$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft File: 02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft (raw, json) Hash identifier: bHFWSjntrboNyfcL22KMq1hCguwNqtakbEx1qp0BenA= Subject key identifier: 4A:E0:3F:9F:5F:7C:46:D1:03:90:0E:E3:5B:F3:7C:59:09:03:99:21 Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C Certificate issuer: /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C Certificate serial: 63B9E30E09D32DE59020269332C52B878E600B97 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer Subject info access: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft Manifest number: 68 Signing time: Sun 06 Apr 2025 22:43:11 +0000 Manifest this update: Sun 06 Apr 2025 22:38:11 +0000 Manifest next update: Mon 07 Apr 2025 23:36:11 +0000 Files and hashes: 1: AS264569.roa (hash: r9Fi+dKgK9n0WTCvZ702dgA++QdUUH0umZRkZ5k2Pu0=) 2: AS28212.roa (hash: 4IDBvQnr4muF3V1TifOBiHOd9mGL+JPuB1OZMKxYCFQ=) 3: 02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl (hash: i3/X3x3M7Qyu7sNGlUmvXeV4OsyJ1jZhNmeDn+SW2lI=) 4: AS52892.roa (hash: PsorWWSfQ0CV/onJHLO5ryI/UDEe1LmrbSih6IAIr68=) 5: AS268218.roa (hash: pRdUMrsJOyGVlvTqInKvOFnRkcDP2nt88WmcQlm81BE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 23:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b9:e3:0e:09:d3:2d:e5:90:20:26:93:32:c5:2b:87:8e:60:0b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C Validity Not Before: Apr 6 22:38:11 2025 GMT Not After : Apr 7 23:36:11 2025 GMT Subject: CN=4AE03F9F5F7C46D103900EE35BF37C5909039921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9f:d1:45:55:76:7c:92:26:5c:54:82:33:d9: 50:01:fa:42:16:34:7b:15:f7:0f:ff:bb:04:3c:99: b1:38:91:c1:5a:ef:72:7b:46:8a:15:36:07:be:27: 73:ad:00:98:8e:c0:30:4c:3c:9d:b1:46:49:d8:dd: dc:48:95:8a:59:ba:2d:ee:06:58:c3:db:96:9e:5d: 13:a3:98:23:78:ba:48:12:09:0e:30:37:66:e5:2f: 47:00:27:e3:57:42:74:d4:09:64:28:11:a4:d3:c4: 03:af:db:e2:4a:68:06:0d:c2:4d:cb:45:e5:f0:38: e9:a5:0b:71:8c:19:2a:c4:57:e3:63:18:76:17:2d: 59:3c:98:fb:05:01:45:02:84:23:75:be:9b:f8:55: 5c:6f:86:2d:b1:68:32:5f:7c:92:91:ba:9c:3f:be: d7:24:6c:9e:9e:03:3e:1b:aa:f8:b2:88:5b:0a:61: 65:be:d2:f2:d3:27:3a:5b:d2:63:3d:a6:e6:8d:7b: 7a:b6:d7:96:6c:5e:a1:ee:61:34:c7:ea:e0:90:d6: 77:be:59:2f:d3:8e:b0:51:a5:00:86:21:d8:c6:70: b8:95:d7:87:c6:45:9c:83:07:73:bc:b7:1c:e5:14: 69:3c:49:44:fe:b2:0b:1f:49:93:a0:69:67:63:0a: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E0:3F:9F:5F:7C:46:D1:03:90:0E:E3:5B:F3:7C:59:09:03:99:21 X509v3 Authority Key Identifier: keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ff:67:2e:e2:6a:95:fd:80:3f:b5:ec:42:94:ae:c0:7d:17: 84:7b:e6:29:9a:90:1a:5e:f9:b2:d8:89:96:12:80:6b:d6:69: 11:4a:d8:34:e6:8a:ed:e1:37:64:f3:42:d5:63:8f:88:32:87: bd:dd:c3:4c:86:56:c0:8a:65:d9:cb:0b:89:f4:89:1b:d8:f6: 3f:73:5b:05:55:ee:e2:c3:83:55:ec:55:0f:1f:7c:01:2f:5d: 3e:7d:fd:bb:20:e9:62:5c:61:fb:0b:44:ee:e2:bf:39:24:a3: 7a:86:25:14:6a:2c:3d:af:15:f3:a7:cd:ad:36:bb:da:c9:67: 8a:0d:d9:4e:94:f0:61:d7:5a:fe:1a:9e:c4:1e:75:0f:f7:5b: 2b:d5:be:91:97:33:fe:e5:be:a2:9b:15:af:40:ff:cd:cc:3c: 83:82:47:b8:b4:d2:92:04:60:f3:5e:77:97:87:f1:aa:ff:65: 61:3d:41:84:ea:47:5c:48:9a:b0:6e:8a:3d:20:a9:4c:da:b4: 53:94:d1:0b:26:20:9f:8b:22:de:69:09:f2:60:d8:f7:1e:07: 50:3b:f0:56:d6:83:00:09:a2:78:df:72:9a:36:b1:fb:74:5c: 2a:41:a6:11:68:0c:e6:43:56:4e:08:39:d9:6e:99:a9:20:14: 12:dd:79:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY7njDgnTLeWQICaTMsUrh45gC5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJEOEEyQUQ1MzFGMTI5RTIxRDkyRDI3NUUwRUZEMzgw QzkzRkMzQzAeFw0yNTA0MDYyMjM4MTFaFw0yNTA0MDcyMzM2MTFaMDMxMTAvBgNV BAMTKDRBRTAzRjlGNUY3QzQ2RDEwMzkwMEVFMzVCRjM3QzU5MDkwMzk5MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqn9FFVXZ8kiZcVIIz2VAB+kIW NHsV9w//uwQ8mbE4kcFa73J7RooVNge+J3OtAJiOwDBMPJ2xRknY3dxIlYpZui3u BljD25aeXROjmCN4ukgSCQ4wN2blL0cAJ+NXQnTUCWQoEaTTxAOv2+JKaAYNwk3L ReXwOOmlC3GMGSrEV+NjGHYXLVk8mPsFAUUChCN1vpv4VVxvhi2xaDJffJKRupw/ vtckbJ6eAz4bqviyiFsKYWW+0vLTJzpb0mM9puaNe3q215ZsXqHuYTTH6uCQ1ne+ WS/TjrBRpQCGIdjGcLiV14fGRZyDB3O8txzlFGk8SUT+sgsfSZOgaWdjClfHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSuA/n198RtEDkA7jW/N8WQkDmSEwHwYDVR0j BBgwFoAUAtiirVMfEp4h2S0nXg79OAyT/DwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0JwV2pFWGlQRFNMTXhYZUVLdEIyM01UdGVpcXNOdUFMUFlKdzV6V1lW a1gvMS8wMkQ4QTJBRDUzMUYxMjlFMjFEOTJEMjc1RTBFRkQzODBDOTNGQzNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyRDhBMkFENTMxRjEyOUUy MUQ5MkQyNzVFMEVGRDM4MEM5M0ZDM0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0JwV2pFWGlQRFNMTXhYZUVLdEIyM01UdGVpcXNOdUFMUFlKdzV6V1lWa1gvMS8w MkQ4QTJBRDUzMUYxMjlFMjFEOTJEMjc1RTBFRkQzODBDOTNGQzNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGv9nLuJqlf2AP7XsQpSuwH0XhHvmKZqQGl75stiJlhKAa9ZpEUrYNOaK7eE3 ZPNC1WOPiDKHvd3DTIZWwIpl2csLifSJG9j2P3NbBVXu4sODVexVDx98AS9dPn39 uyDpYlxh+wtE7uK/OSSjeoYlFGosPa8V86fNrTa72slnig3ZTpTwYdda/hqexB51 D/dbK9W+kZcz/uW+opsVr0D/zcw8g4JHuLTSkgRg8153l4fxqv9lYT1BhOpHXEia sG6KPSCpTNq0U5TRCyYgn4si3mkJ8mDY9x4HUDvwVtaDAAmieN9ymjax+3RcKkGm EWgM5kNWTgg52W6ZqSAUEt156A== -----END CERTIFICATE-----Generated at Mon Apr 7 04:29:52 2025 by rpki-client