$ rpki-client -vvf rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft File: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft (raw, json) Hash identifier: lFLYE1dG5CyqPm5+KSYCq79EaX8mxbBePEf2+pn4ljw= Subject key identifier: 20:C3:9D:A0:53:64:76:75:93:1C:0C:AE:F3:55:B5:01:41:DC:C3:E7 Authority key identifier: 35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18 Certificate issuer: /CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218 Certificate serial: 3ECE8C245E17CF1E6EF0083AE7295782CC06745B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer Subject info access: rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft Manifest number: 01FA Signing time: Thu 17 Apr 2025 05:22:27 +0000 Manifest this update: Thu 17 Apr 2025 05:17:27 +0000 Manifest next update: Fri 18 Apr 2025 08:56:27 +0000 Files and hashes: 1: 3230312e39342e3135322e302f32322d3332203d3e20323732353335.roa (hash: 8/RYnsvG5o8e8mVXICeObu4r9QuNXa3bI0L8JgshNVw=) 2: 35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl (hash: CFlYumd+ykPNs9xGfM/kp5HeAxO0nS3kxiIyVHSyNas=) 3: 323830343a383262343a3a2f33322d313238203d3e20323732353335.roa (hash: kx+etqCWv+jCRD5YXNaXPU45mCg6XbJHOXS5bFWX/Zs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 08:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ce:8c:24:5e:17:cf:1e:6e:f0:08:3a:e7:29:57:82:cc:06:74:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B6F2D2CE1FB89018FE70909C3AD22EE4659218 Validity Not Before: Apr 17 05:17:27 2025 GMT Not After : Apr 18 08:56:27 2025 GMT Subject: CN=20C39DA053647675931C0CAEF355B50141DCC3E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4d:2d:1e:fc:73:42:61:26:53:11:bf:d6:d4: 78:a0:3a:9d:eb:eb:51:af:0c:be:74:2d:8e:54:0c: 09:f0:9b:e8:00:84:c5:2b:ac:2c:8a:c7:45:ab:7c: 78:d5:f4:68:97:95:f1:18:3f:86:5e:5b:b2:9c:e2: c9:6d:d6:f5:2d:e9:43:32:72:41:4b:ce:fa:07:da: b8:53:9d:3a:c3:c4:04:4c:9b:06:01:6f:bf:6b:ca: 9b:d6:01:14:d6:c3:4c:6b:1f:ec:48:b5:8e:d1:f5: d6:d6:0c:4a:7d:30:81:8d:8f:c4:72:1e:6a:0a:db: 3f:a9:53:d2:42:62:4f:80:b0:ad:60:4e:f5:bb:38: 02:e4:ff:0a:b9:57:6b:78:c7:68:0a:58:3a:61:87: 9a:95:88:e3:c0:42:eb:eb:0a:1b:b9:f4:ca:91:fb: 4f:75:16:dd:e5:60:1c:68:98:4b:ed:e0:90:80:a2: a7:3e:e1:56:66:d6:dd:e5:d0:8d:0f:3f:0a:3c:9e: e5:c7:88:a9:84:6f:1e:79:48:3d:bc:6f:bb:1f:92: 04:3c:8b:e2:2c:f6:3c:51:09:76:ed:d8:3f:6d:e3: cc:5a:2b:e8:a2:ed:96:ba:93:af:17:ff:97:a3:f6: 2d:13:ad:e6:24:8f:6d:3b:b3:bc:fe:70:9a:b7:03: 8e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C3:9D:A0:53:64:76:75:93:1C:0C:AE:F3:55:B5:01:41:DC:C3:E7 X509v3 Authority Key Identifier: keyid:35:B6:F2:D2:CE:1F:B8:90:18:FE:70:90:9C:3A:D2:2E:E4:65:92:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoHf1qY83A7wxZS1AfXM3BS7xK3TZbJUbjnvBU5iLJUY/1/35B6F2D2CE1FB89018FE70909C3AD22EE4659218.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:43:a9:cd:1d:81:0a:94:6f:6d:ef:bc:63:1f:48:2a:5d:8e: 4f:64:41:f7:2a:72:d8:a3:55:11:c5:92:b5:fd:56:60:ba:3f: 7f:dc:d0:a2:10:48:b3:1d:af:4a:c1:9b:a1:9a:8f:5b:50:e4: a7:53:5a:74:e6:bf:12:35:a8:c8:6a:5f:b5:6c:d9:e3:8a:5e: fe:9e:02:3d:3b:e9:23:dc:f6:ec:f3:1b:de:24:15:3b:d7:a4: db:17:0c:d7:e6:f9:5e:2b:c1:54:79:86:70:c0:60:79:40:7a: 47:ca:0c:ca:6e:72:ba:cf:d2:99:e4:b7:03:35:df:79:7b:c9: cb:62:55:bd:49:c4:3b:3b:d0:5d:bd:8f:bf:e3:56:43:de:48: 83:f8:cd:ec:63:05:21:85:8b:01:02:9d:80:a9:95:8e:bd:f6: 34:69:28:3a:1d:e2:e0:8a:bd:29:7c:b4:39:4b:42:20:ad:02: bf:a1:e6:2a:47:1b:b3:60:55:4e:60:fc:9c:73:ba:95:c5:eb: 28:ff:1a:d6:e2:0e:29:43:62:7c:d6:d0:c0:43:ee:b1:90:43: f0:fc:b4:9b:1f:ac:60:97:27:62:28:a7:a5:bc:bd:7c:ee:d2: 54:e6:67:a5:42:8c:a9:ba:d1:7f:2a:6c:f5:26:03:16:57:a7: 18:bf:66:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPs6MJF4Xzx5u8Ag65ylXgswGdFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNkYyRDJDRTFGQjg5MDE4RkU3MDkwOUMzQUQyMkVF NDY1OTIxODAeFw0yNTA0MTcwNTE3MjdaFw0yNTA0MTgwODU2MjdaMDMxMTAvBgNV BAMTKDIwQzM5REEwNTM2NDc2NzU5MzFDMENBRUYzNTVCNTAxNDFEQ0MzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTS0e/HNCYSZTEb/W1HigOp3r 61GvDL50LY5UDAnwm+gAhMUrrCyKx0WrfHjV9GiXlfEYP4ZeW7Kc4slt1vUt6UMy ckFLzvoH2rhTnTrDxARMmwYBb79rypvWARTWw0xrH+xItY7R9dbWDEp9MIGNj8Ry HmoK2z+pU9JCYk+AsK1gTvW7OALk/wq5V2t4x2gKWDphh5qViOPAQuvrChu59MqR +091Ft3lYBxomEvt4JCAoqc+4VZm1t3l0I0PPwo8nuXHiKmEbx55SD28b7sfkgQ8 i+Is9jxRCXbt2D9t48xaK+ii7Za6k68X/5ej9i0TreYkj207s7z+cJq3A45BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIMOdoFNkdnWTHAyu81W1AUHcw+cwHwYDVR0j BBgwFoAUNbby0s4fuJAY/nCQnDrSLuRlkhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRm9IZjFxWTgzQTd3eFpTMUFmWE0zQlM3eEszVFpiSlViam52QlU1aUxK VVkvMS8zNUI2RjJEMkNFMUZCODkwMThGRTcwOTA5QzNBRDIyRUU0NjU5MjE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1QjZGMkQyQ0UxRkI4OTAx OEZFNzA5MDlDM0FEMjJFRTQ2NTkyMTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rm9IZjFxWTgzQTd3eFpTMUFmWE0zQlM3eEszVFpiSlViam52QlU1aUxKVVkvMS8z NUI2RjJEMkNFMUZCODkwMThGRTcwOTA5QzNBRDIyRUU0NjU5MjE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPkOpzR2BCpRvbe+8Yx9IKl2OT2RB9ypy2KNVEcWStf1WYLo/f9zQohBIsx2v SsGboZqPW1Dkp1NadOa/EjWoyGpftWzZ44pe/p4CPTvpI9z27PMb3iQVO9ek2xcM 1+b5XivBVHmGcMBgeUB6R8oMym5yus/SmeS3AzXfeXvJy2JVvUnEOzvQXb2Pv+NW Q95Ig/jN7GMFIYWLAQKdgKmVjr32NGkoOh3i4Iq9KXy0OUtCIK0Cv6HmKkcbs2BV TmD8nHO6lcXrKP8a1uIOKUNifNbQwEPusZBD8Py0mx+sYJcnYiinpby9fO7SVOZn pUKMqbrRfyps9SYDFlenGL9m6Q== -----END CERTIFICATE-----Generated at Thu Apr 17 18:27:24 2025 by rpki-client