$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft File: 4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft (raw, json) Hash identifier: TI8VafUOznCb9zmYTdaV9Sc3y+gptR8trmjVznAKrdA= Subject key identifier: C5:4E:EB:9F:3E:97:67:C2:41:B2:BA:9A:C5:71:E5:48:09:EC:7A:E3 Authority key identifier: 4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75 Certificate issuer: /CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75 Certificate serial: 01FE1CC476F69A67CB73822D8FE07B327FC30D65 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer Subject info access: rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft Manifest number: 0200 Signing time: Sat 12 Apr 2025 01:18:59 +0000 Manifest this update: Sat 12 Apr 2025 01:13:59 +0000 Manifest next update: Sun 13 Apr 2025 01:28:59 +0000 Files and hashes: 1: 4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl (hash: lARfz+bbby9GO/W+qjTZD2YSrtwnfqfWeMPnl4gWpPA=) 2: 323830343a3762383a3a2f33322d3430203d3e20323632333135.roa (hash: zZskizzMVUll3KQPq5ryatEKQ6AnbKtuzZS9xYqtKtw=) 3: 3137372e3132342e32342e302f32322d3234203d3e20323632333135.roa (hash: gJEmkjOKXFsLMIHa43s7TWKJnecWbTfq2T1FXAqZQIU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 01:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:fe:1c:c4:76:f6:9a:67:cb:73:82:2d:8f:e0:7b:32:7f:c3:0d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75 Validity Not Before: Apr 12 01:13:59 2025 GMT Not After : Apr 13 01:28:59 2025 GMT Subject: CN=C54EEB9F3E9767C241B2BA9AC571E54809EC7AE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:04:80:6c:31:93:5a:32:d7:e9:bd:e9:48:0f: 56:f4:86:dc:4d:fc:94:81:c9:1b:31:0d:b2:d9:48: c2:9e:87:30:bb:82:de:a3:1f:13:81:79:78:84:5c: a4:c3:c7:7d:ad:83:66:b5:6c:4c:cc:7a:0d:54:78: 66:d4:c2:9c:83:2f:11:0f:02:98:40:fe:7c:ae:65: 8b:9e:33:b7:e8:56:ce:db:29:0e:6d:2e:a7:e0:57: ad:92:39:26:0d:36:b5:6c:3d:08:cb:d0:62:5d:f1: 4c:0b:29:96:9d:27:65:97:f2:92:64:f0:04:13:3d: 83:25:0b:72:43:d5:81:43:a2:3c:8c:91:63:ec:cf: 99:94:c6:4a:ed:4c:77:07:16:c2:39:eb:80:d3:af: e7:2f:8d:97:05:a1:d1:a9:17:fa:c0:fe:e4:cf:70: fa:a8:c0:b2:67:ed:b9:57:2e:13:ec:f4:9c:37:88: ea:b9:51:01:1f:24:c9:53:05:5f:30:75:19:4e:68: 3d:ee:d8:1f:c4:ed:ed:4f:fe:37:d1:82:a6:03:66: 5f:69:f7:3e:ef:d6:76:80:1f:68:26:7a:93:24:59: 02:70:59:48:0f:84:ca:d3:15:15:12:0d:d9:28:6b: 84:92:00:cf:20:52:39:b2:77:9f:d6:67:a4:63:a4: 24:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4E:EB:9F:3E:97:67:C2:41:B2:BA:9A:C5:71:E5:48:09:EC:7A:E3 X509v3 Authority Key Identifier: keyid:4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:38:7b:2c:0b:80:63:95:f3:a4:fd:d8:4a:c5:6f:a9:ab:66: 89:78:37:a3:1b:0a:8f:b9:ae:3f:69:13:1d:c8:f2:dd:b6:2c: 5a:c4:3f:fc:99:22:c4:fe:78:8d:1e:35:b9:53:15:e6:1a:b2: 1e:34:dc:25:73:70:7c:ba:f1:4e:d8:e5:1a:59:56:51:7a:f0: 16:e1:37:e2:0d:e8:06:95:63:ec:9f:0c:81:5e:f5:e5:30:b4: 3b:28:79:7a:4d:7f:9b:0e:5c:a7:62:42:72:bc:89:db:1c:de: 37:19:e9:af:a7:79:87:22:96:75:62:e7:3b:16:e5:8e:4d:56: 02:64:8d:23:4f:3a:a3:53:7b:c3:5f:36:5a:92:5c:70:2d:ca: 83:a2:94:23:cb:70:de:3b:16:33:08:37:b3:56:eb:1b:cc:9e: 2b:34:cd:34:52:68:b8:39:54:5a:80:17:6e:b2:9b:ca:6b:a0: b0:14:38:fe:8b:90:f7:5e:c0:94:96:73:a1:4a:14:15:00:ca: bd:68:d9:59:59:08:b3:6e:58:88:ac:5f:fd:c2:d4:b6:57:04: f3:c6:3d:27:af:2f:16:df:3c:60:3f:f2:fc:96:9d:40:3c:1e: 87:e2:3c:89:78:ce:61:e1:b0:90:26:2b:e3:35:ef:72:6b:60: b2:d5:66:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAf4cxHb2mmfLc4Itj+B7Mn/DDWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI5QjY1MzAyQTEzNjNGM0RDNzgwRkYzOUNCRUFFQjkw NjM3NEU3NTAeFw0yNTA0MTIwMTEzNTlaFw0yNTA0MTMwMTI4NTlaMDMxMTAvBgNV BAMTKEM1NEVFQjlGM0U5NzY3QzI0MUIyQkE5QUM1NzFFNTQ4MDlFQzdBRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBIBsMZNaMtfpvelID1b0htxN /JSByRsxDbLZSMKehzC7gt6jHxOBeXiEXKTDx32tg2a1bEzMeg1UeGbUwpyDLxEP AphA/nyuZYueM7foVs7bKQ5tLqfgV62SOSYNNrVsPQjL0GJd8UwLKZadJ2WX8pJk 8AQTPYMlC3JD1YFDojyMkWPsz5mUxkrtTHcHFsI564DTr+cvjZcFodGpF/rA/uTP cPqowLJn7blXLhPs9Jw3iOq5UQEfJMlTBV8wdRlOaD3u2B/E7e1P/jfRgqYDZl9p 9z7v1naAH2gmepMkWQJwWUgPhMrTFRUSDdkoa4SSAM8gUjmyd5/WZ6RjpCQHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxU7rnz6XZ8JBsrqaxXHlSAnseuMwHwYDVR0j BBgwFoAUS5tlMCoTY/PceA/znL6uuQY3TnUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEttVmR2TDFVUFZnbXp2Q3UzNEhQVDM2Y1pjS0tGcGFLSDZCemNKZVQ1 V1kvMS80QjlCNjUzMDJBMTM2M0YzREM3ODBGRjM5Q0JFQUVCOTA2Mzc0RTc1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCOUI2NTMwMkExMzYzRjNE Qzc4MEZGMzlDQkVBRUI5MDYzNzRFNzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEttVmR2TDFVUFZnbXp2Q3UzNEhQVDM2Y1pjS0tGcGFLSDZCemNKZVQ1V1kvMS80 QjlCNjUzMDJBMTM2M0YzREM3ODBGRjM5Q0JFQUVCOTA2Mzc0RTc1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALTh7LAuAY5XzpP3YSsVvqatmiXg3oxsKj7muP2kTHcjy3bYsWsQ//JkixP54 jR41uVMV5hqyHjTcJXNwfLrxTtjlGllWUXrwFuE34g3oBpVj7J8MgV715TC0Oyh5 ek1/mw5cp2JCcryJ2xzeNxnpr6d5hyKWdWLnOxbljk1WAmSNI086o1N7w182WpJc cC3Kg6KUI8tw3jsWMwg3s1brG8yeKzTNNFJouDlUWoAXbrKbymugsBQ4/ouQ917A lJZzoUoUFQDKvWjZWVkIs25YiKxf/cLUtlcE88Y9J68vFt88YD/y/JadQDweh+I8 iXjOYeGwkCYr4zXvcmtgstVmyg== -----END CERTIFICATE-----Generated at Sat Apr 12 17:45:31 2025 by rpki-client