$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.mft File: 3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.mft (raw, json) Hash identifier: ZmeTSlNO4aCiFPBEm667JhveLnYxs6FoBfqrhvk8flA= Subject key identifier: 76:62:C7:01:36:7F:C3:AF:01:EC:B6:B9:6D:F9:CF:F4:60:E1:72:36 Authority key identifier: 3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF Certificate issuer: /CN=3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF Certificate serial: 5503A973E356266C1DE69AF1F35F573AB7321E86 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer Subject info access: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.mft Manifest number: 12 Signing time: Wed 19 Feb 2025 21:42:10 +0000 Manifest this update: Wed 19 Feb 2025 21:37:10 +0000 Manifest next update: Fri 21 Feb 2025 01:03:10 +0000 Files and hashes: 1: 34352e3136392e32352e302f32342d3234203d3e20323638303931.roa (hash: +tYUkof60PwGOAlPnJMU7Uq6Ua1Sd376LkWwm2jlo1U=) 2: 323830343a353764633a3a2f33332d3333203d3e20323638303931.roa (hash: bZLdn4tlKCjIP4Nhxd+LeV3jhs1JdxOWhYJqNDLSFFk=) 3: 34352e3136392e32342e302f32332d3233203d3e20323638303931.roa (hash: jcFuK1q0OWDIRa2Sy8xc62lFtEizp3+SG1b6YjO6ThY=) 4: 323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa (hash: Nvr4bicixCDJK9lSN0EmOQFMTBz5G8YfJFgKfgqQD08=) 5: 3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.crl (hash: 1keFhE5BEgig7PX90WpE0usQOJeF1mm1PJN7Ae9HKR0=) 6: 34352e3136392e32342e302f32342d3234203d3e20323638303931.roa (hash: Z9f/ubw5JSEsPIWhy+WmxunSIaZaRRY0FKnkiG1UnLw=) 7: 323830343a353764633a633030303a3a2f33342d3334203d3e20323638303931.roa (hash: G+TKJ6Fu/xLQDVzMocDxabF7GHbzKuGLhJJ4eM/kI/4=) 8: 323830343a353764633a383030303a3a2f33332d3333203d3e20323638303931.roa (hash: qqu8GYvHENpe3cfHPZrbviRAd1peUW3PPy0ht7oVCPw=) 9: 34352e3136392e32372e302f32342d3234203d3e20323638303931.roa (hash: QZ1czFjp/KYCDVWwmY9BJJWCgMum9qtWeDXC508grAU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.crl rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 21 Feb 2025 01:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:03:a9:73:e3:56:26:6c:1d:e6:9a:f1:f3:5f:57:3a:b7:32:1e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF Validity Not Before: Feb 19 21:37:10 2025 GMT Not After : Feb 21 01:03:10 2025 GMT Subject: CN=7662C701367FC3AF01ECB6B96DF9CFF460E17236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d0:41:6a:71:3f:71:10:2c:c4:01:54:4c:1c: c0:69:9e:3e:07:b5:a7:92:7f:e2:11:3c:58:2e:fe: 8b:3d:e0:2b:ee:f8:73:0d:71:74:73:7c:6b:ff:89: 2e:8d:de:99:ba:b4:85:65:f0:9f:00:4c:1c:ee:3f: 99:9f:df:1b:9b:45:c3:cf:b5:76:e1:44:23:88:69: 11:5b:a9:ad:c0:45:08:07:2a:d0:c6:9d:aa:60:5c: 37:67:92:3e:03:b2:f2:18:c8:33:a0:5b:cd:af:08: 7a:38:c8:15:cb:70:a2:6f:98:fb:20:cb:48:10:34: 1e:ac:a2:ee:ba:97:c3:43:3e:af:4b:92:05:a2:bf: 70:f8:31:25:1f:d3:2f:38:54:aa:92:55:ff:e3:ff: b8:6b:b2:49:b5:27:70:29:e9:df:0f:d8:dd:a8:3d: 32:aa:c0:ff:fa:0d:4b:21:d1:2c:6e:95:f1:44:c4: 50:5e:b6:2e:c0:e1:4f:34:4d:a6:12:68:aa:b1:fb: 8f:84:6a:32:0c:b7:02:62:3e:28:d7:f9:24:4b:13: da:ee:ba:5a:98:47:54:a6:96:ef:8a:ac:4c:16:c4: d6:7f:95:1d:c2:20:ce:90:64:ea:44:96:ff:37:84: f9:54:d5:1d:63:5f:ff:a4:7a:05:b6:dd:4a:b8:d1: ef:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:62:C7:01:36:7F:C3:AF:01:EC:B6:B9:6D:F9:CF:F4:60:E1:72:36 X509v3 Authority Key Identifier: keyid:3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1a:23:3f:b5:35:8c:9c:a8:ec:50:7f:54:a6:cf:88:1f:48: d3:39:c4:ce:ce:fa:8b:7a:8e:ab:9c:b6:01:32:27:f0:9b:1d: 1d:d0:bb:b3:d5:9d:a4:6a:2f:5e:6a:70:5e:96:cd:9c:a9:0b: 65:85:ee:fa:1f:68:d3:6f:fe:82:8c:f5:c8:2f:54:6a:54:31: d5:68:5f:55:51:26:3c:68:9e:14:70:e8:de:64:fe:85:fd:d6: 95:5c:01:04:eb:73:f8:37:be:e6:68:35:be:ea:08:b8:dd:f1: 67:bf:a9:c9:94:93:95:46:79:98:2c:75:b8:ee:10:09:0e:10: 5c:48:a4:f5:f8:fd:1a:69:b8:e6:77:71:ef:01:47:c3:7c:a3: 31:74:86:e0:31:c9:0d:e3:7a:fa:57:94:24:19:8c:2a:25:75: 09:04:0f:f2:7e:1d:f5:ba:71:ab:f1:80:e1:aa:ef:df:cb:a0: ee:b3:75:d2:67:b2:46:92:82:86:59:1c:d4:5d:06:b6:8a:4d: 83:ae:06:14:e5:46:ba:97:22:38:1d:1c:a8:c7:fb:d1:3f:8f: 7f:47:c2:0c:69:ab:74:b9:c8:b1:ac:e3:62:49:87:fa:af:73: 93:dc:40:9c:38:6a:f4:64:77:b5:39:47:01:ce:be:bb:d8:4f: 1a:98:53:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVQOpc+NWJmwd5prx819XOrcyHoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5RjcyQjlENEU3Q0E3RUVGNEZENkVBRjA3MDMyMEEx ODYwOUVGRjAeFw0yNTAyMTkyMTM3MTBaFw0yNTAyMjEwMTAzMTBaMDMxMTAvBgNV BAMTKDc2NjJDNzAxMzY3RkMzQUYwMUVDQjZCOTZERjlDRkY0NjBFMTcyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa0EFqcT9xECzEAVRMHMBpnj4H taeSf+IRPFgu/os94Cvu+HMNcXRzfGv/iS6N3pm6tIVl8J8ATBzuP5mf3xubRcPP tXbhRCOIaRFbqa3ARQgHKtDGnapgXDdnkj4DsvIYyDOgW82vCHo4yBXLcKJvmPsg y0gQNB6sou66l8NDPq9LkgWiv3D4MSUf0y84VKqSVf/j/7hrskm1J3Ap6d8P2N2o PTKqwP/6DUsh0SxulfFExFBeti7A4U80TaYSaKqx+4+EajIMtwJiPijX+SRLE9ru ulqYR1Smlu+KrEwWxNZ/lR3CIM6QZOpElv83hPlU1R1jX/+kegW23Uq40e8HAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdmLHATZ/w68B7La5bfnP9GDhcjYwHwYDVR0j BBgwFoAUPJ9yudTnyn7vT9bq8HAyChhgnv8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2E4S1ROYVJMZlMxZ1I5eDQ5cHV1Ymt0OXpuZk1OaHVlS2gyVmVXSzVn RTgvMC8zQzlGNzJCOUQ0RTdDQTdFRUY0RkQ2RUFGMDcwMzIwQTE4NjA5RUZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDOUY3MkI5RDRFN0NBN0VF RjRGRDZFQUYwNzAzMjBBMTg2MDlFRkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2E4S1ROYVJMZlMxZ1I5eDQ5cHV1Ymt0OXpuZk1OaHVlS2gyVmVXSzVnRTgvMC8z QzlGNzJCOUQ0RTdDQTdFRUY0RkQ2RUFGMDcwMzIwQTE4NjA5RUZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjBojP7U1jJyo7FB/VKbPiB9I0znEzs76i3qOq5y2ATIn8JsdHdC7s9WdpGov XmpwXpbNnKkLZYXu+h9o02/+goz1yC9UalQx1WhfVVEmPGieFHDo3mT+hf3WlVwB BOtz+De+5mg1vuoIuN3xZ7+pyZSTlUZ5mCx1uO4QCQ4QXEik9fj9Gmm45ndx7wFH w3yjMXSG4DHJDeN6+leUJBmMKiV1CQQP8n4d9bpxq/GA4arv38ug7rN10meyRpKC hlkc1F0GtopNg64GFOVGupciOB0cqMf70T+Pf0fCDGmrdLnIsazjYkmH+q9zk9xA nDhq9GR3tTlHAc6+u9hPGphT8w== -----END CERTIFICATE-----Generated at Thu Feb 20 17:51:28 2025 by rpki-client