$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft File: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft (raw, json) Hash identifier: NUoOom9mlIudj8g+He09QXCCPFNEByy+YJ1I0rMeykE= Subject key identifier: 99:B4:23:6E:93:1A:7C:F5:7A:BB:4D:44:2C:3D:40:DC:04:6C:CC:0D Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 Certificate issuer: /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Certificate serial: 50496F3F6E48390B6BAD2C5065E837E2C19B3F19 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject info access: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft Manifest number: 021A Signing time: Sun 11 May 2025 10:01:02 +0000 Manifest this update: Sun 11 May 2025 09:56:02 +0000 Manifest next update: Mon 12 May 2025 11:40:02 +0000 Files and hashes: 1: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: cXY6PhWUBNWJmbKk4RKtBWwU4LfTGX87FWGJlKUeqPM=) 2: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: dvZmaJKiFIhzuB+mWc62fkHLhWOlTP21drygDtaN74Y=) 3: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: cHOQoX8+QBdwYQGhnsohZ0k1iqnuoavS/B7p944uAlM=) 4: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl (hash: wZqgW5+zlYU/wWEUBYFawxbOfTv85g7AhBA1R5Jbv88=) 5: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: AeBka8A3KQatx5ylf8efYG/0aqDgMHQ/4DLsZ9vgq54=) 6: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (hash: I4lnOLHJxZjbb3Rjorlm2O4yGEV8irB1EDwevjkQU7A=) 7: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: YBBTkiHSOgUVAXZZp1wx9Ur96wrUs7rREvi/PLPwCpY=) 8: 34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (hash: mLL7psbKfiKaGnpbVWEJoTKcK/IxrSqWRS37Ju8bJQQ=) 9: 323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (hash: Ec9hIaDkp+aDDW4FFpB4Fl3AQwvF5+e3QIn8T/v0bXM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 02:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:49:6f:3f:6e:48:39:0b:6b:ad:2c:50:65:e8:37:e2:c1:9b:3f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Validity Not Before: May 11 09:56:02 2025 GMT Not After : May 12 11:40:02 2025 GMT Subject: CN=99B4236E931A7CF57ABB4D442C3D40DC046CCC0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:47:43:7e:31:f4:1e:72:65:20:7f:ef:ee: 46:0a:53:41:90:6b:0c:5b:50:77:b1:66:13:29:37: cc:d2:5b:5c:ce:1f:b5:04:da:98:09:25:3d:6e:9d: f0:ff:0a:f9:63:ad:47:e9:0e:a3:26:6f:46:c6:6d: 80:ef:b4:84:00:58:71:41:56:89:79:9a:7d:c8:45: 65:ab:11:b1:0d:b9:c8:d1:3f:4d:58:6b:73:2e:a2: 37:70:af:2e:c3:9d:aa:ff:5b:bd:f8:17:2e:5d:2c: f9:2a:3b:6e:3c:d4:b4:84:0e:b8:28:ff:73:3e:ce: 13:8e:e5:17:6f:63:b9:0b:b5:dc:9f:24:1e:d6:3d: e2:c5:2a:2d:ca:19:18:f8:b3:03:eb:c8:4b:dd:f2: f8:cb:86:57:fc:5b:0a:ec:93:82:a1:11:bd:92:9f: ca:17:66:25:af:58:26:01:97:7c:12:94:3b:22:9f: bc:e0:e7:c8:c1:0a:1b:0c:22:1e:04:fe:d0:46:06: a8:bd:6e:b5:e6:05:72:a1:5f:7b:26:1f:f1:a9:31: 49:6b:79:d9:da:29:0d:c5:e9:51:f1:c3:34:4f:80: 52:95:5d:22:7b:66:7b:c3:57:5a:b0:03:32:16:ae: 7f:fa:eb:a6:b6:91:f7:ba:0a:d9:bd:5d:ba:a6:72: de:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B4:23:6E:93:1A:7C:F5:7A:BB:4D:44:2C:3D:40:DC:04:6C:CC:0D X509v3 Authority Key Identifier: keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ec:c5:3e:f5:c6:ad:24:e4:8e:81:1e:cc:2a:94:73:32:8f:b9: 0c:ab:a8:f7:ae:a1:77:a8:7a:f8:b4:b1:10:3f:22:18:4b:d6: 23:b8:3c:5c:53:46:93:e1:d7:da:58:ae:cf:19:c9:76:25:b2: e5:39:a6:78:9b:61:2c:bf:91:72:b6:7e:2b:0b:92:f2:b9:4b: 3c:c3:9d:c4:4c:0a:40:31:ea:19:6e:96:d1:7d:82:33:89:f0: 5d:68:4f:33:26:32:c5:4e:9a:a0:5d:4d:d3:d0:8c:2e:7d:9a: 0c:4e:2b:82:c6:46:ed:52:1b:8a:6f:44:74:6e:f4:d2:2f:a3: 6f:6b:67:6b:3c:94:1d:56:7d:78:84:7b:2c:d8:c3:92:c7:36: 1e:60:c3:e0:99:65:d1:4b:ed:4d:d5:6c:15:18:e0:c1:56:f9: 25:af:a0:05:e7:25:a2:e2:91:7b:ba:1b:c3:d0:bd:de:56:fb: fb:d9:bc:60:8e:d0:4c:73:43:f8:d4:5f:a6:36:dd:e2:f1:db: 1b:01:6e:ba:f0:d2:dc:40:81:11:82:44:6b:5c:43:6c:de:1b: ba:e9:4a:fc:22:fb:4d:b4:25:fd:15:a8:77:60:5d:dd:5f:40: f4:39:43:a0:5e:95:3a:08:9c:77:b4:0b:0b:ad:61:9e:8d:28: 8f:8c:2f:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUElvP25IOQtrrSxQZeg34sGbPxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGRUUyQzIxQTE3MzE0QUQwQ0ZGQzUyMEZEODE3RDE0 QjQxNDBEMTAeFw0yNTA1MTEwOTU2MDJaFw0yNTA1MTIxMTQwMDJaMDMxMTAvBgNV BAMTKDk5QjQyMzZFOTMxQTdDRjU3QUJCNEQ0NDJDM0Q0MERDMDQ2Q0NDMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6pEdDfjH0HnJlIH/v7kYKU0GQ awxbUHexZhMpN8zSW1zOH7UE2pgJJT1unfD/CvljrUfpDqMmb0bGbYDvtIQAWHFB Vol5mn3IRWWrEbENucjRP01Ya3Muojdwry7Dnar/W734Fy5dLPkqO2481LSEDrgo /3M+zhOO5RdvY7kLtdyfJB7WPeLFKi3KGRj4swPryEvd8vjLhlf8Wwrsk4KhEb2S n8oXZiWvWCYBl3wSlDsin7zg58jBChsMIh4E/tBGBqi9brXmBXKhX3smH/GpMUlr ednaKQ3F6VHxwzRPgFKVXSJ7ZnvDV1qwAzIWrn/666a2kfe6Ctm9Xbqmct7XAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmbQjbpMafPV6u01ELD1A3ARszA0wHwYDVR0j BBgwFoAUPP7iwhoXMUrQz/xSD9gX0UtBQNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5K Z2UvMS8zQ0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRkVFMkMyMUExNzMxNEFE MENGRkM1MjBGRDgxN0QxNEI0MTQwRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5KZ2UvMS8z Q0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA7MU+9catJOSOgR7MKpRzMo+5DKuo966hd6h6+LSxED8iGEvWI7g8XFNGk+HX 2liuzxnJdiWy5TmmeJthLL+RcrZ+KwuS8rlLPMOdxEwKQDHqGW6W0X2CM4nwXWhP MyYyxU6aoF1N09CMLn2aDE4rgsZG7VIbim9EdG700i+jb2tnazyUHVZ9eIR7LNjD ksc2HmDD4Jll0UvtTdVsFRjgwVb5Ja+gBeclouKRe7obw9C93lb7+9m8YI7QTHND +NRfpjbd4vHbGwFuuvDS3ECBEYJEa1xDbN4buulK/CL7TbQl/RWod2Bd3V9A9DlD oF6VOgicd7QLC61hno0oj4wvtQ== -----END CERTIFICATE-----Generated at Sun May 11 15:12:03 2025 by rpki-client