$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft File: F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft (raw, json) Hash identifier: bm1u3qPMgj+5yGWiB65G8n/0R5gTatPvuic14XUH1pQ= Subject key identifier: 30:5D:7E:EE:89:24:49:A0:10:23:AD:E4:4C:76:DA:68:D2:13:AD:BA Authority key identifier: F3:9F:CE:F7:5A:85:E9:FA:24:47:77:F7:CE:DA:CC:58:2B:7A:BA:29 Certificate issuer: /CN=F39FCEF75A85E9FA244777F7CEDACC582B7ABA29 Certificate serial: 64CA0651AD70E7323464F75CA866CA27F73DB1B0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.cer Subject info access: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft Manifest number: E0 Signing time: Fri 04 Apr 2025 21:17:24 +0000 Manifest this update: Fri 04 Apr 2025 21:12:24 +0000 Manifest next update: Sat 05 Apr 2025 23:41:24 +0000 Files and hashes: 1: 3136382e302e3136342e302f32342d3234203d3e20323633343833.roa (hash: WAVHV00hp8kQuY2m5oNryEnxV7rX87TuahPEF3PkZjY=) 2: 3136382e302e3136362e302f32342d3234203d3e20323633343833.roa (hash: xnpHTIXw5NOAsWCdZzalk0/kRTMqwFcZy+7og3ox6hc=) 3: F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.crl (hash: yjuyjzpJwub9VcTybYgnLG1ydvxaRmSd8DmSrglaWng=) 4: 3136382e302e3136352e302f32342d3234203d3e20323633343833.roa (hash: K7GvpcP23FlvcUYDW+06XF+u23S5lyvB473kdUEvaJo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.crl rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 23:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ca:06:51:ad:70:e7:32:34:64:f7:5c:a8:66:ca:27:f7:3d:b1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39FCEF75A85E9FA244777F7CEDACC582B7ABA29 Validity Not Before: Apr 4 21:12:24 2025 GMT Not After : Apr 5 23:41:24 2025 GMT Subject: CN=305D7EEE892449A01023ADE44C76DA68D213ADBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f9:b2:c3:4c:f2:96:4f:a2:8b:9b:98:11:b8: 58:c4:ce:e3:aa:18:95:88:97:12:ed:3d:3f:da:42: 1b:19:3e:e0:d2:4e:85:10:f6:90:5c:2b:c0:93:e4: fa:48:17:6e:a7:a1:db:68:63:a1:74:d3:04:f7:fd: af:3b:ca:c3:b1:64:d4:bb:ea:22:53:07:ec:bb:cf: 5e:76:8f:8e:65:e6:a0:b1:44:84:b5:7c:b4:1a:4a: 5a:20:03:68:5a:79:38:41:be:09:42:50:43:2d:94: 39:80:bc:6b:88:16:50:84:39:50:ad:47:83:31:1e: b4:f9:03:e5:ee:79:cd:b5:fd:f7:70:cb:58:46:42: 37:e5:1d:8d:71:37:83:d0:59:9f:f8:d2:0a:a8:74: 5f:a4:10:d5:37:16:27:d5:40:c6:64:aa:0f:49:ff: 8e:ce:9c:8a:d4:30:45:17:c9:53:18:01:31:ff:05: 9d:4d:bd:8a:7f:2e:33:36:6a:74:d3:50:cb:6c:c3: da:bd:d9:8d:35:66:c8:5c:cd:14:a8:08:a3:fa:ee: b3:f0:f9:47:00:17:23:8b:f8:9d:01:bd:c0:24:cc: 17:8f:63:52:9e:fa:21:fb:71:0e:95:1e:97:a6:13: 73:c5:2a:a4:e3:e1:42:3c:5e:aa:62:77:d1:b1:a6: d7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5D:7E:EE:89:24:49:A0:10:23:AD:E4:4C:76:DA:68:D2:13:AD:BA X509v3 Authority Key Identifier: keyid:F3:9F:CE:F7:5A:85:E9:FA:24:47:77:F7:CE:DA:CC:58:2B:7A:BA:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:32:c6:67:95:57:dc:60:5c:88:e9:6c:76:10:5a:6c:74:0a: b9:77:88:f1:4b:2c:69:f3:01:bc:55:ff:f0:2d:f3:49:63:c1: 32:2a:cc:ba:31:e7:f3:5b:21:aa:cb:28:68:7b:92:a0:1d:f7: ee:b6:43:f0:41:04:1d:92:92:f8:83:47:83:a6:40:1d:5e:41: e6:54:ea:10:bd:2c:5f:f0:a3:75:78:4d:74:2d:f8:8d:c1:25: 64:1d:d4:a6:9f:11:15:4b:96:bb:4c:9a:2b:a9:a8:11:dc:d7: a9:bf:ed:9b:f0:c3:b6:fd:9b:46:3b:32:27:66:f6:4b:40:e4: e5:9b:d9:a0:0b:36:fc:9b:42:23:0f:4b:de:28:30:25:95:1d: 11:63:c3:b8:de:bb:b2:eb:c1:a7:dd:9b:0b:00:7f:7f:64:df: 02:7a:b6:02:f0:4d:aa:9f:60:99:00:ae:b3:08:70:39:ca:f2: 2f:b1:64:ba:c5:19:62:17:c7:cd:49:5c:c4:f0:fa:73:55:7d: cc:10:1f:14:a3:7b:58:4d:74:c5:c7:ed:ea:2a:1e:aa:45:07: f5:1a:7b:73:1a:a3:a3:5a:dc:1b:f0:25:8b:82:19:5d:af:a5: 98:1a:80:87:58:b6:f7:a3:36:0e:88:41:4d:3d:5c:11:24:1a: 58:ff:34:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZMoGUa1w5zI0ZPdcqGbKJ/c9sbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5RkNFRjc1QTg1RTlGQTI0NDc3N0Y3Q0VEQUNDNTgy QjdBQkEyOTAeFw0yNTA0MDQyMTEyMjRaFw0yNTA0MDUyMzQxMjRaMDMxMTAvBgNV BAMTKDMwNUQ3RUVFODkyNDQ5QTAxMDIzQURFNDRDNzZEQTY4RDIxM0FEQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+bLDTPKWT6KLm5gRuFjEzuOq GJWIlxLtPT/aQhsZPuDSToUQ9pBcK8CT5PpIF26nodtoY6F00wT3/a87ysOxZNS7 6iJTB+y7z152j45l5qCxRIS1fLQaSlogA2haeThBvglCUEMtlDmAvGuIFlCEOVCt R4MxHrT5A+Xuec21/fdwy1hGQjflHY1xN4PQWZ/40gqodF+kENU3FifVQMZkqg9J /47OnIrUMEUXyVMYATH/BZ1NvYp/LjM2anTTUMtsw9q92Y01ZshczRSoCKP67rPw +UcAFyOL+J0BvcAkzBePY1Ke+iH7cQ6VHpemE3PFKqTj4UI8Xqpid9Gxptc5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMF1+7okkSaAQI63kTHbaaNITrbowHwYDVR0j BBgwFoAU85/O91qF6fokR3f3ztrMWCt6uikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDR4Tlh1OWNaYko5QVd5ZnRYVXpYVGRzbUQ0R3NuQzI1Mms5WkFNZGVB VXAvMC9GMzlGQ0VGNzVBODVFOUZBMjQ0Nzc3RjdDRURBQ0M1ODJCN0FCQTI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzOUZDRUY3NUE4NUU5RkEy NDQ3NzdGN0NFREFDQzU4MkI3QUJBMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDR4Tlh1OWNaYko5QVd5ZnRYVXpYVGRzbUQ0R3NuQzI1Mms5WkFNZGVBVXAvMC9G MzlGQ0VGNzVBODVFOUZBMjQ0Nzc3RjdDRURBQ0M1ODJCN0FCQTI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUDLGZ5VX3GBciOlsdhBabHQKuXeI8UssafMBvFX/8C3zSWPBMirMujHn81sh qssoaHuSoB337rZD8EEEHZKS+INHg6ZAHV5B5lTqEL0sX/CjdXhNdC34jcElZB3U pp8RFUuWu0yaK6moEdzXqb/tm/DDtv2bRjsyJ2b2S0Dk5ZvZoAs2/JtCIw9L3igw JZUdEWPDuN67suvBp92bCwB/f2TfAnq2AvBNqp9gmQCuswhwOcryL7FkusUZYhfH zUlcxPD6c1V9zBAfFKN7WE10xcft6ioeqkUH9Rp7cxqjo1rcG/Ali4IZXa+lmBqA h1i296M2DohBTT1cESQaWP80xw== -----END CERTIFICATE-----Generated at Sat Apr 5 03:42:48 2025 by rpki-client