$ rpki-client -vvf rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft File: CA9298E26EC7D83F990DD29EFD395097A928590F.mft (raw, json) Hash identifier: KUGL94PIGs6urwwcN8nhgNAE1e1bvUN5vk1QoB4tevc= Subject key identifier: CB:DB:37:F6:F0:8B:1B:24:BD:4D:30:39:61:8A:DC:32:7D:0A:EC:E7 Authority key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F Certificate issuer: /CN=CA9298E26EC7D83F990DD29EFD395097A928590F Certificate serial: 59578EDFB93F5592031B06F55AE30D6FC40D2500 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject info access: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft Manifest number: 011D Signing time: Wed 16 Apr 2025 03:44:58 +0000 Manifest this update: Wed 16 Apr 2025 03:39:58 +0000 Manifest next update: Thu 17 Apr 2025 04:14:58 +0000 Files and hashes: 1: 323830343a316165633a3a2f33322d3438203d3e203631363938.roa (hash: D4gDikxqDsVeC2Nk5fkAJu3epdejkNKVzJenlLXCHIw=) 2: 3133312e302e3136342e302f32322d3234203d3e203631363938.roa (hash: cirAaasu6EfpKysSqYLdkvU3mPEjtgroPBBXO7Qvj7A=) 3: CA9298E26EC7D83F990DD29EFD395097A928590F.crl (hash: EVW6rZPmIt0ubp1xzl2AckiP3Tz6vIu+idxdHWcJsf8=) 4: 3136382e3232372e38302e302f32322d3234203d3e203631363938.roa (hash: IiEN5Jt+IjiGA4rrpcidQwaTrr06LXFl6U2s56QvoZI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 17 Apr 2025 04:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:57:8e:df:b9:3f:55:92:03:1b:06:f5:5a:e3:0d:6f:c4:0d:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA9298E26EC7D83F990DD29EFD395097A928590F Validity Not Before: Apr 16 03:39:58 2025 GMT Not After : Apr 17 04:14:58 2025 GMT Subject: CN=CBDB37F6F08B1B24BD4D3039618ADC327D0AECE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:c8:b9:a4:ce:f3:12:6f:0f:f5:fa:9a:9d: 7e:5a:b9:9d:f5:8c:20:61:76:11:ab:5a:9c:0a:1e: d6:77:f4:1c:07:eb:65:7c:ba:82:88:8c:92:38:1d: b7:18:fe:dc:a6:10:f0:99:ef:0f:1f:69:4e:cf:5b: 32:15:bc:42:1d:a8:80:f3:48:7c:a7:9a:9a:ca:a0: 38:e9:7a:cb:29:d6:51:b2:35:ae:4c:7e:26:e9:b8: 60:1b:f5:dd:a0:91:f2:6f:a6:2e:e7:10:77:fe:57: 29:7b:8e:27:45:3d:6a:1d:81:8b:a0:04:2d:dc:5b: 8e:6a:8b:aa:ee:d4:ca:0c:3d:7a:57:c6:c3:1a:63: 40:9d:9b:e2:0c:c6:2b:9b:d9:cb:4f:a0:a4:43:99: 31:01:38:8a:ba:b1:b4:94:b8:25:08:53:0e:bf:d6: 8c:d2:e5:d5:a1:d6:b4:56:10:3e:75:86:ed:dd:b4: 42:03:11:9d:ec:01:93:ac:e6:f6:90:0e:ad:90:ea: 9e:fe:84:aa:8c:3e:62:20:ad:ee:ab:23:ba:69:51: 09:e3:37:5c:b5:d7:b1:b1:fe:c5:da:34:34:eb:ad: 48:db:c7:37:34:77:c2:b5:8c:23:20:a1:d3:0a:9b: 58:67:dd:be:85:d6:d4:24:98:07:f6:b5:e7:5d:6b: 6f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DB:37:F6:F0:8B:1B:24:BD:4D:30:39:61:8A:DC:32:7D:0A:EC:E7 X509v3 Authority Key Identifier: keyid:CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:49:f1:a9:b4:c9:ad:99:2d:e6:3c:d8:6f:0d:8a:2b:fd:65: b5:06:e3:71:75:19:6b:96:c1:59:d9:d4:25:de:27:38:6f:29: c1:cd:a1:1d:ae:5f:5f:af:28:28:42:fd:30:4d:1f:c7:06:3b: 47:5a:fa:2e:02:f0:cd:5c:88:62:fc:3e:2f:a3:e2:e9:6d:30: 53:9c:63:63:24:41:4b:9c:58:a1:16:67:b1:71:ff:a7:89:5f: fd:75:56:9a:6d:a6:b2:eb:50:dc:da:d8:34:de:e2:20:3b:68: 36:c8:26:ac:a6:da:f0:10:7f:6b:09:ea:25:f3:96:1e:93:56: 8b:82:35:7f:70:68:c9:45:f3:0a:14:34:4a:65:59:b1:8d:eb: a1:b3:04:30:76:a9:b6:78:66:d7:6a:57:0b:04:39:51:49:db: 72:dc:36:0c:c5:7c:41:9b:0c:62:9e:4c:fe:10:d9:c9:fd:c3: e7:8b:3e:be:65:ed:a8:1d:63:f3:a4:63:b8:ac:af:04:b4:8c: 09:cd:9f:20:9f:a6:15:62:ec:74:d1:83:e3:7e:f2:db:5e:71: 8b:c3:16:f2:86:a0:be:70:4f:f2:f5:af:33:94:ca:c0:93:04: 15:f3:07:de:37:40:18:cb:0d:04:83:19:e2:e9:fa:35:b5:fe: 02:7f:cc:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWVeO37k/VZIDGwb1WuMNb8QNJQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5Mjk4RTI2RUM3RDgzRjk5MEREMjlFRkQzOTUwOTdB OTI4NTkwRjAeFw0yNTA0MTYwMzM5NThaFw0yNTA0MTcwNDE0NThaMDMxMTAvBgNV BAMTKENCREIzN0Y2RjA4QjFCMjRCRDREMzAzOTYxOEFEQzMyN0QwQUVDRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7VMi5pM7zEm8P9fqanX5auZ31 jCBhdhGrWpwKHtZ39BwH62V8uoKIjJI4HbcY/tymEPCZ7w8faU7PWzIVvEIdqIDz SHynmprKoDjpessp1lGyNa5MfibpuGAb9d2gkfJvpi7nEHf+Vyl7jidFPWodgYug BC3cW45qi6ru1MoMPXpXxsMaY0Cdm+IMxiub2ctPoKRDmTEBOIq6sbSUuCUIUw6/ 1ozS5dWh1rRWED51hu3dtEIDEZ3sAZOs5vaQDq2Q6p7+hKqMPmIgre6rI7ppUQnj N1y117Gx/sXaNDTrrUjbxzc0d8K1jCMgodMKm1hn3b6F1tQkmAf2tedda28jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUy9s39vCLGyS9TTA5YYrcMn0K7OcwHwYDVR0j BBgwFoAUypKY4m7H2D+ZDdKe/TlQl6koWQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZm emovMC9DQTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBOTI5OEUyNkVDN0Q4M0Y5 OTBERDI5RUZEMzk1MDk3QTkyODU5MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZmemovMC9D QTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq0nxqbTJrZkt5jzYbw2KK/1ltQbjcXUZa5bBWdnUJd4nOG8pwc2hHa5fX68o KEL9ME0fxwY7R1r6LgLwzVyIYvw+L6Pi6W0wU5xjYyRBS5xYoRZnsXH/p4lf/XVW mm2msutQ3NrYNN7iIDtoNsgmrKba8BB/awnqJfOWHpNWi4I1f3BoyUXzChQ0SmVZ sY3robMEMHaptnhm12pXCwQ5UUnbctw2DMV8QZsMYp5M/hDZyf3D54s+vmXtqB1j 86RjuKyvBLSMCc2fIJ+mFWLsdNGD437y215xi8MW8oagvnBP8vWvM5TKwJMEFfMH 3jdAGMsNBIMZ4un6NbX+An/McQ== -----END CERTIFICATE-----Generated at Wed Apr 16 22:24:04 2025 by rpki-client