$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft File: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft (raw, json) Hash identifier: JwRYMtwl7WJb5BsufVP3wHAcB6mscy5rr3AIXyEuscs= Subject key identifier: 02:9E:8A:3F:06:4A:BB:56:F7:76:1F:02:B0:21:79:10:20:60:20:1E Authority key identifier: 3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56 Certificate issuer: /CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156 Certificate serial: 2F3E12DD431365B9719AE420EB62E4037CDFA874 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer Subject info access: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft Manifest number: 0222 Signing time: Thu 15 May 2025 18:34:39 +0000 Manifest this update: Thu 15 May 2025 18:29:39 +0000 Manifest next update: Fri 16 May 2025 20:35:39 +0000 Files and hashes: 1: 34352e3233302e39322e302f32322d3234203d3e20323637313734.roa (hash: pqluJp9dP8BehPp8wAJ7d4shVc60G8J0RZCSVM3YKrY=) 2: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl (hash: 4JK7oWI7H9yXdARJuDUuewtmx97lEXwpPsKxE5fiiWE=) 3: 323830343a343934343a3a2f33322d3438203d3e20323637313734.roa (hash: /98gqYovjRwsWAOUZz7FJqYoYsB4E7lW4Ll5DwBrRaQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 May 2025 20:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3e:12:dd:43:13:65:b9:71:9a:e4:20:eb:62:e4:03:7c:df:a8:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156 Validity Not Before: May 15 18:29:39 2025 GMT Not After : May 16 20:35:39 2025 GMT Subject: CN=029E8A3F064ABB56F7761F02B02179102060201E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b8:df:05:ab:a8:69:b8:fb:9c:80:4d:57:5d: 1b:13:a5:48:cc:1b:09:da:8e:2f:bb:8a:6c:87:17: a7:18:c7:fb:7f:76:9a:29:0d:b1:9f:30:3f:62:24: e4:f2:00:99:76:4b:0d:85:9b:a7:26:36:da:73:9c: 63:10:a4:26:cb:cc:57:1c:be:78:3f:02:61:bd:fb: 83:f5:f9:07:65:bc:cb:32:1f:dc:e2:26:89:11:ec: f9:d5:21:ca:3b:34:87:20:d7:71:54:2f:2f:71:f9: 18:8e:ea:6b:f1:5e:2b:d6:67:c2:0c:b3:81:e6:44: 21:26:e0:c2:4a:d4:09:2b:b0:a5:c3:a1:a4:5b:a3: bb:08:8a:d4:3f:a6:8b:ac:d9:1f:d2:33:4e:c2:53: cc:59:bd:a7:61:43:3a:91:df:8c:b9:ac:94:6b:ac: eb:54:c2:f6:d5:9b:a3:0f:0c:46:1a:cd:bb:b8:e2: 35:da:20:3c:45:ac:48:54:91:a1:0b:02:9e:02:bc: bf:00:b5:29:fe:a1:04:80:58:7b:74:cc:54:fe:9f: 12:82:9a:f1:ed:ac:6c:1b:12:f8:dc:04:78:e8:d5: e0:8d:f4:7d:09:a4:96:84:44:12:7c:f0:06:18:9d: 78:a3:88:b2:e4:2f:d8:d5:c1:f0:4f:41:4b:57:99: 04:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9E:8A:3F:06:4A:BB:56:F7:76:1F:02:B0:21:79:10:20:60:20:1E X509v3 Authority Key Identifier: keyid:3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f3:c5:e0:15:93:05:a2:50:3f:45:36:ba:7b:3b:07:92:58: d2:76:99:9b:5e:35:86:cc:3a:d0:08:8f:04:ac:a6:c7:d3:4f: 28:af:69:7b:db:35:ee:c4:fe:d9:92:6a:81:6e:51:da:89:33: 4b:55:26:1c:10:b3:e9:95:b1:1b:d9:e6:56:16:3d:13:f3:8d: 32:64:17:84:4e:b5:22:7c:43:77:a7:d5:4b:31:62:a9:e0:ae: 1e:f9:a3:8b:df:70:6d:a5:25:37:8f:20:09:79:35:50:25:e9: 32:ae:e0:56:fd:9f:6d:7e:a4:40:64:79:03:90:9a:67:ef:7b: 76:b3:30:7b:1d:3d:fe:b4:5d:71:8a:e8:21:64:9a:74:03:af: c0:8e:39:9f:5f:3b:18:1a:bd:ed:ee:2f:3c:54:0a:cc:bd:38: 8e:6c:d1:ca:c5:98:94:13:28:60:37:75:01:1f:b6:9f:ac:e3: 6b:c2:46:06:5c:03:6d:82:bd:f7:d9:d8:c4:77:d6:fe:91:ba: 74:c5:e3:dc:d2:9d:5e:3e:08:d9:06:f3:5b:90:71:d2:3b:33: c7:13:14:74:b3:39:f8:04:84:f2:5f:97:b4:01:03:c1:48:df: 03:1f:3b:16:81:29:d9:ae:87:55:d7:92:1d:1c:1a:8a:31:3b: eb:a6:11:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULz4S3UMTZblxmuQg62LkA3zfqHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFMjdFOTM4MjREMUE4Q0JCQThDOUE0RUYxMTVFRjlE Q0EwMDE1NjAeFw0yNTA1MTUxODI5MzlaFw0yNTA1MTYyMDM1MzlaMDMxMTAvBgNV BAMTKDAyOUU4QTNGMDY0QUJCNTZGNzc2MUYwMkIwMjE3OTEwMjA2MDIwMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsuN8Fq6hpuPucgE1XXRsTpUjM Gwnaji+7imyHF6cYx/t/dpopDbGfMD9iJOTyAJl2Sw2Fm6cmNtpznGMQpCbLzFcc vng/AmG9+4P1+QdlvMsyH9ziJokR7PnVIco7NIcg13FULy9x+RiO6mvxXivWZ8IM s4HmRCEm4MJK1AkrsKXDoaRbo7sIitQ/pous2R/SM07CU8xZvadhQzqR34y5rJRr rOtUwvbVm6MPDEYazbu44jXaIDxFrEhUkaELAp4CvL8AtSn+oQSAWHt0zFT+nxKC mvHtrGwbEvjcBHjo1eCN9H0JpJaERBJ88AYYnXijiLLkL9jVwfBPQUtXmQT5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAp6KPwZKu1b3dh8CsCF5ECBgIB4wHwYDVR0j BBgwFoAUPOJ+k4JNGoy7qMmk7xFe+dygAVYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVhKTEJhbXZ5c2h6WVBnQkVzeXdwUnJHNUZvRWVaTm12Z0FEYzZleDg4 bmUvMS8zQ0UyN0U5MzgyNEQxQThDQkJBOEM5QTRFRjExNUVGOURDQTAwMTU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRTI3RTkzODI0RDFBOENC QkE4QzlBNEVGMTE1RUY5RENBMDAxNTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVhKTEJhbXZ5c2h6WVBnQkVzeXdwUnJHNUZvRWVaTm12Z0FEYzZleDg4bmUvMS8z Q0UyN0U5MzgyNEQxQThDQkJBOEM5QTRFRjExNUVGOURDQTAwMTU2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWPPF4BWTBaJQP0U2uns7B5JY0naZm141hsw60AiPBKymx9NPKK9pe9s17sT+ 2ZJqgW5R2okzS1UmHBCz6ZWxG9nmVhY9E/ONMmQXhE61InxDd6fVSzFiqeCuHvmj i99wbaUlN48gCXk1UCXpMq7gVv2fbX6kQGR5A5CaZ+97drMwex09/rRdcYroIWSa dAOvwI45n187GBq97e4vPFQKzL04jmzRysWYlBMoYDd1AR+2n6zja8JGBlwDbYK9 99nYxHfW/pG6dMXj3NKdXj4I2QbzW5Bx0jszxxMUdLM5+ASE8l+XtAEDwUjfAx87 FoEp2a6HVdeSHRwaijE766YRcw== -----END CERTIFICATE-----Generated at Thu May 15 22:30:40 2025 by rpki-client