$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.mft File: 7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.mft (raw, json) Hash identifier: P/vpRxS1D3onTbdGlgb0QQ+1wKuaMA/ajIPhQgc/QGU= Subject key identifier: E1:B7:E9:C6:D9:59:8C:03:2C:00:18:A8:36:08:AA:5B:E8:DA:41:AD Authority key identifier: 7D:BF:23:D2:D2:FE:1E:5F:87:E0:2D:AA:39:CF:DE:13:BD:6C:79:C6 Certificate issuer: /CN=7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6 Certificate serial: 0CFEEE88136FF95F4FD936792804E840A7050E65 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.mft Manifest number: F3 Signing time: Sat 10 May 2025 18:32:32 +0000 Manifest this update: Sat 10 May 2025 18:27:32 +0000 Manifest next update: Sun 11 May 2025 18:34:32 +0000 Files and hashes: 1: 3139312e372e302e302f32332d3332203d3e20323733343331.roa (hash: 4uWIjjkzu/S9R++2NeybgQIf5elNz0cMMX4WwUGI0Zg=) 2: 7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.crl (hash: uj8VLx3wXKZEvpq19iYwNBC11UYVzmgsSM+56t8wQfM=) 3: 323830343a386538343a3a2f33322d313238203d3e20323733343331.roa (hash: AvVcTCA+lyIraklGxLPxL94UnxVE9Ct0Fzl5yeIwNOQ=) 4: 3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa (hash: 0P7iD2hXXk4qUK7tK9OJ9KHe5Yp/FRtXioFvVUvwsJo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.crl rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 18:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:fe:ee:88:13:6f:f9:5f:4f:d9:36:79:28:04:e8:40:a7:05:0e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6 Validity Not Before: May 10 18:27:32 2025 GMT Not After : May 11 18:34:32 2025 GMT Subject: CN=E1B7E9C6D9598C032C0018A83608AA5BE8DA41AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d6:b5:17:05:e2:76:33:14:77:b3:28:ad:db: 79:68:12:36:47:2c:91:01:d4:35:38:5e:1c:03:1b: 0f:8d:d9:87:fe:bf:f1:7f:19:5a:b9:d3:be:14:8f: 3d:c5:5d:75:a3:9c:b6:c4:71:00:84:7c:64:b2:37: f5:9c:d8:bf:3a:6b:71:f3:7a:ed:78:9c:e4:82:2f: 36:90:9b:97:ec:a4:73:a8:dc:6e:e5:62:74:1a:c6: a6:06:c1:76:90:44:82:e0:4e:4e:07:6e:0c:25:f0: 14:3f:f9:12:86:34:7c:30:46:42:94:33:d3:dd:89: 55:4b:ca:95:1a:17:c1:1b:3a:88:5c:3f:89:3c:4c: f0:ca:47:3e:ec:6c:13:4c:31:09:d8:f4:f3:76:eb: e7:ce:25:d3:1b:cf:58:93:7b:9f:1a:a3:ff:b9:d1: fe:a5:aa:39:03:53:8c:83:1c:3e:49:5a:41:7c:bb: 38:05:ae:69:3e:d2:82:e1:d8:d9:2d:d1:7f:9e:2b: 4d:9c:b3:59:ef:92:1c:9c:6d:6f:07:49:c0:b2:9e: e7:11:7e:8e:c4:56:23:56:38:23:43:00:2f:3c:f4: cc:0b:3d:2d:a9:1c:e1:2a:8c:9f:3f:78:8a:3c:54: 75:70:fe:d4:04:77:65:2f:88:83:00:76:3e:04:09: af:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B7:E9:C6:D9:59:8C:03:2C:00:18:A8:36:08:AA:5B:E8:DA:41:AD X509v3 Authority Key Identifier: keyid:7D:BF:23:D2:D2:FE:1E:5F:87:E0:2D:AA:39:CF:DE:13:BD:6C:79:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:70:79:b9:5a:37:36:c9:45:ed:66:4d:08:45:65:00:1b:57: 06:fe:cf:ea:9f:e9:25:e7:f6:e6:aa:f5:21:00:cb:7a:77:8d: 82:c4:f4:9b:2d:f7:e3:37:6a:40:4b:10:ff:ef:46:ba:a7:a4: 73:70:26:a0:e7:d4:68:3c:66:b8:8b:e3:74:25:63:5e:e5:95: e1:3d:0f:96:a8:72:83:56:fb:23:84:82:46:31:2a:86:c0:86: 4c:7a:8d:08:d7:ce:94:e3:15:67:b5:3c:a0:f6:83:b2:22:e4: 73:62:4d:74:25:8b:1b:29:58:d6:00:fd:72:80:ae:26:75:17: 87:6e:63:f8:df:aa:c1:42:e6:a7:57:75:0e:18:cc:07:e9:b7: a9:e8:8a:93:3c:f3:61:f0:92:cc:88:89:0e:e5:bb:a1:bc:b2: 97:86:db:b9:a1:9c:6d:01:c0:e2:1b:56:43:51:76:7e:8f:50: 0a:bb:2f:83:30:94:6a:7e:ba:72:24:dc:29:cc:ca:93:72:e2: 7c:cd:24:9e:66:83:3d:4e:38:2f:24:5c:18:a0:a2:ab:25:03: 4d:8b:ef:d0:ab:5b:f7:e8:79:46:da:02:74:65:b1:a7:36:e8: 0e:30:10:c3:ad:08:ca:48:9d:40:bb:c9:41:91:2a:2a:f1:16: 63:7f:18:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDP7uiBNv+V9P2TZ5KAToQKcFDmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RCRjIzRDJEMkZFMUU1Rjg3RTAyREFBMzlDRkRFMTNC RDZDNzlDNjAeFw0yNTA1MTAxODI3MzJaFw0yNTA1MTExODM0MzJaMDMxMTAvBgNV BAMTKEUxQjdFOUM2RDk1OThDMDMyQzAwMThBODM2MDhBQTVCRThEQTQxQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj1rUXBeJ2MxR3syit23loEjZH LJEB1DU4XhwDGw+N2Yf+v/F/GVq5074Ujz3FXXWjnLbEcQCEfGSyN/Wc2L86a3Hz eu14nOSCLzaQm5fspHOo3G7lYnQaxqYGwXaQRILgTk4Hbgwl8BQ/+RKGNHwwRkKU M9PdiVVLypUaF8EbOohcP4k8TPDKRz7sbBNMMQnY9PN26+fOJdMbz1iTe58ao/+5 0f6lqjkDU4yDHD5JWkF8uzgFrmk+0oLh2Nkt0X+eK02cs1nvkhycbW8HScCynucR fo7EViNWOCNDAC889MwLPS2pHOEqjJ8/eIo8VHVw/tQEd2UviIMAdj4ECa/zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4bfpxtlZjAMsABioNgiqW+jaQa0wHwYDVR0j BBgwFoAUfb8j0tL+Hl+H4C2qOc/eE71secYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGlwazRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1FzSkxMazlNc3Bt RlgvMC83REJGMjNEMkQyRkUxRTVGODdFMDJEQUEzOUNGREUxM0JENkM3OUM2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdEQkYyM0QyRDJGRTFFNUY4 N0UwMkRBQTM5Q0ZERTEzQkQ2Qzc5QzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGlwazRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1FzSkxMazlNc3BtRlgvMC83 REJGMjNEMkQyRkUxRTVGODdFMDJEQUEzOUNGREUxM0JENkM3OUM2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsXB5uVo3NslF7WZNCEVlABtXBv7P6p/pJef25qr1IQDLeneNgsT0my334zdq QEsQ/+9Guqekc3AmoOfUaDxmuIvjdCVjXuWV4T0Plqhyg1b7I4SCRjEqhsCGTHqN CNfOlOMVZ7U8oPaDsiLkc2JNdCWLGylY1gD9coCuJnUXh25j+N+qwULmp1d1DhjM B+m3qeiKkzzzYfCSzIiJDuW7obyyl4bbuaGcbQHA4htWQ1F2fo9QCrsvgzCUan66 ciTcKczKk3LifM0knmaDPU44LyRcGKCiqyUDTYvv0Ktb9+h5RtoCdGWxpzboDjAQ w60IykidQLvJQZEqKvEWY38YNw== -----END CERTIFICATE-----Generated at Sun May 11 03:56:32 2025 by rpki-client