$ rpki-client -vvf rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft File: 481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft (raw, json) Hash identifier: KyiL134B+NajFHPjvqERkuB+evrZDaPjx2skZ3Ya5YA= Subject key identifier: 33:70:9C:05:3C:B3:7B:E1:D7:5E:37:CC:42:31:F1:4F:A1:0C:C8:C6 Authority key identifier: 48:1B:24:AC:65:23:E8:C3:FC:CE:DE:9F:C8:B8:A7:4C:C2:C4:E5:F9 Certificate issuer: /CN=481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9 Certificate serial: 3E74FCA4DF3E1F15E0BAC2B2086AA33ADAFE469B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.cer Subject info access: rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft Manifest number: 021D Signing time: Tue 13 May 2025 15:40:00 +0000 Manifest this update: Tue 13 May 2025 15:35:00 +0000 Manifest next update: Wed 14 May 2025 16:56:00 +0000 Files and hashes: 1: 34352e3233322e32302e302f32322d3234203d3e20323637323438.roa (hash: OoMklKgWnbZZyD9EXa9zX8avqQ0zyo27I7zEQ1Kbu70=) 2: 323830343a346138633a3a2f33322d3334203d3e20323637323438.roa (hash: HXBPNNM9JK77Qjs6rWwR8L8yvx4LZpjy3+ee8Pytg0E=) 3: 323830343a346138633a3130303a3a2f34302d3430203d3e20323637323438.roa (hash: V3fffgqCN3ORQOxU//QC0eXQOytJiGD37tPjec0DJ9k=) 4: 481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.crl (hash: JbXTPzFC1Ynd8Het2wjesYS97ADdsWjjw/wGXBAqV08=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.crl rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 May 2025 16:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:74:fc:a4:df:3e:1f:15:e0:ba:c2:b2:08:6a:a3:3a:da:fe:46:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9 Validity Not Before: May 13 15:35:00 2025 GMT Not After : May 14 16:56:00 2025 GMT Subject: CN=33709C053CB37BE1D75E37CC4231F14FA10CC8C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:a2:9b:6c:7f:b9:22:02:d5:ee:f5:63:27: dd:63:41:71:df:b7:08:fe:10:43:e0:ea:0a:e3:33: e5:9a:fd:77:03:22:b3:13:e2:da:59:bd:dd:0f:d7: 37:ef:d1:b0:c5:0c:48:f3:33:7d:48:4a:c6:12:71: fc:5d:4a:38:b4:5d:b1:91:f6:1f:c5:d3:2b:a9:ea: ca:56:a9:18:c7:e2:86:ec:57:85:dc:48:3f:2e:cc: 3f:19:de:8c:8c:02:a7:69:36:51:67:e8:6c:1a:32: 71:a1:7b:0e:d4:dd:d5:c1:dd:7f:22:0d:01:42:42: 24:1d:ab:90:ec:55:f2:6b:2b:3d:37:54:af:79:e3: 2d:43:7d:3a:4d:ee:56:99:a2:87:62:6e:df:d8:f9: 50:89:bd:83:0e:d9:bf:1f:26:9b:2c:d0:3d:9c:8f: aa:4c:6d:45:af:30:b6:94:5a:9c:a6:3a:df:14:4d: cb:f8:b5:2b:ee:7f:76:68:b6:9d:ad:0a:3f:ab:e8: 02:77:4c:89:ef:a3:be:6c:b7:c5:6a:bf:d1:72:0a: 64:f1:08:12:32:4a:78:ab:b4:33:fb:29:3f:e8:b2: 3c:36:7f:ae:22:67:9f:1a:e2:bf:50:7e:c4:3f:ad: 9e:b6:fc:26:dc:60:88:52:35:bf:23:a1:73:86:48: d8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:70:9C:05:3C:B3:7B:E1:D7:5E:37:CC:42:31:F1:4F:A1:0C:C8:C6 X509v3 Authority Key Identifier: keyid:48:1B:24:AC:65:23:E8:C3:FC:CE:DE:9F:C8:B8:A7:4C:C2:C4:E5:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:eb:43:11:cd:ee:e3:87:60:79:a4:24:cf:45:a2:6e:90:d3: a9:d3:e2:c4:4b:a6:03:94:1d:2a:3a:c4:67:92:30:6c:6c:a8: ff:82:63:f3:85:91:db:28:f0:40:18:f7:8f:fe:65:e0:03:5a: 76:2f:c7:6b:14:5e:9e:b7:98:39:aa:41:14:fc:d3:e4:64:5f: 6d:04:1f:1c:af:27:b7:af:d7:29:0f:b0:95:4e:1c:90:35:35: ff:9f:ec:79:c5:5e:78:fb:e1:d1:8c:2b:89:45:e6:bb:ad:56: 95:63:e9:4d:d3:be:05:ec:71:06:1f:91:e7:ab:78:4a:c4:e6: 2d:a8:b9:98:a7:46:81:85:12:23:00:9e:da:12:e0:46:12:27: 8f:de:c9:27:31:1c:fd:a1:a4:4f:cc:3b:47:ea:e0:c6:30:0e: 8c:be:5a:54:ce:40:fc:c2:f4:79:cd:2a:0a:e8:62:e2:3f:48: be:14:9b:c5:7b:83:1c:1a:cd:4f:00:13:8f:77:92:56:66:fd: ed:3e:fb:87:66:29:bd:e6:46:81:a0:d7:6d:90:30:9b:95:64: f2:fd:4b:39:96:9d:f8:91:13:f6:f7:fd:08:87:03:68:10:29: f7:72:e1:d7:cb:f4:7d:f3:c9:67:49:28:10:af:34:71:7f:4f: ca:b1:ee:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPnT8pN8+HxXgusKyCGqjOtr+RpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgxQjI0QUM2NTIzRThDM0ZDQ0VERTlGQzhCOEE3NEND MkM0RTVGOTAeFw0yNTA1MTMxNTM1MDBaFw0yNTA1MTQxNjU2MDBaMDMxMTAvBgNV BAMTKDMzNzA5QzA1M0NCMzdCRTFENzVFMzdDQzQyMzFGMTRGQTEwQ0M4QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCujKKbbH+5IgLV7vVjJ91jQXHf twj+EEPg6grjM+Wa/XcDIrMT4tpZvd0P1zfv0bDFDEjzM31ISsYScfxdSji0XbGR 9h/F0yup6spWqRjH4obsV4XcSD8uzD8Z3oyMAqdpNlFn6GwaMnGhew7U3dXB3X8i DQFCQiQdq5DsVfJrKz03VK954y1DfTpN7laZoodibt/Y+VCJvYMO2b8fJpss0D2c j6pMbUWvMLaUWpymOt8UTcv4tSvuf3Zotp2tCj+r6AJ3TInvo75st8Vqv9FyCmTx CBIySnirtDP7KT/osjw2f64iZ58a4r9QfsQ/rZ62/CbcYIhSNb8joXOGSNgBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUM3CcBTyze+HXXjfMQjHxT6EMyMYwHwYDVR0j BBgwFoAUSBskrGUj6MP8zt6fyLinTMLE5fkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEJNWHQ2cFhWWXVlYVFaRDhxcGQxaE1FcTFSS0JHa1YzQW9jQkZIUkFt OFQvMS80ODFCMjRBQzY1MjNFOEMzRkNDRURFOUZDOEI4QTc0Q0MyQzRFNUY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4MUIyNEFDNjUyM0U4QzNG Q0NFREU5RkM4QjhBNzRDQzJDNEU1RjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEJNWHQ2cFhWWXVlYVFaRDhxcGQxaE1FcTFSS0JHa1YzQW9jQkZIUkFtOFQvMS80 ODFCMjRBQzY1MjNFOEMzRkNDRURFOUZDOEI4QTc0Q0MyQzRFNUY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi+tDEc3u44dgeaQkz0WibpDTqdPixEumA5QdKjrEZ5IwbGyo/4Jj84WR2yjw QBj3j/5l4ANadi/HaxRenreYOapBFPzT5GRfbQQfHK8nt6/XKQ+wlU4ckDU1/5/s ecVeePvh0YwriUXmu61WlWPpTdO+BexxBh+R56t4SsTmLai5mKdGgYUSIwCe2hLg RhInj97JJzEc/aGkT8w7R+rgxjAOjL5aVM5A/ML0ec0qCuhi4j9IvhSbxXuDHBrN TwATj3eSVmb97T77h2YpveZGgaDXbZAwm5Vk8v1LOZad+JET9vf9CIcDaBAp93Lh 18v0ffPJZ0koEK80cX9PyrHunA== -----END CERTIFICATE-----Generated at Wed May 14 05:01:42 2025 by rpki-client