$ rpki-client -vvf rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.mft File: 20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.mft (raw, json) Hash identifier: PLSPE6eNP+cpegZOvdYtG4ZyEtxASXLRbBEC24gcQnE= Subject key identifier: 23:4A:B2:BE:72:3D:B9:BB:FC:B4:16:44:1E:15:21:5E:14:05:3A:C3 Authority key identifier: 20:BB:C4:8E:7B:60:C3:E5:05:5C:CB:F4:CC:72:A7:6B:D7:84:0A:6D Certificate issuer: /CN=20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D Certificate serial: 3707F0A166DE881945B7840BB52795E2F06396C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.cer Subject info access: rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.mft Manifest number: 39 Signing time: Sun 11 May 2025 14:39:13 +0000 Manifest this update: Sun 11 May 2025 14:34:13 +0000 Manifest next update: Mon 12 May 2025 16:48:13 +0000 Files and hashes: 1: 34352e3137332e3136342e302f32322d3332203d3e20323638383137.roa (hash: ib74MGqkhFa48pYyfmC9Xa9p5tZdKnPnUjhd5qCgRqs=) 2: 20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.crl (hash: NCp1601Bd3qNiiuZIbXBq2Pm4Dn3IiUUqV0ymAaGvgM=) 3: 323830343a356231343a3a2f33322d313238203d3e20323638383137.roa (hash: O8ukbNGx4djkBCy3iGT6HUif6vNq+V1guSg8DWecSgI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.crl rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 16:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:07:f0:a1:66:de:88:19:45:b7:84:0b:b5:27:95:e2:f0:63:96:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D Validity Not Before: May 11 14:34:13 2025 GMT Not After : May 12 16:48:13 2025 GMT Subject: CN=234AB2BE723DB9BBFCB416441E15215E14053AC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4f:95:74:e8:7e:1b:69:f5:f4:e2:c3:ca:41: 29:7f:fb:d2:8c:52:a1:a0:12:58:4b:02:20:c6:6e: f2:7b:e9:8c:5f:7f:0b:ed:47:1c:e3:0c:9f:4d:cb: d4:36:33:6d:8f:30:30:a9:f1:04:23:c6:fe:c2:3b: b5:31:78:e8:d5:23:eb:a0:35:30:8b:c6:f7:05:59: 9b:49:45:1b:f5:cd:3d:62:84:63:3c:0b:21:d8:ba: 5c:21:22:1d:8c:52:b3:57:80:29:fd:4e:d2:9f:a4: 5f:00:6b:d4:ba:25:30:bd:e9:b1:fc:46:41:11:9a: 0f:be:3b:d3:2c:fe:68:ee:f5:b3:50:78:6a:f2:7e: b2:a0:57:c6:47:cc:68:35:7b:6d:b1:e2:4d:5b:f2: 24:ef:65:fe:aa:1e:31:c8:1a:21:cc:27:65:59:3d: ff:10:af:94:ed:54:25:57:8b:86:df:c2:91:6b:b4: 80:fd:ea:99:ce:b4:42:28:82:03:f4:0e:5d:eb:ae: 9a:bc:8f:8c:1c:38:f9:1c:6c:eb:52:86:a8:0e:72: 29:16:da:21:c1:ac:ba:0d:08:22:fa:a7:53:9a:fa: ba:0e:a5:4e:df:9e:c5:7e:d1:d6:7f:71:6e:16:a3: ce:42:ae:c3:c3:27:ac:58:ee:63:a4:ac:be:70:90: b8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4A:B2:BE:72:3D:B9:BB:FC:B4:16:44:1E:15:21:5E:14:05:3A:C3 X509v3 Authority Key Identifier: keyid:20:BB:C4:8E:7B:60:C3:E5:05:5C:CB:F4:CC:72:A7:6B:D7:84:0A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:99:17:92:bd:08:13:ca:ef:41:e5:24:7b:01:6c:0e:f5:eb: 9d:9f:4c:b7:a2:35:93:62:ea:ef:71:05:e5:69:64:2d:b8:47: 21:2c:06:b5:8d:4c:9b:69:6b:01:f4:a7:72:f7:79:4f:db:38: 61:6c:bb:0f:05:ac:cf:3e:5f:28:1f:f2:2b:1d:d2:06:bd:d8: 61:63:fe:c1:cf:46:08:35:c3:af:b7:1d:27:68:e8:fa:ab:21: ca:d9:d0:c0:78:07:ec:16:81:01:fd:28:d0:19:4f:79:ae:fb: 79:fb:75:69:65:19:77:1e:61:0e:fe:90:51:00:08:d6:18:f7: 98:75:b5:77:ba:da:b9:60:4e:22:8d:16:d6:44:0a:fe:d3:d0: 9e:3e:b9:4f:0e:e5:6b:25:50:ad:82:eb:d0:ba:32:c1:88:41: 70:13:05:16:f8:19:5c:1f:e5:ac:98:1b:e8:b1:27:2e:12:2a: e6:b3:3c:87:48:4a:4a:a6:bc:5e:57:f7:74:25:51:7e:66:4f: 83:d9:d1:ab:d7:d0:63:87:e5:73:5e:f8:c4:1f:48:af:33:4e: b8:e7:e1:24:ce:4b:3a:15:9c:be:d0:5a:60:37:a1:2f:fb:55: 5b:53:9f:13:9b:88:ba:ec:d0:23:f7:06:4b:ee:ac:00:77:a3: e3:9a:af:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNwfwoWbeiBlFt4QLtSeV4vBjlsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCQkM0OEU3QjYwQzNFNTA1NUNDQkY0Q0M3MkE3NkJE Nzg0MEE2RDAeFw0yNTA1MTExNDM0MTNaFw0yNTA1MTIxNjQ4MTNaMDMxMTAvBgNV BAMTKDIzNEFCMkJFNzIzREI5QkJGQ0I0MTY0NDFFMTUyMTVFMTQwNTNBQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtT5V06H4bafX04sPKQSl/+9KM UqGgElhLAiDGbvJ76YxffwvtRxzjDJ9Ny9Q2M22PMDCp8QQjxv7CO7UxeOjVI+ug NTCLxvcFWZtJRRv1zT1ihGM8CyHYulwhIh2MUrNXgCn9TtKfpF8Aa9S6JTC96bH8 RkERmg++O9Ms/mju9bNQeGryfrKgV8ZHzGg1e22x4k1b8iTvZf6qHjHIGiHMJ2VZ Pf8Qr5TtVCVXi4bfwpFrtID96pnOtEIoggP0Dl3rrpq8j4wcOPkcbOtShqgOcikW 2iHBrLoNCCL6p1Oa+roOpU7fnsV+0dZ/cW4Wo85CrsPDJ6xY7mOkrL5wkLgpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUI0qyvnI9ubv8tBZEHhUhXhQFOsMwHwYDVR0j BBgwFoAUILvEjntgw+UFXMv0zHKna9eECm0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODhNWGc5TXF5dWZuMXlUNFRTR1lTUUJMdnJGcFAxWlVxcExySGdQbllu TUYvMC8yMEJCQzQ4RTdCNjBDM0U1MDU1Q0NCRjRDQzcyQTc2QkQ3ODQwQTZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwQkJDNDhFN0I2MEMzRTUw NTVDQ0JGNENDNzJBNzZCRDc4NDBBNkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODhNWGc5TXF5dWZuMXlUNFRTR1lTUUJMdnJGcFAxWlVxcExySGdQblluTUYvMC8y MEJCQzQ4RTdCNjBDM0U1MDU1Q0NCRjRDQzcyQTc2QkQ3ODQwQTZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH5kXkr0IE8rvQeUkewFsDvXrnZ9Mt6I1k2Lq73EF5WlkLbhHISwGtY1Mm2lr AfSncvd5T9s4YWy7DwWszz5fKB/yKx3SBr3YYWP+wc9GCDXDr7cdJ2jo+qshytnQ wHgH7BaBAf0o0BlPea77eft1aWUZdx5hDv6QUQAI1hj3mHW1d7rauWBOIo0W1kQK /tPQnj65Tw7layVQrYLr0LoywYhBcBMFFvgZXB/lrJgb6LEnLhIq5rM8h0hKSqa8 Xlf3dCVRfmZPg9nRq9fQY4flc174xB9IrzNOuOfhJM5LOhWcvtBaYDehL/tVW1Of E5uIuuzQI/cGS+6sAHej45qvSA== -----END CERTIFICATE-----Generated at Sun May 11 19:21:21 2025 by rpki-client