$ rpki-client -vvf rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft File: 2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft (raw, json) Hash identifier: gASdyxDZ2H9qHz6E00hkbYM/ydCmElzGVaOWy+MAUAU= Subject key identifier: CA:F4:BA:01:8A:42:6A:B9:83:CE:38:0A:F9:6D:CF:FD:EE:E5:F8:82 Authority key identifier: 2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C Certificate issuer: /CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C Certificate serial: 0B9B5E84421153CA8FD640DEBFA288EFA6232E84 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer Subject info access: rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft Manifest number: 01F4 Signing time: Sat 12 Apr 2025 10:37:23 +0000 Manifest this update: Sat 12 Apr 2025 10:32:23 +0000 Manifest next update: Sun 13 Apr 2025 10:45:23 +0000 Files and hashes: 1: 323830343a313932383a3a2f33322d313238203d3e203631373735.roa (hash: nuyhgAzX27qSeSVno+9wZ9X/49ZgMdBWxUwbjgZnHk0=) 2: 3230302e3232392e38342e302f32322d3332203d3e203631373735.roa (hash: HUgjgoMoXy/HcsuPu+XEO8HJHVpykWC6LHcx5p1rb50=) 3: 3133382e3230342e33362e302f32322d3332203d3e203631373735.roa (hash: i42Zf9JlK4N1mmLBTa9TWccNagKQVyNdUEy5+83Gmck=) 4: 2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl (hash: ntjr8PmDkeiNsOvUB/LFanHrTej9c+yM+CVQuOiYIQU=) 5: 3133382e3230342e33372e302f32342d3332203d3e203631373735.roa (hash: bHsfgx5bc+iOPbuSRSP7Bx9qmbPdlwgcPx8SooF5nOw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 10:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:9b:5e:84:42:11:53:ca:8f:d6:40:de:bf:a2:88:ef:a6:23:2e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C Validity Not Before: Apr 12 10:32:23 2025 GMT Not After : Apr 13 10:45:23 2025 GMT Subject: CN=CAF4BA018A426AB983CE380AF96DCFFDEEE5F882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a7:6e:b7:31:73:86:cf:b3:ef:8d:5f:cf:7f: d5:9d:f7:c1:36:46:c5:81:e3:fb:58:47:5e:c1:c7: 70:cd:20:50:02:89:33:0d:87:22:0e:6d:7f:c0:3c: f0:53:54:12:83:b0:15:93:8b:e0:90:6c:3d:87:b0: f3:65:86:8c:f2:1e:1d:4d:e1:b1:c8:49:50:d4:14: f9:e4:46:08:59:eb:e9:81:c3:a7:b6:93:da:03:9c: db:7e:a8:84:89:05:41:8f:8d:64:d0:3e:56:72:38: cb:cd:d6:5b:b6:4f:15:bc:23:02:dc:e5:e6:a4:0a: 0c:63:bf:da:43:72:fa:44:1b:aa:b7:6a:bf:e6:a1: a3:37:34:96:c3:46:6f:44:f7:d6:fd:80:d5:47:79: 6d:aa:7e:8b:71:5c:a6:43:74:91:ea:e9:96:54:be: b7:25:26:04:26:61:db:9d:cc:13:65:bd:7d:bd:d5: 2b:c5:8d:b0:44:75:72:2d:b9:0e:9b:27:b8:04:67: 34:71:24:96:56:36:dd:a3:67:e8:2b:9f:e9:c7:02: 6c:b3:f8:7a:30:e9:f2:9b:5b:1b:23:75:2b:8f:6b: c7:90:8c:60:ca:e4:64:b8:4f:78:b0:ec:0f:2e:cc: c4:09:7b:bd:e3:3c:1d:6d:f9:ba:26:61:13:a9:37: 9b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F4:BA:01:8A:42:6A:B9:83:CE:38:0A:F9:6D:CF:FD:EE:E5:F8:82 X509v3 Authority Key Identifier: keyid:2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:0c:a8:01:bc:4c:1d:dc:72:e4:46:b0:02:9c:9a:8c:ff:1f: b6:ab:0a:90:24:3b:b3:a5:c2:0f:18:fe:30:6e:83:e8:50:30: aa:52:00:e4:db:da:40:b1:6e:98:dc:2e:cb:94:e2:1f:5f:67: c6:17:00:03:55:78:eb:4d:57:a9:7c:58:00:93:da:36:ab:55: 25:3c:29:a4:b2:2b:1b:e3:73:0c:a0:26:86:a0:4a:1d:74:a6: 15:af:7d:42:77:ac:d8:a8:33:48:b8:ef:ee:81:be:39:1d:86: 6b:f9:fe:d0:c4:ee:68:34:74:ce:98:2f:9c:34:a3:c1:53:4d: 3e:3d:a5:29:2e:5b:5f:a4:97:88:84:e3:b4:55:26:95:44:5c: e5:bc:5c:1c:67:c0:72:ef:b1:61:f6:ed:70:af:30:8e:fd:22: 12:63:d7:5c:8d:90:bd:a0:66:da:d9:d7:d5:3d:fc:ab:86:7b: 50:8b:d6:4c:98:2a:77:43:a5:c1:36:79:71:03:ef:5c:81:8e: d5:2e:4c:44:5f:cc:c8:ff:70:73:10:4c:74:91:23:63:7c:b1: d8:9e:71:df:a9:7e:5e:bf:d7:06:00:e8:bd:c0:0b:49:d6:47: eb:83:be:76:03:d8:ab:3b:8c:a1:cf:a9:e9:ef:8d:d9:25:70: 06:9d:46:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUC5tehEIRU8qP1kDev6KI76YjLoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE0REY5MDk3Rjk3NjY0QTAwQTMxOEVGQUUyMkRDMTAz NkU5MUI1QzAeFw0yNTA0MTIxMDMyMjNaFw0yNTA0MTMxMDQ1MjNaMDMxMTAvBgNV BAMTKENBRjRCQTAxOEE0MjZBQjk4M0NFMzgwQUY5NkRDRkZERUVFNUY4ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRp263MXOGz7PvjV/Pf9Wd98E2 RsWB4/tYR17Bx3DNIFACiTMNhyIObX/APPBTVBKDsBWTi+CQbD2HsPNlhozyHh1N 4bHISVDUFPnkRghZ6+mBw6e2k9oDnNt+qISJBUGPjWTQPlZyOMvN1lu2TxW8IwLc 5eakCgxjv9pDcvpEG6q3ar/moaM3NJbDRm9E99b9gNVHeW2qfotxXKZDdJHq6ZZU vrclJgQmYdudzBNlvX291SvFjbBEdXItuQ6bJ7gEZzRxJJZWNt2jZ+grn+nHAmyz +How6fKbWxsjdSuPa8eQjGDK5GS4T3iw7A8uzMQJe73jPB1t+bomYROpN5vVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyvS6AYpCarmDzjgK+W3P/e7l+IIwHwYDVR0j BBgwFoAUKk35CX+XZkoAoxjvriLcEDbpG1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFZScFF6VTd3aG1LSkh0YUZxd3drSktyN2h6WVgzdkVEemU1MXJ2czZp WDIvMS8yQTRERjkwOTdGOTc2NjRBMDBBMzE4RUZBRTIyREMxMDM2RTkxQjVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNERGOTA5N0Y5NzY2NEEw MEEzMThFRkFFMjJEQzEwMzZFOTFCNUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFZScFF6VTd3aG1LSkh0YUZxd3drSktyN2h6WVgzdkVEemU1MXJ2czZpWDIvMS8y QTRERjkwOTdGOTc2NjRBMDBBMzE4RUZBRTIyREMxMDM2RTkxQjVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEQyoAbxMHdxy5EawApyajP8ftqsKkCQ7s6XCDxj+MG6D6FAwqlIA5NvaQLFu mNwuy5TiH19nxhcAA1V4601XqXxYAJPaNqtVJTwppLIrG+NzDKAmhqBKHXSmFa99 Qnes2KgzSLjv7oG+OR2Ga/n+0MTuaDR0zpgvnDSjwVNNPj2lKS5bX6SXiITjtFUm lURc5bxcHGfAcu+xYfbtcK8wjv0iEmPXXI2QvaBm2tnX1T38q4Z7UIvWTJgqd0Ol wTZ5cQPvXIGO1S5MRF/MyP9wcxBMdJEjY3yx2J5x36l+Xr/XBgDovcALSdZH64O+ dgPYqzuMoc+p6e+N2SVwBp1GVA== -----END CERTIFICATE-----Generated at Sat Apr 12 15:58:00 2025 by rpki-client