$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft File: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft (raw, json) Hash identifier: zzuSvZrokEttSWsNpp8rMrRjQ7qLhYMVPIeiEOwGAXg= Subject key identifier: 91:52:57:40:78:22:CF:24:C1:2A:CC:C1:94:5B:E3:34:21:07:FC:53 Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 Certificate issuer: /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Certificate serial: 18CB58B17678C6F0F553B60F7EB7E3299E37EABE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft Manifest number: E3 Signing time: Tue 08 Apr 2025 01:14:44 +0000 Manifest this update: Tue 08 Apr 2025 01:09:44 +0000 Manifest next update: Wed 09 Apr 2025 03:56:44 +0000 Files and hashes: 1: 3138362e3139322e302e302f32302d3234203d3e20323632373235.roa (hash: 7Tsl7qx1NouUrFNWT4qI6MJPqrTpsHOTmqv/UGnXNJg=) 2: 323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa (hash: YnAj4nnRHR0yIlpmVv3W9tpP6AuEMBjIff491ksaPns=) 3: 3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa (hash: 1Hkni3TKW3kNQ83mB3nTYeJWQ9mBS7c7zWqWXIg/zDI=) 4: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl (hash: bYOcFVW5hOlYmuGz1R0+soKQEjqdWQwjLLWr+tEzhag=) 5: 323830343a333336303a3a2f33322d3438203d3e20323632373235.roa (hash: Vzzy94kvUWUhTx7QLr4vzuitWlbJCB8GpWrdimQi6+8=) 6: 323830343a333336303a303a33303a3a2f36342d3634203d3e20323632373235.roa (hash: PHplbTnXXeq+ONmNsldvZhcMoF9KEK65+ZkGU2g4Cac=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 03:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:cb:58:b1:76:78:c6:f0:f5:53:b6:0f:7e:b7:e3:29:9e:37:ea:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Validity Not Before: Apr 8 01:09:44 2025 GMT Not After : Apr 9 03:56:44 2025 GMT Subject: CN=915257407822CF24C12ACCC1945BE3342107FC53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a4:d2:f7:3d:e4:cb:39:58:ce:53:86:5b:98: 34:54:f3:cc:aa:39:4c:12:a3:f7:2c:cb:1c:38:81: 2b:63:b7:31:c7:7d:2f:21:52:e9:d1:76:2b:56:7a: 38:be:68:a9:3d:a8:0f:cd:dc:53:1e:39:07:d2:b8: 8e:58:1c:01:da:ae:3c:0a:ad:02:c8:23:93:d6:cf: ed:fc:b2:e7:01:74:e6:7d:df:75:2b:22:09:53:1c: 1f:b8:98:6e:7d:1a:92:b5:ad:ed:1b:26:ba:97:9d: 84:5c:a4:b3:eb:77:34:cc:29:53:ea:0e:8f:26:b1: 81:a8:35:b2:ad:d0:29:7d:23:14:59:75:e0:0e:5b: f7:07:ba:de:39:cd:f0:1a:06:af:44:74:c1:d7:b2: 39:05:65:a3:ec:71:88:52:c3:ad:70:7a:50:6c:6c: c3:1b:15:18:8b:b7:72:ce:af:1f:dd:84:00:e8:86: 8b:e6:6f:ae:66:88:77:1b:d5:25:10:e4:c7:05:df: e4:65:80:63:0f:91:64:40:48:2d:95:0c:94:ff:27: 0c:c3:b1:31:c8:2a:3a:17:af:39:1f:b0:6f:47:05: fd:c0:3f:83:a9:74:6e:a6:01:82:37:0d:26:83:ad: 4e:88:c8:3b:6c:2a:77:db:00:05:ea:12:9b:b7:6f: b4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:52:57:40:78:22:CF:24:C1:2A:CC:C1:94:5B:E3:34:21:07:FC:53 X509v3 Authority Key Identifier: keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:1a:fa:e5:2b:40:e3:46:d4:e6:86:c6:33:fe:b1:27:22:b0: 6d:7b:a3:9f:d3:6b:89:f7:90:ec:7f:f3:89:72:6d:56:c8:4a: a7:08:47:f1:ed:5e:49:0b:09:01:b5:6d:70:92:b2:98:f3:9a: fa:9d:42:ee:8d:92:f8:11:e2:0e:b4:59:07:01:c2:f2:68:bd: 22:e6:f6:ca:bb:d2:3d:4a:03:9f:8d:ad:61:96:db:8a:81:4d: ac:17:e0:45:35:93:c8:fd:40:9e:0e:d5:0b:96:88:3d:af:a1: 76:81:c1:b4:04:07:47:e2:ce:e3:65:93:75:42:62:f3:4b:f1: e5:2a:05:0d:6d:ab:a1:c1:cc:3a:65:1d:db:e9:9b:4b:5c:2c: 5d:77:04:f5:08:c4:3d:5e:22:60:c9:95:b7:91:15:18:70:20: 5e:c4:8b:fc:75:b6:bd:37:ec:4b:d4:5c:b7:7b:98:b0:8c:cd: 0a:bb:d6:1e:13:4f:11:6e:04:d5:0b:d0:16:71:8c:82:9b:f6: f9:f6:68:41:59:cb:40:d3:1b:83:4e:ee:a4:38:e0:4f:1f:57: bd:5b:9a:31:86:1f:bf:f5:69:86:45:b4:90:e7:45:c5:4d:53: 65:b8:0f:38:81:9c:bc:a6:cc:40:68:b6:bb:8f:03:56:9c:d6: 6c:6c:8e:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGMtYsXZ4xvD1U7YPfrfjKZ436r4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlEOThCRkQ5OTNDQjdERTQyODRDRDBCODM0QkRB QTFGQjc2ODAeFw0yNTA0MDgwMTA5NDRaFw0yNTA0MDkwMzU2NDRaMDMxMTAvBgNV BAMTKDkxNTI1NzQwNzgyMkNGMjRDMTJBQ0NDMTk0NUJFMzM0MjEwN0ZDNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWpNL3PeTLOVjOU4ZbmDRU88yq OUwSo/csyxw4gStjtzHHfS8hUunRditWeji+aKk9qA/N3FMeOQfSuI5YHAHarjwK rQLII5PWz+38sucBdOZ933UrIglTHB+4mG59GpK1re0bJrqXnYRcpLPrdzTMKVPq Do8msYGoNbKt0Cl9IxRZdeAOW/cHut45zfAaBq9EdMHXsjkFZaPscYhSw61welBs bMMbFRiLt3LOrx/dhADohovmb65miHcb1SUQ5McF3+RlgGMPkWRASC2VDJT/JwzD sTHIKjoXrzkfsG9HBf3AP4OpdG6mAYI3DSaDrU6IyDtsKnfbAAXqEpu3b7SvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkVJXQHgizyTBKszBlFvjNCEH/FMwHwYDVR0j BBgwFoAUM9mdmL/Zk8t95ChM0Lg0vaoft2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNO VVIvMC8zM0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5RDk4QkZEOTkzQ0I3 REU0Mjg0Q0QwQjgzNEJEQUExRkI3NjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNOVVIvMC8z M0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0hr65StA40bU5obGM/6xJyKwbXujn9NrifeQ7H/ziXJtVshKpwhH8e1eSQsJ AbVtcJKymPOa+p1C7o2S+BHiDrRZBwHC8mi9Iub2yrvSPUoDn42tYZbbioFNrBfg RTWTyP1Ang7VC5aIPa+hdoHBtAQHR+LO42WTdUJi80vx5SoFDW2rocHMOmUd2+mb S1wsXXcE9QjEPV4iYMmVt5EVGHAgXsSL/HW2vTfsS9Rct3uYsIzNCrvWHhNPEW4E 1QvQFnGMgpv2+fZoQVnLQNMbg07upDjgTx9XvVuaMYYfv/VphkW0kOdFxU1TZbgP OIGcvKbMQGi2u48DVpzWbGyOPA== -----END CERTIFICATE-----Generated at Tue Apr 8 12:22:20 2025 by rpki-client