$ rpki-client -vvf rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft File: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft (raw, json) Hash identifier: cXZBXIwkPJGjTglsoIRrpjfJ7vS86JnBTONv+x3C7vc= Subject key identifier: 3A:2F:79:A3:1C:7A:19:0D:F8:9F:2C:8F:17:CE:1A:F4:4A:EE:19:5F Authority key identifier: 21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 Certificate issuer: /CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Certificate serial: 5A2F97D2912FAEAB6D71AF8E33690AA5E5D909A1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject info access: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft Manifest number: 0123 Signing time: Fri 04 Apr 2025 23:17:44 +0000 Manifest this update: Fri 04 Apr 2025 23:12:44 +0000 Manifest next update: Sun 06 Apr 2025 01:19:44 +0000 Files and hashes: 1: 323830343a343761383a3a2f33322d313238203d3e20323637303639.roa (hash: 7jDkrLp4ayTzOL5LqdZDvV5/Cuvygbg0upRrXyrXxkE=) 2: 34352e3232372e39362e302f32322d3332203d3e20323637303639.roa (hash: 6szg7DBeNfCDyyVjdS9beSfI5nbAK853VFa32L1aUlk=) 3: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl (hash: DZYREUyqU+7RyW1/3UVZZc/hwnw7qXwEfdjOaLTVg3A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 01:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2f:97:d2:91:2f:ae:ab:6d:71:af:8e:33:69:0a:a5:e5:d9:09:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Validity Not Before: Apr 4 23:12:44 2025 GMT Not After : Apr 6 01:19:44 2025 GMT Subject: CN=3A2F79A31C7A190DF89F2C8F17CE1AF44AEE195F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:6c:30:a5:82:08:ed:63:a2:ac:92:15:e7: 5c:25:e5:5c:1e:25:6c:69:db:11:f4:17:95:10:e8: a0:b1:f7:93:ce:91:5e:17:c7:0a:57:c1:98:74:2f: dd:e3:6c:9b:4b:b8:97:9d:17:04:04:bd:a2:9e:69: 17:12:1b:17:a3:e2:74:cd:9b:a6:06:c4:9b:28:b3: 17:76:21:45:81:d1:0a:16:fb:85:11:26:9b:5c:38: 30:f3:4e:3c:ed:c9:20:c1:dd:4e:ed:33:be:11:b9: 79:9b:9d:c9:51:93:af:d2:54:f4:fe:e3:08:f5:8e: 5a:0b:1c:75:2e:44:22:b6:3a:61:52:56:27:15:a7: fe:dc:93:57:a6:74:6f:20:92:70:c5:43:4e:bd:f6: 91:cd:ad:4c:9a:60:ba:3a:1c:bc:14:fb:35:58:7b: 53:e9:73:62:f7:48:4c:46:c2:60:e5:6c:05:a4:7b: 56:06:d6:02:7f:3a:32:aa:d8:e3:95:11:75:35:e8: 2a:b9:2a:b6:80:9e:9c:44:18:c6:68:43:18:a1:97: 2d:76:2a:48:d7:b4:7f:9d:e2:d7:bd:8a:a2:1c:5e: fa:9e:79:fe:44:e0:27:ef:7d:61:8d:33:26:77:70: 90:54:41:0e:31:18:2d:10:8f:c5:08:37:9e:e4:93: 03:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2F:79:A3:1C:7A:19:0D:F8:9F:2C:8F:17:CE:1A:F4:4A:EE:19:5F X509v3 Authority Key Identifier: keyid:21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:00:e6:c2:bc:e8:41:75:5e:c5:c1:7d:75:33:75:a2:11:ae: 93:fd:15:91:a2:af:d8:bc:87:72:36:f6:23:b8:50:74:5e:50: 1f:19:b9:e9:2d:c4:cb:10:d4:15:a5:cf:d1:b9:9b:37:fe:28: d5:db:3d:59:22:ed:e4:03:56:06:16:d3:c2:2c:bc:f0:e3:73: 17:a9:37:ca:1a:e0:c3:63:46:59:1c:35:5c:24:9d:55:88:d1: 24:07:e8:ca:25:35:d9:31:c0:c4:c7:23:14:1b:ac:8f:ec:09: aa:60:4e:9c:67:10:d1:28:23:59:47:1b:f0:21:55:72:0c:10: 5f:84:36:62:a5:4d:4c:bc:09:f0:85:75:b9:c8:78:0e:ea:87: 36:53:76:b8:62:ce:6d:b1:60:b2:ae:a3:3d:86:2e:d3:6a:c5: 50:2d:d1:a0:e0:8a:be:16:1e:21:d4:d0:f1:ed:43:63:a2:95: 9e:b3:7f:9c:33:d8:2b:0b:d3:a4:94:07:03:c5:5f:39:74:90: 33:09:df:db:16:b9:8b:26:a8:5d:56:30:92:ba:76:26:75:f6: 9f:82:0f:db:80:9b:4a:d2:5f:34:69:68:c0:b1:17:5b:8c:7e: 6f:38:86:dc:1b:a8:02:d4:59:42:5d:ca:42:7f:aa:54:8c:39: c7:8d:99:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWi+X0pEvrqttca+OM2kKpeXZCaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOUNFRjZFMEMzMDM3QjUzRjk0QTMzQ0UwRjMxMEY5 RjlBMUQ3ODAeFw0yNTA0MDQyMzEyNDRaFw0yNTA0MDYwMTE5NDRaMDMxMTAvBgNV BAMTKDNBMkY3OUEzMUM3QTE5MERGODlGMkM4RjE3Q0UxQUY0NEFFRTE5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC842wwpYII7WOirJIV51wl5Vwe JWxp2xH0F5UQ6KCx95POkV4XxwpXwZh0L93jbJtLuJedFwQEvaKeaRcSGxej4nTN m6YGxJsosxd2IUWB0QoW+4URJptcODDzTjztySDB3U7tM74RuXmbnclRk6/SVPT+ 4wj1jloLHHUuRCK2OmFSVicVp/7ck1emdG8gknDFQ0699pHNrUyaYLo6HLwU+zVY e1Ppc2L3SExGwmDlbAWke1YG1gJ/OjKq2OOVEXU16Cq5KraAnpxEGMZoQxihly12 KkjXtH+d4te9iqIcXvqeef5E4CfvfWGNMyZ3cJBUQQ4xGC0Qj8UIN57kkwP/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOi95oxx6GQ34nyyPF84a9EruGV8wHwYDVR0j BBgwFoAUIfnO9uDDA3tT+Uozzg8xD5+aHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBw WWUvMC8yMUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRjlDRUY2RTBDMzAzN0I1 M0Y5NEEzM0NFMEYzMTBGOUY5QTFENzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBwWWUvMC8y MUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARgDmwrzoQXVexcF9dTN1ohGuk/0VkaKv2LyHcjb2I7hQdF5QHxm56S3EyxDU FaXP0bmbN/4o1ds9WSLt5ANWBhbTwiy88ONzF6k3yhrgw2NGWRw1XCSdVYjRJAfo yiU12THAxMcjFBusj+wJqmBOnGcQ0SgjWUcb8CFVcgwQX4Q2YqVNTLwJ8IV1uch4 DuqHNlN2uGLObbFgsq6jPYYu02rFUC3RoOCKvhYeIdTQ8e1DY6KVnrN/nDPYKwvT pJQHA8VfOXSQMwnf2xa5iyaoXVYwkrp2JnX2n4IP24CbStJfNGlowLEXW4x+bziG 3BuoAtRZQl3KQn+qVIw5x42ZOA== -----END CERTIFICATE-----Generated at Sat Apr 5 07:10:53 2025 by rpki-client