$ rpki-client -vvf rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft File: 354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft (raw, json) Hash identifier: rgDUzp0DSnfapQloBcPEBv7CwjN6c5TXbHYwr44J9Wk= Subject key identifier: 8F:DF:29:F1:12:73:F4:10:F6:33:52:52:8F:B2:65:8E:38:6C:1E:EE Authority key identifier: 35:4E:A4:4B:0B:C0:80:0A:F1:FC:57:5B:0A:10:61:BA:0B:E3:5D:84 Certificate issuer: /CN=354EA44B0BC0800AF1FC575B0A1061BA0BE35D84 Certificate serial: 60E767538D9FAB9719B2B6310471FE2D571F4CA3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.cer Subject info access: rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft Manifest number: A3 Signing time: Tue 13 May 2025 14:08:25 +0000 Manifest this update: Tue 13 May 2025 14:03:25 +0000 Manifest next update: Wed 14 May 2025 17:09:25 +0000 Files and hashes: 1: 323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa (hash: qMXYhMp+LVYGti2NuSjxj10R7BA4s8v9jTtjkwNr9pg=) 2: 354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.crl (hash: ly/yhA9IWILILUPENZOdgLJQvA15d5QKAZkpBD+d9yQ=) 3: 3138362e3235312e3138382e302f32332d3234203d3e20323633353638.roa (hash: OE04vF3otJ8I3Zw+nN0FQbaJuoDxiyn1dU57jIWzqqM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.crl rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 May 2025 17:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e7:67:53:8d:9f:ab:97:19:b2:b6:31:04:71:fe:2d:57:1f:4c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=354EA44B0BC0800AF1FC575B0A1061BA0BE35D84 Validity Not Before: May 13 14:03:25 2025 GMT Not After : May 14 17:09:25 2025 GMT Subject: CN=8FDF29F11273F410F63352528FB2658E386C1EEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:11:1b:9d:a1:ec:f5:65:2a:fe:ba:79:03:17: 0c:74:66:b0:44:08:10:1a:6f:a3:31:da:3b:5a:8d: d4:d9:66:bc:de:7a:3e:7a:a1:20:74:37:1b:45:67: 06:bf:92:9d:0a:04:57:80:ea:29:21:6f:60:f7:c4: 96:83:b8:41:09:56:11:6a:98:2e:a5:93:da:31:d1: 6c:9d:99:60:99:d6:9b:64:9c:4c:55:45:17:92:8c: e9:d2:1a:88:5f:ea:e8:45:e0:54:df:c2:b3:cc:9a: 8d:54:a0:00:2f:c9:3f:4f:67:8d:47:52:55:2d:d2: 7a:22:4d:cb:96:1a:17:d3:88:09:05:c8:05:6c:0e: 50:6a:d6:fa:2f:cc:9f:a2:1a:dc:7b:e1:b0:fe:f4: 6a:97:5e:87:62:8c:cc:34:77:b4:94:9f:ec:04:73: 9d:02:a6:99:24:d9:e4:30:06:69:73:2c:28:8e:8d: 7c:80:b8:ca:b8:3f:1c:cc:37:6d:a3:57:ef:93:ab: b3:d8:ba:a7:2d:91:3d:17:74:63:3b:de:74:22:a8: e5:ae:08:f0:23:72:97:2b:eb:d8:df:13:5f:13:a9: f0:d1:23:0c:66:7e:c5:82:be:6c:8f:12:2a:78:64: f3:3c:36:0f:5b:45:6a:b0:3c:08:f0:fc:4a:5b:d4: 3d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DF:29:F1:12:73:F4:10:F6:33:52:52:8F:B2:65:8E:38:6C:1E:EE X509v3 Authority Key Identifier: keyid:35:4E:A4:4B:0B:C0:80:0A:F1:FC:57:5B:0A:10:61:BA:0B:E3:5D:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a0:30:6d:9c:9b:80:53:65:f2:52:db:fb:45:fd:34:a0:9f: f6:4f:86:ef:b5:14:a2:76:b4:22:ec:29:d6:cf:70:a8:b6:78: df:7b:4b:e0:df:cb:1a:95:ce:71:80:15:1d:d6:f5:5f:0d:05: 0d:24:42:42:de:96:88:9e:73:f8:39:d9:04:68:0b:b2:35:e2: 15:f3:c7:e6:e8:90:8a:6b:58:32:a5:90:cb:61:c7:4a:de:36: af:94:81:08:32:27:f1:41:71:f2:e8:b8:eb:52:d1:53:5a:23: 7d:a7:be:2a:d0:3e:e3:ee:e4:a6:a0:9e:4a:b3:d5:83:0b:99: 62:70:8d:91:5c:a8:d0:21:af:cc:48:b7:2c:cb:9a:d5:ec:99: eb:a0:f1:9e:35:4b:bd:74:dc:19:ff:f4:cf:68:22:bc:08:4b: 96:f9:84:b7:8f:40:f3:29:cc:f5:fc:57:19:f8:0c:33:2b:10: 07:93:bf:ad:32:fd:03:b3:5f:af:6a:89:04:cb:c4:64:10:3e: d8:64:81:85:8f:f1:19:6e:90:5d:23:c4:f2:89:ef:fd:dd:d4: b4:97:67:8e:a0:0b:9f:0d:19:55:4c:c5:46:6d:52:aa:54:f7: d5:49:38:ba:32:71:91:4b:b4:32:fd:60:65:57:5a:85:cb:01: d1:0f:f9:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYOdnU42fq5cZsrYxBHH+LVcfTKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU0RUE0NEIwQkMwODAwQUYxRkM1NzVCMEExMDYxQkEw QkUzNUQ4NDAeFw0yNTA1MTMxNDAzMjVaFw0yNTA1MTQxNzA5MjVaMDMxMTAvBgNV BAMTKDhGREYyOUYxMTI3M0Y0MTBGNjMzNTI1MjhGQjI2NThFMzg2QzFFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiERudoez1ZSr+unkDFwx0ZrBE CBAab6Mx2jtajdTZZrzeej56oSB0NxtFZwa/kp0KBFeA6ikhb2D3xJaDuEEJVhFq mC6lk9ox0WydmWCZ1ptknExVRReSjOnSGohf6uhF4FTfwrPMmo1UoAAvyT9PZ41H UlUt0noiTcuWGhfTiAkFyAVsDlBq1vovzJ+iGtx74bD+9GqXXodijMw0d7SUn+wE c50Cppkk2eQwBmlzLCiOjXyAuMq4PxzMN22jV++Tq7PYuqctkT0XdGM73nQiqOWu CPAjcpcr69jfE18TqfDRIwxmfsWCvmyPEip4ZPM8Ng9bRWqwPAjw/Epb1D03AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUj98p8RJz9BD2M1JSj7JljjhsHu4wHwYDVR0j BBgwFoAUNU6kSwvAgArx/FdbChBhugvjXYQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMldBNFE0RFFwOVl4REpucWQxQ1Z2QlJIVlFCaFZuRFBTbXBmalVDUDJF Z0svMC8zNTRFQTQ0QjBCQzA4MDBBRjFGQzU3NUIwQTEwNjFCQTBCRTM1RDg0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1NEVBNDRCMEJDMDgwMEFG MUZDNTc1QjBBMTA2MUJBMEJFMzVEODQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MldBNFE0RFFwOVl4REpucWQxQ1Z2QlJIVlFCaFZuRFBTbXBmalVDUDJFZ0svMC8z NTRFQTQ0QjBCQzA4MDBBRjFGQzU3NUIwQTEwNjFCQTBCRTM1RDg0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk6AwbZybgFNl8lLb+0X9NKCf9k+G77UUona0Iuwp1s9wqLZ433tL4N/LGpXO cYAVHdb1Xw0FDSRCQt6WiJ5z+DnZBGgLsjXiFfPH5uiQimtYMqWQy2HHSt42r5SB CDIn8UFx8ui461LRU1ojfae+KtA+4+7kpqCeSrPVgwuZYnCNkVyo0CGvzEi3LMua 1eyZ66DxnjVLvXTcGf/0z2givAhLlvmEt49A8ynM9fxXGfgMMysQB5O/rTL9A7Nf r2qJBMvEZBA+2GSBhY/xGW6QXSPE8onv/d3UtJdnjqALnw0ZVUzFRm1SqlT31Uk4 ujJxkUu0Mv1gZVdahcsB0Q/5GA== -----END CERTIFICATE-----Generated at Wed May 14 06:50:40 2025 by rpki-client