json) Hash identifier: rbhfSEn11h+cdtiOrodwxNLbe0HpcPt9lRJ1ZX7dCB4= Subject key identifier: 46:0D:8E:86:CB:70:35:5B:BD:9E:BE:A4:70:4D:1F:B1:47:40:2A:21 Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 Certificate issuer: /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Certificate serial: 7591CD5B1E2626779EC8B8779D22592AD049D22E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject info access: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft Manifest number: 01F2 Signing time: Fri 11 Apr 2025 06:05:36 +0000 Manifest this update: Fri 11 Apr 2025 06:00:36 +0000 Manifest next update: Sat 12 Apr 2025 09:42:36 +0000 Files and hashes: 1: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: dvZmaJKiFIhzuB+mWc62fkHLhWOlTP21drygDtaN74Y=) 2: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: cXY6PhWUBNWJmbKk4RKtBWwU4LfTGX87FWGJlKUeqPM=) 3: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: YBBTkiHSOgUVAXZZp1wx9Ur96wrUs7rREvi/PLPwCpY=) 4: 323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (hash: Ec9hIaDkp+aDDW4FFpB4Fl3AQwvF5+e3QIn8T/v0bXM=) 5: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: AeBka8A3KQatx5ylf8efYG/0aqDgMHQ/4DLsZ9vgq54=) 6: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: cHOQoX8+QBdwYQGhnsohZ0k1iqnuoavS/B7p944uAlM=) 7: 34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (hash: mLL7psbKfiKaGnpbVWEJoTKcK/IxrSqWRS37Ju8bJQQ=) 8: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (hash: I4lnOLHJxZjbb3Rjorlm2O4yGEV8irB1EDwevjkQU7A=) 9: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl (hash: ctQsr9h2cEXZDPJBVKNbQtyQFsk1/pUZL+S8f5g6R/k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 09:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:91:cd:5b:1e:26:26:77:9e:c8:b8:77:9d:22:59:2a:d0:49:d2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Validity Not Before: Apr 11 06:00:36 2025 GMT Not After : Apr 12 09:42:36 2025 GMT Subject: CN=460D8E86CB70355BBD9EBEA4704D1FB147402A21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:41:e7:85:b8:05:f4:86:1f:6e:a0:95:63:d2: 91:ed:ab:5e:a3:34:03:e2:57:e7:41:3a:ee:7a:1b: 3d:69:7b:5a:32:c9:ea:a7:21:31:5e:a1:59:c5:16: 47:8d:a8:b8:1f:2c:92:94:81:44:25:28:40:dd:1f: 61:81:fd:bd:d4:39:ca:fa:07:6b:39:87:ae:ac:65: 8a:8d:79:f0:d1:d4:1e:6d:00:1b:0c:30:92:31:4f: 4e:a9:3b:94:2b:59:5c:13:b1:f6:b4:c8:20:b2:55: c9:54:23:b4:e4:0d:fb:0b:36:00:71:f8:c2:5a:01: f0:4c:ba:d3:83:56:37:6e:95:d3:b8:8c:44:67:2d: 15:fe:17:99:11:b9:84:d6:ae:9d:b2:83:37:ad:5a: 44:d7:11:f4:d8:e3:da:f8:87:2c:21:27:6f:0d:c3: f7:36:c9:de:aa:0a:1e:b2:75:9c:94:54:5f:7d:0c: 88:32:f1:22:8d:2b:b4:a9:91:08:0e:03:95:f3:73: e0:cb:13:0b:8c:8a:d3:56:94:e7:f4:23:61:14:56: 5b:20:85:0d:11:50:9f:0c:c8:30:cc:bd:7c:73:31: 5f:31:9c:48:d4:16:34:95:66:a4:99:31:98:20:f5: 60:8a:32:29:3a:79:c3:2a:53:b2:c8:1f:e4:ff:cd: 63:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0D:8E:86:CB:70:35:5B:BD:9E:BE:A4:70:4D:1F:B1:47:40:2A:21 X509v3 Authority Key Identifier: keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e6:50:51:1f:8e:f3:a1:36:b9:1f:34:1f:bf:09:96:e6:10: bd:00:f2:13:f1:69:f5:d1:28:84:b0:e7:f2:56:df:48:4f:e2: f5:15:ae:77:4e:3e:66:21:db:ad:a4:68:f9:1f:db:f0:b1:8f: be:43:0b:e8:6c:31:10:11:b3:cb:13:2c:89:f2:08:00:d4:9d: 3b:93:9f:ec:36:58:ce:87:29:0f:a3:7a:be:90:de:9f:15:7c: d3:e0:53:1c:ec:a8:e0:ab:d2:33:3c:08:cb:99:b2:19:c3:34: 28:7d:0d:e3:7f:f6:88:8b:13:f1:53:5f:88:fe:c9:b8:c6:c0: e2:66:ab:de:9c:97:52:9d:28:42:d2:2d:7e:9e:8e:9c:9f:2b: 7f:1a:98:0d:c8:24:c0:09:30:b6:02:a9:6e:3d:01:03:0b:f0: aa:b9:56:ac:8c:55:3b:1c:1e:d8:0f:7c:18:c2:fe:02:a2:c8: e1:82:24:e7:ea:3d:3a:18:42:78:34:d7:45:d6:78:e5:41:58: 1c:72:85:87:4f:bf:44:cf:1d:36:6f:bf:b3:cb:aa:cd:64:ae: c3:1e:39:1e:ec:9a:31:fb:69:5a:66:92:70:6c:bf:71:54:10: db:e8:ac:78:ba:57:a4:4a:6c:6e:72:0a:47:06:7d:26:83:a9: f3:64:f2:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdZHNWx4mJneeyLh3nSJZKtBJ0i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGRUUyQzIxQTE3MzE0QUQwQ0ZGQzUyMEZEODE3RDE0 QjQxNDBEMTAeFw0yNTA0MTEwNjAwMzZaFw0yNTA0MTIwOTQyMzZaMDMxMTAvBgNV BAMTKDQ2MEQ4RTg2Q0I3MDM1NUJCRDlFQkVBNDcwNEQxRkIxNDc0MDJBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsQeeFuAX0hh9uoJVj0pHtq16j NAPiV+dBOu56Gz1pe1oyyeqnITFeoVnFFkeNqLgfLJKUgUQlKEDdH2GB/b3UOcr6 B2s5h66sZYqNefDR1B5tABsMMJIxT06pO5QrWVwTsfa0yCCyVclUI7TkDfsLNgBx +MJaAfBMutODVjduldO4jERnLRX+F5kRuYTWrp2ygzetWkTXEfTY49r4hywhJ28N w/c2yd6qCh6ydZyUVF99DIgy8SKNK7SpkQgOA5Xzc+DLEwuMitNWlOf0I2EUVlsg hQ0RUJ8MyDDMvXxzMV8xnEjUFjSVZqSZMZgg9WCKMik6ecMqU7LIH+T/zWMpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURg2OhstwNVu9nr6kcE0fsUdAKiEwHwYDVR0j BBgwFoAUPP7iwhoXMUrQz/xSD9gX0UtBQNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5K Z2UvMS8zQ0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRkVFMkMyMUExNzMxNEFE MENGRkM1MjBGRDgxN0QxNEI0MTQwRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5KZ2UvMS8z Q0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg+ZQUR+O86E2uR80H78JluYQvQDyE/Fp9dEohLDn8lbfSE/i9RWud04+ZiHb raRo+R/b8LGPvkML6GwxEBGzyxMsifIIANSdO5Of7DZYzocpD6N6vpDenxV80+BT HOyo4KvSMzwIy5myGcM0KH0N43/2iIsT8VNfiP7JuMbA4mar3pyXUp0oQtItfp6O nJ8rfxqYDcgkwAkwtgKpbj0BAwvwqrlWrIxVOxwe2A98GML+AqLI4YIk5+o9OhhC eDTXRdZ45UFYHHKFh0+/RM8dNm+/s8uqzWSuwx45HuyaMftpWmaScGy/cVQQ2+is eLpXpEpsbnIKRwZ9JoOp82Tylg== -----END CERTIFICATE-----Generated at Fri Apr 11 23:14:55 2025 by rpki-client