$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft File: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft (raw, json) Hash identifier: 8t/Fcb7fEzyPrcFRVUHUOFpp7hjZ8sKSfwWZnOsMpwE= Subject key identifier: 97:7F:96:98:97:A3:AA:FA:94:87:85:F9:67:61:4C:C1:24:3D:44:63 Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Certificate serial: 4E94B19B4600B480D05799EF9BC6EF4FDDC9B716 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft Manifest number: 0218 Signing time: Sat 10 May 2025 20:30:50 +0000 Manifest this update: Sat 10 May 2025 20:25:50 +0000 Manifest next update: Sun 11 May 2025 20:33:50 +0000 Files and hashes: 1: 323830343a346335633a3a2f33322d3438203d3e20323637333636.roa (hash: aBuDzalJjtN6QjODimHKIqdgYVt/ZmaeAC/ItTdnYZs=) 2: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl (hash: NCFwdx5sLc/DXPPOHFotTv2kuLuRD3vVI3E7UCiuH4k=) 3: 34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (hash: uvDWAWwHQEIwaeCaS7oSbgW6akspuwjD8Bob8V00050=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 20:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:94:b1:9b:46:00:b4:80:d0:57:99:ef:9b:c6:ef:4f:dd:c9:b7:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Validity Not Before: May 10 20:25:50 2025 GMT Not After : May 11 20:33:50 2025 GMT Subject: CN=977F969897A3AAFA948785F967614CC1243D4463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2b:53:b6:c9:bb:10:6e:36:14:4d:01:de:f5: 0a:10:52:80:d5:27:fb:b8:aa:d6:b8:c3:0a:f1:49: 9c:09:d4:f5:4b:e9:5b:60:ee:87:a1:6b:25:1b:79: 91:44:9c:8d:92:5d:44:10:75:ed:b8:eb:b6:f6:af: 15:3f:5c:01:f6:9e:6f:26:f4:a4:4a:8d:5b:54:55: 8a:9e:23:5e:fa:0d:6b:71:bc:ea:7b:e8:24:ab:18: 4d:37:c2:73:c9:cc:c3:bd:dc:00:d0:01:35:e7:ec: 72:f8:de:9d:99:ce:e3:97:de:72:60:5c:38:d4:2e: 34:9e:7f:e1:81:25:7d:55:e6:0e:d6:d7:44:fa:c1: ed:92:f6:aa:3e:a1:06:6c:8c:2d:21:4e:a8:39:95: f7:0d:0e:9d:48:8b:ad:c8:ac:a5:94:b4:ca:d0:e8: 0f:11:8f:1d:f7:08:aa:da:b0:3b:50:9b:93:97:84: bf:90:fc:39:54:af:38:65:89:9f:f0:9e:9d:82:f5: a7:da:5d:96:a5:bf:c8:5e:af:ef:a0:95:8d:47:4c: 67:3f:d5:05:28:b9:be:d6:fd:94:8c:b4:44:29:c9: c7:60:e9:4b:90:48:0e:9c:80:7c:48:b9:23:02:62: 60:5c:3f:31:22:f3:0d:22:b0:22:df:1a:40:48:65: 0d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7F:96:98:97:A3:AA:FA:94:87:85:F9:67:61:4C:C1:24:3D:44:63 X509v3 Authority Key Identifier: keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:79:61:8e:96:9a:4c:f9:90:25:62:0e:d5:a2:09:9f:ad:0f: 5a:5b:99:5f:07:86:89:9b:ea:f7:af:64:10:c5:83:38:85:0b: 17:27:c9:7f:87:9d:22:cb:60:e0:02:fe:91:db:b4:e4:b1:97: 9b:b4:34:8d:26:bb:e8:35:6f:df:db:ee:d7:eb:bb:a1:a0:da: 98:c8:f4:ff:98:d8:6f:24:c7:06:52:3f:a7:a0:19:d9:25:0e: 1a:84:9d:63:9e:dc:7d:3c:cc:61:6a:61:70:1b:fd:82:3f:d3: 35:74:78:3f:68:d9:f7:3e:00:05:12:aa:d9:0c:1f:a7:b8:d8: 1a:aa:7c:f3:2c:05:5d:7f:0e:f2:8c:e2:24:bf:b7:37:ee:b6: 81:71:1b:25:19:54:fe:89:7c:87:01:7f:c4:ff:3a:6a:88:2f: 65:95:f8:d2:ea:81:a4:c0:21:5b:d8:67:20:cd:e5:2b:1f:fc: c4:da:4e:86:59:bf:3c:6a:f1:40:3a:3c:d7:eb:43:43:04:25: 28:8c:cc:66:b2:af:25:fc:96:e8:b0:7d:03:4f:b0:ec:8c:a5: 42:b8:af:3d:2c:75:c1:58:42:65:c8:0a:01:f3:06:23:35:19: 72:4e:3b:e3:f0:85:69:5d:06:f9:11:42:3e:b3:86:14:0d:0a: f7:5f:2e:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTpSxm0YAtIDQV5nvm8bvT93JtxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMEFFNjNFRDk5MTI0RjdEM0YxNEI4RkE5QzFGRjM3 ODAwNjdDMjAeFw0yNTA1MTAyMDI1NTBaFw0yNTA1MTEyMDMzNTBaMDMxMTAvBgNV BAMTKDk3N0Y5Njk4OTdBM0FBRkE5NDg3ODVGOTY3NjE0Q0MxMjQzRDQ0NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgK1O2ybsQbjYUTQHe9QoQUoDV J/u4qta4wwrxSZwJ1PVL6Vtg7oehayUbeZFEnI2SXUQQde2467b2rxU/XAH2nm8m 9KRKjVtUVYqeI176DWtxvOp76CSrGE03wnPJzMO93ADQATXn7HL43p2ZzuOX3nJg XDjULjSef+GBJX1V5g7W10T6we2S9qo+oQZsjC0hTqg5lfcNDp1Ii63IrKWUtMrQ 6A8Rjx33CKrasDtQm5OXhL+Q/DlUrzhliZ/wnp2C9afaXZalv8her++glY1HTGc/ 1QUoub7W/ZSMtEQpycdg6UuQSA6cgHxIuSMCYmBcPzEi8w0isCLfGkBIZQ1ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUl3+WmJejqvqUh4X5Z2FMwSQ9RGMwHwYDVR0j BBgwFoAU9CCuY+2ZEk99PxS4+pwf83gAZ8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhH MWYvMC9GNDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MjBBRTYzRUQ5OTEyNEY3 RDNGMTRCOEZBOUMxRkYzNzgwMDY3QzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhHMWYvMC9G NDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuXlhjpaaTPmQJWIO1aIJn60PWluZXweGiZvq969kEMWDOIULFyfJf4edIstg 4AL+kdu05LGXm7Q0jSa76DVv39vu1+u7oaDamMj0/5jYbyTHBlI/p6AZ2SUOGoSd Y57cfTzMYWphcBv9gj/TNXR4P2jZ9z4ABRKq2Qwfp7jYGqp88ywFXX8O8oziJL+3 N+62gXEbJRlU/ol8hwF/xP86aogvZZX40uqBpMAhW9hnIM3lKx/8xNpOhlm/PGrx QDo81+tDQwQlKIzMZrKvJfyW6LB9A0+w7IylQrivPSx1wVhCZcgKAfMGIzUZck47 4/CFaV0G+RFCPrOGFA0K918uBg== -----END CERTIFICATE-----Generated at Sat May 10 21:35:27 2025 by rpki-client