$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft File: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft (raw, json) Hash identifier: pCGZNZneQyVA0h7xL9TNBznBeYD9h/F9HuONIEIMdis= Subject key identifier: E4:43:86:38:CA:F7:31:1F:24:B3:2F:F0:20:72:83:3E:86:55:59:93 Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Certificate serial: 12A4241D8A7C02F9B39AB205DA2F862206086F26 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft Manifest number: 0273 Signing time: Thu 17 Apr 2025 07:38:06 +0000 Manifest this update: Thu 17 Apr 2025 07:33:06 +0000 Manifest next update: Fri 18 Apr 2025 09:46:06 +0000 Files and hashes: 1: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: oPMBUQyiQOvcv4tb1YKSLPGxZ04J+5T7lbQU8TfpNP8=) 2: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl (hash: j0Xmk1BnyLhYnSOQ8On+dgntRCIoXVEGhCp9Jh6b3oU=) 3: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: AJNOOqPt9YDmVyj7oLMiS+ahRBlnaPrzhm3IG8z6/rY=) 4: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: xlFzvxIG/gYH0KzWQM5/0pJLtz7KgwD/JIoIT+dykDo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 09:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a4:24:1d:8a:7c:02:f9:b3:9a:b2:05:da:2f:86:22:06:08:6f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Validity Not Before: Apr 17 07:33:06 2025 GMT Not After : Apr 18 09:46:06 2025 GMT Subject: CN=E4438638CAF7311F24B32FF02072833E86555993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:9b:66:f3:e9:12:52:ee:c5:a3:4a:77:1a: 0e:da:81:4f:f3:90:53:73:ce:c4:df:66:67:0d:89: b3:22:4b:73:57:90:60:55:96:e3:ba:21:bd:69:0b: 8c:e3:a0:c5:16:da:0f:86:ce:a1:3e:28:83:51:37: 09:2c:89:19:3e:8b:40:57:59:fd:04:8d:b4:6d:12: 54:f9:53:4d:e1:8d:31:88:09:a8:61:9e:5d:37:b1: a4:18:92:79:18:41:38:b4:9b:14:92:2e:e0:e1:72: 20:cc:f6:db:5c:76:c1:70:6d:8a:78:0e:92:4c:5b: 87:f7:e8:9d:06:52:38:9e:64:2d:5b:9e:bb:3c:91: 6b:2b:dc:13:8f:60:5b:b3:24:c1:c0:62:14:98:3f: 04:67:d3:86:1f:0d:32:40:cf:fd:d7:16:2c:c6:0a: 63:39:ec:58:0a:56:b6:9f:b8:81:62:57:bd:81:ac: 3c:b2:6f:62:cc:d8:49:a8:2e:38:1f:04:c3:bb:1c: 91:5f:cd:89:80:a3:d6:cc:2d:69:aa:05:c9:c8:df: 79:af:17:27:80:9a:68:b3:f2:5b:a4:3d:7a:8e:4a: c8:c2:56:88:59:57:8d:f8:6c:ee:1e:9a:7a:52:b1: f8:9b:ed:b9:11:a2:9b:38:a5:11:de:2e:55:a3:33: 1c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:43:86:38:CA:F7:31:1F:24:B3:2F:F0:20:72:83:3E:86:55:59:93 X509v3 Authority Key Identifier: keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:6c:7f:b6:d4:7b:ef:8b:95:50:3a:c1:5d:c8:ce:1a:24:bc: 45:b0:1e:f2:db:39:da:6d:34:74:60:9b:d2:86:dd:04:17:01: f7:4a:dd:f0:48:60:fb:95:02:84:86:09:3a:f4:87:e1:5a:d4: 9e:ac:6c:fd:63:89:3f:c2:af:5f:93:c4:a4:53:a2:27:ca:dd: 9e:12:7c:92:98:db:ff:7d:ba:3f:60:df:00:7f:07:26:ad:1c: d9:be:ea:b0:22:cf:18:bc:33:0c:85:63:0f:01:73:5a:28:61: be:91:97:0d:21:8a:7e:43:99:69:a4:41:a1:20:f4:c6:a3:1a: 24:0a:e1:3a:27:fa:d1:dd:0e:c4:43:d2:d6:53:1f:b4:c9:8a: f9:cb:5c:43:63:cc:fe:e7:53:dd:3b:d1:57:58:f9:b2:83:9b: 4a:4b:59:3c:0e:05:19:b3:f0:c9:9e:eb:f8:11:bc:30:29:8d: ca:9d:36:8d:b6:07:e5:c8:db:d1:c3:f2:c4:d3:5f:34:0f:ca: 04:d3:8e:2f:0b:26:56:23:84:65:86:6c:37:43:97:25:6d:f4: 75:9a:c0:7e:d3:66:be:cd:e0:03:8a:93:c7:53:f9:ff:6b:b4: e2:ca:4a:1c:02:d6:79:40:e8:30:00:74:26:8b:11:97:0a:82: f3:f9:10:07 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUEqQkHYp8AvmzmrIF2i+GIgYIbyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFB MzY0M0Y5NDAeFw0yNTA0MTcwNzMzMDZaFw0yNTA0MTgwOTQ2MDZaMDMxMTAvBgNV BAMTKEU0NDM4NjM4Q0FGNzMxMUYyNEIzMkZGMDIwNzI4MzNFODY1NTU5OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPoJtm8+kSUu7Fo0p3Gg7agU/z kFNzzsTfZmcNibMiS3NXkGBVluO6Ib1pC4zjoMUW2g+GzqE+KINRNwksiRk+i0BX Wf0EjbRtElT5U03hjTGICahhnl03saQYknkYQTi0mxSSLuDhciDM9ttcdsFwbYp4 DpJMW4f36J0GUjieZC1bnrs8kWsr3BOPYFuzJMHAYhSYPwRn04YfDTJAz/3XFizG CmM57FgKVrafuIFiV72BrDyyb2LM2EmoLjgfBMO7HJFfzYmAo9bMLWmqBcnI33mv FyeAmmiz8lukPXqOSsjCVohZV434bO4emnpSsfib7bkRops4pRHeLlWjMxwjAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU5EOGOMr3MR8ksy/wIHKDPoZVWZMwHwYDVR0j BBgwFoAULQ0Ui98u1Pvb64DbHrN36qNkP5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C LzAvMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFBMzY0M0Y5NC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRDBEMTQ4QkRGMkVENEZCREJF QjgwREIxRUIzNzdFQUEzNjQzRjk0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0tG ZTlGRzNheEhabzVHZUhGM2ZGRmJtV0MxNTd1NW5jVFdkYzZZQXFWbUIvMC8yRDBE MTQ4QkRGMkVENEZCREJFQjgwREIxRUIzNzdFQUEzNjQzRjk0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA oWx/ttR774uVUDrBXcjOGiS8RbAe8ts52m00dGCb0obdBBcB90rd8Ehg+5UChIYJ OvSH4VrUnqxs/WOJP8KvX5PEpFOiJ8rdnhJ8kpjb/326P2DfAH8HJq0c2b7qsCLP GLwzDIVjDwFzWihhvpGXDSGKfkOZaaRBoSD0xqMaJArhOif60d0OxEPS1lMftMmK +ctcQ2PM/udT3TvRV1j5soObSktZPA4FGbPwyZ7r+BG8MCmNyp02jbYH5cjb0cPy xNNfNA/KBNOOLwsmViOEZYZsN0OXJW30dZrAftNmvs3gA4qTx1P5/2u04spKHALW eUDoMAB0JosRlwqC8/kQBw== -----END CERTIFICATE-----Generated at Thu Apr 17 15:36:52 2025 by rpki-client