$ rpki-client -vvf rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.mft File: 4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.mft (raw, json) Hash identifier: sUI58cWfKgj0ywMF8w77+TjLbMZuvYkgLBxy7bzjoJY= Subject key identifier: D9:9E:19:A7:F9:36:BC:92:43:23:71:79:84:AA:E4:84:9D:35:1F:18 Authority key identifier: 4C:C4:6B:4C:FC:BD:D5:3A:EE:15:9E:5B:C8:51:E0:ED:26:BE:7D:3E Certificate issuer: /CN=4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E Certificate serial: 65A759F42DD80F1F550A9607FE1BDF3E98C54D22 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.cer Subject info access: rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.mft Manifest number: 01CA Signing time: Sun 20 Apr 2025 20:25:04 +0000 Manifest this update: Sun 20 Apr 2025 20:20:04 +0000 Manifest next update: Mon 21 Apr 2025 23:03:04 +0000 Files and hashes: 1: 323830343a353138633a3a2f33322d313238203d3e20323638343539.roa (hash: 6K6iMsUZmD1bzSwNNHPV27WKEFqauQx1mVYoW8cqseY=) 2: 34352e3136312e3132382e302f32322d3332203d3e20323638343539.roa (hash: T58k89drTYVXawl6VI0Iw0BxZcZnKBt8cBAKDMEi5C8=) 3: 4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.crl (hash: pqqHcU5D5fsU85nEodukexzqIE/gOe0J+ae7fz4f/WM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.crl rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Apr 2025 23:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a7:59:f4:2d:d8:0f:1f:55:0a:96:07:fe:1b:df:3e:98:c5:4d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E Validity Not Before: Apr 20 20:20:04 2025 GMT Not After : Apr 21 23:03:04 2025 GMT Subject: CN=D99E19A7F936BC924323717984AAE4849D351F18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:91:2a:b2:6a:f9:0a:40:da:f5:d4:6e:08: 3f:83:55:4f:bb:c4:cb:c0:90:9e:ae:54:02:59:35: be:c8:6e:99:b4:ca:fe:b3:b3:47:85:30:31:ba:73: ad:7c:f8:93:18:61:8e:10:6e:dc:b9:8f:7d:ba:da: 97:31:1a:7b:04:ae:4f:db:98:7a:de:75:3e:27:16: 75:ef:70:a0:c1:43:3b:45:7e:a7:e4:78:68:65:70: c8:09:8c:48:16:4a:37:fd:67:6e:10:a6:38:fe:de: de:1a:77:f4:c1:d8:fb:fe:d7:89:e7:0c:2a:6c:5d: bb:31:60:7b:8f:f3:33:f8:81:39:8a:58:e9:2f:1e: 01:95:6e:76:a1:9c:29:74:5f:16:36:7b:df:a0:50: cf:d0:c5:63:5e:fd:20:75:4f:79:78:b8:5a:76:b0: 65:ec:66:c2:1f:35:66:ae:5d:c6:b4:a2:ff:31:b5: c6:cf:30:06:bb:f6:70:71:41:6a:56:83:de:73:9f: 5f:19:d0:11:6a:a7:08:eb:66:30:dd:40:b8:ec:1f: ab:c0:de:c9:ed:1d:01:db:25:f4:d8:3d:95:28:f3: bb:8a:93:44:63:98:3b:02:34:71:9e:24:ca:f6:a7: e9:52:b4:e5:fd:4c:b2:fb:10:c9:01:0e:c8:a7:fe: 3b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9E:19:A7:F9:36:BC:92:43:23:71:79:84:AA:E4:84:9D:35:1F:18 X509v3 Authority Key Identifier: keyid:4C:C4:6B:4C:FC:BD:D5:3A:EE:15:9E:5B:C8:51:E0:ED:26:BE:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/1/4CC46B4CFCBDD53AEE159E5BC851E0ED26BE7D3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:0f:67:45:1f:0a:d6:84:cd:43:97:46:f1:45:13:d0:21:05: 60:ff:c0:8b:1e:48:d9:82:a7:94:17:b4:cd:85:70:4c:e4:b2: cb:a4:74:e1:39:48:1e:51:7f:52:0e:3f:65:69:fd:07:75:2c: 79:e2:a9:d3:69:9a:43:7b:ac:0d:29:a3:d3:32:f5:89:39:57: 0d:f7:f4:73:66:bb:c6:b4:f4:f8:81:d8:b1:92:69:88:28:5b: b4:39:2a:bf:99:56:7f:c7:54:b3:95:e3:78:11:ce:e7:ac:4c: bd:6a:8d:56:c0:97:06:aa:de:88:a2:67:5c:85:71:07:55:3e: dd:12:da:ce:0c:76:06:e9:36:bc:53:c2:f6:61:f2:e8:03:be: 7b:6a:32:03:9a:85:37:56:4d:41:b8:b6:7f:2e:54:5a:de:d9: 02:82:4e:21:2d:a9:f9:11:ce:5d:24:28:32:99:98:04:c4:16: 81:1c:5d:98:50:6a:10:8f:00:21:04:ff:2e:65:02:f5:6e:29: 90:16:47:6c:6e:c7:a6:85:39:89:9a:00:93:7b:3b:37:7f:63: f6:8d:ba:3a:9b:61:35:94:18:ff:b8:b5:79:03:8f:b9:be:0d: 83:9f:cb:8f:64:ea:91:0c:67:78:61:de:96:03:6d:d8:bb:e4: ea:54:80:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZadZ9C3YDx9VCpYH/hvfPpjFTSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENDNDZCNENGQ0JERDUzQUVFMTU5RTVCQzg1MUUwRUQy NkJFN0QzRTAeFw0yNTA0MjAyMDIwMDRaFw0yNTA0MjEyMzAzMDRaMDMxMTAvBgNV BAMTKEQ5OUUxOUE3RjkzNkJDOTI0MzIzNzE3OTg0QUFFNDg0OUQzNTFGMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgpEqsmr5CkDa9dRuCD+DVU+7 xMvAkJ6uVAJZNb7Ibpm0yv6zs0eFMDG6c618+JMYYY4Qbty5j3262pcxGnsErk/b mHredT4nFnXvcKDBQztFfqfkeGhlcMgJjEgWSjf9Z24Qpjj+3t4ad/TB2Pv+14nn DCpsXbsxYHuP8zP4gTmKWOkvHgGVbnahnCl0XxY2e9+gUM/QxWNe/SB1T3l4uFp2 sGXsZsIfNWauXca0ov8xtcbPMAa79nBxQWpWg95zn18Z0BFqpwjrZjDdQLjsH6vA 3sntHQHbJfTYPZUo87uKk0RjmDsCNHGeJMr2p+lStOX9TLL7EMkBDsin/jsRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2Z4Zp/k2vJJDI3F5hKrkhJ01HxgwHwYDVR0j BBgwFoAUTMRrTPy91TruFZ5byFHg7Sa+fT4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0V5djZ5TVdna2I2ZDFZb0Y2NVZVaXhUZEIzZWVEQmtLRUFyNjdwd25X eXMvMS80Q0M0NkI0Q0ZDQkRENTNBRUUxNTlFNUJDODUxRTBFRDI2QkU3RDNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDQzQ2QjRDRkNCREQ1M0FF RTE1OUU1QkM4NTFFMEVEMjZCRTdEM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0V5djZ5TVdna2I2ZDFZb0Y2NVZVaXhUZEIzZWVEQmtLRUFyNjdwd25XeXMvMS80 Q0M0NkI0Q0ZDQkRENTNBRUUxNTlFNUJDODUxRTBFRDI2QkU3RDNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmQ9nRR8K1oTNQ5dG8UUT0CEFYP/Aix5I2YKnlBe0zYVwTOSyy6R04TlIHlF/ Ug4/ZWn9B3UseeKp02maQ3usDSmj0zL1iTlXDff0c2a7xrT0+IHYsZJpiChbtDkq v5lWf8dUs5XjeBHO56xMvWqNVsCXBqreiKJnXIVxB1U+3RLazgx2Buk2vFPC9mHy 6AO+e2oyA5qFN1ZNQbi2fy5UWt7ZAoJOIS2p+RHOXSQoMpmYBMQWgRxdmFBqEI8A IQT/LmUC9W4pkBZHbG7HpoU5iZoAk3s7N39j9o26OpthNZQY/7i1eQOPub4Ng5/L j2TqkQxneGHelgNt2Lvk6lSAmQ== -----END CERTIFICATE-----Generated at Mon Apr 21 04:08:09 2025 by rpki-client