$ rpki-client -vvf rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft File: 2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft (raw, json) Hash identifier: toGeqPfDFtjs9ExgscyoAk7kewME8modab18RD9CMi0= Subject key identifier: 26:B9:84:92:A6:12:89:7E:4A:78:97:C5:E1:AA:77:0D:C6:96:CA:B8 Authority key identifier: 2A:A9:C0:C8:79:5C:1A:DD:1B:EE:9A:6C:17:22:3F:C7:CC:D4:C3:E3 Certificate issuer: /CN=2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3 Certificate serial: 560F4C529AA49A175D58D4EC76B97805728F4083 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer Subject info access: rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft Manifest number: 77 Signing time: Fri 11 Apr 2025 23:15:16 +0000 Manifest this update: Fri 11 Apr 2025 23:10:16 +0000 Manifest next update: Sat 12 Apr 2025 23:48:16 +0000 Files and hashes: 1: 34352e3136302e37362e302f32332d3332203d3e20323638343431.roa (hash: op6z5zv5bXYx/GC1V945At+HHF1/DnboG7Nwmgwomqc=) 2: 2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl (hash: trsIB3V6WHNHQyMrFdinRWgjkeL7tqJ9Nprv5lLkjAM=) 3: 323830313a38303a323436303a3a2f34342d313238203d3e20323638343431.roa (hash: ZPSfVx1LgqAUvWD4JVlPK1AKbkJ6+EyPJ3Dbf/KroU0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 23:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:0f:4c:52:9a:a4:9a:17:5d:58:d4:ec:76:b9:78:05:72:8f:40:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3 Validity Not Before: Apr 11 23:10:16 2025 GMT Not After : Apr 12 23:48:16 2025 GMT Subject: CN=26B98492A612897E4A7897C5E1AA770DC696CAB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:63:b3:76:1f:95:f1:e8:d8:64:5c:2b:79:7c: b5:fa:88:24:87:73:6d:36:3b:d2:00:f4:60:48:60: 7b:38:5b:8b:6d:2c:ce:ce:2a:f6:a8:62:9f:f8:1f: 8f:31:7b:c0:51:7e:ba:45:db:36:3a:b3:bb:73:69: da:53:a9:5a:26:2e:bc:e3:b7:73:d1:ff:a3:5c:86: 59:2a:55:d3:7f:6d:2e:42:f2:65:48:9e:46:03:eb: 14:77:5b:27:41:a6:22:75:b1:1c:b8:06:94:93:54: 79:2c:45:0a:41:51:38:57:79:b1:98:7f:fc:13:91: 5d:15:ff:e0:33:5d:73:64:ae:f2:26:78:a2:f2:61: de:43:f5:1a:ab:b5:d9:7f:f5:ec:fb:e3:01:08:a0: cb:31:7c:ac:9c:d1:fa:6a:7d:85:cd:14:c8:82:1d: af:4f:f8:33:13:02:7e:fe:b2:d8:69:aa:7d:bc:7c: 31:20:90:00:19:d7:66:47:1a:4b:0f:30:1d:2a:8d: 2d:d7:be:22:82:ff:e2:f5:d2:d9:92:4d:b5:bb:c9: 30:ab:3d:d2:a2:80:12:ae:e3:f9:f4:ee:61:01:12: 8b:60:b4:66:61:14:ed:9b:77:10:18:8a:db:f5:12: 99:6b:ba:80:1c:3e:88:8e:90:2a:ba:2e:19:71:1c: 61:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B9:84:92:A6:12:89:7E:4A:78:97:C5:E1:AA:77:0D:C6:96:CA:B8 X509v3 Authority Key Identifier: keyid:2A:A9:C0:C8:79:5C:1A:DD:1B:EE:9A:6C:17:22:3F:C7:CC:D4:C3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:01:ae:fc:35:67:59:13:47:31:27:7b:be:9f:5a:9f:53:dd: 89:be:e3:82:e9:75:ad:b2:ab:50:b5:12:12:1a:4f:14:a6:62: 94:d7:15:c4:e3:73:e2:72:a8:27:03:37:f5:cf:da:b5:b4:e9: bd:65:1a:f6:1d:1c:11:b7:0e:a8:3c:a9:17:fc:dd:3e:19:b8: 62:1c:e9:2c:40:ea:b5:51:68:eb:f5:2d:e1:80:d7:cf:2d:93: b5:e7:06:dd:68:3f:1e:7a:10:f7:26:6e:c0:24:9e:04:8e:73: 43:59:f8:78:d9:d7:6a:71:92:a3:56:34:29:e5:c4:a6:20:8d: 63:fd:75:d5:22:ec:b5:c3:1b:c3:57:ab:fa:92:6a:c6:82:6c: 76:a7:83:38:af:72:4e:d8:34:47:be:79:2b:28:05:04:79:45: ac:f8:51:61:4f:ba:5a:3a:07:46:fb:0f:1c:c3:ab:7c:e3:45: 15:6d:fb:3c:23:26:0d:96:87:f4:ef:f5:61:26:9b:e6:fd:57: f7:7b:d2:f4:3a:16:36:05:9f:54:e3:8a:49:39:cd:80:9b:f2: d7:14:93:67:18:50:30:8d:32:78:c3:74:96:12:c6:1c:f1:36: f7:83:cb:f1:9f:7d:ea:61:66:77:4c:3d:a8:0b:7c:5d:3c:f9: d7:6a:f0:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVg9MUpqkmhddWNTsdrl4BXKPQIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBOUMwQzg3OTVDMUFERDFCRUU5QTZDMTcyMjNGQzdD Q0Q0QzNFMzAeFw0yNTA0MTEyMzEwMTZaFw0yNTA0MTIyMzQ4MTZaMDMxMTAvBgNV BAMTKDI2Qjk4NDkyQTYxMjg5N0U0QTc4OTdDNUUxQUE3NzBEQzY5NkNBQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQY7N2H5Xx6NhkXCt5fLX6iCSH c202O9IA9GBIYHs4W4ttLM7OKvaoYp/4H48xe8BRfrpF2zY6s7tzadpTqVomLrzj t3PR/6NchlkqVdN/bS5C8mVInkYD6xR3WydBpiJ1sRy4BpSTVHksRQpBUThXebGY f/wTkV0V/+AzXXNkrvImeKLyYd5D9Rqrtdl/9ez74wEIoMsxfKyc0fpqfYXNFMiC Ha9P+DMTAn7+sthpqn28fDEgkAAZ12ZHGksPMB0qjS3XviKC/+L10tmSTbW7yTCr PdKigBKu4/n07mEBEotgtGZhFO2bdxAYitv1EplruoAcPoiOkCq6LhlxHGHtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJrmEkqYSiX5KeJfF4ap3DcaWyrgwHwYDVR0j BBgwFoAUKqnAyHlcGt0b7ppsFyI/x8zUw+MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0pDdXNtMUxUamRlN3Q3dnVSOUE1UkJRS0o0S0RkZTZtWVlVdTl6aGJ0 VWkvMC8yQUE5QzBDODc5NUMxQUREMUJFRTlBNkMxNzIyM0ZDN0NDRDRDM0UzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQTlDMEM4Nzk1QzFBREQx QkVFOUE2QzE3MjIzRkM3Q0NENEMzRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0pDdXNtMUxUamRlN3Q3dnVSOUE1UkJRS0o0S0RkZTZtWVlVdTl6aGJ0VWkvMC8y QUE5QzBDODc5NUMxQUREMUJFRTlBNkMxNzIyM0ZDN0NDRDRDM0UzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYgGu/DVnWRNHMSd7vp9an1Pdib7jgul1rbKrULUSEhpPFKZilNcVxONz4nKo JwM39c/atbTpvWUa9h0cEbcOqDypF/zdPhm4YhzpLEDqtVFo6/Ut4YDXzy2TtecG 3Wg/HnoQ9yZuwCSeBI5zQ1n4eNnXanGSo1Y0KeXEpiCNY/111SLstcMbw1er+pJq xoJsdqeDOK9yTtg0R755KygFBHlFrPhRYU+6WjoHRvsPHMOrfONFFW37PCMmDZaH 9O/1YSab5v1X93vS9DoWNgWfVOOKSTnNgJvy1xSTZxhQMI0yeMN0lhLGHPE294PL 8Z996mFmd0w9qAt8XTz512rwLA== -----END CERTIFICATE-----Generated at Sat Apr 12 16:20:02 2025 by rpki-client