$ rpki-client -vvf rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.mft File: C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.mft (raw, json) Hash identifier: Cwcbp0ZhepaHY9TApLh2J8XcsbdmexHZ3miFSAGHHxY= Subject key identifier: 0A:4D:07:EB:46:4E:AC:5E:15:7E:73:A5:3D:74:86:F4:38:10:2A:D2 Authority key identifier: C4:B1:9B:CE:1E:9A:B5:29:72:35:D8:0B:57:CF:3D:D8:2F:EE:D7:51 Certificate issuer: /CN=C4B19BCE1E9AB5297235D80B57CF3DD82FEED751 Certificate serial: 0B2E7ABF083EBC178F04D56D29C66B9999F9A498 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.cer Subject info access: rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.mft Manifest number: DD Signing time: Mon 14 Apr 2025 20:27:30 +0000 Manifest this update: Mon 14 Apr 2025 20:22:30 +0000 Manifest next update: Tue 15 Apr 2025 22:31:30 +0000 Files and hashes: 1: 3137372e3135352e38302e302f32322d3332203d3e20323633353833.roa (hash: ViWqxAKsvHtd+LQe4Wpm6dZfCIp9vVrHL4saDiGbN6Q=) 2: C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.crl (hash: oqsI0ItFEUjT4c+j+pVao5eYauSLemDyOSp9yasKIpg=) 3: 323830343a6636343a3a2f33322d313238203d3e20323633353833.roa (hash: zjtA1CsyTg43dQLPmThoRwD0huUpjb049yIaaiY9FWU=) 4: 3139302e382e32382e302f32322d3332203d3e20323633353833.roa (hash: GKNOlP0JQj/PIDb59+/P076Q24YQhJp5duDZSWj++hg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.crl rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 15 Apr 2025 22:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:2e:7a:bf:08:3e:bc:17:8f:04:d5:6d:29:c6:6b:99:99:f9:a4:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4B19BCE1E9AB5297235D80B57CF3DD82FEED751 Validity Not Before: Apr 14 20:22:30 2025 GMT Not After : Apr 15 22:31:30 2025 GMT Subject: CN=0A4D07EB464EAC5E157E73A53D7486F438102AD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ae:e1:ea:33:ce:5e:38:d6:47:86:c7:5d:70: cf:0a:f1:d1:51:d4:30:28:71:6f:43:2b:44:66:cc: dd:10:b9:0d:a4:74:8e:9e:83:49:e3:f9:3f:9c:df: 47:a9:3a:2a:17:23:bb:a5:e9:d8:34:44:58:d9:6d: d1:60:99:8d:57:b8:8f:33:58:a9:19:a5:f6:af:a1: a5:fa:54:25:fc:1f:50:25:a0:8a:56:36:a6:ab:12: 58:8d:b0:fb:af:0d:6b:92:07:4b:13:6f:08:5c:96: 50:3c:26:8f:63:56:dd:fd:56:d3:25:d0:62:7f:5a: d2:71:31:aa:25:67:23:44:18:b1:7b:c7:11:b6:fa: a2:60:d7:6a:9d:33:9b:28:a1:fc:0d:1e:57:02:fa: 8b:78:82:cb:1a:43:55:78:6f:ce:62:9f:0d:9a:26: 50:3a:c6:16:75:5a:33:9c:f1:89:f9:99:87:41:80: 36:61:28:96:5a:cd:36:3b:c2:9c:86:92:a4:c6:3a: e4:f5:2e:04:28:d6:63:21:34:9e:bf:83:e4:bd:ee: 08:39:7c:b4:17:6d:32:2c:93:96:e0:29:e3:81:72: 39:17:5b:98:99:b9:2a:a7:c6:60:88:a8:e6:52:7d: 44:2a:67:86:62:f2:a0:35:96:2a:d3:d1:ff:a3:d3: 66:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4D:07:EB:46:4E:AC:5E:15:7E:73:A5:3D:74:86:F4:38:10:2A:D2 X509v3 Authority Key Identifier: keyid:C4:B1:9B:CE:1E:9A:B5:29:72:35:D8:0B:57:CF:3D:D8:2F:EE:D7:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c9:f5:c3:5b:07:98:3f:20:9c:d3:cb:0d:80:34:de:92:9d: 6e:d6:f9:81:ee:32:52:ee:f0:46:af:79:aa:4b:1f:7c:73:0c: 2b:10:4a:a2:32:55:9d:f6:36:b4:6f:40:a9:92:3f:91:be:88: a7:27:53:fa:bd:27:98:31:11:94:c5:df:85:7b:34:9f:c5:9b: 2f:25:8d:cd:b5:e2:bb:f9:d1:fe:40:4c:be:bd:5d:bc:c9:a5: a4:d2:90:63:9e:44:56:ba:e5:26:a9:75:fe:a3:e1:61:c4:10: 49:2a:3c:0e:e1:92:63:31:95:a8:4e:ad:45:85:99:b8:82:1c: f8:45:37:d1:57:c3:5d:8c:9a:5a:1c:3c:49:50:a8:50:b2:10: 7b:ae:c1:be:67:33:9b:40:67:41:55:15:46:f9:97:1d:7c:50: 27:f9:ed:7a:53:ca:0e:8a:c8:fb:67:23:28:6f:34:aa:8d:c9: 74:cf:bf:98:62:49:23:25:a5:94:62:31:00:5f:90:bb:08:22: 32:70:3a:34:a2:1c:32:bc:2f:18:1e:76:a3:a3:14:17:38:c8: 34:a3:65:5d:58:81:1c:62:e8:b8:be:d6:70:e8:df:3b:b3:c0: 1f:79:69:8b:5a:bc:08:cb:25:73:83:c0:7a:48:ef:e1:5e:ab: 47:1f:3a:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCy56vwg+vBePBNVtKcZrmZn5pJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRCMTlCQ0UxRTlBQjUyOTcyMzVEODBCNTdDRjNERDgy RkVFRDc1MTAeFw0yNTA0MTQyMDIyMzBaFw0yNTA0MTUyMjMxMzBaMDMxMTAvBgNV BAMTKDBBNEQwN0VCNDY0RUFDNUUxNTdFNzNBNTNENzQ4NkY0MzgxMDJBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnruHqM85eONZHhsddcM8K8dFR 1DAocW9DK0RmzN0QuQ2kdI6eg0nj+T+c30epOioXI7ul6dg0RFjZbdFgmY1XuI8z WKkZpfavoaX6VCX8H1AloIpWNqarEliNsPuvDWuSB0sTbwhcllA8Jo9jVt39VtMl 0GJ/WtJxMaolZyNEGLF7xxG2+qJg12qdM5soofwNHlcC+ot4gssaQ1V4b85inw2a JlA6xhZ1WjOc8Yn5mYdBgDZhKJZazTY7wpyGkqTGOuT1LgQo1mMhNJ6/g+S97gg5 fLQXbTIsk5bgKeOBcjkXW5iZuSqnxmCIqOZSfUQqZ4Zi8qA1lirT0f+j02ZLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCk0H60ZOrF4VfnOlPXSG9DgQKtIwHwYDVR0j BBgwFoAUxLGbzh6atSlyNdgLV8892C/u11EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1Znc3lHcHNKNEhZWGtybjFIenpOYmV3WlllajJqelVLQTh5bWJHdzFU NVYvMC9DNEIxOUJDRTFFOUFCNTI5NzIzNUQ4MEI1N0NGM0REODJGRUVENzUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0QjE5QkNFMUU5QUI1Mjk3 MjM1RDgwQjU3Q0YzREQ4MkZFRUQ3NTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1Znc3lHcHNKNEhZWGtybjFIenpOYmV3WlllajJqelVLQTh5bWJHdzFUNVYvMC9D NEIxOUJDRTFFOUFCNTI5NzIzNUQ4MEI1N0NGM0REODJGRUVENzUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApcn1w1sHmD8gnNPLDYA03pKdbtb5ge4yUu7wRq95qksffHMMKxBKojJVnfY2 tG9AqZI/kb6IpydT+r0nmDERlMXfhXs0n8WbLyWNzbXiu/nR/kBMvr1dvMmlpNKQ Y55EVrrlJql1/qPhYcQQSSo8DuGSYzGVqE6tRYWZuIIc+EU30VfDXYyaWhw8SVCo ULIQe67Bvmczm0BnQVUVRvmXHXxQJ/ntelPKDorI+2cjKG80qo3JdM+/mGJJIyWl lGIxAF+QuwgiMnA6NKIcMrwvGB52o6MUFzjINKNlXViBHGLouL7WcOjfO7PAH3lp i1q8CMslc4PAekjv4V6rRx86YQ== -----END CERTIFICATE-----Generated at Tue Apr 15 10:37:06 2025 by rpki-client