$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft File: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft (raw, json) Hash identifier: 34XboD6E6h5yW5ugsIKWkO3uniBvVtZwtILFu0OcJlw= Subject key identifier: 1E:84:05:44:FC:60:FC:C8:47:BC:4E:51:B6:E8:2D:2A:D9:B4:9A:D9 Authority key identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 Certificate issuer: /CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Certificate serial: 708FDF9A6EBE52C3655F8726EEB253DED64E8FF6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft Manifest number: 01F4 Signing time: Fri 11 Apr 2025 21:39:45 +0000 Manifest this update: Fri 11 Apr 2025 21:34:45 +0000 Manifest next update: Sun 13 Apr 2025 00:20:45 +0000 Files and hashes: 1: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl (hash: RTNj6VVZVd17zUV7pR5LeVhyqGXtz6Go9tTkzjzcpCI=) 2: 323830313a62363a3a2f33322d3438203d3e20323633303833.roa (hash: /sq5AM8I6YaMflMxl5q4xXK1dCuBrTD/NmShXyjbG5M=) 3: 3137392e3130362e3139322e302f31382d3234203d3e20323633303833.roa (hash: fFcuOyny+lMAM8e0QThYzGDXjn34h9O3teYEKFUfcPs=) 4: 3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa (hash: rojlOjdeX3UrPuGCG6PrXeAls8xreKNh9ggg9OI9Em4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 00:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8f:df:9a:6e:be:52:c3:65:5f:87:26:ee:b2:53:de:d6:4e:8f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Validity Not Before: Apr 11 21:34:45 2025 GMT Not After : Apr 13 00:20:45 2025 GMT Subject: CN=1E840544FC60FCC847BC4E51B6E82D2AD9B49AD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:15:82:84:bb:fe:63:94:97:18:ad:72:77: 4e:7c:f4:86:89:dc:64:09:28:c5:ee:f7:53:80:ef: 34:43:d6:c6:23:2a:8c:c2:08:75:72:b4:e0:12:1d: 0c:c7:ff:2c:9b:d0:ec:f9:03:75:9d:4c:fb:22:95: 41:10:55:da:fa:cc:44:8a:79:07:3c:3b:70:32:92: cb:71:f2:b5:17:87:f6:95:55:dd:ff:e3:2c:ca:12: f1:c2:21:86:13:35:a4:7b:91:d7:83:a2:0c:16:8e: 1a:8c:6a:d1:63:86:7b:9c:c0:bc:6b:f7:f7:ec:1e: d6:b4:30:95:1a:e9:36:35:75:de:9a:e6:82:1e:cb: 9d:e5:08:25:c0:d9:6e:6e:5e:e9:db:45:86:cf:b0: f4:41:b0:ba:85:f2:21:ab:63:fc:62:5b:23:e7:58: c1:4a:24:8a:6a:33:29:90:b9:72:4c:ff:1e:a2:44: d2:5d:7e:78:66:70:60:36:ed:d7:25:6f:96:28:3b: 00:06:fa:b2:38:77:df:da:bb:96:e2:33:4d:a7:00: 8e:df:d2:76:3c:6a:18:0f:ae:3b:1a:ea:4a:fe:97: a8:80:e2:5d:2f:98:d8:88:20:d2:79:13:9f:a1:dd: 97:78:e2:0d:be:6e:fb:11:c1:f5:dc:f3:d1:76:39: 25:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:84:05:44:FC:60:FC:C8:47:BC:4E:51:B6:E8:2D:2A:D9:B4:9A:D9 X509v3 Authority Key Identifier: keyid:F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:46:54:9a:6b:bf:74:ae:00:4a:13:e3:ba:27:de:1b:7d:42: af:56:c2:e3:b5:3e:35:96:e4:c0:a2:3f:cf:e2:f6:e0:23:66: e9:95:54:f7:be:71:6b:7c:19:42:73:dc:78:49:b8:da:56:fe: 8f:97:bf:a8:3f:98:40:10:f1:e9:f2:e5:30:57:70:cf:3f:c0: d8:48:3d:80:11:52:b0:ab:c0:de:c7:b6:5e:a1:ae:ce:64:c3: f1:3e:8f:f2:cf:29:34:2b:20:44:d4:a8:a2:3d:80:07:1e:17: 76:87:f8:39:c6:a8:c1:e0:4a:3b:45:eb:24:c6:bf:26:1f:ef: 86:1e:68:b4:f4:01:c2:23:e9:2b:0a:f6:94:ea:0a:17:74:33: 7a:12:f4:dc:49:6c:00:6c:22:8d:50:b5:44:bf:59:c7:a8:08: 49:aa:4e:1f:7e:29:ab:0c:bd:93:c5:03:8a:61:89:39:52:77: 55:62:88:a7:c7:61:65:b5:f5:cd:6d:1a:9c:68:dd:71:fe:39: 76:13:d2:6a:69:eb:b1:13:0c:c7:59:e3:86:a9:3d:cd:c5:75: c5:66:03:fd:e3:f2:5e:cc:4f:48:f5:e9:b2:c5:0d:03:44:87: b8:ab:8b:fe:b8:8e:9b:cc:ad:9f:23:01:21:e6:9b:28:df:db: 6a:47:ea:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcI/fmm6+UsNlX4cm7rJT3tZOj/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBOThGNzc5RDNCRUY2NTk1OTZCNjRCMzJCMjhFQjZB RkU4RUFCNTAeFw0yNTA0MTEyMTM0NDVaFw0yNTA0MTMwMDIwNDVaMDMxMTAvBgNV BAMTKDFFODQwNTQ0RkM2MEZDQzg0N0JDNEU1MUI2RTgyRDJBRDlCNDlBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmJBWChLv+Y5SXGK1yd0589IaJ 3GQJKMXu91OA7zRD1sYjKozCCHVytOASHQzH/yyb0Oz5A3WdTPsilUEQVdr6zESK eQc8O3Aykstx8rUXh/aVVd3/4yzKEvHCIYYTNaR7kdeDogwWjhqMatFjhnucwLxr 9/fsHta0MJUa6TY1dd6a5oIey53lCCXA2W5uXunbRYbPsPRBsLqF8iGrY/xiWyPn WMFKJIpqMymQuXJM/x6iRNJdfnhmcGA27dclb5YoOwAG+rI4d9/au5biM02nAI7f 0nY8ahgPrjsa6kr+l6iA4l0vmNiIINJ5E5+h3Zd44g2+bvsRwfXc89F2OSV7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHoQFRPxg/MhHvE5RtugtKtm0mtkwHwYDVR0j BBgwFoAU8KmPd50772WVlrZLMrKOtq/o6rUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRt OWIvMS9GMEE5OEY3NzlEM0JFRjY1OTU5NkI2NEIzMkIyOEVCNkFGRThFQUI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwQTk4Rjc3OUQzQkVGNjU5 NTk2QjY0QjMyQjI4RUI2QUZFOEVBQjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRtOWIvMS9G MEE5OEY3NzlEM0JFRjY1OTU5NkI2NEIzMkIyOEVCNkFGRThFQUI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd0ZUmmu/dK4AShPjuifeG31Cr1bC47U+NZbkwKI/z+L24CNm6ZVU975xa3wZ QnPceEm42lb+j5e/qD+YQBDx6fLlMFdwzz/A2Eg9gBFSsKvA3se2XqGuzmTD8T6P 8s8pNCsgRNSooj2ABx4Xdof4OcaoweBKO0XrJMa/Jh/vhh5otPQBwiPpKwr2lOoK F3QzehL03ElsAGwijVC1RL9Zx6gISapOH34pqwy9k8UDimGJOVJ3VWKIp8dhZbX1 zW0anGjdcf45dhPSamnrsRMMx1njhqk9zcV1xWYD/ePyXsxPSPXpssUNA0SHuKuL /riOm8ytnyMBIeabKN/bakfqKg== -----END CERTIFICATE-----Generated at Sat Apr 12 16:00:58 2025 by rpki-client