$ rpki-client -vvf rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft File: CA09CE87D7962722451F9BB1B0BABEB641024526.mft (raw, json) Hash identifier: b41C+3EE4dB1BF8ba7WR+l6ie8r0GVYNN1+1ZuUnHAk= Subject key identifier: D3:86:5D:43:C3:43:0A:7C:92:05:4A:63:B9:C3:52:FE:9A:43:80:C3 Authority key identifier: CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26 Certificate issuer: /CN=CA09CE87D7962722451F9BB1B0BABEB641024526 Certificate serial: 0BB2622F43007135A056DF69BC07ACFBFD318BF1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer Subject info access: rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft Manifest number: A0 Signing time: Thu 10 Apr 2025 20:30:46 +0000 Manifest this update: Thu 10 Apr 2025 20:25:46 +0000 Manifest next update: Fri 11 Apr 2025 21:50:46 +0000 Files and hashes: 1: 3136382e3232382e3136342e302f32322d3234203d3e20323634393231.roa (hash: NKXUigyoNgvGw8sUtLKz4YtdCSr4kmNU60Zrw78lgfY=) 2: CA09CE87D7962722451F9BB1B0BABEB641024526.crl (hash: q7VhzFw99ngMlnc0g8SgRcD6B6c7LhTJB+5tpBuw1BU=) 3: 323830343a326666303a3a2f33322d3438203d3e20323634393231.roa (hash: hMF3hpHloqESzD4QlqhEjuvJdOxJcm128UKFYbCgFNs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 11 Apr 2025 21:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b2:62:2f:43:00:71:35:a0:56:df:69:bc:07:ac:fb:fd:31:8b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA09CE87D7962722451F9BB1B0BABEB641024526 Validity Not Before: Apr 10 20:25:46 2025 GMT Not After : Apr 11 21:50:46 2025 GMT Subject: CN=D3865D43C3430A7C92054A63B9C352FE9A4380C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:8b:e1:0d:30:af:a9:0a:ed:b0:59:be:b2: 8e:da:e2:9e:39:19:ac:b3:27:f3:73:d2:db:e0:cc: 9a:6b:d0:57:62:b7:3c:98:75:0f:b3:7e:1d:f6:5d: dc:5d:45:da:16:b4:71:ef:70:0c:9e:49:66:58:e2: 30:5f:58:b1:4e:0b:e4:ea:b1:97:48:b4:b1:0f:f3: 07:e8:ec:9e:c3:11:17:77:b7:e6:7b:cf:0c:09:29: 2b:6f:dc:57:c0:63:79:36:d0:30:30:b7:18:ae:cb: a4:c1:82:cd:6d:ac:45:88:ed:7d:43:94:6b:97:c6: 9a:36:34:f2:05:2c:b9:5e:6d:52:d1:ae:2d:82:02: 7a:27:1b:87:6c:34:47:21:ed:d2:ea:9e:3a:f5:39: 90:ad:50:a1:fc:0a:b5:3a:70:d8:4e:be:cf:fe:70: d8:96:0d:e1:9e:76:25:10:00:9e:a0:f5:f4:bb:ce: 9c:28:92:44:fd:9c:27:3a:91:e5:03:b3:d0:66:11: 5e:10:ab:79:0f:de:25:41:ed:30:bd:54:31:fc:89: 60:72:1d:b1:7e:d0:d4:17:6a:b9:66:25:2a:34:c0: d1:20:b0:0a:6a:ff:fe:f9:31:58:a9:b4:56:1c:df: 5b:b8:f7:d6:24:00:14:23:28:29:6c:13:7e:f3:27: 23:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:86:5D:43:C3:43:0A:7C:92:05:4A:63:B9:C3:52:FE:9A:43:80:C3 X509v3 Authority Key Identifier: keyid:CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ba:8d:20:43:46:cf:7b:68:d1:6e:89:ae:9a:7c:02:c0:5c: f2:30:aa:ef:6b:af:bd:b3:4b:97:50:da:98:9c:2f:9e:0c:06: fb:cc:88:ca:a4:75:e2:53:c1:d0:80:bd:6a:3c:fa:82:e9:9f: db:d2:ef:ca:d8:96:a2:08:0c:01:63:df:f7:eb:f0:1e:50:ff: 65:57:ed:e5:7f:0c:5f:33:65:ae:ef:eb:44:62:c8:e2:df:d8: cb:48:16:61:74:cd:a3:7f:ce:ed:c5:2c:1e:6b:40:bb:50:d0: 55:55:bd:08:7c:a3:12:5c:05:49:10:1e:0a:23:aa:c6:f9:a4: d9:e8:37:16:52:0c:72:33:ac:9a:f2:b8:15:0d:52:9f:b7:f1: 4a:b0:fe:11:fd:68:a7:3b:fc:c3:1e:d1:20:c5:b6:1c:84:d7: a1:51:f5:35:30:84:1b:b9:4a:d1:fe:ec:f3:d6:82:22:6b:44: 41:c9:05:52:02:b5:87:cd:57:de:7a:55:78:2a:14:da:1b:16: 8c:f8:a6:7f:be:7e:ca:68:80:81:8b:d7:6e:c2:34:e0:d3:0b: 27:6f:3a:9a:4c:ad:60:e1:99:2b:ab:38:40:c4:03:07:d6:c3: f9:f5:a0:51:8c:0d:b3:97:ba:8b:a5:68:5b:64:87:89:81:66: 1f:b5:e6:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUC7JiL0MAcTWgVt9pvAes+/0xi/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EwOUNFODdENzk2MjcyMjQ1MUY5QkIxQjBCQUJFQjY0 MTAyNDUyNjAeFw0yNTA0MTAyMDI1NDZaFw0yNTA0MTEyMTUwNDZaMDMxMTAvBgNV BAMTKEQzODY1RDQzQzM0MzBBN0M5MjA1NEE2M0I5QzM1MkZFOUE0MzgwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI4IvhDTCvqQrtsFm+so7a4p45 GayzJ/Nz0tvgzJpr0FditzyYdQ+zfh32XdxdRdoWtHHvcAyeSWZY4jBfWLFOC+Tq sZdItLEP8wfo7J7DERd3t+Z7zwwJKStv3FfAY3k20DAwtxiuy6TBgs1trEWI7X1D lGuXxpo2NPIFLLlebVLRri2CAnonG4dsNEch7dLqnjr1OZCtUKH8CrU6cNhOvs/+ cNiWDeGediUQAJ6g9fS7zpwokkT9nCc6keUDs9BmEV4Qq3kP3iVB7TC9VDH8iWBy HbF+0NQXarlmJSo0wNEgsApq//75MViptFYc31u499YkABQjKClsE37zJyNbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU04ZdQ8NDCnySBUpjucNS/ppDgMMwHwYDVR0j BBgwFoAUygnOh9eWJyJFH5uxsLq+tkECRSYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVRjbmFlblVoeXVrWmdWZVlaQVhCUEx2NHVqYk11c2ZaQ3FiNUMzR0ho ZVkvMS9DQTA5Q0U4N0Q3OTYyNzIyNDUxRjlCQjFCMEJBQkVCNjQxMDI0NTI2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMDlDRTg3RDc5NjI3MjI0 NTFGOUJCMUIwQkFCRUI2NDEwMjQ1MjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVRjbmFlblVoeXVrWmdWZVlaQVhCUEx2NHVqYk11c2ZaQ3FiNUMzR0hoZVkvMS9D QTA5Q0U4N0Q3OTYyNzIyNDUxRjlCQjFCMEJBQkVCNjQxMDI0NTI2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm7qNIENGz3to0W6Jrpp8AsBc8jCq72uvvbNLl1DamJwvngwG+8yIyqR14lPB 0IC9ajz6gumf29LvytiWoggMAWPf9+vwHlD/ZVft5X8MXzNlru/rRGLI4t/Yy0gW YXTNo3/O7cUsHmtAu1DQVVW9CHyjElwFSRAeCiOqxvmk2eg3FlIMcjOsmvK4FQ1S n7fxSrD+Ef1opzv8wx7RIMW2HITXoVH1NTCEG7lK0f7s89aCImtEQckFUgK1h81X 3npVeCoU2hsWjPimf75+ymiAgYvXbsI04NMLJ286mkytYOGZK6s4QMQDB9bD+fWg UYwNs5e6i6VoW2SHiYFmH7XmhQ== -----END CERTIFICATE-----Generated at Thu Apr 10 23:56:38 2025 by rpki-client