$ rpki-client -vvf rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/1/77220C997C68A28EC6D54317D0A76DDDDA1B99FD.mft File: 77220C997C68A28EC6D54317D0A76DDDDA1B99FD.mft (raw, json) Hash identifier: l92q3KIbhV+MMANlNfaVFZE2/sTygilca/VzllbFcPU= Subject key identifier: 20:1A:AF:1F:81:D2:BE:30:3D:FE:BE:6C:3C:43:7A:54:7F:BC:A2:3A Authority key identifier: 77:22:0C:99:7C:68:A2:8E:C6:D5:43:17:D0:A7:6D:DD:DA:1B:99:FD Certificate issuer: /CN=77220C997C68A28EC6D54317D0A76DDDDA1B99FD Certificate serial: 43FC7850679F0CA0CE10BDB8062866C7D331E38A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77220C997C68A28EC6D54317D0A76DDDDA1B99FD.cer Subject info access: rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/1/77220C997C68A28EC6D54317D0A76DDDDA1B99FD.mft Manifest number: 021A Signing time: Sat 10 May 2025 18:06:12 +0000 Manifest this update: Sat 10 May 2025 18:01:12 +0000 Manifest next update: Sun 11 May 2025 18:08:12 +0000 Files and hashes: 1: 3134332e3230382e39322e302f32322d3332203d3e20323635313232.roa (hash: bSA/pTFZn8LtQfFi5dBthMxBM6IE/bg0nHR9mZaN0ms=) 2: 77220C997C68A28EC6D54317D0A76DDDDA1B99FD.crl (hash: JvRqCiFeIEzm+T3Xqy2FoPgjnjaXkOZ66p+e2YkHBJU=) 3: 323830343a326164383a3a2f33322d313238203d3e20323635313232.roa (hash: RLxxD1M8+HGfLdaLcsQFTt+1PJAM8S5wxa4+CivfJmI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/1/77220C997C68A28EC6D54317D0A76DDDDA1B99FD.crl rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/1/77220C997C68A28EC6D54317D0A76DDDDA1B99FD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77220C997C68A28EC6D54317D0A76DDDDA1B99FD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 17:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:fc:78:50:67:9f:0c:a0:ce:10:bd:b8:06:28:66:c7:d3:31:e3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77220C997C68A28EC6D54317D0A76DDDDA1B99FD Validity Not Before: May 10 18:01:12 2025 GMT Not After : May 11 18:08:12 2025 GMT Subject: CN=201AAF1F81D2BE303DFEBE6C3C437A547FBCA23A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fc:9e:2e:4a:63:25:e0:e2:2d:eb:e3:f8:2f: 92:9f:55:91:15:6e:30:b6:bb:8a:da:dd:52:47:8f: 94:5b:89:06:6e:3b:1c:ba:31:9d:29:e5:d7:e9:1c: 60:31:56:a5:16:ac:1e:67:0f:b6:28:6c:8b:2f:d8: 3a:1f:ed:3a:22:11:33:aa:d5:ef:68:34:70:cd:11: 8f:50:a5:4f:e7:1a:7d:af:48:ab:65:e2:42:74:14: 18:64:69:99:bd:cf:68:9b:d5:70:2c:7a:15:79:0e: 56:0b:6b:e6:8b:14:19:be:e5:d3:2c:73:8b:a6:d6: 09:cc:4b:00:c9:b3:df:6c:1f:a2:88:90:d7:2d:9a: 2f:11:24:fc:a1:6d:c2:f4:e0:73:14:d2:6b:57:6a: 9e:1c:d4:8d:2b:05:8c:62:65:2e:6d:ec:42:ee:be: 3c:dd:3f:3a:c6:0d:b3:8c:48:67:c3:b6:53:4f:48: 7e:c8:b2:55:f8:16:e4:62:4f:b3:67:eb:00:8f:54: 62:ab:73:6b:d4:30:db:1d:72:c5:11:99:84:ea:ca: c0:a7:97:25:21:58:96:9f:65:d8:8f:84:b9:3b:5d: a5:f6:bb:ca:39:3f:06:e5:bf:7b:52:9b:cb:30:c3: 2f:ea:d9:20:7b:3d:bc:9b:65:83:4f:c8:7b:21:06: 27:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1A:AF:1F:81:D2:BE:30:3D:FE:BE:6C:3C:43:7A:54:7F:BC:A2:3A X509v3 Authority Key Identifier: keyid:77:22:0C:99:7C:68:A2:8E:C6:D5:43:17:D0:A7:6D:DD:DA:1B:99:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/1/77220C997C68A28EC6D54317D0A76DDDDA1B99FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77220C997C68A28EC6D54317D0A76DDDDA1B99FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/1/77220C997C68A28EC6D54317D0A76DDDDA1B99FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:fb:02:69:7f:08:cc:21:81:e3:f9:32:f0:68:09:3e:39:33: 70:33:e1:48:c1:30:d3:d8:4d:1e:57:e2:e7:43:cf:62:30:7f: 2c:03:84:09:33:2b:53:bb:4e:a4:d5:5e:1d:8b:f3:97:4d:e3: 9a:c0:31:f8:72:35:4f:1a:85:a6:c7:8b:3b:e0:35:f2:3b:75: c0:33:9a:11:75:05:5f:b1:03:0b:cc:b4:b9:6b:96:e2:f1:60: ed:bf:45:c3:0a:e2:30:c1:96:91:0d:be:9b:0d:50:79:35:94: 4f:f5:e7:47:17:66:80:03:40:54:e5:48:ac:e5:cc:bc:62:ea: 10:29:0e:b5:e6:08:16:6a:30:83:48:cd:f2:49:30:44:07:fc: 79:6b:64:73:40:e6:ce:ed:79:41:ca:68:0f:4b:0b:0f:bb:c7: 42:99:9b:2f:34:a7:0c:55:7b:99:e9:ef:be:db:de:f8:c8:6a: c4:91:83:8c:2f:66:da:71:22:95:6a:be:89:3b:44:a9:2c:5a: e2:3e:48:73:20:4b:44:2e:40:5d:36:72:27:c6:a8:9c:54:d6: e5:6d:13:3e:c4:eb:17:37:42:01:9f:23:d6:71:14:5b:37:4a: 0a:8a:de:49:71:20:35:b5:e4:0c:b7:ef:7c:ac:52:1a:f2:aa: d0:2a:bc:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ/x4UGefDKDOEL24Bihmx9Mx44owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcyMjBDOTk3QzY4QTI4RUM2RDU0MzE3RDBBNzZERERE QTFCOTlGRDAeFw0yNTA1MTAxODAxMTJaFw0yNTA1MTExODA4MTJaMDMxMTAvBgNV BAMTKDIwMUFBRjFGODFEMkJFMzAzREZFQkU2QzNDNDM3QTU0N0ZCQ0EyM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX/J4uSmMl4OIt6+P4L5KfVZEV bjC2u4ra3VJHj5RbiQZuOxy6MZ0p5dfpHGAxVqUWrB5nD7YobIsv2Dof7ToiETOq 1e9oNHDNEY9QpU/nGn2vSKtl4kJ0FBhkaZm9z2ib1XAsehV5DlYLa+aLFBm+5dMs c4um1gnMSwDJs99sH6KIkNctmi8RJPyhbcL04HMU0mtXap4c1I0rBYxiZS5t7ELu vjzdPzrGDbOMSGfDtlNPSH7IslX4FuRiT7Nn6wCPVGKrc2vUMNsdcsURmYTqysCn lyUhWJafZdiPhLk7XaX2u8o5Pwblv3tSm8swwy/q2SB7PbybZYNPyHshBidVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIBqvH4HSvjA9/r5sPEN6VH+8ojowHwYDVR0j BBgwFoAUdyIMmXxooo7G1UMX0Kdt3dobmf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjRSRjk5R1RTa0U0WXVZN2hGQ2p0eXlzb0xBVVV1SkNOdmh2RHJkQllY dWUvMS83NzIyMEM5OTdDNjhBMjhFQzZENTQzMTdEMEE3NkRERERBMUI5OUZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3MjIwQzk5N0M2OEEyOEVD NkQ1NDMxN0QwQTc2REREREExQjk5RkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjRSRjk5R1RTa0U0WXVZN2hGQ2p0eXlzb0xBVVV1SkNOdmh2RHJkQllYdWUvMS83 NzIyMEM5OTdDNjhBMjhFQzZENTQzMTdEMEE3NkRERERBMUI5OUZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASPsCaX8IzCGB4/ky8GgJPjkzcDPhSMEw09hNHlfi50PPYjB/LAOECTMrU7tO pNVeHYvzl03jmsAx+HI1TxqFpseLO+A18jt1wDOaEXUFX7EDC8y0uWuW4vFg7b9F wwriMMGWkQ2+mw1QeTWUT/XnRxdmgANAVOVIrOXMvGLqECkOteYIFmowg0jN8kkw RAf8eWtkc0Dmzu15QcpoD0sLD7vHQpmbLzSnDFV7menvvtve+MhqxJGDjC9m2nEi lWq+iTtEqSxa4j5IcyBLRC5AXTZyJ8aonFTW5W0TPsTrFzdCAZ8j1nEUWzdKCore SXEgNbXkDLfvfKxSGvKq0Cq8Ew== -----END CERTIFICATE-----Generated at Sat May 10 19:38:07 2025 by rpki-client