$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json) Hash identifier: YX9TD8n9QYPj8k1kHQIcBR/GJoxjUgE534w6yIvyASA= Subject key identifier: 99:ED:65:B5:B0:FD:85:18:0B:31:41:56:E5:E4:70:2D:71:8B:E8:CD Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Certificate serial: 27C8FF5C8DF9FF960BB8A0CFB1BC244FA2779F1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft Manifest number: 9A Signing time: Sat 12 Apr 2025 12:32:52 +0000 Manifest this update: Sat 12 Apr 2025 12:27:52 +0000 Manifest next update: Sun 13 Apr 2025 15:20:52 +0000 Files and hashes: 1: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: 36puu2vWWuIexUnU0XRBXhp3c07QncWwsrIvZItUCGA=) 2: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: KBArWlV5vwMsvaplxezo5vYP7odX82xOazE7IspsFqE=) 3: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: MUps5dYJYbgZlLgJ9zMzZggPufSzKqjyIWh5+12TXKE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c8:ff:5c:8d:f9:ff:96:0b:b8:a0:cf:b1:bc:24:4f:a2:77:9f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Validity Not Before: Apr 12 12:27:52 2025 GMT Not After : Apr 13 15:20:52 2025 GMT Subject: CN=99ED65B5B0FD85180B314156E5E4702D718BE8CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:64:9c:65:71:28:ad:2d:c3:bd:78:36:78:10: 5e:02:f5:ee:72:a7:b0:9b:92:55:d1:2a:fe:bd:69: 58:54:bd:7a:f8:19:2a:b3:39:1c:74:af:41:d9:04: d9:e5:2d:48:1f:c6:80:ef:75:ac:73:a2:3d:f1:67: 7b:78:47:75:c8:bd:ee:a3:ac:07:f5:e4:89:1f:a2: df:51:09:24:82:8d:ff:24:da:a3:a7:30:d2:f5:c8: db:1e:3a:d8:eb:29:4d:a3:77:38:3a:4d:45:90:ce: 75:3d:03:37:ae:50:dc:94:e2:d3:b0:16:ea:e0:a0: 5e:2f:a2:13:39:eb:c4:b1:a1:20:78:00:7b:8a:0a: fa:0a:a6:d8:2b:26:89:d9:2c:68:b7:e3:fc:77:67: 1a:f1:1a:5a:c6:a1:6d:b3:ca:ee:65:76:10:5d:02: 21:0c:ae:23:50:17:73:d7:ac:53:88:ae:9c:b8:9e: 93:49:82:49:be:f9:26:a8:10:0b:b0:c1:bd:bd:ce: 3b:57:24:00:6a:c4:7d:2e:00:7b:ee:bc:eb:09:95: 6f:62:9b:f0:f5:22:7c:ab:a8:3f:c6:16:27:fb:92: 04:13:0f:05:37:d7:e3:3f:3d:b5:95:d8:0e:62:60: c2:cb:5d:e2:cf:04:b0:18:08:ac:25:27:fd:43:8b: 36:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:ED:65:B5:B0:FD:85:18:0B:31:41:56:E5:E4:70:2D:71:8B:E8:CD X509v3 Authority Key Identifier: keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a1:57:2b:0f:84:79:63:31:80:0c:93:b5:67:1b:01:21:90: 3f:1d:39:67:2b:a6:d8:8d:25:07:ff:fc:7d:66:69:28:fd:0f: 23:8a:ba:a9:b1:e7:d4:53:93:98:20:0c:a1:55:af:57:55:6d: 4e:ef:77:fe:fa:23:4d:c6:44:9d:e9:d1:01:27:af:ae:03:46: e7:d1:51:f6:df:f4:f5:06:90:55:8a:8c:f1:e7:9d:44:d9:fd: 92:dc:b9:9d:d3:4a:1f:72:9e:4a:0d:71:8d:cf:5f:a0:5f:a2: 80:4b:9e:5f:8a:0b:18:09:88:e7:f8:94:bc:db:15:fd:40:f3: 07:27:fb:08:67:f3:d3:22:0d:d9:6e:2b:10:5c:38:6b:ad:b1: d6:43:b2:70:99:1e:aa:44:9e:8b:41:c7:02:2d:a8:89:69:8f: 3b:27:9f:83:b8:4c:66:0b:ff:55:de:ee:de:32:83:ac:75:92: 7a:d3:9b:37:b3:60:62:c8:eb:70:5a:38:b9:ef:c4:ca:f0:13: e4:91:74:01:29:20:cd:4e:89:12:45:0d:69:bc:ad:1a:58:be: 7c:1f:bd:dd:ef:8e:4d:38:88:d3:0a:a0:ad:e7:17:0a:dd:42: 69:2d:66:e7:07:a3:fe:7c:45:1b:f3:28:4a:20:78:2e:a9:39: 2d:4a:3c:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ8j/XI35/5YLuKDPsbwkT6J3nxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyQkQzMzUyMEVDMEM3OUNGQzk5QzQwMjdGRjJFQUY2 MDYyNUZGQTAeFw0yNTA0MTIxMjI3NTJaFw0yNTA0MTMxNTIwNTJaMDMxMTAvBgNV BAMTKDk5RUQ2NUI1QjBGRDg1MTgwQjMxNDE1NkU1RTQ3MDJENzE4QkU4Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZJxlcSitLcO9eDZ4EF4C9e5y p7CbklXRKv69aVhUvXr4GSqzORx0r0HZBNnlLUgfxoDvdaxzoj3xZ3t4R3XIve6j rAf15Ikfot9RCSSCjf8k2qOnMNL1yNseOtjrKU2jdzg6TUWQznU9AzeuUNyU4tOw FurgoF4vohM568SxoSB4AHuKCvoKptgrJonZLGi34/x3ZxrxGlrGoW2zyu5ldhBd AiEMriNQF3PXrFOIrpy4npNJgkm++SaoEAuwwb29zjtXJABqxH0uAHvuvOsJlW9i m/D1InyrqD/GFif7kgQTDwU31+M/PbWV2A5iYMLLXeLPBLAYCKwlJ/1DizaVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUme1ltbD9hRgLMUFW5eRwLXGL6M0wHwYDVR0j BBgwFoAUqivTNSDsDHnPyZxAJ/8ur2BiX/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm VFYvMC9BQTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMkJEMzM1MjBFQzBDNzlD RkM5OUM0MDI3RkYyRUFGNjA2MjVGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMC9B QTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASqFXKw+EeWMxgAyTtWcbASGQPx05Zyum2I0lB//8fWZpKP0PI4q6qbHn1FOT mCAMoVWvV1VtTu93/vojTcZEnenRASevrgNG59FR9t/09QaQVYqM8eedRNn9kty5 ndNKH3KeSg1xjc9foF+igEueX4oLGAmI5/iUvNsV/UDzByf7CGfz0yIN2W4rEFw4 a62x1kOycJkeqkSei0HHAi2oiWmPOyefg7hMZgv/Vd7u3jKDrHWSetObN7NgYsjr cFo4ue/EyvAT5JF0ASkgzU6JEkUNabytGli+fB+93e+OTTiI0wqgrecXCt1CaS1m 5wej/nxFG/MoSiB4Lqk5LUo8vg== -----END CERTIFICATE-----Generated at Sat Apr 12 15:43:23 2025 by rpki-client