$ rpki-client -vvf rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft File: CAAC943455AAA15F91CE50FF2493F762682C2729.mft (raw, json) Hash identifier: QISNJsiLED27n6t09NOpccQy9Aab+BnHVLMRmqE5qzQ= Subject key identifier: C9:47:70:4F:33:07:5D:E4:62:59:AB:B2:90:6F:70:5D:DB:76:B1:BE Authority key identifier: CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29 Certificate issuer: /CN=CAAC943455AAA15F91CE50FF2493F762682C2729 Certificate serial: 362390A75A5892E9662DE8D1FDB68D768F289089 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer Subject info access: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft Manifest number: 01D8 Signing time: Wed 19 Mar 2025 01:06:07 +0000 Manifest this update: Wed 19 Mar 2025 01:01:07 +0000 Manifest next update: Thu 20 Mar 2025 03:23:07 +0000 Files and hashes: 1: 3137372e35322e34302e302f32322d3234203d3e20323632343337.roa (hash: vBqRghjcSO1xmy/uLPBthc2ThosEzfn+95fW/g/+jQI=) 2: 323830343a3437633a3a2f33322d3438203d3e20323632343337.roa (hash: YBcy6k6MRYW9PzHCmnt2b1x4dxQ9nyO4ZBzDdfggOWg=) 3: CAAC943455AAA15F91CE50FF2493F762682C2729.crl (hash: ajvGCJz6OWYHaIEkXLFPEJjT49IksHf0eSbBmMQQGQc=) 4: 3137302e38322e382e302f32322d3234203d3e20323632343337.roa (hash: cluneo4j67np20hAoW23KbgSbi+DHqPkZAc9zspk25o=) 5: 3230312e3137352e34382e302f32322d3234203d3e20323632343337.roa (hash: 4yi8voV6b9rZzEeplITiWWsJrxFP553VTOWC2QsOXtY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Mar 2025 03:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:23:90:a7:5a:58:92:e9:66:2d:e8:d1:fd:b6:8d:76:8f:28:90:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAAC943455AAA15F91CE50FF2493F762682C2729 Validity Not Before: Mar 19 01:01:07 2025 GMT Not After : Mar 20 03:23:07 2025 GMT Subject: CN=C947704F33075DE46259ABB2906F705DDB76B1BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:7b:de:19:4b:9b:63:c9:e0:2f:84:39:c3: 01:b0:8c:6c:40:45:fe:92:de:41:f6:42:bf:49:a7: c4:9d:de:e3:69:2e:47:ef:3c:a2:19:e2:d0:d5:e8: 0a:04:d3:d2:c8:ce:04:1f:c5:9d:67:a8:31:c4:b7: 63:3a:8a:70:d0:51:54:c4:db:1a:cc:ea:6d:07:21: b1:79:0d:0a:48:05:56:60:e4:5f:1b:42:f6:eb:6d: 0a:7f:dc:c5:3a:38:a3:a1:fd:62:f6:f7:8a:be:67: 50:74:e3:f4:0d:89:ad:77:63:4c:0f:ed:98:8e:e8: dc:bf:df:93:bb:07:a5:ef:05:ba:e5:83:93:d2:de: 68:0e:99:49:4d:76:45:6b:28:ad:2b:72:fb:66:00: ce:09:bb:c9:f6:68:f5:04:12:85:97:6f:7d:7e:a3: 0d:a2:5b:bc:a3:20:a8:19:fe:0f:9f:29:02:58:f6: b0:ce:65:03:13:fc:0c:c9:96:d7:78:df:17:1f:4c: a8:3d:ed:90:b5:f6:08:c0:31:23:82:04:92:22:08: f2:fe:e8:1a:52:83:64:4c:66:25:9c:72:11:a9:36: ca:3b:c6:2d:c3:ba:14:b6:9a:91:62:db:d2:a5:f7: a4:2d:91:7f:20:1d:41:36:de:c9:cb:f7:c0:4a:58: 79:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:47:70:4F:33:07:5D:E4:62:59:AB:B2:90:6F:70:5D:DB:76:B1:BE X509v3 Authority Key Identifier: keyid:CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:45:dd:e1:45:7d:73:2c:62:00:ab:c0:fc:67:7a:a2:3a:3c: d4:d1:1f:bc:2f:04:ac:62:f6:5d:80:22:5e:3a:63:59:7a:b3: c8:b8:6f:76:42:88:2c:e2:01:eb:d5:5c:27:74:fc:72:4b:cd: 53:a0:df:c0:f8:18:dd:55:44:79:1e:79:d6:a7:e0:a5:1b:11: cc:4e:b6:9c:25:08:76:3d:59:48:2e:1e:b1:98:cc:bc:be:11: a3:db:3d:71:43:5a:e7:04:04:23:8e:7d:c6:5f:18:ba:c1:1e: 52:ad:77:cf:b9:8f:f5:f8:97:34:5c:72:2c:a2:f7:6a:db:5a: 1d:ee:23:aa:b1:9a:02:49:2b:ba:8f:e1:44:07:56:f1:db:23: 26:47:3c:d1:98:fe:6d:b5:19:eb:84:6c:d7:de:26:ae:e4:da: 0b:21:30:fd:d8:18:a1:db:3d:e8:ba:ac:5e:dd:35:e1:75:c1: ec:09:6e:58:80:12:1d:0d:03:d9:19:e5:1f:cc:74:1e:d9:b4: fa:d1:be:f3:74:07:4f:14:db:d6:f9:7e:c6:b3:36:d7:2a:c2: 3b:cb:ea:12:51:a7:5d:7b:8c:55:ff:f5:69:15:43:ae:d2:b5: bb:5a:e2:e5:00:34:dc:53:ea:36:5d:bc:59:6f:47:55:aa:6c: ce:71:41:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNiOQp1pYkulmLejR/baNdo8okIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBQzk0MzQ1NUFBQTE1RjkxQ0U1MEZGMjQ5M0Y3NjI2 ODJDMjcyOTAeFw0yNTAzMTkwMTAxMDdaFw0yNTAzMjAwMzIzMDdaMDMxMTAvBgNV BAMTKEM5NDc3MDRGMzMwNzVERTQ2MjU5QUJCMjkwNkY3MDVEREI3NkIxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1dnveGUubY8ngL4Q5wwGwjGxA Rf6S3kH2Qr9Jp8Sd3uNpLkfvPKIZ4tDV6AoE09LIzgQfxZ1nqDHEt2M6inDQUVTE 2xrM6m0HIbF5DQpIBVZg5F8bQvbrbQp/3MU6OKOh/WL294q+Z1B04/QNia13Y0wP 7ZiO6Ny/35O7B6XvBbrlg5PS3mgOmUlNdkVrKK0rcvtmAM4Ju8n2aPUEEoWXb31+ ow2iW7yjIKgZ/g+fKQJY9rDOZQMT/AzJltd43xcfTKg97ZC19gjAMSOCBJIiCPL+ 6BpSg2RMZiWcchGpNso7xi3DuhS2mpFi29Kl96QtkX8gHUE23snL98BKWHkpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyUdwTzMHXeRiWauykG9wXdt2sb4wHwYDVR0j BBgwFoAUyqyUNFWqoV+RzlD/JJP3YmgsJykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1V2c0NiSEd3NXZVZ3NFcUxTVzdQa0RiNnk4UUR2MVpCNmp1TmZBOXp1 NUwvMC9DQUFDOTQzNDU1QUFBMTVGOTFDRTUwRkYyNDkzRjc2MjY4MkMyNzI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBQUM5NDM0NTVBQUExNUY5 MUNFNTBGRjI0OTNGNzYyNjgyQzI3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1V2c0NiSEd3NXZVZ3NFcUxTVzdQa0RiNnk4UUR2MVpCNmp1TmZBOXp1NUwvMC9D QUFDOTQzNDU1QUFBMTVGOTFDRTUwRkYyNDkzRjc2MjY4MkMyNzI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArkXd4UV9cyxiAKvA/Gd6ojo81NEfvC8ErGL2XYAiXjpjWXqzyLhvdkKILOIB 69VcJ3T8ckvNU6DfwPgY3VVEeR551qfgpRsRzE62nCUIdj1ZSC4esZjMvL4Ro9s9 cUNa5wQEI459xl8YusEeUq13z7mP9fiXNFxyLKL3attaHe4jqrGaAkkruo/hRAdW 8dsjJkc80Zj+bbUZ64Rs194mruTaCyEw/dgYods96LqsXt014XXB7AluWIASHQ0D 2RnlH8x0Htm0+tG+83QHTxTb1vl+xrM21yrCO8vqElGnXXuMVf/1aRVDrtK1u1ri 5QA03FPqNl28WW9HVapsznFBnA== -----END CERTIFICATE-----Generated at Wed Mar 19 19:20:09 2025 by rpki-client