$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft File: 4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft (raw, json) Hash identifier: Ti9hz/ROpLAlFjtwkzBqL+Vc0Hb6dOv2d/gj2JV9DvM= Subject key identifier: 2C:A1:1A:6F:C3:88:21:14:E6:86:DD:A0:2D:61:47:F9:5B:FD:D3:C9 Authority key identifier: 44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13 Certificate issuer: /CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13 Certificate serial: 011BC76C536E454AFA78E944C4B9729AA04938BD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer Subject info access: rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft Manifest number: 0D Signing time: Tue 22 Apr 2025 06:52:37 +0000 Manifest this update: Tue 22 Apr 2025 06:47:37 +0000 Manifest next update: Wed 23 Apr 2025 10:19:37 +0000 Files and hashes: 1: 3139312e3234332e3138302e302f32322d3332203d3e20323633353039.roa (hash: KlULxHMxyBYgHOWDvr82ep/Pt0PmGQBYgR+pKvkMFlE=) 2: 3139312e3234332e3137362e302f32322d3332203d3e20323633353039.roa (hash: 5MnHP1gwm6VSUR7iHYTvcw72QzSqthXM1z6v3zFxW5g=) 3: 3139312e3234332e3138342e302f32322d3332203d3e20323633353039.roa (hash: gplvuyLjGUhF+i6ssDirDxIMyE9T2g6roXbZ9yzSMSc=) 4: 3139312e3234332e3138382e302f32322d3332203d3e20323633353039.roa (hash: 2YCS6Yb/9D0/n8xix6Bzd5N6XCOxnBclmTpI31jfQuw=) 5: 4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl (hash: sF00qiKXOlYuA6kVyNm5UcE6nFjs3YpkYJbS7X550ww=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Apr 2025 10:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1b:c7:6c:53:6e:45:4a:fa:78:e9:44:c4:b9:72:9a:a0:49:38:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13 Validity Not Before: Apr 22 06:47:37 2025 GMT Not After : Apr 23 10:19:37 2025 GMT Subject: CN=2CA11A6FC3882114E686DDA02D6147F95BFDD3C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:68:ac:9c:76:01:c6:62:c8:c3:83:8a:97:94: b5:c2:01:cb:47:14:cb:e5:a4:e6:cd:aa:3e:3e:b2: 11:c9:84:ae:5a:2d:fc:7e:df:02:ed:cd:a8:40:79: e4:77:56:73:a9:70:5f:c9:de:00:9a:51:ff:cf:55: b1:5d:8b:0a:6d:f7:0f:6c:3f:d2:04:f9:35:cf:30: db:c0:e1:e8:f6:a4:80:21:5c:f6:6a:48:94:be:9b: 0d:19:90:a4:78:af:27:c4:37:31:2f:8e:e7:17:0b: ab:68:28:33:b4:54:6d:ec:9f:72:fe:cb:fe:de:c4: c4:87:98:a8:77:aa:9f:f8:a3:20:85:25:7d:90:b5: bd:ae:27:0d:dd:53:2a:48:17:5f:1d:c3:fc:01:10: 0f:ba:f2:83:25:49:e2:d6:ef:f2:61:a5:84:e2:7f: 3b:77:e8:1c:15:74:16:73:a5:00:ca:66:05:1a:8b: 83:33:0b:81:56:a4:07:9a:7c:1f:9d:78:35:ea:b6: c6:e1:c8:82:e6:f6:0a:86:bb:c7:4a:e5:13:d2:bb: 2c:2b:45:05:07:4c:2b:24:3f:57:28:02:55:5c:6d: 8f:8c:1a:bc:e0:da:bf:db:ca:97:16:82:53:12:02: f6:3c:60:d1:f6:27:22:32:cc:03:d0:14:61:9a:2d: fc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A1:1A:6F:C3:88:21:14:E6:86:DD:A0:2D:61:47:F9:5B:FD:D3:C9 X509v3 Authority Key Identifier: keyid:44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:14:e5:c2:45:d2:a8:db:f5:02:30:3d:b3:04:6b:cf:6b:ba: 3c:a6:32:58:8a:7a:4f:13:ce:0b:2f:09:2a:b4:7a:41:9b:31: 7a:02:9b:34:80:8c:0e:81:d5:82:90:c3:65:27:0b:9a:e6:b1: d5:cd:4f:60:fc:e2:d4:da:41:ed:1a:1f:37:f0:f6:93:8f:79: 57:27:98:99:02:21:a6:fd:df:84:1c:4e:17:42:4a:1c:1c:0e: c1:4f:b7:f0:25:23:c9:b5:cd:9c:fa:b9:02:44:d5:f6:db:4b: f1:a6:37:ab:51:83:f6:e3:31:67:aa:63:62:4a:cb:62:55:3a: 60:00:50:8d:b6:a6:0f:17:c0:43:0b:25:c2:05:9e:f3:a2:bf: 20:1d:d5:3f:b1:51:d5:02:5c:05:46:c6:ec:87:77:c3:cd:c6: 24:ae:9a:9c:02:43:e4:1c:4f:6d:c9:56:67:6b:2d:56:e1:97: 47:fe:35:99:19:77:22:8e:12:46:9f:a4:22:48:17:35:e8:56: fe:49:5d:af:7c:0e:4d:b2:a6:fe:ee:d2:5c:92:8c:aa:df:a4: 1c:05:6f:5a:a3:49:9e:86:61:89:ed:e6:6f:ea:15:28:9c:dc: 3b:f8:dd:f3:65:a3:f2:57:36:37:8b:6d:7d:e4:fb:f2:48:3c: 7b:76:4b:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUARvHbFNuRUr6eOlExLlymqBJOL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwN0RGQzFDRDU4QUQ0MDA5NzRCOERDNEMwQTMxRDRF RTVDMkExMzAeFw0yNTA0MjIwNjQ3MzdaFw0yNTA0MjMxMDE5MzdaMDMxMTAvBgNV BAMTKDJDQTExQTZGQzM4ODIxMTRFNjg2RERBMDJENjE0N0Y5NUJGREQzQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYaKycdgHGYsjDg4qXlLXCActH FMvlpObNqj4+shHJhK5aLfx+3wLtzahAeeR3VnOpcF/J3gCaUf/PVbFdiwpt9w9s P9IE+TXPMNvA4ej2pIAhXPZqSJS+mw0ZkKR4ryfENzEvjucXC6toKDO0VG3sn3L+ y/7exMSHmKh3qp/4oyCFJX2Qtb2uJw3dUypIF18dw/wBEA+68oMlSeLW7/JhpYTi fzt36BwVdBZzpQDKZgUai4MzC4FWpAeafB+deDXqtsbhyILm9gqGu8dK5RPSuywr RQUHTCskP1coAlVcbY+MGrzg2r/bypcWglMSAvY8YNH2JyIyzAPQFGGaLfz5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULKEab8OIIRTmht2gLWFH+Vv908kwHwYDVR0j BBgwFoAURAffwc1YrUAJdLjcTAox1O5cKhMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzFVZmlqWlVyVHp2QzJBc2VzUVNrVmtGMXpTdm9oRzhacTFNUHFHQnlI VGkvMC80NDA3REZDMUNENThBRDQwMDk3NEI4REM0QzBBMzFENEVFNUMyQTEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0MDdERkMxQ0Q1OEFENDAw OTc0QjhEQzRDMEEzMUQ0RUU1QzJBMTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzFVZmlqWlVyVHp2QzJBc2VzUVNrVmtGMXpTdm9oRzhacTFNUHFHQnlIVGkvMC80 NDA3REZDMUNENThBRDQwMDk3NEI4REM0QzBBMzFENEVFNUMyQTEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkBTlwkXSqNv1AjA9swRrz2u6PKYyWIp6TxPOCy8JKrR6QZsxegKbNICMDoHV gpDDZScLmuax1c1PYPzi1NpB7RofN/D2k495VyeYmQIhpv3fhBxOF0JKHBwOwU+3 8CUjybXNnPq5AkTV9ttL8aY3q1GD9uMxZ6pjYkrLYlU6YABQjbamDxfAQwslwgWe 86K/IB3VP7FR1QJcBUbG7Id3w83GJK6anAJD5BxPbclWZ2stVuGXR/41mRl3Io4S Rp+kIkgXNehW/kldr3wOTbKm/u7SXJKMqt+kHAVvWqNJnoZhie3mb+oVKJzcO/jd 82Wj8lc2N4ttfeT78kg8e3ZLQw== -----END CERTIFICATE-----Generated at Tue Apr 22 22:36:58 2025 by rpki-client