$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft File: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft (raw, json) Hash identifier: SFFS4fMbwRAvyRn6GxCVx238EXv3USE/jx9rtRWCgTY= Subject key identifier: AF:5B:0E:C5:C4:21:E1:0C:8D:32:F1:4C:04:45:42:E5:D2:B9:15:D7 Authority key identifier: CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA Certificate issuer: /CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA Certificate serial: 24E6E1CEA2BD1842ECFEC22753E5291F2C6B870C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft Manifest number: 021C Signing time: Mon 12 May 2025 13:42:28 +0000 Manifest this update: Mon 12 May 2025 13:37:28 +0000 Manifest next update: Tue 13 May 2025 14:16:28 +0000 Files and hashes: 1: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl (hash: /y3zGVNCLs8QnqGLIDt7wQY9Xzh18n2E7Gs0eJlFzgs=) 2: 323830343a333661303a3a2f33322d3335203d3e20323636333630.roa (hash: rXszqdwUvQGrhVWf0dQGexOPbYRtVFxMgBAZYV51XYo=) 3: 3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa (hash: N9HuU1W9ryFGU85A3ZfF+Ao4jsgW1hWTRMLA6XPYlk0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 14:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e6:e1:ce:a2:bd:18:42:ec:fe:c2:27:53:e5:29:1f:2c:6b:87:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA Validity Not Before: May 12 13:37:28 2025 GMT Not After : May 13 14:16:28 2025 GMT Subject: CN=AF5B0EC5C421E10C8D32F14C044542E5D2B915D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2d:6c:0e:c8:99:ea:00:c2:be:f6:1b:aa:b9: 96:a2:f7:8f:a5:db:dc:37:de:13:25:98:4f:f4:55: 70:b7:88:6b:75:69:88:b5:fa:c5:63:36:d2:c0:8d: 61:1c:9f:7e:aa:66:4c:b0:ae:eb:07:50:2a:de:ff: 5c:ef:eb:14:87:63:b9:e8:72:ca:1f:2b:90:e0:d3: 09:c8:53:ad:a7:da:d6:8c:73:72:40:c2:3e:07:50: 69:2b:4d:a0:df:05:cc:02:58:b4:18:d3:09:e4:d3: 19:18:07:9d:7e:fa:be:3b:2b:35:dd:c2:66:70:94: db:0e:00:aa:7e:29:54:78:e6:8c:36:81:ba:25:4c: 03:9a:a7:64:20:1b:48:b6:1b:02:70:a3:b4:b4:5a: d8:34:72:5d:d3:2f:60:1a:3c:d5:db:38:c2:b7:32: 0a:79:a5:e4:52:09:13:4a:0f:3d:38:82:30:60:27: 72:ff:7e:40:a2:08:40:2a:d9:61:1e:aa:a0:ee:8b: 97:d5:69:31:65:e4:7d:4e:19:2c:2a:6f:20:4a:bd: 8e:cc:f5:f0:20:ec:a8:7a:6c:9a:6f:95:c1:73:02: 97:19:b4:44:09:de:73:6f:27:ba:ed:28:3d:74:be: ce:0a:48:26:20:11:31:6f:8a:2d:a1:35:af:0b:3d: 1b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5B:0E:C5:C4:21:E1:0C:8D:32:F1:4C:04:45:42:E5:D2:B9:15:D7 X509v3 Authority Key Identifier: keyid:CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:6f:61:8f:d9:cc:ac:72:74:12:ee:83:b0:07:9b:ba:f8:12: 4b:0e:36:f1:7d:45:ba:0b:e7:8b:68:91:d7:3a:2e:7b:aa:34: 29:d2:2e:b8:98:ca:6c:f4:ff:a1:26:12:2b:55:92:75:61:ba: 1d:a1:44:93:e3:9c:fc:a8:ec:27:43:5b:4a:5c:0d:9f:59:09: 4d:01:2b:3e:a1:66:e9:3f:81:e4:40:7b:f6:33:77:06:32:a3: c5:89:e8:6a:e2:ef:86:8c:ea:30:07:f6:db:f1:fc:7e:32:0a: 30:d7:d7:62:42:8a:a3:06:3e:3b:fa:1c:85:31:83:4a:2b:45: 18:43:db:85:b3:dc:a6:9b:18:37:7e:31:33:7a:37:1a:9d:c5: 74:4b:02:fe:f1:29:93:92:b9:6b:48:52:9a:cd:28:a5:a2:14: 1c:b1:75:82:5f:02:58:ae:0d:89:5a:07:7a:a6:8a:23:d7:9d: f4:e1:11:76:5e:7f:62:32:69:b4:93:55:46:c6:eb:7e:15:c7: 79:ae:74:7f:66:bd:ab:71:ce:59:23:ab:4f:81:7e:2c:17:47: 93:35:36:80:c7:0f:ae:59:6f:9d:4f:70:d0:15:6a:18:0a:e0: d5:be:3e:6e:ca:bc:31:6e:d6:92:b8:c7:f9:ed:19:45:ee:73: 4d:30:b3:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJObhzqK9GELs/sInU+UpHyxrhwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExQzRCNTQ2MjIyRUUxNTZBMEQ0MzQ4RDJBQjAwNDNC REFCNEJFQTAeFw0yNTA1MTIxMzM3MjhaFw0yNTA1MTMxNDE2MjhaMDMxMTAvBgNV BAMTKEFGNUIwRUM1QzQyMUUxMEM4RDMyRjE0QzA0NDU0MkU1RDJCOTE1RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNLWwOyJnqAMK+9huquZai94+l 29w33hMlmE/0VXC3iGt1aYi1+sVjNtLAjWEcn36qZkywrusHUCre/1zv6xSHY7no csofK5Dg0wnIU62n2taMc3JAwj4HUGkrTaDfBcwCWLQY0wnk0xkYB51++r47KzXd wmZwlNsOAKp+KVR45ow2gbolTAOap2QgG0i2GwJwo7S0Wtg0cl3TL2AaPNXbOMK3 Mgp5peRSCRNKDz04gjBgJ3L/fkCiCEAq2WEeqqDui5fVaTFl5H1OGSwqbyBKvY7M 9fAg7Kh6bJpvlcFzApcZtEQJ3nNvJ7rtKD10vs4KSCYgETFvii2hNa8LPRtfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUr1sOxcQh4QyNMvFMBEVC5dK5FdcwHwYDVR0j BBgwFoAUyhxLVGIi7hVqDUNI0qsAQ72rS+owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBK U1MvMS9DQTFDNEI1NDYyMjJFRTE1NkEwRDQzNDhEMkFCMDA0M0JEQUI0QkVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMUM0QjU0NjIyMkVFMTU2 QTBENDM0OEQyQUIwMDQzQkRBQjRCRUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBKU1MvMS9D QTFDNEI1NDYyMjJFRTE1NkEwRDQzNDhEMkFCMDA0M0JEQUI0QkVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQW9hj9nMrHJ0Eu6DsAebuvgSSw428X1Fugvni2iR1zoue6o0KdIuuJjKbPT/ oSYSK1WSdWG6HaFEk+Oc/KjsJ0NbSlwNn1kJTQErPqFm6T+B5EB79jN3BjKjxYno auLvhozqMAf22/H8fjIKMNfXYkKKowY+O/ochTGDSitFGEPbhbPcppsYN34xM3o3 Gp3FdEsC/vEpk5K5a0hSms0opaIUHLF1gl8CWK4NiVoHeqaKI9ed9OERdl5/YjJp tJNVRsbrfhXHea50f2a9q3HOWSOrT4F+LBdHkzU2gMcPrllvnU9w0BVqGArg1b4+ bsq8MW7WkrjH+e0ZRe5zTTCz6g== -----END CERTIFICATE-----Generated at Tue May 13 04:53:36 2025 by rpki-client