$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft File: C28F148D3E037C892C74D290F0D92B67DAE047D8.mft (raw, json) Hash identifier: zbunbRsgNdArZwrDZVeRLdmn7g7RMttMaoOpm4KVqIo= Subject key identifier: 0F:49:D4:71:1C:82:52:75:2B:51:4F:7F:8B:EC:CC:E6:9A:08:E1:B9 Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8 Certificate issuer: /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8 Certificate serial: 3F67100A14B150D0E122A47F219C40023311C32E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft Manifest number: 0219 Signing time: Fri 09 May 2025 20:34:03 +0000 Manifest this update: Fri 09 May 2025 20:29:03 +0000 Manifest next update: Sat 10 May 2025 21:39:03 +0000 Files and hashes: 1: C28F148D3E037C892C74D290F0D92B67DAE047D8.crl (hash: m/do1MIImguWU+nUIM2BXiKk8SX6FGAYDgilFhWldUM=) 2: 34352e3137382e32302e302f32322d3332203d3e20323639303135.roa (hash: 7TsStcmEGD2QmtP2f2OHbKcU8suv265JUFL/p6mQ5lk=) 3: 323830343a356532383a3a2f33322d313238203d3e20323639303135.roa (hash: Tk0fHJm8CCskQQrj3njBfNusl3ZZnaPSVqD083REh3M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 May 2025 21:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:67:10:0a:14:b1:50:d0:e1:22:a4:7f:21:9c:40:02:33:11:c3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8 Validity Not Before: May 9 20:29:03 2025 GMT Not After : May 10 21:39:03 2025 GMT Subject: CN=0F49D4711C8252752B514F7F8BECCCE69A08E1B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:d6:c0:61:e6:70:70:bf:bf:e3:ca:91:e4: f6:c2:22:f1:11:6a:d7:08:95:52:91:e0:e7:f2:c5: 12:e7:2c:ee:fe:5e:27:4b:72:cd:b1:2b:fc:44:88: dd:e6:4e:d2:b7:02:37:b5:8f:6a:dc:17:61:a4:86: 64:1a:80:66:ff:f8:39:f1:f4:50:1a:e7:d3:30:a0: fe:60:b2:bd:bd:24:b3:8c:cb:28:d8:ac:9c:1a:98: ee:dc:20:89:d9:5e:43:ee:41:77:40:89:44:43:37: 76:19:31:c6:f2:0f:5b:51:3c:ee:ee:9f:b8:78:30: 6f:2f:b4:66:05:7e:50:13:60:19:7c:32:84:be:2f: 24:73:03:24:7a:fe:45:53:6b:2e:8d:95:5e:b0:44: 86:66:66:ec:76:77:97:ff:fb:b8:27:c5:ac:80:d3: a6:6b:09:fa:cc:94:dd:ed:46:24:9a:f2:4a:9b:68: bb:66:31:d8:77:29:67:b6:db:a2:eb:28:83:96:bc: 20:ae:cd:4a:bc:77:69:30:ba:2e:d2:b5:83:03:a1: b4:30:e5:7b:30:ba:5c:55:9a:41:16:83:4a:78:82: 2b:df:5d:b1:af:d1:9d:f6:8e:9d:83:2e:d3:a2:aa: 5f:f9:ef:15:b6:55:d5:14:a7:ba:bd:c5:85:92:1a: f0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:49:D4:71:1C:82:52:75:2B:51:4F:7F:8B:EC:CC:E6:9A:08:E1:B9 X509v3 Authority Key Identifier: keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b4:e7:25:6c:2c:41:9f:5e:90:d6:85:8d:16:be:29:dd:e2: ca:6f:dd:80:f7:e1:18:5d:43:97:59:8c:12:a8:a3:fb:23:27: 8f:1c:bd:70:57:08:c9:22:03:04:a2:4f:04:6c:3c:24:f5:71: 6b:9b:28:3e:94:0c:39:b2:ea:4f:48:21:24:e2:4c:54:39:1a: 1c:eb:ab:4b:0c:da:5d:96:a4:9c:cf:6d:a7:ee:f5:83:93:1d: bb:0d:a0:f4:1b:68:ee:42:20:23:4d:6b:9e:99:e4:23:cb:f4: 54:12:c4:32:25:b0:89:08:16:10:f3:23:5e:1a:ca:76:a7:a5: cf:c5:73:7a:07:6b:f8:94:d0:81:f8:17:23:65:63:b3:3c:84: 2b:7f:ca:ab:2c:e3:c8:62:b1:1b:e4:3f:1b:00:c5:f3:10:80: 66:24:b3:bc:dc:2a:1a:76:32:ff:64:ed:a3:df:02:1f:fd:bb: 39:d2:9d:9d:46:5d:09:92:a3:b0:61:69:2f:64:6e:f0:fc:c8: bd:91:1b:af:d8:08:99:69:35:0a:f0:2c:b1:c3:a8:a2:34:8e: 20:1e:78:cf:fc:a1:6d:e6:71:e5:27:3d:e2:87:92:b9:bc:ee: 1f:f1:ae:c2:70:cd:85:bd:ce:3d:da:d5:33:c9:04:44:ca:9e: 01:08:44:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP2cQChSxUNDhIqR/IZxAAjMRwy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI4RjE0OEQzRTAzN0M4OTJDNzREMjkwRjBEOTJCNjdE QUUwNDdEODAeFw0yNTA1MDkyMDI5MDNaFw0yNTA1MTAyMTM5MDNaMDMxMTAvBgNV BAMTKDBGNDlENDcxMUM4MjUyNzUyQjUxNEY3RjhCRUNDQ0U2OUEwOEUxQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICNbAYeZwcL+/48qR5PbCIvER atcIlVKR4OfyxRLnLO7+XidLcs2xK/xEiN3mTtK3Aje1j2rcF2GkhmQagGb/+Dnx 9FAa59MwoP5gsr29JLOMyyjYrJwamO7cIInZXkPuQXdAiURDN3YZMcbyD1tRPO7u n7h4MG8vtGYFflATYBl8MoS+LyRzAyR6/kVTay6NlV6wRIZmZux2d5f/+7gnxayA 06ZrCfrMlN3tRiSa8kqbaLtmMdh3KWe226LrKIOWvCCuzUq8d2kwui7StYMDobQw 5XswulxVmkEWg0p4givfXbGv0Z32jp2DLtOiql/57xW2VdUUp7q9xYWSGvD5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUD0nUcRyCUnUrUU9/i+zM5poI4bkwHwYDVR0j BBgwFoAUwo8UjT4DfIksdNKQ8NkrZ9rgR9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF Z3AvMi9DMjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyOEYxNDhEM0UwMzdDODky Qzc0RDI5MEYwRDkyQjY3REFFMDQ3RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVFZ3AvMi9D MjhGMTQ4RDNFMDM3Qzg5MkM3NEQyOTBGMEQ5MkI2N0RBRTA0N0Q4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn7TnJWwsQZ9ekNaFjRa+Kd3iym/dgPfhGF1Dl1mMEqij+yMnjxy9cFcIySID BKJPBGw8JPVxa5soPpQMObLqT0ghJOJMVDkaHOurSwzaXZaknM9tp+71g5Mduw2g 9Bto7kIgI01rnpnkI8v0VBLEMiWwiQgWEPMjXhrKdqelz8Vzegdr+JTQgfgXI2Vj szyEK3/KqyzjyGKxG+Q/GwDF8xCAZiSzvNwqGnYy/2Tto98CH/27OdKdnUZdCZKj sGFpL2Ru8PzIvZEbr9gImWk1CvAsscOoojSOIB54z/yhbeZx5Sc94oeSubzuH/Gu wnDNhb3OPdrVM8kERMqeAQhEEA== -----END CERTIFICATE-----Generated at Sat May 10 13:40:28 2025 by rpki-client