$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft File: 9BAD7480D68EE59406D3FBBE7F30557285587474.mft (raw, json) Hash identifier: Lp+NrF8sdGgHI5gu0Ot9qnOqF2tKd3v0j+29T8bi5yE= Subject key identifier: 54:85:48:EB:52:6C:FB:E6:13:43:10:4D:EA:12:75:45:E0:73:78:34 Authority key identifier: 9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74 Certificate issuer: /CN=9BAD7480D68EE59406D3FBBE7F30557285587474 Certificate serial: 20176D3591EAFD3742055ED81E946A3C03C1A0D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft Manifest number: 01F5 Signing time: Sat 12 Apr 2025 11:44:11 +0000 Manifest this update: Sat 12 Apr 2025 11:39:11 +0000 Manifest next update: Sun 13 Apr 2025 14:38:11 +0000 Files and hashes: 1: 323830343a323563303a3a2f33322d3332203d3e20323634333030.roa (hash: L06efUO1+vC2w7zP0ypGVVsEcp/3D2fU1pOY4umhEf4=) 2: 3137302e3234342e3131322e302f32322d3232203d3e20323634333030.roa (hash: 3Bhf53UxlegeRmPK19xaYrMRnKpA/2NUddq4Nia28JA=) 3: 3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa (hash: nePLrI7joRrgQbt2fVsGs3GZCbneiBCFymjlsXZNuSI=) 4: 9BAD7480D68EE59406D3FBBE7F30557285587474.crl (hash: TxgrjjmdlvkmRRuwX8lxlOy115flGE4xbiLBbiC25Kw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.crl rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 14:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:17:6d:35:91:ea:fd:37:42:05:5e:d8:1e:94:6a:3c:03:c1:a0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BAD7480D68EE59406D3FBBE7F30557285587474 Validity Not Before: Apr 12 11:39:11 2025 GMT Not After : Apr 13 14:38:11 2025 GMT Subject: CN=548548EB526CFBE61343104DEA127545E0737834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:16:3f:2f:9d:9f:21:e3:94:54:7b:54:b6:20: c4:43:dc:fd:3d:60:16:b4:d5:51:6e:f5:ad:31:cb: 53:b5:91:3d:93:00:19:09:ef:42:06:0d:c2:b4:50: e9:f3:f9:07:77:7f:8e:74:a4:da:8e:25:5b:b9:3e: d9:ec:c3:f0:0b:b1:47:37:ed:5a:97:71:58:70:32: fb:ab:6c:cd:a3:4d:1e:17:c3:06:c1:36:31:4c:ee: d0:47:b6:57:a8:78:80:89:31:42:69:96:0f:5a:bc: c8:61:e6:8f:35:c5:36:f9:28:d9:ea:2d:69:c4:27: 5c:24:99:d8:a2:a5:92:8c:5e:16:56:14:03:67:13: b1:82:3d:21:c6:4d:fd:22:bc:0f:07:2a:80:2b:bd: 9a:aa:ac:10:61:94:ec:18:04:d3:bc:e4:4c:a5:d0: 62:d8:7b:63:ac:e6:6b:09:31:6d:1b:1e:b2:4c:f1: af:07:e5:c7:ac:2f:79:9a:a2:26:c8:c6:ff:50:4b: e2:b0:44:d6:d1:67:3f:59:5d:ed:ff:fc:c5:45:ae: 68:cf:fb:3c:35:ea:b1:6b:ce:90:a0:6d:9e:df:a7: 0b:9b:4f:83:0d:14:48:e7:b8:16:d5:91:e4:34:92: b1:21:d9:27:4d:1b:a9:88:1c:cd:30:64:ac:4b:0f: 54:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:85:48:EB:52:6C:FB:E6:13:43:10:4D:EA:12:75:45:E0:73:78:34 X509v3 Authority Key Identifier: keyid:9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:1b:bf:55:af:b7:67:50:55:a3:85:61:19:d5:4e:15:b2:77: c7:8b:c6:1d:b5:6d:8a:3a:16:d4:55:cb:25:a0:15:f0:09:27: 88:22:c4:9a:d5:7e:c7:d0:c4:f3:03:ba:28:76:28:c7:f5:aa: 66:bf:c2:92:3c:65:ab:27:8a:da:ac:0b:92:5f:bf:02:1a:56: d2:0b:e2:1e:10:91:96:d0:c0:52:dd:47:91:b7:15:cd:3e:90: 1e:ca:91:6f:77:74:21:e5:b3:5f:31:8a:c4:a8:a1:ba:cb:40: db:d4:9f:55:56:34:8e:94:93:3e:3f:f1:ba:3c:25:74:70:60: e9:92:a7:aa:aa:d0:25:25:3a:98:b6:b0:b4:11:9b:f2:a9:5d: 39:d2:d7:ea:aa:eb:95:74:15:a4:73:55:7e:1d:77:55:1c:9b: 90:43:eb:fe:8f:e1:aa:12:1b:9b:3b:8c:99:3a:b1:a7:8c:90: 4b:bf:ad:61:92:05:06:26:88:39:d7:0c:a8:47:de:a0:1e:2b: 88:36:4e:05:3d:f4:8d:b7:c2:cb:f4:24:ba:2a:91:72:19:5e: df:18:cb:db:cd:bb:4a:9a:9d:81:f7:99:93:d1:43:35:d3:2f: b9:5c:49:59:30:41:52:e3:9e:b9:dd:f7:66:7a:4a:29:78:a5: 09:f6:50:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIBdtNZHq/TdCBV7YHpRqPAPBoNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJBRDc0ODBENjhFRTU5NDA2RDNGQkJFN0YzMDU1NzI4 NTU4NzQ3NDAeFw0yNTA0MTIxMTM5MTFaFw0yNTA0MTMxNDM4MTFaMDMxMTAvBgNV BAMTKDU0ODU0OEVCNTI2Q0ZCRTYxMzQzMTA0REVBMTI3NTQ1RTA3Mzc4MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfFj8vnZ8h45RUe1S2IMRD3P09 YBa01VFu9a0xy1O1kT2TABkJ70IGDcK0UOnz+Qd3f450pNqOJVu5Ptnsw/ALsUc3 7VqXcVhwMvurbM2jTR4XwwbBNjFM7tBHtleoeICJMUJplg9avMhh5o81xTb5KNnq LWnEJ1wkmdiipZKMXhZWFANnE7GCPSHGTf0ivA8HKoArvZqqrBBhlOwYBNO85Eyl 0GLYe2Os5msJMW0bHrJM8a8H5cesL3maoibIxv9QS+KwRNbRZz9ZXe3//MVFrmjP +zw16rFrzpCgbZ7fpwubT4MNFEjnuBbVkeQ0krEh2SdNG6mIHM0wZKxLD1TNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVIVI61Js++YTQxBN6hJ1ReBzeDQwHwYDVR0j BBgwFoAUm610gNaO5ZQG0/u+fzBVcoVYdHQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmIyMzV2eVhVN2ZEaVJRaVh4YldQTUpMUmFpczVmWEJrOEZKemRUZ0Rt eVQvMS85QkFENzQ4MEQ2OEVFNTk0MDZEM0ZCQkU3RjMwNTU3Mjg1NTg3NDc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCQUQ3NDgwRDY4RUU1OTQw NkQzRkJCRTdGMzA1NTcyODU1ODc0NzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmIyMzV2eVhVN2ZEaVJRaVh4YldQTUpMUmFpczVmWEJrOEZKemRUZ0RteVQvMS85 QkFENzQ4MEQ2OEVFNTk0MDZEM0ZCQkU3RjMwNTU3Mjg1NTg3NDc0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANRu/Va+3Z1BVo4VhGdVOFbJ3x4vGHbVtijoW1FXLJaAV8AkniCLEmtV+x9DE 8wO6KHYox/WqZr/CkjxlqyeK2qwLkl+/AhpW0gviHhCRltDAUt1HkbcVzT6QHsqR b3d0IeWzXzGKxKihustA29SfVVY0jpSTPj/xujwldHBg6ZKnqqrQJSU6mLawtBGb 8qldOdLX6qrrlXQVpHNVfh13VRybkEPr/o/hqhIbmzuMmTqxp4yQS7+tYZIFBiaI OdcMqEfeoB4riDZOBT30jbfCy/QkuiqRchle3xjL2827SpqdgfeZk9FDNdMvuVxJ WTBBUuOeud33ZnpKKXilCfZQdg== -----END CERTIFICATE-----Generated at Sat Apr 12 19:02:31 2025 by rpki-client