$ rpki-client -vvf rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft File: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft (raw, json) Hash identifier: EXkolJq1kH6n5sJEpGkFdrx+anL/sc8Ai3hl+5O0rgQ= Subject key identifier: C4:A3:E0:F6:40:46:61:8C:77:7F:F5:4D:29:54:F9:61:EC:AF:C6:5E Authority key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 Certificate issuer: /CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Certificate serial: 20EC66E486BC7BA7A01C87DCFEC15DAB10820CB7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer Subject info access: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft Manifest number: 0138 Signing time: Thu 17 Apr 2025 14:57:10 +0000 Manifest this update: Thu 17 Apr 2025 14:52:10 +0000 Manifest next update: Fri 18 Apr 2025 17:52:10 +0000 Files and hashes: 1: 34352e3136312e33362e302f32322d3332203d3e20323638353030.roa (hash: XosRWuhy50p/XlmB964uJcpmK6P7/+s4YBWKrRfgxzQ=) 2: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl (hash: ZBv7S6u7kN0egElYww9zCNqObVNuJLJmYJB8czQc5zE=) 3: 323830343a353232633a3a2f33322d313238203d3e20323638353030.roa (hash: wuN8qHU/NQzTWfY0LflG0MyAQQTaz3Hq4vCYZX+edCU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 17:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ec:66:e4:86:bc:7b:a7:a0:1c:87:dc:fe:c1:5d:ab:10:82:0c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Validity Not Before: Apr 17 14:52:10 2025 GMT Not After : Apr 18 17:52:10 2025 GMT Subject: CN=C4A3E0F64046618C777FF54D2954F961ECAFC65E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0e:92:03:d9:bb:e4:6b:35:65:e9:d3:27:e4: 60:86:c9:de:26:4a:90:ab:a3:99:ef:ee:f2:49:41: 91:ee:c4:06:44:6a:00:a4:f4:b7:74:cf:22:f1:43: 82:8b:0d:8d:ae:8e:85:f5:bd:98:4e:34:a6:bd:45: e9:05:a2:ad:22:80:53:32:ee:c1:cd:95:e7:26:7b: af:8c:5c:66:f9:22:23:9b:d7:4a:5f:c0:c1:a6:f7: 50:62:56:0c:81:7f:f4:5d:b2:01:9c:d2:2e:66:76: c6:49:e6:82:d6:38:82:62:b5:37:32:45:a9:b5:6b: 31:28:68:62:80:c6:7e:0b:d4:ea:98:3f:51:82:b5: a4:9f:f7:cc:34:df:03:3c:56:f8:7f:a3:31:f5:f2: 7e:c1:e4:87:01:d8:f1:4b:b1:1c:25:9c:33:2b:c1: 0a:91:80:27:e7:a5:b0:4a:a7:e3:6e:63:fe:67:62: 9a:19:7c:4b:17:60:e4:03:82:3b:18:71:e5:1f:7b: 80:af:19:0e:21:25:7d:80:1b:61:52:9e:7e:9a:12: 4e:b1:12:63:c8:d7:78:af:5f:6f:5c:3c:2e:10:b2: bc:7e:33:58:8d:00:b7:f6:1d:f8:f1:2a:6c:9b:76: 67:f7:f7:da:92:10:04:e5:0b:c0:28:72:b5:32:d1: 71:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A3:E0:F6:40:46:61:8C:77:7F:F5:4D:29:54:F9:61:EC:AF:C6:5E X509v3 Authority Key Identifier: keyid:09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c5:31:21:4f:6f:28:0c:c1:cb:6a:c9:5a:94:d8:31:0d:57: 02:16:cc:56:1a:36:3b:ff:5f:ee:69:73:38:48:e0:ca:b6:53: 9c:39:ea:5a:f2:d1:7e:16:16:79:69:1e:c3:b3:38:c9:b4:67: 5b:53:98:51:ac:84:29:e4:7c:60:cb:3e:bb:2f:68:28:db:d1: 4b:ca:40:05:87:b1:07:2f:35:93:8a:87:c8:32:11:5d:c3:4c: 05:01:68:56:17:9b:5a:35:a6:ad:a3:0a:48:c5:ea:49:5d:57: a1:ec:98:57:3b:9a:bc:7b:56:96:70:07:b7:a0:f7:81:08:af: b2:f7:f7:6b:bc:f5:ee:51:1b:5c:f3:c0:93:ac:af:6f:63:50: 50:4f:cf:06:37:b0:b7:0e:b1:34:6c:e2:da:40:70:1b:c3:a6: da:2c:b2:7b:71:86:9b:e6:1c:44:e6:cb:e5:c3:7e:85:c9:a1: d3:f0:ea:2f:fc:50:a7:d0:47:f8:94:6a:18:ec:cb:b7:69:ec: 38:3f:20:f3:7e:8e:e2:1d:e4:64:65:ca:83:a3:50:bf:4e:0b: 6a:82:c6:e6:fd:4a:ef:ff:ff:68:6c:ad:37:93:77:33:de:e1: c1:04:7e:56:fd:ca:41:97:31:e5:f2:bb:09:1a:55:da:f9:0d: 56:d7:59:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIOxm5Ia8e6egHIfc/sFdqxCCDLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlEOEQ0QTY3MDY5NTgwRTM0RjE2QUIwNDc0MjBCRDRB MDhENEZGMDAeFw0yNTA0MTcxNDUyMTBaFw0yNTA0MTgxNzUyMTBaMDMxMTAvBgNV BAMTKEM0QTNFMEY2NDA0NjYxOEM3NzdGRjU0RDI5NTRGOTYxRUNBRkM2NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBDpID2bvkazVl6dMn5GCGyd4m SpCro5nv7vJJQZHuxAZEagCk9Ld0zyLxQ4KLDY2ujoX1vZhONKa9RekFoq0igFMy 7sHNlecme6+MXGb5IiOb10pfwMGm91BiVgyBf/RdsgGc0i5mdsZJ5oLWOIJitTcy Ram1azEoaGKAxn4L1OqYP1GCtaSf98w03wM8Vvh/ozH18n7B5IcB2PFLsRwlnDMr wQqRgCfnpbBKp+NuY/5nYpoZfEsXYOQDgjsYceUfe4CvGQ4hJX2AG2FSnn6aEk6x EmPI13ivX29cPC4Qsrx+M1iNALf2HfjxKmybdmf399qSEATlC8AocrUy0XFLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxKPg9kBGYYx3f/VNKVT5Yeyvxl4wHwYDVR0j BBgwFoAUCdjUpnBpWA408WqwR0IL1KCNT/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9D UWsvMC8wOUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RDhENEE2NzA2OTU4MEUz NEYxNkFCMDQ3NDIwQkQ0QTA4RDRGRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9DUWsvMC8w OUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiMUxIU9vKAzBy2rJWpTYMQ1XAhbMVho2O/9f7mlzOEjgyrZTnDnqWvLRfhYW eWkew7M4ybRnW1OYUayEKeR8YMs+uy9oKNvRS8pABYexBy81k4qHyDIRXcNMBQFo VhebWjWmraMKSMXqSV1XoeyYVzuavHtWlnAHt6D3gQivsvf3a7z17lEbXPPAk6yv b2NQUE/PBjewtw6xNGzi2kBwG8Om2iyye3GGm+YcRObL5cN+hcmh0/DqL/xQp9BH +JRqGOzLt2nsOD8g836O4h3kZGXKg6NQv04LaoLG5v1K7///aGytN5N3M97hwQR+ Vv3KQZcx5fK7CRpV2vkNVtdZnw== -----END CERTIFICATE-----Generated at Fri Apr 18 11:02:27 2025 by rpki-client