$ rpki-client -vvf rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft File: 5019A6C324130601793432FC2FAFF3DE1F1210C0.mft (raw, json) Hash identifier: /iP03Xu5s79umLUhIbg3H36VP9NLsYFodGG3cD1G44w= Subject key identifier: 33:D4:B8:A5:48:52:30:FF:07:7A:A7:8C:5D:48:B7:7B:BC:E4:95:B6 Authority key identifier: 50:19:A6:C3:24:13:06:01:79:34:32:FC:2F:AF:F3:DE:1F:12:10:C0 Certificate issuer: /CN=5019A6C324130601793432FC2FAFF3DE1F1210C0 Certificate serial: 0F0544F4A97C6842213D33E57D2C1313CF72CE17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer Subject info access: rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft Manifest number: 01FC Signing time: Sun 20 Apr 2025 17:28:08 +0000 Manifest this update: Sun 20 Apr 2025 17:23:08 +0000 Manifest next update: Mon 21 Apr 2025 20:19:08 +0000 Files and hashes: 1: 5019A6C324130601793432FC2FAFF3DE1F1210C0.crl (hash: Y7zNX3kxkP3PGNAUOIO71ZLkTedMBDOUow2TXys8ekA=) 2: 3137372e38342e32302e302f32322d3234203d3e203532373135.roa (hash: RL7RwQcjTKKA++BoYWaVFvGSkS1OFAP/DO2yENM0jCo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.crl rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Apr 2025 20:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:05:44:f4:a9:7c:68:42:21:3d:33:e5:7d:2c:13:13:cf:72:ce:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5019A6C324130601793432FC2FAFF3DE1F1210C0 Validity Not Before: Apr 20 17:23:08 2025 GMT Not After : Apr 21 20:19:08 2025 GMT Subject: CN=33D4B8A5485230FF077AA78C5D48B77BBCE495B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:56:52:14:db:8e:6b:3f:35:93:47:23:77:e4: e3:cf:c8:eb:d9:38:8e:92:fb:04:bf:af:e7:e4:7f: fc:4e:fc:1d:eb:cf:ee:9e:a3:3b:71:24:bc:94:0f: 0f:04:4a:53:9d:37:ef:7e:9b:f0:51:79:6c:dd:4c: 23:15:11:fe:13:e5:84:05:86:6f:b7:4b:26:6e:b5: 16:b6:f7:a4:e9:87:13:4b:d3:e2:de:ff:02:9a:f6: 12:29:39:ea:a1:b4:cb:26:8f:fa:5b:af:e9:5a:dd: df:b9:69:07:45:95:39:63:fb:06:3f:79:b0:35:ae: 09:d9:25:04:fc:c1:09:df:78:4d:a8:d3:9d:c5:30: 73:01:8a:75:53:ec:f5:a3:1f:97:78:8c:62:dc:5f: 7d:dc:7a:5d:c6:08:aa:71:44:7f:20:5f:71:3e:92: 1e:a9:9f:07:cc:fd:16:c3:c4:45:48:b4:1d:ea:97: d9:08:e5:4f:2c:57:c5:33:1f:02:cd:05:ad:87:09: 6b:59:e8:d9:46:80:bc:4e:9d:e2:23:21:99:56:bd: 42:d0:fc:8b:8f:fb:34:87:3d:48:87:d3:b7:aa:74: fc:56:ae:51:b0:81:11:12:29:d3:b6:52:48:9f:c7: ad:6d:8a:6f:bd:ff:b2:4b:ae:c2:c8:29:c6:45:97: 75:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D4:B8:A5:48:52:30:FF:07:7A:A7:8C:5D:48:B7:7B:BC:E4:95:B6 X509v3 Authority Key Identifier: keyid:50:19:A6:C3:24:13:06:01:79:34:32:FC:2F:AF:F3:DE:1F:12:10:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e1:a3:e4:63:c8:6d:b9:f1:7d:46:d5:74:5b:00:cf:d4:62: cf:c5:bc:1f:39:67:b2:5f:63:bc:73:45:43:8f:9a:bc:e9:dc: 08:c9:fa:01:18:99:36:f8:8b:65:20:04:35:46:65:b4:00:6e: e0:7a:ce:7c:5c:08:e8:c6:04:e6:26:a4:fd:c2:dd:e0:08:a5: c7:fc:df:92:6d:9b:ab:1c:c1:3f:89:0f:d0:c3:3d:fd:19:ea: 27:38:1a:a6:49:7d:35:ed:1a:ea:b6:4f:9a:71:8a:f6:6a:58: f6:85:2b:f4:43:85:06:11:5c:d4:4b:8f:8b:d9:5d:3a:09:ab: 64:6f:4c:9c:c8:45:e9:b4:23:00:4c:f8:9a:b8:c5:9e:19:b2: 6f:9f:77:ce:8e:c0:4d:18:8e:36:29:05:62:56:6c:49:9e:35: a6:e2:c3:56:02:1d:8d:18:1e:df:78:bb:45:b9:1b:db:98:40: 4b:9a:36:e0:1b:24:e5:9d:b0:d1:7e:12:c3:66:cc:85:dd:34: 9e:4a:0d:f5:b2:ff:fe:c5:15:21:17:34:63:0a:e8:37:f1:f1: 88:ce:78:74:4d:a0:40:35:ff:df:38:12:61:19:5a:3d:c0:d1: da:e6:e8:c7:ae:7c:95:e6:4b:69:89:31:91:4e:f2:66:35:64: ac:11:fe:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDwVE9Kl8aEIhPTPlfSwTE89yzhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTAxOUE2QzMyNDEzMDYwMTc5MzQzMkZDMkZBRkYzREUx RjEyMTBDMDAeFw0yNTA0MjAxNzIzMDhaFw0yNTA0MjEyMDE5MDhaMDMxMTAvBgNV BAMTKDMzRDRCOEE1NDg1MjMwRkYwNzdBQTc4QzVENDhCNzdCQkNFNDk1QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLVlIU245rPzWTRyN35OPPyOvZ OI6S+wS/r+fkf/xO/B3rz+6eoztxJLyUDw8ESlOdN+9+m/BReWzdTCMVEf4T5YQF hm+3SyZutRa296TphxNL0+Le/wKa9hIpOeqhtMsmj/pbr+la3d+5aQdFlTlj+wY/ ebA1rgnZJQT8wQnfeE2o053FMHMBinVT7PWjH5d4jGLcX33cel3GCKpxRH8gX3E+ kh6pnwfM/RbDxEVItB3ql9kI5U8sV8UzHwLNBa2HCWtZ6NlGgLxOneIjIZlWvULQ /IuP+zSHPUiH07eqdPxWrlGwgRESKdO2Ukifx61tim+9/7JLrsLIKcZFl3V3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUM9S4pUhSMP8HeqeMXUi3e7zklbYwHwYDVR0j BBgwFoAUUBmmwyQTBgF5NDL8L6/z3h8SEMAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ25QS2MyOXdQWmdWeHY4UE1iQ3Z1M1lQQVhNTmVSUVlOZEZGWnZkU3lK a04vMS81MDE5QTZDMzI0MTMwNjAxNzkzNDMyRkMyRkFGRjNERTFGMTIxMEMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwMTlBNkMzMjQxMzA2MDE3 OTM0MzJGQzJGQUZGM0RFMUYxMjEwQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q25QS2MyOXdQWmdWeHY4UE1iQ3Z1M1lQQVhNTmVSUVlOZEZGWnZkU3lKa04vMS81 MDE5QTZDMzI0MTMwNjAxNzkzNDMyRkMyRkFGRjNERTFGMTIxMEMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV+Gj5GPIbbnxfUbVdFsAz9Riz8W8Hzlnsl9jvHNFQ4+avOncCMn6ARiZNviL ZSAENUZltABu4HrOfFwI6MYE5iak/cLd4Ailx/zfkm2bqxzBP4kP0MM9/RnqJzga pkl9Ne0a6rZPmnGK9mpY9oUr9EOFBhFc1EuPi9ldOgmrZG9MnMhF6bQjAEz4mrjF nhmyb593zo7ATRiONikFYlZsSZ41puLDVgIdjRge33i7Rbkb25hAS5o24Bsk5Z2w 0X4Sw2bMhd00nkoN9bL//sUVIRc0YwroN/HxiM54dE2gQDX/3zgSYRlaPcDR2ubo x658leZLaYkxkU7yZjVkrBH+Sg== -----END CERTIFICATE-----Generated at Mon Apr 21 05:33:57 2025 by rpki-client