$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft File: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft (raw, json) Hash identifier: AhjGb002N+Owf9yNaZzD+tTvMnrhQ/wL97hIJiux+Oc= Subject key identifier: FE:87:64:A6:74:49:A0:67:A2:A6:12:68:98:4B:8D:B9:E3:C5:07:B9 Authority key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED Certificate issuer: /CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Certificate serial: 2AA96F6B22FE5FAFD9E2E4FF757C8D85F4BABEFD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject info access: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft Manifest number: 01EF Signing time: Sat 12 Apr 2025 14:17:42 +0000 Manifest this update: Sat 12 Apr 2025 14:12:42 +0000 Manifest next update: Sun 13 Apr 2025 17:49:42 +0000 Files and hashes: 1: 3139312e372e37322e302f32312d3234203d3e203533313330.roa (hash: uXdeuicJG1GO+GJKUORCb4DqvhzxPyQ2Z5ORNJJFr7Q=) 2: 323830343a313431633a3a2f33322d313238203d3e203533313330.roa (hash: cjsfM81trhoZs+Ib78YBfAQ97ux0mFDSEJNG8MM4Pa8=) 3: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl (hash: lL1pmZB9HZby7iCpbDBnHg0WLjtgwKGZEwMU5bYpAig=) 4: 3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa (hash: BzoyXL30Xsaxt5/GzA+mLV5q6XBxznhdO2qisUbseRg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 16:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a9:6f:6b:22:fe:5f:af:d9:e2:e4:ff:75:7c:8d:85:f4:ba:be:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Validity Not Before: Apr 12 14:12:42 2025 GMT Not After : Apr 13 17:49:42 2025 GMT Subject: CN=FE8764A67449A067A2A61268984B8DB9E3C507B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:66:91:d0:67:5b:5a:ca:53:ce:7e:ec:f7:81: bc:df:98:d0:19:e0:8f:c9:6a:49:9f:96:21:3e:f8: 31:6a:39:00:41:31:82:1b:7f:b1:18:d8:2b:74:e8: 47:c3:38:d9:23:80:0e:f1:55:db:78:e1:4b:80:c8: c2:4f:4b:bf:94:78:98:18:14:05:2e:2f:51:87:7e: 14:32:a5:bb:82:e1:25:e0:72:e4:df:37:16:5d:12: 72:1f:0e:e5:a4:6e:68:19:0c:fc:76:f1:ce:f7:35: 8e:01:27:59:09:69:1c:ce:01:7c:3b:d1:4e:4c:71: 42:2f:ca:9e:68:c4:2b:18:32:83:20:0e:6d:c5:7c: 6d:73:05:62:74:7b:ca:52:4a:27:a7:37:da:b2:a4: fa:9a:0a:d2:e3:cb:ab:b6:5c:34:de:47:a7:68:b5: ab:38:37:6b:f1:b7:c5:29:42:f4:65:3c:7c:15:37: e9:39:51:75:5c:e0:0f:e4:42:05:6c:7f:c1:bd:71: 5d:4c:33:e0:9c:b4:42:a3:2a:56:18:d6:49:73:86: 0a:46:d1:45:c4:02:04:34:76:d4:a0:56:26:0a:07: c9:e7:e9:ae:77:6c:99:63:d8:e7:ad:72:b7:79:e7: 1e:cb:e0:86:70:e2:f5:d6:2a:85:7f:1c:60:8b:b7: 34:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:87:64:A6:74:49:A0:67:A2:A6:12:68:98:4B:8D:B9:E3:C5:07:B9 X509v3 Authority Key Identifier: keyid:02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ab:1a:a1:36:f7:9d:d5:ed:c9:13:29:3d:aa:63:5f:bb:f8: 34:be:1c:ae:c3:5f:43:bf:93:3b:df:de:3d:8a:d0:d4:ea:e3: 5d:a0:90:c7:d5:32:6c:de:70:b0:67:15:b4:44:68:e5:c2:29: d6:8c:23:e9:a6:0a:7f:5f:73:5e:f5:95:83:98:49:32:56:3a: 0c:35:ad:d4:a1:69:94:b2:c0:c8:6a:92:89:3b:af:92:b9:c9: 89:56:07:ef:92:d2:79:9d:2f:b8:39:30:46:9a:22:37:f1:ee: 8f:c9:a8:18:44:6f:0b:df:ae:75:4e:94:63:11:f1:33:fc:41: 6d:37:bf:08:ce:ae:81:0c:6b:34:a8:f3:35:f0:53:fa:11:0e: ee:79:4a:e6:82:3f:33:93:e9:b7:f4:31:89:47:90:89:2f:ae: ab:ab:46:ba:95:f5:68:04:7a:5c:ba:2a:89:e7:1c:18:b9:dd: a2:4c:d5:80:cf:3c:b1:c5:3c:f5:05:4f:53:92:ac:ff:57:d1: 0e:cc:c6:1b:68:ad:85:b0:1a:8f:c9:f1:f3:3b:ef:e6:70:57: 01:42:63:e0:0d:7d:fe:12:a4:6b:82:28:65:03:7d:e4:59:02: ba:fe:ef:7e:e9:85:9e:d2:48:28:84:9c:6a:23:02:be:be:5b: a6:22:82:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKqlvayL+X6/Z4uT/dXyNhfS6vv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQjk5M0U5NTg1QTUzRkM2QjQwREE3NjJBNzNFQjI4 MjFCRjZFRDAeFw0yNTA0MTIxNDEyNDJaFw0yNTA0MTMxNzQ5NDJaMDMxMTAvBgNV BAMTKEZFODc2NEE2NzQ0OUEwNjdBMkE2MTI2ODk4NEI4REI5RTNDNTA3QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTZpHQZ1taylPOfuz3gbzfmNAZ 4I/JakmfliE++DFqOQBBMYIbf7EY2Ct06EfDONkjgA7xVdt44UuAyMJPS7+UeJgY FAUuL1GHfhQypbuC4SXgcuTfNxZdEnIfDuWkbmgZDPx28c73NY4BJ1kJaRzOAXw7 0U5McUIvyp5oxCsYMoMgDm3FfG1zBWJ0e8pSSienN9qypPqaCtLjy6u2XDTeR6do tas4N2vxt8UpQvRlPHwVN+k5UXVc4A/kQgVsf8G9cV1MM+CctEKjKlYY1klzhgpG 0UXEAgQ0dtSgViYKB8nn6a53bJlj2Oetcrd55x7L4IZw4vXWKoV/HGCLtzSpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/odkpnRJoGeiphJomEuNuePFB7kwHwYDVR0j BBgwFoAUAsuZPpWFpT/GtA2nYqc+soIb9u0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtM NlovMS8wMkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQ0I5OTNFOTU4NUE1M0ZD NkI0MERBNzYyQTczRUIyODIxQkY2RUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtMNlovMS8w MkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF6saoTb3ndXtyRMpPapjX7v4NL4crsNfQ7+TO9/ePYrQ1OrjXaCQx9UybN5w sGcVtERo5cIp1owj6aYKf19zXvWVg5hJMlY6DDWt1KFplLLAyGqSiTuvkrnJiVYH 75LSeZ0vuDkwRpoiN/Huj8moGERvC9+udU6UYxHxM/xBbTe/CM6ugQxrNKjzNfBT +hEO7nlK5oI/M5Ppt/QxiUeQiS+uq6tGupX1aAR6XLoqieccGLndokzVgM88scU8 9QVPU5Ks/1fRDszGG2ithbAaj8nx8zvv5nBXAUJj4A19/hKka4IoZQN95FkCuv7v fumFntJIKIScaiMCvr5bpiKCyQ== -----END CERTIFICATE-----Generated at Sat Apr 12 15:37:24 2025 by rpki-client