$ rpki-client -vvf rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.mft File: D027A3C3905699BE1B01BC2FAF77686EEA66C20A.mft (raw, json) Hash identifier: GqzGGLlZjUx7rdGVVgpipx8e4SK3PgDc89kpjafUkOM= Subject key identifier: 4C:56:98:0A:39:92:9A:B0:C0:96:BD:CE:5F:22:71:7F:95:8F:AB:22 Authority key identifier: D0:27:A3:C3:90:56:99:BE:1B:01:BC:2F:AF:77:68:6E:EA:66:C2:0A Certificate issuer: /CN=D027A3C3905699BE1B01BC2FAF77686EEA66C20A Certificate serial: 73632EEFAE3C2F5FB54015332B7691B29CA7039F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.cer Subject info access: rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.mft Manifest number: 16 Signing time: Mon 07 Apr 2025 03:01:21 +0000 Manifest this update: Mon 07 Apr 2025 02:56:21 +0000 Manifest next update: Tue 08 Apr 2025 04:02:21 +0000 Files and hashes: 1: 323830343a363531343a3a2f33322d313238203d3e20323639343637.roa (hash: nesYwlq+tPtmEyn0qFNn08s93URusWUJ4VYahxx4SFA=) 2: D027A3C3905699BE1B01BC2FAF77686EEA66C20A.crl (hash: uernAoV3Kxj/1vLyAUYboL8Op+4gGIldwELvln7FhBI=) 3: 34352e3138372e3134302e302f32322d3332203d3e20323639343637.roa (hash: 9HOolzBoXLsUuFMv6PED/vkvzNRIIY/qZDKarqxMqas=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.crl rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:63:2e:ef:ae:3c:2f:5f:b5:40:15:33:2b:76:91:b2:9c:a7:03:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D027A3C3905699BE1B01BC2FAF77686EEA66C20A Validity Not Before: Apr 7 02:56:21 2025 GMT Not After : Apr 8 04:02:21 2025 GMT Subject: CN=4C56980A39929AB0C096BDCE5F22717F958FAB22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:55:6a:03:cd:d6:ca:9a:08:31:3b:b6:44:cc: 25:ef:00:08:07:8c:2c:dd:eb:d2:c6:9d:0c:e1:d9: c8:b6:25:16:eb:da:89:1a:4f:40:f5:1b:d7:27:e5: 41:3e:31:60:00:5d:1c:10:c4:15:6d:a8:ee:60:d1: 00:1f:f3:e7:33:c0:ed:e8:90:b2:24:99:bb:e9:5f: 56:43:17:62:07:ae:c0:97:4f:29:8e:65:45:da:6a: 87:3b:28:41:3c:26:19:18:d3:d2:78:bb:94:a6:a8: d8:03:b1:13:88:e5:ba:3b:ba:5e:65:14:e9:3b:bc: 92:a3:64:fd:8a:63:58:a2:dd:62:69:a3:2d:e0:73: 12:8f:12:f1:e7:34:25:96:ec:5e:cc:b6:a1:a5:f5: e8:4a:b4:18:f5:c4:73:ff:eb:08:79:f3:80:6c:bb: ae:1b:54:50:59:de:b8:15:90:ec:d7:8a:38:97:ad: 42:48:70:71:7c:57:4d:70:85:7f:93:63:7b:77:8e: 56:c7:42:df:e9:39:d6:7d:5d:6b:aa:09:ba:05:dd: 9c:74:c3:d9:08:7f:1b:fa:01:6e:3d:99:1c:a6:b9: 08:e7:fc:b9:85:33:a7:c5:94:5e:13:e9:61:ff:51: bd:ce:1f:61:7a:ef:9e:a2:56:0d:06:eb:be:fa:4b: 3b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:56:98:0A:39:92:9A:B0:C0:96:BD:CE:5F:22:71:7F:95:8F:AB:22 X509v3 Authority Key Identifier: keyid:D0:27:A3:C3:90:56:99:BE:1B:01:BC:2F:AF:77:68:6E:EA:66:C2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/D027A3C3905699BE1B01BC2FAF77686EEA66C20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:2d:6f:5b:85:55:e3:a3:66:4a:4e:f4:48:5b:11:48:2e:7a: 56:02:9f:22:22:ce:be:4e:6d:80:27:e3:91:ee:63:c9:d7:68: d7:96:68:db:5d:56:0b:5c:77:f2:de:c9:65:35:42:58:40:1d: cc:cc:75:98:04:fb:14:6c:ce:fa:a3:34:5a:60:ba:70:44:58: 35:af:db:0d:ff:58:49:41:ba:c2:30:87:10:31:c7:fb:9d:5a: 80:6b:b8:f9:36:6e:72:b2:0d:16:ed:c7:be:6f:27:da:21:d8: 27:bb:a6:7c:62:aa:26:f0:09:4a:6a:d8:b0:8c:7d:91:05:dd: f6:56:50:38:20:a5:89:1d:5b:9f:4f:22:c6:de:78:29:fe:c0: 18:70:2b:87:16:69:ec:64:bc:86:f2:da:f5:be:90:13:d0:1b: b4:9a:d2:a7:62:66:db:e7:09:0b:24:60:79:e0:b1:1b:78:c4: c8:db:ac:5e:a2:c6:e0:a9:d1:56:2f:fc:40:36:71:ce:b0:e8: 5a:f1:97:b2:33:b7:5a:82:af:9f:38:b3:56:5e:7b:2c:0d:a8: 65:c8:2d:a6:80:bc:7b:e5:8b:65:28:58:5e:5d:3c:8f:32:b7: 57:68:e7:84:b9:d6:7d:42:60:e3:b4:d1:fe:56:a0:5b:f4:23: 2a:87:dc:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc2Mu7648L1+1QBUzK3aRspynA58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAyN0EzQzM5MDU2OTlCRTFCMDFCQzJGQUY3NzY4NkVF QTY2QzIwQTAeFw0yNTA0MDcwMjU2MjFaFw0yNTA0MDgwNDAyMjFaMDMxMTAvBgNV BAMTKDRDNTY5ODBBMzk5MjlBQjBDMDk2QkRDRTVGMjI3MTdGOTU4RkFCMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6VWoDzdbKmggxO7ZEzCXvAAgH jCzd69LGnQzh2ci2JRbr2okaT0D1G9cn5UE+MWAAXRwQxBVtqO5g0QAf8+czwO3o kLIkmbvpX1ZDF2IHrsCXTymOZUXaaoc7KEE8JhkY09J4u5SmqNgDsROI5bo7ul5l FOk7vJKjZP2KY1ii3WJpoy3gcxKPEvHnNCWW7F7MtqGl9ehKtBj1xHP/6wh584Bs u64bVFBZ3rgVkOzXijiXrUJIcHF8V01whX+TY3t3jlbHQt/pOdZ9XWuqCboF3Zx0 w9kIfxv6AW49mRymuQjn/LmFM6fFlF4T6WH/Ub3OH2F6756iVg0G6776SzvBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTFaYCjmSmrDAlr3OXyJxf5WPqyIwHwYDVR0j BBgwFoAU0Cejw5BWmb4bAbwvr3dobupmwgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2Myc0FWSFl2QnhuTnBWREFBMjhlYW5tSjlvZWdTWUNYVUc3NUtQR0h1 d2svMC9EMDI3QTNDMzkwNTY5OUJFMUIwMUJDMkZBRjc3Njg2RUVBNjZDMjBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwMjdBM0MzOTA1Njk5QkUx QjAxQkMyRkFGNzc2ODZFRUE2NkMyMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2Myc0FWSFl2QnhuTnBWREFBMjhlYW5tSjlvZWdTWUNYVUc3NUtQR0h1d2svMC9E MDI3QTNDMzkwNTY5OUJFMUIwMUJDMkZBRjc3Njg2RUVBNjZDMjBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmC1vW4VV46NmSk70SFsRSC56VgKfIiLOvk5tgCfjke5jyddo15Zo211WC1x3 8t7JZTVCWEAdzMx1mAT7FGzO+qM0WmC6cERYNa/bDf9YSUG6wjCHEDHH+51agGu4 +TZucrINFu3Hvm8n2iHYJ7umfGKqJvAJSmrYsIx9kQXd9lZQOCCliR1bn08ixt54 Kf7AGHArhxZp7GS8hvLa9b6QE9AbtJrSp2Jm2+cJCyRgeeCxG3jEyNusXqLG4KnR Vi/8QDZxzrDoWvGXsjO3WoKvnzizVl57LA2oZcgtpoC8e+WLZShYXl08jzK3V2jn hLnWfUJg47TR/lagW/QjKofcOg== -----END CERTIFICATE-----Generated at Mon Apr 7 04:25:41 2025 by rpki-client