$ rpki-client -vvf rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A823754A25B666811A7A3D363B66B25C14736772.mft File: A823754A25B666811A7A3D363B66B25C14736772.mft (raw, json) Hash identifier: s9eXZDSfntwzmBI0qxIb9f6bJzYLxWl5gRyBdtwRWbk= Subject key identifier: 67:B3:6D:BD:1E:F7:54:0B:A1:B5:8B:FA:58:C6:5D:17:3D:9D:C9:38 Authority key identifier: A8:23:75:4A:25:B6:66:81:1A:7A:3D:36:3B:66:B2:5C:14:73:67:72 Certificate issuer: /CN=A823754A25B666811A7A3D363B66B25C14736772 Certificate serial: 3FF25D130EDC9E3BCD7FC53F38C84468DFF536CA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A823754A25B666811A7A3D363B66B25C14736772.cer Subject info access: rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A823754A25B666811A7A3D363B66B25C14736772.mft Manifest number: 2F Signing time: Sat 05 Apr 2025 06:39:48 +0000 Manifest this update: Sat 05 Apr 2025 06:34:48 +0000 Manifest next update: Sun 06 Apr 2025 08:31:48 +0000 Files and hashes: 1: A823754A25B666811A7A3D363B66B25C14736772.crl (hash: FmLgZAnpE/CJU35wPOyZDfmKCu5Qp4mMPWo8N0rgLvg=) 2: 323830343a326264343a3a2f33322d313238203d3e20323635313738.roa (hash: YbXvx4zeyrAWMZt7jY0Nxfrx9/wHx1yJDUWqLR0a0fo=) 3: 3136372e3234392e3132382e302f32322d3332203d3e20323635313738.roa (hash: PYNyriI+LgOMeAHqzV6RhBRJ8g4JrKI+L5Kit7oddIg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A823754A25B666811A7A3D363B66B25C14736772.crl rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A823754A25B666811A7A3D363B66B25C14736772.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A823754A25B666811A7A3D363B66B25C14736772.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 08:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f2:5d:13:0e:dc:9e:3b:cd:7f:c5:3f:38:c8:44:68:df:f5:36:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A823754A25B666811A7A3D363B66B25C14736772 Validity Not Before: Apr 5 06:34:48 2025 GMT Not After : Apr 6 08:31:48 2025 GMT Subject: CN=67B36DBD1EF7540BA1B58BFA58C65D173D9DC938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:31:43:27:3d:21:0e:f6:f2:41:39:f2:b4:42: e6:6f:69:47:4f:07:55:30:8c:2b:c1:24:1b:ce:cc: 0a:0c:f5:15:e1:b5:1e:dd:64:35:92:e0:14:4f:0a: ab:7b:21:e9:84:bb:8a:5f:c1:96:5d:69:e2:c9:2a: 9a:90:8f:a9:0c:04:1b:3b:40:a1:3a:ab:94:43:a1: e4:8e:eb:9c:77:b6:84:66:46:0b:e8:93:2c:4e:11: 05:c9:19:2d:03:60:6a:b0:e1:97:64:d4:0e:00:b9: 0a:a4:f4:3b:f4:0a:67:cd:2b:05:1b:a2:a6:bf:88: 08:a8:a9:ad:f5:85:97:2e:d7:eb:b7:e5:ab:37:0c: 4f:bc:36:6d:c4:ac:88:1f:3c:a2:94:7b:6a:a4:25: 16:a4:6a:a3:75:d7:4d:0f:d7:01:c8:1b:82:d7:ad: 52:54:ee:54:f7:5a:de:c8:a3:99:ba:1e:e5:e7:87: ed:4b:24:3c:db:b9:de:16:0c:a1:03:38:b2:1a:d8: 64:7d:61:39:cf:20:35:98:26:3e:1b:20:d1:09:1b: 47:dd:8d:3c:05:a7:63:b6:52:bf:5a:d0:69:a9:25: 6c:99:6f:f0:7a:24:77:71:3a:64:f4:ab:c5:be:43: 06:3a:e3:d2:da:ae:29:f0:a2:11:3c:40:23:82:1f: 45:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B3:6D:BD:1E:F7:54:0B:A1:B5:8B:FA:58:C6:5D:17:3D:9D:C9:38 X509v3 Authority Key Identifier: keyid:A8:23:75:4A:25:B6:66:81:1A:7A:3D:36:3B:66:B2:5C:14:73:67:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A823754A25B666811A7A3D363B66B25C14736772.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A823754A25B666811A7A3D363B66B25C14736772.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A823754A25B666811A7A3D363B66B25C14736772.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:88:53:89:c1:9a:e3:b4:bf:56:1f:fb:63:07:43:c7:8e:c6: ff:b3:11:1a:71:a2:e1:b0:29:a6:60:a2:26:b1:4b:53:c4:bc: 3a:51:bc:11:2d:a0:f3:5f:5a:46:00:3c:22:31:bf:2c:80:7a: cd:84:d3:93:a6:36:28:12:2c:49:aa:fb:a9:d3:2e:5a:b6:45: d1:84:37:ae:81:10:b1:c7:00:2c:39:7d:e6:17:1f:eb:eb:09: a2:d0:e7:44:d5:0d:47:74:7c:c5:94:35:64:a0:dc:05:e2:c3: 18:9c:28:d2:5c:bc:90:f7:df:c8:56:18:49:cc:01:a8:4a:8f: 40:26:1b:65:52:21:3b:ad:bd:19:24:ae:6a:1b:80:f1:bb:09: 8d:d2:57:87:75:2b:7c:4f:cb:e6:de:03:f2:3c:bf:db:27:7c: 8e:d7:30:f3:74:a8:43:68:3e:45:00:25:73:a9:53:ac:50:26: 92:94:38:76:ec:81:cd:12:d9:c3:6b:2f:f0:c8:79:ec:25:b7: bf:b1:9d:bf:fc:eb:ef:e7:c9:97:79:58:b8:e6:eb:28:c2:5e: 85:cd:40:12:f2:87:8a:37:dd:9e:f0:a9:ff:73:f7:ba:6e:b9: 0c:75:4b:c5:c6:e3:71:78:0e:f1:d3:9a:22:13:ff:70:82:0e: ac:08:6c:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP/JdEw7cnjvNf8U/OMhEaN/1NsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgyMzc1NEEyNUI2NjY4MTFBN0EzRDM2M0I2NkIyNUMx NDczNjc3MjAeFw0yNTA0MDUwNjM0NDhaFw0yNTA0MDYwODMxNDhaMDMxMTAvBgNV BAMTKDY3QjM2REJEMUVGNzU0MEJBMUI1OEJGQTU4QzY1RDE3M0Q5REM5MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGMUMnPSEO9vJBOfK0QuZvaUdP B1UwjCvBJBvOzAoM9RXhtR7dZDWS4BRPCqt7IemEu4pfwZZdaeLJKpqQj6kMBBs7 QKE6q5RDoeSO65x3toRmRgvokyxOEQXJGS0DYGqw4Zdk1A4AuQqk9Dv0CmfNKwUb oqa/iAioqa31hZcu1+u35as3DE+8Nm3ErIgfPKKUe2qkJRakaqN1100P1wHIG4LX rVJU7lT3Wt7Io5m6HuXnh+1LJDzbud4WDKEDOLIa2GR9YTnPIDWYJj4bINEJG0fd jTwFp2O2Ur9a0GmpJWyZb/B6JHdxOmT0q8W+QwY649LarinwohE8QCOCH0XVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZ7NtvR73VAuhtYv6WMZdFz2dyTgwHwYDVR0j BBgwFoAUqCN1SiW2ZoEaej02O2ayXBRzZ3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1JHclZpaDlCU1J3eUwyVWZlNW1UN3RYaXNhdzFjQWpNWFdqTHVVeGc2 Y20vMC9BODIzNzU0QTI1QjY2NjgxMUE3QTNEMzYzQjY2QjI1QzE0NzM2NzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4MjM3NTRBMjVCNjY2ODEx QTdBM0QzNjNCNjZCMjVDMTQ3MzY3NzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1JHclZpaDlCU1J3eUwyVWZlNW1UN3RYaXNhdzFjQWpNWFdqTHVVeGc2Y20vMC9B ODIzNzU0QTI1QjY2NjgxMUE3QTNEMzYzQjY2QjI1QzE0NzM2NzcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMYhTicGa47S/Vh/7YwdDx47G/7MRGnGi4bAppmCiJrFLU8S8OlG8ES2g819a RgA8IjG/LIB6zYTTk6Y2KBIsSar7qdMuWrZF0YQ3roEQsccALDl95hcf6+sJotDn RNUNR3R8xZQ1ZKDcBeLDGJwo0ly8kPffyFYYScwBqEqPQCYbZVIhO629GSSuahuA 8bsJjdJXh3UrfE/L5t4D8jy/2yd8jtcw83SoQ2g+RQAlc6lTrFAmkpQ4duyBzRLZ w2sv8Mh57CW3v7Gdv/zr7+fJl3lYuObrKMJehc1AEvKHijfdnvCp/3P3um65DHVL xcbjcXgO8dOaIhP/cIIOrAhsdw== -----END CERTIFICATE-----Generated at Sat Apr 5 10:39:14 2025 by rpki-client