$ rpki-client -vvf rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft File: 9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft (raw, json) Hash identifier: EFFjbZuYv0ALywKoW8Yale76qY0QnueptbT6EJHRZvI= Subject key identifier: 36:CF:A2:84:F3:27:8F:A5:23:F4:D8:14:77:2C:A2:F2:D3:FF:7E:CF Authority key identifier: 9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D Certificate issuer: /CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D Certificate serial: 01663E8CD07B386FF5AC77AB1700E4847BAEC221 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer Subject info access: rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft Manifest number: 0226 Signing time: Mon 12 May 2025 12:13:42 +0000 Manifest this update: Mon 12 May 2025 12:08:42 +0000 Manifest next update: Tue 13 May 2025 13:55:42 +0000 Files and hashes: 1: 3136382e302e322e302f32342d3234203d3e20323635323430.roa (hash: +E+NC1y1e8e0K/e4so432GkxK4QlZpEFghMjbmBnu/4=) 2: 323830343a326362633a3a2f33322d3438203d3e20323635323430.roa (hash: giTmPiEBQLx0BYo/03BMIAzqwhFQ/uAFx2pp+feVQ3o=) 3: 9CCEF403C7A1A251917EB6D9B0A71238B784A27D.crl (hash: 1/OsoxmZHyv2z/P3qMtEvEHxgyTUISsQs2rHezWLX4o=) 4: 3136382e302e302e302f32332d3234203d3e20323635323430.roa (hash: 39rSJ+LAmC8LCZihDbw+qiaoKhm95z+OUI79SPFVsTY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.crl rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 13:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:66:3e:8c:d0:7b:38:6f:f5:ac:77:ab:17:00:e4:84:7b:ae:c2:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CCEF403C7A1A251917EB6D9B0A71238B784A27D Validity Not Before: May 12 12:08:42 2025 GMT Not After : May 13 13:55:42 2025 GMT Subject: CN=36CFA284F3278FA523F4D814772CA2F2D3FF7ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:39:a8:f9:da:48:a9:35:23:90:04:7d:f0:8c: 44:8a:41:c4:54:ec:7a:21:08:a3:3c:38:9d:a0:39: c0:e1:82:1d:ad:02:4d:88:0a:75:93:71:30:88:9c: ce:7d:d0:2d:c4:2a:85:d5:e6:e1:c2:f4:0c:b6:c7: 76:bb:c6:a2:a2:5a:f7:f6:69:65:83:9c:47:db:5d: af:81:2e:5c:72:90:4c:49:7f:e1:21:93:3e:57:10: 0d:a4:4e:36:1f:22:06:04:f2:7c:c2:5c:c1:b7:78: 67:9b:43:f4:12:dd:b1:12:6d:bc:9d:9a:55:c3:ca: 1d:37:cc:15:8f:58:c2:68:88:74:4d:16:2b:0e:88: 9e:2b:70:70:bd:d8:86:60:3f:61:85:68:1c:0d:1f: 5b:b0:0e:62:13:4b:41:dc:04:f6:a2:63:46:69:37: cb:21:ce:ff:f0:72:d4:ae:45:f1:9d:ed:0b:af:3e: 46:fe:f7:47:6d:61:a2:f7:92:b9:90:43:5d:d7:c0: b7:d4:2c:8e:44:4c:15:bc:6d:93:a5:bf:a7:c1:7d: bf:22:5b:16:41:4a:0c:1b:05:4f:11:18:ee:b2:74: ce:e0:51:12:c4:e0:38:39:3d:49:88:dd:d2:33:da: df:b6:6a:b4:f3:25:38:b3:ab:36:b2:22:d7:8f:7f: 95:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CF:A2:84:F3:27:8F:A5:23:F4:D8:14:77:2C:A2:F2:D3:FF:7E:CF X509v3 Authority Key Identifier: keyid:9C:CE:F4:03:C7:A1:A2:51:91:7E:B6:D9:B0:A7:12:38:B7:84:A2:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtFmE8fzSTKtAu8GbXu4e7D1cquWGrynJ7ZXkbbjbRbU/1/9CCEF403C7A1A251917EB6D9B0A71238B784A27D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:1b:14:78:df:b3:74:ed:5a:32:66:b6:87:2a:52:10:60:2a: 7d:9e:a2:02:ed:a2:5d:d1:6c:cf:c8:4b:1a:60:50:88:79:af: d9:5a:3c:a5:88:91:49:b0:e3:69:f9:31:f3:30:ce:4e:e4:2c: 41:63:2a:42:7a:05:3d:69:ae:a3:31:b8:77:8e:ca:f0:d7:58: 64:62:c4:04:d6:e5:69:77:ea:49:b8:e0:f8:45:97:b4:07:be: 6d:24:bb:12:66:fa:0d:49:1b:e7:5f:5d:77:5b:3e:69:a1:9f: 65:7c:12:5f:eb:43:00:6e:79:64:1a:1f:63:bc:28:45:06:18: fc:ff:8a:62:e3:35:5b:ea:29:d2:ac:94:79:71:0c:67:62:b8: d9:0c:54:62:d7:7a:89:d1:3d:54:5c:8d:ee:75:dd:03:15:9e: ef:9d:b3:30:93:a5:27:30:16:0e:a7:e6:f7:77:b8:33:c7:0b: dc:61:c5:7f:16:d7:db:50:c3:c8:fe:de:11:43:45:7e:87:59: 99:19:6c:e6:d6:de:cf:18:c1:e5:ff:d4:0b:68:fa:c5:04:25: 00:1a:5e:01:b1:c9:51:aa:0e:42:b6:88:c4:63:57:de:ed:8c: 75:f8:8a:5e:2d:88:ec:b1:3b:92:4f:54:9e:3d:94:d2:83:0b: 7f:90:66:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAWY+jNB7OG/1rHerFwDkhHuuwiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNDRUY0MDNDN0ExQTI1MTkxN0VCNkQ5QjBBNzEyMzhC Nzg0QTI3RDAeFw0yNTA1MTIxMjA4NDJaFw0yNTA1MTMxMzU1NDJaMDMxMTAvBgNV BAMTKDM2Q0ZBMjg0RjMyNzhGQTUyM0Y0RDgxNDc3MkNBMkYyRDNGRjdFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqOaj52kipNSOQBH3wjESKQcRU 7HohCKM8OJ2gOcDhgh2tAk2ICnWTcTCInM590C3EKoXV5uHC9Ay2x3a7xqKiWvf2 aWWDnEfbXa+BLlxykExJf+Ehkz5XEA2kTjYfIgYE8nzCXMG3eGebQ/QS3bESbbyd mlXDyh03zBWPWMJoiHRNFisOiJ4rcHC92IZgP2GFaBwNH1uwDmITS0HcBPaiY0Zp N8shzv/wctSuRfGd7QuvPkb+90dtYaL3krmQQ13XwLfULI5ETBW8bZOlv6fBfb8i WxZBSgwbBU8RGO6ydM7gURLE4Dg5PUmI3dIz2t+2arTzJTizqzayItePf5WVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNs+ihPMnj6Uj9NgUdyyi8tP/fs8wHwYDVR0j BBgwFoAUnM70A8eholGRfrbZsKcSOLeEon0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXRGbUU4ZnpTVEt0QXU4R2JYdTRlN0QxY3F1V0dyeW5KN1pYa2JiamJS YlUvMS85Q0NFRjQwM0M3QTFBMjUxOTE3RUI2RDlCMEE3MTIzOEI3ODRBMjdELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQ0VGNDAzQzdBMUEyNTE5 MTdFQjZEOUIwQTcxMjM4Qjc4NEEyN0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXRGbUU4ZnpTVEt0QXU4R2JYdTRlN0QxY3F1V0dyeW5KN1pYa2JiamJSYlUvMS85 Q0NFRjQwM0M3QTFBMjUxOTE3RUI2RDlCMEE3MTIzOEI3ODRBMjdELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARBsUeN+zdO1aMma2hypSEGAqfZ6iAu2iXdFsz8hLGmBQiHmv2Vo8pYiRSbDj afkx8zDOTuQsQWMqQnoFPWmuozG4d47K8NdYZGLEBNblaXfqSbjg+EWXtAe+bSS7 Emb6DUkb519dd1s+aaGfZXwSX+tDAG55ZBofY7woRQYY/P+KYuM1W+op0qyUeXEM Z2K42QxUYtd6idE9VFyN7nXdAxWe752zMJOlJzAWDqfm93e4M8cL3GHFfxbX21DD yP7eEUNFfodZmRls5tbezxjB5f/UC2j6xQQlABpeAbHJUaoOQraIxGNX3u2MdfiK Xi2I7LE7kk9Unj2U0oMLf5Bm1A== -----END CERTIFICATE-----Generated at Mon May 12 21:58:14 2025 by rpki-client