$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft File: 3C7FA74CDFF1E4752479602672F26A883C7A6052.mft (raw, json) Hash identifier: x2zBTw5WxCenCG9wZ6poNWKVrQ9GmOpdcouwVABrf54= Subject key identifier: BD:33:E0:EC:88:8F:83:E0:ED:E7:83:4D:3C:86:87:A6:50:66:E6:7F Authority key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52 Certificate issuer: /CN=3C7FA74CDFF1E4752479602672F26A883C7A6052 Certificate serial: 15CDC0FB14AEE03D0E646C4DC6712C6CECB658A6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer Subject info access: rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft Manifest number: 01A2 Signing time: Thu 10 Apr 2025 05:43:48 +0000 Manifest this update: Thu 10 Apr 2025 05:38:48 +0000 Manifest next update: Fri 11 Apr 2025 08:26:48 +0000 Files and hashes: 1: 3133312e302e3134332e302f32342d3234203d3e203631383835.roa (hash: pnoCxJhev+KykF4irHTZhxOHPz51XbGGcg5JTT85Aik=) 2: 3133312e302e3134302e302f32342d3234203d3e203631383835.roa (hash: 6p5vnbVVcccEJ9l7GDGjcXQPnMNDaS77FHOheurCgAg=) 3: 3C7FA74CDFF1E4752479602672F26A883C7A6052.crl (hash: 5+oAUl4+SXHffWhBOPryZ9OAuip9juuPkXGz1DHIzg0=) 4: 3133312e302e3134322e302f32342d3234203d3e203631383835.roa (hash: b7PCXsg1RuZItimKfTuvWVCumv5u3kbW9CXSBMe583A=) 5: 323830343a316163383a3a2f33322d3334203d3e203631383835.roa (hash: otWaAQ35cSOPfki3jYAn6BHH5zL3qEFKCvIcTLGK0qU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 11 Apr 2025 08:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:cd:c0:fb:14:ae:e0:3d:0e:64:6c:4d:c6:71:2c:6c:ec:b6:58:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052 Validity Not Before: Apr 10 05:38:48 2025 GMT Not After : Apr 11 08:26:48 2025 GMT Subject: CN=BD33E0EC888F83E0EDE7834D3C8687A65066E67F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:02:e8:83:85:0e:20:8e:37:4a:84:22:e5:e8: 89:3e:05:a0:0d:69:08:ff:b7:e4:cd:7e:05:a2:34: 3c:f6:c8:fb:2e:99:f5:53:00:e4:9d:ce:33:82:2a: e1:84:15:4b:79:15:2b:e4:78:31:02:93:a2:0e:3c: 00:a3:2e:89:be:a1:bf:a3:80:76:e0:67:1f:df:61: 90:1e:9b:d4:21:e6:e5:78:f5:7f:af:81:a3:0b:17: 20:08:bb:12:5e:65:27:ef:6e:c7:81:ff:0b:2f:e0: 38:d0:31:57:aa:c3:5c:d4:00:3d:9d:0f:e0:37:59: e1:f8:60:f7:22:8b:a8:40:68:42:1f:2a:e8:58:eb: 15:7e:fa:44:cc:8e:4e:85:8f:f9:23:2b:13:24:ad: f9:4d:7c:59:58:72:de:83:66:29:54:9c:d6:61:ae: 75:f4:5e:db:6b:52:1a:4e:13:35:a7:fa:19:3b:3a: 33:09:97:cb:0b:33:c1:e5:85:3e:f7:a3:13:04:49: 39:ae:91:62:3a:45:ea:57:5f:02:5d:c2:1c:27:f6: 12:32:8a:58:c1:0e:0c:2f:43:f1:5d:5a:9d:b6:f2: 20:6a:6a:c7:bb:c5:8e:aa:be:1a:99:3c:91:df:89: 7f:f6:29:70:c3:29:7b:0a:29:f3:c5:34:a1:b5:dc: 9d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:33:E0:EC:88:8F:83:E0:ED:E7:83:4D:3C:86:87:A6:50:66:E6:7F X509v3 Authority Key Identifier: keyid:3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:12:64:93:ec:aa:91:7e:8c:9a:22:8b:22:89:2f:ed:38:b2: 24:5f:70:5f:d4:57:ff:2e:cd:42:86:0d:4a:a8:f1:d4:a2:ed: 76:15:ff:90:7a:ab:55:d8:cf:9c:2d:5d:64:e2:c0:1b:df:a8: 72:ee:b2:f2:31:a9:2c:cb:0b:b1:69:f2:fc:38:42:a6:0c:a7: f6:17:79:75:4b:f5:61:5b:8b:b4:4c:eb:f7:1e:3c:e9:bb:18: d6:8b:f4:f6:c4:ea:ae:d5:8a:42:f2:16:55:b3:b5:4a:06:6a: 25:9c:f0:45:8d:4b:e2:20:13:fb:23:51:a8:3c:bf:1d:96:ca: b3:7a:59:41:a2:51:39:ee:1e:57:e3:37:37:8a:c7:8c:56:99: c2:5f:d9:14:65:6b:72:be:70:30:11:e4:42:9f:29:35:5a:b1: 09:fe:cb:82:87:41:13:5a:e3:35:ff:a3:22:4b:35:39:03:7c: ae:c8:0e:60:0a:4b:76:6c:44:d6:9f:5e:e1:04:be:97:5a:17: f4:3d:ed:57:2e:a1:04:df:72:21:b6:35:1f:c7:84:3c:15:a5: 1b:a2:04:44:8c:e6:c4:8a:89:31:3a:76:c4:7b:71:e0:d8:34: 15:9c:ac:e5:5b:00:6a:ed:2e:d4:20:c9:99:29:4a:41:3a:e2: a4:53:fc:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFc3A+xSu4D0OZGxNxnEsbOy2WKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3RkE3NENERkYxRTQ3NTI0Nzk2MDI2NzJGMjZBODgz QzdBNjA1MjAeFw0yNTA0MTAwNTM4NDhaFw0yNTA0MTEwODI2NDhaMDMxMTAvBgNV BAMTKEJEMzNFMEVDODg4RjgzRTBFREU3ODM0RDNDODY4N0E2NTA2NkU2N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiAuiDhQ4gjjdKhCLl6Ik+BaAN aQj/t+TNfgWiNDz2yPsumfVTAOSdzjOCKuGEFUt5FSvkeDECk6IOPACjLom+ob+j gHbgZx/fYZAem9Qh5uV49X+vgaMLFyAIuxJeZSfvbseB/wsv4DjQMVeqw1zUAD2d D+A3WeH4YPcii6hAaEIfKuhY6xV++kTMjk6Fj/kjKxMkrflNfFlYct6DZilUnNZh rnX0XttrUhpOEzWn+hk7OjMJl8sLM8HlhT73oxMESTmukWI6RepXXwJdwhwn9hIy iljBDgwvQ/FdWp228iBqase7xY6qvhqZPJHfiX/2KXDDKXsKKfPFNKG13J2PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvTPg7IiPg+Dt54NNPIaHplBm5n8wHwYDVR0j BBgwFoAUPH+nTN/x5HUkeWAmcvJqiDx6YFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSERLU2lzN1lBTkZ1anI5ZExFR1ZmRmdpR0c5OWd5WnBRVzdxdkF0amE5 ZHQvMC8zQzdGQTc0Q0RGRjFFNDc1MjQ3OTYwMjY3MkYyNkE4ODNDN0E2MDUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDN0ZBNzRDREZGMUU0NzUy NDc5NjAyNjcyRjI2QTg4M0M3QTYwNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SERLU2lzN1lBTkZ1anI5ZExFR1ZmRmdpR0c5OWd5WnBRVzdxdkF0amE5ZHQvMC8z QzdGQTc0Q0RGRjFFNDc1MjQ3OTYwMjY3MkYyNkE4ODNDN0E2MDUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeRJkk+yqkX6MmiKLIokv7TiyJF9wX9RX/y7NQoYNSqjx1KLtdhX/kHqrVdjP nC1dZOLAG9+ocu6y8jGpLMsLsWny/DhCpgyn9hd5dUv1YVuLtEzr9x486bsY1ov0 9sTqrtWKQvIWVbO1SgZqJZzwRY1L4iAT+yNRqDy/HZbKs3pZQaJROe4eV+M3N4rH jFaZwl/ZFGVrcr5wMBHkQp8pNVqxCf7LgodBE1rjNf+jIks1OQN8rsgOYApLdmxE 1p9e4QS+l1oX9D3tVy6hBN9yIbY1H8eEPBWlG6IERIzmxIqJMTp2xHtx4Ng0FZys 5VsAau0u1CDJmSlKQTripFP8fg== -----END CERTIFICATE-----Generated at Thu Apr 10 15:24:44 2025 by rpki-client