$ rpki-client -vvf rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.mft File: 3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.mft (raw, json) Hash identifier: drGHAYutnFI1Msyp3VkYyUW1/HsdmIhBNFKD5QuoQ14= Subject key identifier: 20:8F:9B:29:2F:54:DB:23:83:90:6B:F0:EC:BC:0F:91:9E:C2:2F:16 Authority key identifier: 3A:7A:08:E1:E3:3E:38:B8:2F:E4:69:E9:4F:06:C3:17:4B:5F:8C:F9 Certificate issuer: /CN=3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9 Certificate serial: 417E2BB634A8B0A2FBA1BFFCEF1732102CFD93E9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.cer Subject info access: rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.mft Manifest number: 01F0 Signing time: Sat 12 Apr 2025 08:57:11 +0000 Manifest this update: Sat 12 Apr 2025 08:52:11 +0000 Manifest next update: Sun 13 Apr 2025 10:18:11 +0000 Files and hashes: 1: 323830343a376262633a3a2f33322d313238203d3e20323731343531.roa (hash: kMnD+RyvuJ0NL+O9RGy/c5aIAQvWBC3Y02pHCInQNkM=) 2: 3138312e3137342e3234302e302f32322d3332203d3e20323731343531.roa (hash: xQm2PYvgNI75n8ZKaEiMNbnP1wrcZYMwPXPGeAGlycY=) 3: 3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.crl (hash: A7mmsbLuGm0W1Stx7WPgaSD0JrtdkyLa9rHCZ++6OxM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.crl rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 10:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7e:2b:b6:34:a8:b0:a2:fb:a1:bf:fc:ef:17:32:10:2c:fd:93:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9 Validity Not Before: Apr 12 08:52:11 2025 GMT Not After : Apr 13 10:18:11 2025 GMT Subject: CN=208F9B292F54DB2383906BF0ECBC0F919EC22F16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:9e:aa:2b:24:5c:7c:8e:eb:01:62:6a:d0: 32:13:d4:99:6d:f5:9c:32:9d:bc:0a:fe:5d:75:23: 67:20:27:9a:d6:6f:b9:13:1a:69:9a:4e:b1:e9:d2: 1d:ef:d4:c9:cd:98:2f:6f:b5:9c:1b:6c:39:2e:d0: 6f:9e:2b:b4:f8:db:f1:27:45:65:6e:f1:74:48:14: 15:d9:87:42:f0:45:b4:2b:f7:9d:af:e9:08:06:cf: 6e:bd:5d:e4:95:51:d7:98:7e:19:ce:fd:01:c3:d2: 3f:78:ac:cc:59:fa:42:7a:39:64:ea:94:8a:07:80: c4:e0:ac:10:c9:cd:50:55:e8:9d:35:14:e4:90:60: 29:a7:59:ab:63:f3:4d:c5:3a:9a:8a:f7:49:7b:ef: a0:ac:03:24:da:3d:93:53:46:1b:d0:ca:76:c5:87: 75:f0:fe:53:5c:31:91:fc:a5:83:43:6e:bb:16:2b: a4:a3:05:35:ee:eb:51:99:4e:e4:71:88:dc:4a:95: 7f:0f:05:2e:ff:37:62:1d:b8:68:1d:79:c2:2a:57: be:45:8a:f9:40:0b:bf:e9:fa:4f:a5:1a:6d:c2:0b: fa:58:d0:3e:3b:71:04:81:2f:88:3c:ec:13:77:97: 3d:45:ef:17:20:4f:81:a5:34:0a:be:df:85:e4:51: 78:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8F:9B:29:2F:54:DB:23:83:90:6B:F0:EC:BC:0F:91:9E:C2:2F:16 X509v3 Authority Key Identifier: keyid:3A:7A:08:E1:E3:3E:38:B8:2F:E4:69:E9:4F:06:C3:17:4B:5F:8C:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ce:b1:4b:ba:c4:7a:74:c1:25:be:6d:a9:d5:70:ba:ae:a4: 89:cb:e7:89:23:eb:46:c0:ce:84:86:02:2b:c2:60:d9:5f:59: 91:da:21:3b:6b:e7:b1:af:e3:b4:59:62:d9:df:7a:a0:35:59: c9:d2:04:86:af:06:6f:1b:79:5e:b8:a2:48:3a:bb:dd:28:7f: f4:13:82:90:b0:e6:38:ef:80:1a:83:51:5b:bc:1c:f5:a6:e8: 42:84:47:c4:33:94:27:5f:bb:14:8d:1e:1c:27:a4:f6:0d:c1: df:af:02:ef:c0:40:ee:74:f2:43:4b:8a:13:8f:3d:e3:ae:74: 96:b8:42:d8:d4:97:40:7d:a9:6a:6e:e8:48:81:e6:3c:8a:8b: 55:64:a4:38:d4:2c:2e:f7:07:8e:65:ff:e5:67:47:61:f6:8f: ab:b2:53:a3:cc:8f:3e:9c:0c:e2:9b:53:93:60:68:70:d3:83: ab:67:5f:4b:89:29:15:fa:0c:dd:03:62:9b:6f:11:6d:f9:a8: 7d:1e:56:f1:72:ca:a2:94:4e:65:26:68:61:93:e7:e0:60:9f: 94:d7:7b:3b:8e:83:38:7b:1b:c0:86:ec:f7:96:46:a6:c1:0e: 20:7d:85:72:3f:50:fb:de:58:f3:f3:ca:ba:4c:ec:95:c1:d3: b3:d9:46:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQX4rtjSosKL7ob/87xcyECz9k+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E3QTA4RTFFMzNFMzhCODJGRTQ2OUU5NEYwNkMzMTc0 QjVGOENGOTAeFw0yNTA0MTIwODUyMTFaFw0yNTA0MTMxMDE4MTFaMDMxMTAvBgNV BAMTKDIwOEY5QjI5MkY1NERCMjM4MzkwNkJGMEVDQkMwRjkxOUVDMjJGMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12Z6qKyRcfI7rAWJq0DIT1Jlt 9ZwynbwK/l11I2cgJ5rWb7kTGmmaTrHp0h3v1MnNmC9vtZwbbDku0G+eK7T42/En RWVu8XRIFBXZh0LwRbQr952v6QgGz269XeSVUdeYfhnO/QHD0j94rMxZ+kJ6OWTq lIoHgMTgrBDJzVBV6J01FOSQYCmnWatj803FOpqK90l776CsAyTaPZNTRhvQynbF h3Xw/lNcMZH8pYNDbrsWK6SjBTXu61GZTuRxiNxKlX8PBS7/N2IduGgdecIqV75F ivlAC7/p+k+lGm3CC/pY0D47cQSBL4g87BN3lz1F7xcgT4GlNAq+34XkUXhPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUII+bKS9U2yODkGvw7LwPkZ7CLxYwHwYDVR0j BBgwFoAUOnoI4eM+OLgv5GnpTwbDF0tfjPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNnJVUlhXMjhtYjF4cjVLVlVKZ0g2b0xGNGNIamtXUlRQN0t1M0NNcDRL QTcvMS8zQTdBMDhFMUUzM0UzOEI4MkZFNDY5RTk0RjA2QzMxNzRCNUY4Q0Y5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBN0EwOEUxRTMzRTM4Qjgy RkU0NjlFOTRGMDZDMzE3NEI1RjhDRjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NnJVUlhXMjhtYjF4cjVLVlVKZ0g2b0xGNGNIamtXUlRQN0t1M0NNcDRLQTcvMS8z QTdBMDhFMUUzM0UzOEI4MkZFNDY5RTk0RjA2QzMxNzRCNUY4Q0Y5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF86xS7rEenTBJb5tqdVwuq6kicvniSPrRsDOhIYCK8Jg2V9ZkdohO2vnsa/j tFli2d96oDVZydIEhq8Gbxt5XriiSDq73Sh/9BOCkLDmOO+AGoNRW7wc9aboQoRH xDOUJ1+7FI0eHCek9g3B368C78BA7nTyQ0uKE4894650lrhC2NSXQH2pam7oSIHm PIqLVWSkONQsLvcHjmX/5WdHYfaPq7JTo8yPPpwM4ptTk2BocNODq2dfS4kpFfoM 3QNim28RbfmofR5W8XLKopROZSZoYZPn4GCflNd7O46DOHsbwIbs95ZGpsEOIH2F cj9Q+95Y8/PKukzslcHTs9lGMQ== -----END CERTIFICATE-----Generated at Sat Apr 12 17:45:30 2025 by rpki-client