$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft File: 4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft (raw, json) Hash identifier: GvWvK5bI8sMpu0M/a1m4ImjhwxfCZJWQFrYxD54kzJA= Subject key identifier: DB:CA:DA:C0:8A:39:FB:5E:8B:F3:B0:96:F7:2E:1D:98:5B:4C:D9:CD Authority key identifier: 4C:4D:6A:A5:7B:D3:A2:4F:77:06:C7:B6:5C:7C:8C:D5:9E:F5:CB:65 Certificate issuer: /CN=4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65 Certificate serial: 1B4649E71B2AFEE98C16D1B55C05FF9F9ADD0F17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer Subject info access: rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft Manifest number: 01D4 Signing time: Thu 17 Apr 2025 03:53:04 +0000 Manifest this update: Thu 17 Apr 2025 03:48:04 +0000 Manifest next update: Fri 18 Apr 2025 07:52:04 +0000 Files and hashes: 1: 323830343a353865303a3a2f33322d313238203d3e20323638313535.roa (hash: 3rn+DqXg6/wb20jVwMYcaH/vDfegviUIMLGDPuYvWsk=) 2: 34352e3137302e3135322e302f32322d3332203d3e20323638313535.roa (hash: +dlelXLTSXqNQoNW4JGA1Yjrci2+66mbhcxy+r/G87I=) 3: 4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl (hash: PswyZSMt30WD4xTGjUa/bAMR5kgKoHHxqig34Onme7o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 07:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:46:49:e7:1b:2a:fe:e9:8c:16:d1:b5:5c:05:ff:9f:9a:dd:0f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65 Validity Not Before: Apr 17 03:48:04 2025 GMT Not After : Apr 18 07:52:04 2025 GMT Subject: CN=DBCADAC08A39FB5E8BF3B096F72E1D985B4CD9CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8c:8d:f4:66:4f:54:61:81:ee:f9:c6:73:05: 01:92:b1:f8:5b:28:fb:6d:9c:30:2a:25:32:39:d2: c5:e9:85:6a:3f:16:d6:e7:af:3a:e5:d9:06:92:e6: aa:55:9d:43:a6:51:21:d2:45:99:92:25:be:b2:2b: ee:f8:38:f7:c4:3e:84:e4:e9:df:fd:0c:f0:fd:c0: e0:72:a0:f8:20:ad:73:4e:96:58:3d:77:9f:46:53: 11:c2:53:2a:bf:4f:d1:68:52:d6:6c:b8:d1:09:88: ee:e4:7f:b5:9e:5d:c9:a7:36:a7:0e:00:08:4e:71: 41:84:46:8e:37:49:8c:6b:bc:a4:5d:58:bf:ea:95: 22:5d:2d:9b:c5:ef:46:dc:d1:92:f3:c6:e1:28:a8: 79:5d:49:80:8c:8c:db:19:4d:7b:cf:bf:a0:c8:84: d1:f9:eb:b5:82:f5:a0:f6:f0:54:ad:66:a9:08:d5: 60:ee:9e:fa:96:ed:c6:8a:73:d9:a0:19:88:09:2f: 95:73:85:ea:f0:35:1a:ae:d0:e9:6e:73:0a:ce:c4: 5f:fb:9f:90:9e:23:dc:2c:cc:8b:4c:a3:8a:7a:22: b7:73:95:53:c1:c5:ce:ad:1e:54:a7:aa:61:a8:cc: ea:9b:f2:a7:08:52:d1:dd:26:99:50:1e:ec:fc:d0: c1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CA:DA:C0:8A:39:FB:5E:8B:F3:B0:96:F7:2E:1D:98:5B:4C:D9:CD X509v3 Authority Key Identifier: keyid:4C:4D:6A:A5:7B:D3:A2:4F:77:06:C7:B6:5C:7C:8C:D5:9E:F5:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/0/4C4D6AA57BD3A24F7706C7B65C7C8CD59EF5CB65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:77:6a:6e:67:0f:ee:b7:78:b6:05:84:76:c7:31:6b:6f:60: a7:f7:71:e3:44:a1:f2:80:f8:77:88:c5:5b:83:3e:fc:1c:3f: 0c:60:47:ec:b4:cf:57:76:f9:4a:6f:86:3b:59:0e:4a:d8:b2: 5c:01:82:e0:39:88:82:80:f3:97:25:52:a5:8a:4c:80:bc:3d: 64:b2:dd:7e:73:a3:99:50:e4:4d:a1:1a:1c:5b:1b:7a:f4:fc: 30:52:74:2d:47:5d:a8:1b:e6:0d:d8:99:48:84:96:e1:df:17: 7d:70:e1:4e:1d:25:dc:77:65:ba:4f:c5:90:6e:dc:e4:5f:97: ea:72:32:6b:37:7e:75:41:ce:c3:d2:55:b0:ed:82:07:df:55: 70:18:26:27:5a:c0:ef:1c:6c:e3:f0:20:22:89:8f:eb:74:95: 78:f7:81:12:e8:db:23:b1:55:fa:37:23:77:77:98:e6:93:7d: ad:2f:7e:8a:35:ac:77:0c:80:da:58:b3:79:ac:3f:df:aa:a5: ef:05:18:04:f0:64:82:ce:48:7c:0c:e2:3c:43:a3:39:4b:03: 73:19:b3:9c:42:03:3a:33:9a:57:f9:ab:ae:42:8c:d6:82:76: 46:6f:a1:03:f5:3f:a2:74:8c:8d:79:e9:b1:15:33:6d:6d:95: b2:f5:55:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUG0ZJ5xsq/umMFtG1XAX/n5rdDxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM0RDZBQTU3QkQzQTI0Rjc3MDZDN0I2NUM3QzhDRDU5 RUY1Q0I2NTAeFw0yNTA0MTcwMzQ4MDRaFw0yNTA0MTgwNzUyMDRaMDMxMTAvBgNV BAMTKERCQ0FEQUMwOEEzOUZCNUU4QkYzQjA5NkY3MkUxRDk4NUI0Q0Q5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnjI30Zk9UYYHu+cZzBQGSsfhb KPttnDAqJTI50sXphWo/Ftbnrzrl2QaS5qpVnUOmUSHSRZmSJb6yK+74OPfEPoTk 6d/9DPD9wOByoPggrXNOllg9d59GUxHCUyq/T9FoUtZsuNEJiO7kf7WeXcmnNqcO AAhOcUGERo43SYxrvKRdWL/qlSJdLZvF70bc0ZLzxuEoqHldSYCMjNsZTXvPv6DI hNH567WC9aD28FStZqkI1WDunvqW7caKc9mgGYgJL5VzherwNRqu0OlucwrOxF/7 n5CeI9wszItMo4p6IrdzlVPBxc6tHlSnqmGozOqb8qcIUtHdJplQHuz80MHfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU28rawIo5+16L87CW9y4dmFtM2c0wHwYDVR0j BBgwFoAUTE1qpXvTok93Bse2XHyM1Z71y2UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHVSV1RTVnJ0OXc1VUNZSlRWdktNWmM5RkVWVHEzdEhaWnlqNkRNblgz cnAvMC80QzRENkFBNTdCRDNBMjRGNzcwNkM3QjY1QzdDOENENTlFRjVDQjY1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDNEQ2QUE1N0JEM0EyNEY3 NzA2QzdCNjVDN0M4Q0Q1OUVGNUNCNjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHVSV1RTVnJ0OXc1VUNZSlRWdktNWmM5RkVWVHEzdEhaWnlqNkRNblgzcnAvMC80 QzRENkFBNTdCRDNBMjRGNzcwNkM3QjY1QzdDOENENTlFRjVDQjY1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADHdqbmcP7rd4tgWEdscxa29gp/dx40Sh8oD4d4jFW4M+/Bw/DGBH7LTPV3b5 Sm+GO1kOStiyXAGC4DmIgoDzlyVSpYpMgLw9ZLLdfnOjmVDkTaEaHFsbevT8MFJ0 LUddqBvmDdiZSISW4d8XfXDhTh0l3Hdluk/FkG7c5F+X6nIyazd+dUHOw9JVsO2C B99VcBgmJ1rA7xxs4/AgIomP63SVePeBEujbI7FV+jcjd3eY5pN9rS9+ijWsdwyA 2lizeaw/36ql7wUYBPBkgs5IfAziPEOjOUsDcxmznEIDOjOaV/mrrkKM1oJ2Rm+h A/U/onSMjXnpsRUzbW2VsvVVxg== -----END CERTIFICATE-----Generated at Thu Apr 17 20:21:28 2025 by rpki-client