$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft File: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft (raw, json) Hash identifier: rbKQk0sgVJlBOG13NOqyP1bysV10r5BE4d372Bjv3Uo= Subject key identifier: 71:05:A4:83:91:FE:B9:3E:91:9C:59:B6:CD:4E:E5:2F:9F:6E:55:3C Authority key identifier: CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 Certificate issuer: /CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Certificate serial: 40EE71FE4F143063365CD493D4AB4E80A03FBA2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject info access: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft Manifest number: 01EC Signing time: Sun 06 Apr 2025 12:31:40 +0000 Manifest this update: Sun 06 Apr 2025 12:26:40 +0000 Manifest next update: Mon 07 Apr 2025 14:52:40 +0000 Files and hashes: 1: 34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa (hash: gE/DdB9YOblUsoK0HG9wnPd3YKHH2DbykTyw5B7/wBQ=) 2: 323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (hash: JKjEt0hETRYlcDbmWQLZvhZ9xRQwxepiQuRghmhAfoA=) 3: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl (hash: IfYAngArfv5aGW5KjI3xxcfUt6O42ILk/jZ4f+5iASk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 14:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ee:71:fe:4f:14:30:63:36:5c:d4:93:d4:ab:4e:80:a0:3f:ba:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Validity Not Before: Apr 6 12:26:40 2025 GMT Not After : Apr 7 14:52:40 2025 GMT Subject: CN=7105A48391FEB93E919C59B6CD4EE52F9F6E553C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:58:4e:cb:d5:08:78:95:fa:dc:ff:45:b1: 38:7f:95:bb:f2:92:46:6a:4a:d6:1b:2b:5c:04:ed: 68:a8:1d:6a:05:03:29:b0:60:f1:23:5a:65:a2:63: f2:92:6e:69:61:76:8d:3a:23:9f:db:21:ca:42:61: e8:b0:e5:ef:b4:58:64:25:e2:79:6b:c2:d9:43:08: 08:fa:13:b6:d3:9d:14:57:a0:0e:a0:43:0c:b9:83: c0:90:18:bb:82:d4:e7:2e:fc:58:4c:e2:02:50:2f: b8:73:4a:be:5b:a4:da:d4:aa:06:47:65:ff:3c:50: 0e:70:91:fd:bf:c4:e7:f2:ee:92:ac:d9:08:35:a8: 51:32:97:15:b8:64:df:67:9f:3d:13:0b:db:5f:cf: ac:34:0b:73:4d:0f:d1:0b:1e:49:b5:b7:41:31:8e: 59:bc:e1:8b:ae:c9:0f:96:bf:c8:c5:a5:9c:8f:4b: ee:57:f8:71:99:d3:ca:1e:76:0c:eb:c0:69:e8:51: b9:85:11:bb:37:17:a1:0a:5b:56:78:34:b2:89:aa: 3e:b6:ef:1d:b6:2d:4d:f5:b3:4c:f7:39:ff:64:0b: f3:72:3c:f1:95:17:37:df:70:07:86:09:67:c5:10: 55:a6:9b:c1:48:f9:2b:7a:3f:93:41:cd:e8:7e:08: 0d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:05:A4:83:91:FE:B9:3E:91:9C:59:B6:CD:4E:E5:2F:9F:6E:55:3C X509v3 Authority Key Identifier: keyid:CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:75:1b:4c:50:30:ba:43:f1:fd:54:ce:85:47:39:bd:43:da: d4:30:49:5b:03:96:dd:76:07:96:fc:ce:4e:6a:4a:3f:6e:a2: c3:e9:c1:6a:e1:aa:3a:17:f6:eb:81:9d:1b:eb:c9:08:09:d2: 1c:9d:89:f6:72:03:fe:a6:8f:85:2f:0e:b0:2e:b7:a7:26:6f: f3:9b:1e:72:43:af:1b:5b:78:23:56:6e:60:0c:28:42:a4:11: 7c:c5:e8:ed:00:d9:0c:e4:37:7e:b3:1d:63:36:15:85:c2:fe: 1d:80:18:83:34:71:01:18:a3:de:21:b8:d0:f3:0e:8d:2b:a2: f8:c8:89:1d:ea:b9:81:ab:4a:35:3e:6d:99:93:f9:11:dc:bc: 6a:a3:6c:de:a1:ec:ed:b8:2f:c2:d3:94:33:9d:1b:f4:70:e2: a5:b1:5c:b9:c6:eb:cc:08:03:2c:63:ef:bb:a3:67:48:83:90: 64:ed:0d:71:ed:93:86:31:8b:f1:8d:c8:61:fb:0e:75:6e:55: d1:64:f4:89:96:c1:db:e6:9a:2f:03:ab:49:bf:59:7f:8a:61: 88:ce:d3:32:11:0b:3b:6c:11:39:21:8f:da:53:34:23:e6:05: 46:20:ae:0b:01:21:8c:ab:43:6e:71:0b:c7:b8:d0:01:46:a2: 77:aa:04:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQO5x/k8UMGM2XNST1KtOgKA/ui4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQzNEMzg5RUU2QkFCN0NDRDVGNjYwRDYzMEE4QkU4 RTFBRTA1MzAeFw0yNTA0MDYxMjI2NDBaFw0yNTA0MDcxNDUyNDBaMDMxMTAvBgNV BAMTKDcxMDVBNDgzOTFGRUI5M0U5MTlDNTlCNkNENEVFNTJGOUY2RTU1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Z1hOy9UIeJX63P9FsTh/lbvy kkZqStYbK1wE7WioHWoFAymwYPEjWmWiY/KSbmlhdo06I5/bIcpCYeiw5e+0WGQl 4nlrwtlDCAj6E7bTnRRXoA6gQwy5g8CQGLuC1Ocu/FhM4gJQL7hzSr5bpNrUqgZH Zf88UA5wkf2/xOfy7pKs2Qg1qFEylxW4ZN9nnz0TC9tfz6w0C3NND9ELHkm1t0Ex jlm84YuuyQ+Wv8jFpZyPS+5X+HGZ08oedgzrwGnoUbmFEbs3F6EKW1Z4NLKJqj62 7x22LU31s0z3Of9kC/NyPPGVFzffcAeGCWfFEFWmm8FI+St6P5NBzeh+CA3tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcQWkg5H+uT6RnFm2zU7lL59uVTwwHwYDVR0j BBgwFoAUz/w9OJ7murfM1fZg1jCovo4a4FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5 RFcvMS9DRkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRkMzRDM4OUVFNkJBQjdD Q0Q1RjY2MEQ2MzBBOEJFOEUxQUUwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5RFcvMS9D RkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIXUbTFAwukPx/VTOhUc5vUPa1DBJWwOW3XYHlvzOTmpKP26iw+nBauGqOhf2 64GdG+vJCAnSHJ2J9nID/qaPhS8OsC63pyZv85seckOvG1t4I1ZuYAwoQqQRfMXo 7QDZDOQ3frMdYzYVhcL+HYAYgzRxARij3iG40PMOjSui+MiJHeq5gatKNT5tmZP5 Edy8aqNs3qHs7bgvwtOUM50b9HDipbFcucbrzAgDLGPvu6NnSIOQZO0Nce2ThjGL 8Y3IYfsOdW5V0WT0iZbB2+aaLwOrSb9Zf4phiM7TMhELO2wROSGP2lM0I+YFRiCu CwEhjKtDbnELx7jQAUaid6oETg== -----END CERTIFICATE-----Generated at Sun Apr 6 23:30:37 2025 by rpki-client