$ rpki-client -vvf rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.mft File: FB2788BCFA95BF2224E49278CDA51747D625BC3F.mft (raw, json) Hash identifier: cWMaqRA8/bhmHkwJEXpIOzTZVTriFxU6TIeoTR7ZEpI= Subject key identifier: AE:74:9B:C9:1F:39:32:76:45:06:B8:EC:EE:EE:F8:C6:12:FC:93:C4 Authority key identifier: FB:27:88:BC:FA:95:BF:22:24:E4:92:78:CD:A5:17:47:D6:25:BC:3F Certificate issuer: /CN=FB2788BCFA95BF2224E49278CDA51747D625BC3F Certificate serial: 357EC1CEFFB1A3CF080C4CEAF38A11167419BF0E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer Subject info access: rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.mft Manifest number: 012A Signing time: Sun 20 Apr 2025 09:24:10 +0000 Manifest this update: Sun 20 Apr 2025 09:19:10 +0000 Manifest next update: Mon 21 Apr 2025 11:55:10 +0000 Files and hashes: 1: FB2788BCFA95BF2224E49278CDA51747D625BC3F.crl (hash: klX71mPOZ+8ZFW7RhiFaAJXdFt6A2R6a0caFtQ+2Yq0=) 2: 3230302e3130382e3136382e302f32322d3332203d3e20323730323535.roa (hash: 90FIqDBHIiI7TKSY0kz9few7LZCPZNq7P6S8/wRB72k=) 3: 323830343a363933343a3a2f33322d313238203d3e20323730323535.roa (hash: 46jzNsw6gz2N895FcUgxaXDtvQRSnfh3Stz4cLcX04o=) 4: 34352e3138342e38382e302f32322d3332203d3e20323730323535.roa (hash: Up64O9ooU5+PPcYCHpuP3BeIS7d73iqR5fnXxhP9leI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.crl rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Apr 2025 11:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:7e:c1:ce:ff:b1:a3:cf:08:0c:4c:ea:f3:8a:11:16:74:19:bf:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB2788BCFA95BF2224E49278CDA51747D625BC3F Validity Not Before: Apr 20 09:19:10 2025 GMT Not After : Apr 21 11:55:10 2025 GMT Subject: CN=AE749BC91F3932764506B8ECEEEEF8C612FC93C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:02:21:be:06:3d:a9:fd:6d:d1:14:35:71:f8: 27:d9:d3:15:b2:0f:4b:e9:98:06:a7:a3:96:83:46: 9f:2f:eb:c6:8a:5a:45:63:23:59:bf:7f:43:05:0e: 47:a8:36:4d:05:ab:46:9a:d1:76:32:49:62:a8:e6: 75:14:50:24:23:08:26:b6:1e:5c:d2:b9:c6:f4:76: d7:19:1c:1a:d9:5e:eb:a2:14:fd:ff:ab:4f:7e:50: af:31:cc:ee:c3:c3:69:65:eb:4a:b3:b0:99:40:df: f7:5d:b8:64:9a:b6:6d:c7:16:41:63:cd:60:87:28: b4:7e:55:44:a3:71:c0:b3:1b:fb:89:64:52:07:46: 8e:86:e9:fd:f3:bc:77:33:d7:d4:29:7c:d9:49:27: 17:16:0f:c2:db:a9:1a:95:a2:6c:4e:5a:7b:ad:c7: 9f:a3:28:31:0c:9e:9e:95:38:89:ff:8f:b1:e3:3b: bc:b5:09:a8:d7:3d:97:77:08:66:3d:71:eb:6c:d8: 3d:b4:9a:88:c1:f1:dd:07:55:36:31:67:00:d2:d0: 05:8f:c7:fd:ee:0a:b5:8e:79:d6:8a:9f:29:b0:6b: 50:d3:5d:ba:30:06:96:95:bc:ad:55:8c:d5:d6:09: de:79:48:cf:4d:9f:53:64:af:f5:ee:84:04:da:39: c1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:74:9B:C9:1F:39:32:76:45:06:B8:EC:EE:EE:F8:C6:12:FC:93:C4 X509v3 Authority Key Identifier: keyid:FB:27:88:BC:FA:95:BF:22:24:E4:92:78:CD:A5:17:47:D6:25:BC:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:8d:bf:8e:7c:a0:52:d7:96:db:6d:1b:c7:56:b3:b3:fe:6d: df:cf:52:aa:f5:07:08:07:ec:51:74:3d:50:3a:71:75:59:d8: 6f:cd:68:8a:fd:0c:53:a2:c2:9f:42:31:8a:aa:2e:e7:44:70: 5d:da:e0:b3:62:ba:8f:3b:7d:8e:e6:79:7a:56:6b:68:07:2d: e3:70:61:60:6f:05:4f:7a:5c:3e:4b:5a:44:a0:0d:99:b4:0f: 5d:c2:a0:c6:95:89:c4:61:c3:06:6d:4e:67:7e:26:fd:87:07: 23:c3:aa:05:8e:6f:2c:38:0a:9e:7c:a2:55:32:bd:58:aa:ea: 26:05:08:63:e4:59:ca:8a:41:fe:ff:7b:ff:eb:5d:e7:7d:f6: e9:83:79:4e:48:28:ba:13:1b:e9:96:19:3d:3c:fd:4b:3a:8b: 12:4d:08:5b:27:6b:f8:2e:e8:3c:77:bd:ca:bd:2a:cc:76:d3: ca:89:10:95:fa:fb:df:21:00:b2:e0:9e:33:3a:68:eb:19:4f: d0:9a:79:03:9c:e8:01:5d:62:2e:b7:74:ee:e7:dd:70:f0:a2: d3:dc:3c:21:40:f9:08:2e:22:37:0d:14:c7:33:a4:3c:2d:c1: 41:f5:6b:c7:d6:07:b9:86:37:b2:46:7a:ed:9e:ed:b4:a7:85: 16:58:95:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNX7Bzv+xo88IDEzq84oRFnQZvw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIyNzg4QkNGQTk1QkYyMjI0RTQ5Mjc4Q0RBNTE3NDdE NjI1QkMzRjAeFw0yNTA0MjAwOTE5MTBaFw0yNTA0MjExMTU1MTBaMDMxMTAvBgNV BAMTKEFFNzQ5QkM5MUYzOTMyNzY0NTA2QjhFQ0VFRUVGOEM2MTJGQzkzQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbAiG+Bj2p/W3RFDVx+CfZ0xWy D0vpmAano5aDRp8v68aKWkVjI1m/f0MFDkeoNk0Fq0aa0XYySWKo5nUUUCQjCCa2 HlzSucb0dtcZHBrZXuuiFP3/q09+UK8xzO7Dw2ll60qzsJlA3/dduGSatm3HFkFj zWCHKLR+VUSjccCzG/uJZFIHRo6G6f3zvHcz19QpfNlJJxcWD8LbqRqVomxOWnut x5+jKDEMnp6VOIn/j7HjO7y1CajXPZd3CGY9cets2D20mojB8d0HVTYxZwDS0AWP x/3uCrWOedaKnymwa1DTXbowBpaVvK1VjNXWCd55SM9Nn1Nkr/XuhATaOcGXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrnSbyR85MnZFBrjs7u74xhL8k8QwHwYDVR0j BBgwFoAU+yeIvPqVvyIk5JJ4zaUXR9YlvD8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREVDUGd3YWNkUU0yeURRZnNZTlVzR3VHV0F6QkJYeENQZmpkV05SUTdR czMvMC9GQjI3ODhCQ0ZBOTVCRjIyMjRFNDkyNzhDREE1MTc0N0Q2MjVCQzNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCMjc4OEJDRkE5NUJGMjIy NEU0OTI3OENEQTUxNzQ3RDYyNUJDM0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REVDUGd3YWNkUU0yeURRZnNZTlVzR3VHV0F6QkJYeENQZmpkV05SUTdRczMvMC9G QjI3ODhCQ0ZBOTVCRjIyMjRFNDkyNzhDREE1MTc0N0Q2MjVCQzNGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA42/jnygUteW220bx1azs/5t389SqvUHCAfsUXQ9UDpxdVnYb81oiv0MU6LC n0Ixiqou50RwXdrgs2K6jzt9juZ5elZraAct43BhYG8FT3pcPktaRKANmbQPXcKg xpWJxGHDBm1OZ34m/YcHI8OqBY5vLDgKnnyiVTK9WKrqJgUIY+RZyopB/v97/+td 53326YN5TkgouhMb6ZYZPTz9SzqLEk0IWydr+C7oPHe9yr0qzHbTyokQlfr73yEA suCeMzpo6xlP0Jp5A5zoAV1iLrd07ufdcPCi09w8IUD5CC4iNw0UxzOkPC3BQfVr x9YHuYY3skZ67Z7ttKeFFliVaw== -----END CERTIFICATE-----Generated at Mon Apr 21 04:04:06 2025 by rpki-client