$ rpki-client -vvf rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft File: CAAC943455AAA15F91CE50FF2493F762682C2729.mft (raw, json) Hash identifier: BMrIYowol9pu6qDq0cRm1J2a4sWnd5RDMsZp9er1VJI= Subject key identifier: 21:03:C2:19:8E:DC:4A:2E:94:E4:EB:D5:1B:6E:65:2C:8E:4A:E5:AA Authority key identifier: CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29 Certificate issuer: /CN=CAAC943455AAA15F91CE50FF2493F762682C2729 Certificate serial: 2DBF2F0AE10275CD2DAA21F49112A3A7AA433246 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer Subject info access: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft Manifest number: 01EE Signing time: Fri 04 Apr 2025 14:07:45 +0000 Manifest this update: Fri 04 Apr 2025 14:02:45 +0000 Manifest next update: Sat 05 Apr 2025 15:43:45 +0000 Files and hashes: 1: 3137372e35322e34302e302f32322d3234203d3e20323632343337.roa (hash: vBqRghjcSO1xmy/uLPBthc2ThosEzfn+95fW/g/+jQI=) 2: CAAC943455AAA15F91CE50FF2493F762682C2729.crl (hash: qMGniIIfEJlv8bByTMzO5O/Hp4pctAlvoMmaAlSaCM4=) 3: 323830343a3437633a3a2f33322d3438203d3e20323632343337.roa (hash: YBcy6k6MRYW9PzHCmnt2b1x4dxQ9nyO4ZBzDdfggOWg=) 4: 3137302e38322e382e302f32322d3234203d3e20323632343337.roa (hash: cluneo4j67np20hAoW23KbgSbi+DHqPkZAc9zspk25o=) 5: 3230312e3137352e34382e302f32322d3234203d3e20323632343337.roa (hash: 4yi8voV6b9rZzEeplITiWWsJrxFP553VTOWC2QsOXtY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 15:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:bf:2f:0a:e1:02:75:cd:2d:aa:21:f4:91:12:a3:a7:aa:43:32:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAAC943455AAA15F91CE50FF2493F762682C2729 Validity Not Before: Apr 4 14:02:45 2025 GMT Not After : Apr 5 15:43:45 2025 GMT Subject: CN=2103C2198EDC4A2E94E4EBD51B6E652C8E4AE5AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d8:8c:58:b6:ad:8b:ca:7c:af:e3:0e:53:b4: f7:32:29:c2:dd:ce:dd:cd:4e:96:8e:b4:b6:84:c7: 34:81:61:05:35:28:7b:4c:e4:7e:94:69:a8:a9:c2: 59:2f:f4:21:25:05:26:11:73:1e:9d:55:bb:c7:39: 7b:dd:11:b2:6e:ba:45:e1:ca:8a:ec:d4:69:cd:38: fe:f1:63:cf:46:56:3f:f7:30:a4:71:d0:6b:1c:f9: f5:d4:3d:d0:38:50:fe:39:4c:be:a3:ba:26:e3:b4: be:1c:1f:46:a2:55:06:86:b6:7b:a3:ea:27:c3:f6: 86:49:f3:56:44:4d:03:25:fd:c4:97:5a:33:cb:c6: 9a:40:ae:c9:80:89:e8:07:42:17:86:99:c1:75:ab: 5d:57:dc:38:05:c8:9f:6a:e8:8e:f8:08:c8:7f:5b: 40:e1:ee:c1:77:f2:53:c0:e9:c7:04:e3:12:50:f8: d2:af:04:1d:2d:2e:89:7a:86:c2:61:99:43:de:34: 10:e6:7c:9d:1b:a4:c1:0f:67:f2:b2:44:68:96:93: 91:58:cc:cb:99:b2:37:b9:73:91:9e:d5:a1:ab:88: fa:bd:fd:8f:56:9c:ad:90:8d:a4:b2:55:00:1c:4b: d1:ff:6c:2d:fe:23:a0:79:c9:7a:21:41:48:cd:d3: f8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:03:C2:19:8E:DC:4A:2E:94:E4:EB:D5:1B:6E:65:2C:8E:4A:E5:AA X509v3 Authority Key Identifier: keyid:CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:89:3e:1e:3d:4b:e2:54:3a:71:4e:e9:3c:74:77:6b:b1:f9: dd:4b:5a:42:b5:99:83:0c:bf:ec:4d:0b:23:b0:c7:64:e0:85: 6a:74:13:7c:0d:d0:e9:af:ba:2b:f9:ce:92:ba:70:88:1d:85: f3:d6:f7:cc:cf:62:f2:2c:8c:1d:28:75:42:45:f9:b8:bc:68: 54:3a:e2:7a:6e:0d:05:04:5d:6e:e4:51:99:d2:9d:36:59:ea: 01:9a:20:e3:14:e4:1d:67:a7:82:1a:02:7c:ba:79:aa:15:00: 59:8b:8e:6d:b6:74:dc:31:83:7d:c0:5c:1a:eb:6f:9e:e2:f1: b8:af:33:f2:a9:85:b2:22:58:82:e4:c9:40:2a:41:50:1f:6c: c7:2d:1d:e1:5d:37:2a:6c:2a:8c:17:a7:be:46:49:6d:c7:0f: dc:53:06:6b:bf:58:80:43:56:1e:1a:bc:01:92:53:31:34:39: 26:c5:e0:b7:82:a2:e5:e2:04:96:64:49:f2:09:60:b3:ad:28: d5:1f:3e:37:dc:7c:63:0a:55:c3:0b:de:5a:6b:64:8d:3f:b2: f0:44:8a:6e:d8:69:d1:19:14:42:16:9f:ea:96:bf:c1:7c:2c: f2:80:61:b0:11:e7:21:3e:f4:1b:f6:df:9d:53:fb:8e:3d:13: 1b:e0:19:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULb8vCuECdc0tqiH0kRKjp6pDMkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBQzk0MzQ1NUFBQTE1RjkxQ0U1MEZGMjQ5M0Y3NjI2 ODJDMjcyOTAeFw0yNTA0MDQxNDAyNDVaFw0yNTA0MDUxNTQzNDVaMDMxMTAvBgNV BAMTKDIxMDNDMjE5OEVEQzRBMkU5NEU0RUJENTFCNkU2NTJDOEU0QUU1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk2IxYtq2Lynyv4w5TtPcyKcLd zt3NTpaOtLaExzSBYQU1KHtM5H6Uaaipwlkv9CElBSYRcx6dVbvHOXvdEbJuukXh yors1GnNOP7xY89GVj/3MKRx0Gsc+fXUPdA4UP45TL6juibjtL4cH0aiVQaGtnuj 6ifD9oZJ81ZETQMl/cSXWjPLxppArsmAiegHQheGmcF1q11X3DgFyJ9q6I74CMh/ W0Dh7sF38lPA6ccE4xJQ+NKvBB0tLol6hsJhmUPeNBDmfJ0bpMEPZ/KyRGiWk5FY zMuZsje5c5Ge1aGriPq9/Y9WnK2QjaSyVQAcS9H/bC3+I6B5yXohQUjN0/j/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIQPCGY7cSi6U5OvVG25lLI5K5aowHwYDVR0j BBgwFoAUyqyUNFWqoV+RzlD/JJP3YmgsJykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1V2c0NiSEd3NXZVZ3NFcUxTVzdQa0RiNnk4UUR2MVpCNmp1TmZBOXp1 NUwvMC9DQUFDOTQzNDU1QUFBMTVGOTFDRTUwRkYyNDkzRjc2MjY4MkMyNzI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBQUM5NDM0NTVBQUExNUY5 MUNFNTBGRjI0OTNGNzYyNjgyQzI3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1V2c0NiSEd3NXZVZ3NFcUxTVzdQa0RiNnk4UUR2MVpCNmp1TmZBOXp1NUwvMC9D QUFDOTQzNDU1QUFBMTVGOTFDRTUwRkYyNDkzRjc2MjY4MkMyNzI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuIk+Hj1L4lQ6cU7pPHR3a7H53UtaQrWZgwy/7E0LI7DHZOCFanQTfA3Q6a+6 K/nOkrpwiB2F89b3zM9i8iyMHSh1QkX5uLxoVDriem4NBQRdbuRRmdKdNlnqAZog 4xTkHWenghoCfLp5qhUAWYuObbZ03DGDfcBcGutvnuLxuK8z8qmFsiJYguTJQCpB UB9sxy0d4V03KmwqjBenvkZJbccP3FMGa79YgENWHhq8AZJTMTQ5JsXgt4Ki5eIE lmRJ8glgs60o1R8+N9x8YwpVwwveWmtkjT+y8ESKbthp0RkUQhaf6pa/wXws8oBh sBHnIT70G/bfnVP7jj0TG+AZ0Q== -----END CERTIFICATE-----Generated at Sat Apr 5 08:56:05 2025 by rpki-client