$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft File: 72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft (raw, json) Hash identifier: 1Vlky5EpmhlNbyAnDwZXyYDv59iIKGUQDLbjoWCrZlo= Subject key identifier: 68:25:34:DB:F4:F1:D6:EB:1D:9D:DE:C1:2A:38:BC:67:65:08:94:0A Authority key identifier: 72:F0:3C:AC:B5:7E:C9:C3:2D:B9:7A:BD:79:7D:81:E2:AB:C8:29:2A Certificate issuer: /CN=72F03CACB57EC9C32DB97ABD797D81E2ABC8292A Certificate serial: 7FE3A8F63955E08CFEBC18668F9D84BBB473A881 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer Subject info access: rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft Manifest number: 9D Signing time: Sat 10 May 2025 10:57:24 +0000 Manifest this update: Sat 10 May 2025 10:52:24 +0000 Manifest next update: Sun 11 May 2025 10:59:24 +0000 Files and hashes: 1: 323830343a353939303a3a2f33322d3334203d3e20323638373130.roa (hash: lRzCpaJbvrSqda05BuCn2FdV6TjUSCPjhiYyCKKBL7U=) 2: 72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl (hash: g4H7G8dd/Q0Sdy+KyvtcNVKJp6+y8sXuh/iitkZPhCU=) 3: 34352e3137302e3232382e302f32322d3234203d3e20323638373130.roa (hash: LDA7BPnO0INBAOLpeunyqV46kLoPxb6h3HNziLGvD4M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 10:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e3:a8:f6:39:55:e0:8c:fe:bc:18:66:8f:9d:84:bb:b4:73:a8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72F03CACB57EC9C32DB97ABD797D81E2ABC8292A Validity Not Before: May 10 10:52:24 2025 GMT Not After : May 11 10:59:24 2025 GMT Subject: CN=682534DBF4F1D6EB1D9DDEC12A38BC676508940A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:87:4f:62:35:74:b2:30:28:8b:9f:c4:57:fe: dc:85:4f:01:6a:f0:08:23:bb:2c:ca:0b:9a:77:42: 03:65:de:15:73:1f:44:ca:7c:21:65:ce:37:70:b0: b9:b6:fb:91:5a:0b:a4:89:41:52:57:bb:c2:31:31: 39:4e:a4:87:3a:f9:72:82:1c:03:5a:73:34:2a:02: ad:33:0a:a0:55:6f:f7:f9:0b:0a:95:6c:05:91:82: 2a:27:8d:d4:6f:c3:1f:1e:71:a5:0b:e5:1a:d9:73: 15:1c:a9:a5:8c:00:3c:ef:59:b2:0b:62:b8:00:b3: a7:35:d4:8e:f9:47:68:86:9c:08:b7:66:d4:24:f2: 88:09:73:9a:08:3d:d7:13:90:9b:5a:53:d3:d4:75: e3:b4:d7:83:2b:67:1f:0b:ab:15:b9:d8:47:f2:41: ac:a3:fa:c5:e8:89:12:a9:b3:c5:52:38:f6:de:e3: f3:a2:89:82:68:01:bc:37:ec:8d:74:06:72:37:f6: ef:dd:87:4f:3e:90:62:67:95:a9:ae:4a:d3:51:de: 06:4e:ab:3b:03:5a:0c:63:9c:34:b1:c4:c0:6a:e9: fd:18:47:14:35:26:69:9d:4f:4b:1a:52:d4:86:1c: c3:e6:1d:4f:e6:ba:c1:6b:31:da:62:d2:72:0d:54: 52:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:25:34:DB:F4:F1:D6:EB:1D:9D:DE:C1:2A:38:BC:67:65:08:94:0A X509v3 Authority Key Identifier: keyid:72:F0:3C:AC:B5:7E:C9:C3:2D:B9:7A:BD:79:7D:81:E2:AB:C8:29:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/72F03CACB57EC9C32DB97ABD797D81E2ABC8292A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:01:36:1e:50:ec:3e:cb:b9:0d:38:97:4a:27:13:81:13:2b: 77:1e:1b:55:3a:ec:ad:b4:3a:95:bb:cb:4a:ba:14:6b:2f:9d: ba:4b:7e:16:02:f4:2e:28:8f:84:5d:6c:53:83:bc:8d:9a:4a: 90:d0:5e:89:a8:18:31:93:71:83:3e:dd:20:4d:3b:53:c1:c3: 97:fe:5e:d6:a5:fa:66:cc:16:34:19:fe:a8:f3:53:75:29:b1: 84:c1:ca:91:80:f3:f0:72:1b:08:df:12:49:27:62:c3:0a:78: c9:7b:d1:40:d8:2f:c9:d5:95:0a:9e:6a:cb:c3:2c:c5:64:6e: 02:e7:65:ee:b1:86:cc:ba:59:5e:30:dd:53:8a:37:58:f8:cb: bc:38:45:8d:0e:b6:20:64:ef:27:67:31:2c:d7:09:c1:5d:fd: 0c:fb:5f:2d:b1:20:cd:4e:72:ba:84:9d:7f:e3:78:aa:3c:cb: 09:54:48:60:f9:bf:37:ef:db:07:8e:f0:fb:53:6c:34:b6:43: 06:50:d0:51:55:35:87:7b:3a:e3:1d:c5:c0:ad:c6:b6:30:43: 78:c0:58:16:c4:ff:fb:ac:52:eb:6e:db:32:4b:5d:eb:5b:93: 83:56:2d:52:53:00:ff:e8:e9:e9:ce:fe:d9:03:b0:99:d5:ab: 04:b8:bf:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUf+Oo9jlV4Iz+vBhmj52Eu7RzqIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJGMDNDQUNCNTdFQzlDMzJEQjk3QUJENzk3RDgxRTJB QkM4MjkyQTAeFw0yNTA1MTAxMDUyMjRaFw0yNTA1MTExMDU5MjRaMDMxMTAvBgNV BAMTKDY4MjUzNERCRjRGMUQ2RUIxRDlEREVDMTJBMzhCQzY3NjUwODk0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeh09iNXSyMCiLn8RX/tyFTwFq 8AgjuyzKC5p3QgNl3hVzH0TKfCFlzjdwsLm2+5FaC6SJQVJXu8IxMTlOpIc6+XKC HANaczQqAq0zCqBVb/f5CwqVbAWRgionjdRvwx8ecaUL5RrZcxUcqaWMADzvWbIL YrgAs6c11I75R2iGnAi3ZtQk8ogJc5oIPdcTkJtaU9PUdeO014MrZx8LqxW52Efy Qayj+sXoiRKps8VSOPbe4/OiiYJoAbw37I10BnI39u/dh08+kGJnlamuStNR3gZO qzsDWgxjnDSxxMBq6f0YRxQ1JmmdT0saUtSGHMPmHU/musFrMdpi0nINVFKdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaCU02/Tx1usdnd7BKji8Z2UIlAowHwYDVR0j BBgwFoAUcvA8rLV+ycMtuXq9eX2B4qvIKSowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3lUNVJqWlk4aFBCelFxaktxSzJ3QWhTeVZDaHFDVkM5SjdCMVF2RDZM N3MvMC83MkYwM0NBQ0I1N0VDOUMzMkRCOTdBQkQ3OTdEODFFMkFCQzgyOTJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyRjAzQ0FDQjU3RUM5QzMy REI5N0FCRDc5N0Q4MUUyQUJDODI5MkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3lUNVJqWlk4aFBCelFxaktxSzJ3QWhTeVZDaHFDVkM5SjdCMVF2RDZMN3MvMC83 MkYwM0NBQ0I1N0VDOUMzMkRCOTdBQkQ3OTdEODFFMkFCQzgyOTJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZwE2HlDsPsu5DTiXSicTgRMrdx4bVTrsrbQ6lbvLSroUay+dukt+FgL0LiiP hF1sU4O8jZpKkNBeiagYMZNxgz7dIE07U8HDl/5e1qX6ZswWNBn+qPNTdSmxhMHK kYDz8HIbCN8SSSdiwwp4yXvRQNgvydWVCp5qy8MsxWRuAudl7rGGzLpZXjDdU4o3 WPjLvDhFjQ62IGTvJ2cxLNcJwV39DPtfLbEgzU5yuoSdf+N4qjzLCVRIYPm/N+/b B47w+1NsNLZDBlDQUVU1h3s64x3FwK3GtjBDeMBYFsT/+6xS627bMktd61uTg1Yt UlMA/+jp6c7+2QOwmdWrBLi/yQ== -----END CERTIFICATE-----Generated at Sat May 10 18:47:19 2025 by rpki-client