$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft File: AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json) Hash identifier: VdhSWfeYYXXRToTUP/bYB1k99fIJzqbDP4rvcxhTobY= Subject key identifier: 14:AD:7A:1A:C0:33:F9:E1:49:09:E5:1D:F4:EA:15:D2:8C:C9:D9:1A Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Certificate serial: 3761ACB326403030D1D5EFE52D428AE42A5BB17F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft Manifest number: 01E9 Signing time: Fri 04 Apr 2025 14:30:00 +0000 Manifest this update: Fri 04 Apr 2025 14:25:00 +0000 Manifest next update: Sat 05 Apr 2025 17:42:00 +0000 Files and hashes: 1: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: G+9fnKDKYzXcNVDiQbyVgNQLvfSyrAWnEylFjOb1cKM=) 2: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: JHU7hFLVcz7KCri5GGmgpJSrExwyJApMd1LcVi/3ahc=) 3: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: g+h7ZeJQoiwltb4pTrWxNjM0uMiKUgQuoMSR90spDQE=) 4: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: KpGZQtYKZ8kLGWLpppcxxCh6FaroifNfZf7qb0ohJpM=) 5: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: XrgPqt2d+yXrgA5qVsA3hVOyOYJP6pNSPVOYcSw37As=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 17:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:61:ac:b3:26:40:30:30:d1:d5:ef:e5:2d:42:8a:e4:2a:5b:b1:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Validity Not Before: Apr 4 14:25:00 2025 GMT Not After : Apr 5 17:42:00 2025 GMT Subject: CN=14AD7A1AC033F9E14909E51DF4EA15D28CC9D91A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:d3:b2:0c:b8:81:8c:ec:80:0f:95:fc:d4: bb:6c:60:b6:f4:fc:4f:dc:c5:c8:cd:0f:d3:f6:df: f0:d7:db:94:80:f8:22:4d:f1:d4:08:4a:7b:1d:da: 26:64:d1:92:b2:1d:47:e4:b9:17:5f:3b:3f:45:ae: 10:db:60:39:56:ca:c5:14:0f:0c:3f:1a:70:40:6c: d8:ee:6e:53:65:d8:2b:67:71:fb:fe:14:e4:da:e9: c4:4f:fe:88:d5:d9:c3:54:fd:b9:fb:82:0f:97:b8: 72:71:70:62:25:59:a0:18:af:70:a5:5a:4f:0a:55: cf:6e:ad:a1:cd:aa:b0:e8:86:6a:8e:56:3d:37:e6: b1:50:a5:b0:51:3f:3b:74:f4:ea:da:a4:00:3e:41: 0a:af:ec:9f:f1:58:f5:97:13:21:d5:64:5d:79:ad: f0:a8:c1:11:85:2a:76:7c:eb:91:45:dd:87:f6:12: 75:96:8c:dc:d4:a3:fd:49:5d:fc:c3:dc:04:11:71: 10:9e:0d:1e:4e:20:a0:29:d5:73:b0:d6:e1:10:c8: 01:63:0b:46:1d:d0:0a:63:a1:54:08:ed:86:26:0b: 34:f5:37:cd:8f:76:ac:6d:dd:4f:f6:2c:99:45:4e: 43:de:93:62:13:65:91:b4:d9:64:2b:67:80:36:97: 63:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AD:7A:1A:C0:33:F9:E1:49:09:E5:1D:F4:EA:15:D2:8C:C9:D9:1A X509v3 Authority Key Identifier: keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0a:04:bf:33:d6:c2:d6:67:7b:45:dd:e8:02:ee:ba:91:09: 60:9a:ab:f3:5f:38:d1:80:2e:19:ad:a7:b8:73:d9:b9:7b:e3: 45:c7:00:ca:7e:3a:ff:a0:db:61:2d:db:2b:b9:aa:c7:52:07: cc:b4:40:ff:b1:c5:50:10:4b:99:b4:ac:0a:8b:a5:25:1f:0c: 55:13:78:82:1e:a2:86:4e:b5:10:fb:9e:8e:18:ba:f2:89:9e: e8:6f:be:46:2a:fb:88:2b:14:5e:7b:79:1d:e4:73:d3:f1:34: 23:6f:26:c1:a7:d8:78:0b:85:b1:9d:27:ee:b6:f0:3e:ef:45: 15:01:73:a3:9c:f6:ec:e9:0b:ba:f0:79:b0:aa:07:e0:5f:d5: 48:e9:ec:49:3d:ce:bf:1a:d2:67:e8:2f:48:00:c9:10:5a:51: b3:cb:c9:ba:c2:86:75:d2:a7:a8:a5:f4:79:ff:86:3a:83:a5: bb:4c:f6:6a:fc:58:54:cb:bf:df:16:09:db:09:4b:4b:0f:a2: cd:ee:a7:ca:7e:d7:48:9c:73:02:7b:04:61:94:25:bf:2e:5f: 23:37:32:84:f5:05:dc:e7:bb:2d:b1:36:8e:39:0e:91:c7:b2: 04:8e:fe:f6:02:ed:11:1d:96:69:ec:ff:82:03:cb:ae:89:e2: 7c:5f:46:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN2GssyZAMDDR1e/lLUKK5CpbsX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDNTI5RkIyNDNCNzc4MEEyMEIyN0EyQzRFNzNEQUY2 NUMyNTAyMTAeFw0yNTA0MDQxNDI1MDBaFw0yNTA0MDUxNzQyMDBaMDMxMTAvBgNV BAMTKDE0QUQ3QTFBQzAzM0Y5RTE0OTA5RTUxREY0RUExNUQyOENDOUQ5MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+BdOyDLiBjOyAD5X81LtsYLb0 /E/cxcjND9P23/DX25SA+CJN8dQISnsd2iZk0ZKyHUfkuRdfOz9FrhDbYDlWysUU Dww/GnBAbNjublNl2Ctncfv+FOTa6cRP/ojV2cNU/bn7gg+XuHJxcGIlWaAYr3Cl Wk8KVc9uraHNqrDohmqOVj035rFQpbBRPzt09OrapAA+QQqv7J/xWPWXEyHVZF15 rfCowRGFKnZ865FF3Yf2EnWWjNzUo/1JXfzD3AQRcRCeDR5OIKAp1XOw1uEQyAFj C0Yd0ApjoVQI7YYmCzT1N82Pdqxt3U/2LJlFTkPek2ITZZG02WQrZ4A2l2MrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFK16GsAz+eFJCeUd9OoV0ozJ2RowHwYDVR0j BBgwFoAUr8Up+yQ7d4CiCyeixOc9r2XCUCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQ UUIvMS9BRkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQzUyOUZCMjQzQjc3ODBB MjBCMjdBMkM0RTczREFGNjVDMjUwMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQUUIvMS9B RkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbgoEvzPWwtZne0Xd6ALuupEJYJqr81840YAuGa2nuHPZuXvjRccAyn46/6Db YS3bK7mqx1IHzLRA/7HFUBBLmbSsCoulJR8MVRN4gh6ihk61EPuejhi68ome6G++ Rir7iCsUXnt5HeRz0/E0I28mwafYeAuFsZ0n7rbwPu9FFQFzo5z27OkLuvB5sKoH 4F/VSOnsST3OvxrSZ+gvSADJEFpRs8vJusKGddKnqKX0ef+GOoOlu0z2avxYVMu/ 3xYJ2wlLSw+ize6nyn7XSJxzAnsEYZQlvy5fIzcyhPUF3Oe7LbE2jjkOkceyBI7+ 9gLtER2Waez/ggPLronifF9GFw== -----END CERTIFICATE-----Generated at Sat Apr 5 10:44:17 2025 by rpki-client