$ rpki-client -vvf rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft File: 4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft (raw, json) Hash identifier: ODjtP8DToFlNydq+5GQgJtaVSNBUy5Lm/Qouu2GwlEQ= Subject key identifier: C8:B7:5A:23:F6:8D:89:6A:D3:7F:05:31:19:9C:E8:66:3A:FB:87:70 Authority key identifier: 4A:72:67:5E:0C:B9:92:AE:4B:9D:50:A4:4F:F4:38:7F:A7:80:D7:CF Certificate issuer: /CN=4A72675E0CB992AE4B9D50A44FF4387FA780D7CF Certificate serial: 312F393340A958CBCE369D8520DCCBA31B807CDB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.cer Subject info access: rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft Manifest number: 35 Signing time: Sat 10 May 2025 20:39:16 +0000 Manifest this update: Sat 10 May 2025 20:34:16 +0000 Manifest next update: Sun 11 May 2025 21:48:16 +0000 Files and hashes: 1: 4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.crl (hash: F0wOXacovrzna7OMB9D+Fvrn8eAHEVdOFYjQED2qZCo=) 2: 3137372e382e3133362e302f32322d3234203d3e20323730353832.roa (hash: krULwq9Rhl+VvAB64k7HqwFs18gauIlz8FGNJJMo8fQ=) 3: 323830343a366533343a3a2f33322d3438203d3e20323730353832.roa (hash: 77sf5PFcSpII+KrrS4nSPlOkVTpoGT3FycBU93oqWsg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.crl rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 21:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:2f:39:33:40:a9:58:cb:ce:36:9d:85:20:dc:cb:a3:1b:80:7c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A72675E0CB992AE4B9D50A44FF4387FA780D7CF Validity Not Before: May 10 20:34:16 2025 GMT Not After : May 11 21:48:16 2025 GMT Subject: CN=C8B75A23F68D896AD37F0531199CE8663AFB8770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:31:84:fe:7e:a0:0e:e3:cf:40:38:e3:07: e9:4d:9d:ee:8d:0c:44:18:b7:84:a2:85:c1:56:d1: 57:4a:42:89:23:d7:3c:d6:32:0d:c9:33:04:bc:62: 7e:0f:51:4e:d3:24:5c:12:55:40:5b:26:50:f4:ed: b2:f8:e6:4f:0b:9b:f3:c2:17:21:8c:a6:80:07:d2: 55:8c:87:6c:c9:ff:55:20:bf:16:40:0f:49:ee:f5: 3c:72:cb:ab:7e:d7:e8:d6:e3:57:f9:21:e3:11:63: e6:56:18:63:05:b7:7d:05:aa:92:0b:55:4c:8e:7b: 16:ae:1a:01:46:5e:8b:84:61:d3:bb:ea:fd:a8:92: 16:b7:2a:b3:ca:3f:f6:c9:f8:c0:e6:6f:d3:6e:95: 03:1b:ed:67:00:de:3c:44:a9:76:40:01:2f:f9:d4: a0:19:a4:f3:4c:38:78:a6:9f:b3:b4:9a:01:b2:94: 8c:12:96:46:16:ea:af:85:21:3a:04:00:1a:0e:29: 50:69:b0:f6:d1:41:28:04:9f:4e:b1:74:fb:f6:a5: e8:15:7c:9a:75:4e:f7:15:0e:f6:f3:e9:e1:0f:58: ce:78:11:54:1f:24:93:cb:04:ed:97:8b:7e:fe:e7: 2e:61:29:b1:bd:4d:21:39:2a:72:39:87:3a:7d:b8: 41:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B7:5A:23:F6:8D:89:6A:D3:7F:05:31:19:9C:E8:66:3A:FB:87:70 X509v3 Authority Key Identifier: keyid:4A:72:67:5E:0C:B9:92:AE:4B:9D:50:A4:4F:F4:38:7F:A7:80:D7:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpZq4pFqjpBuXJyJx22XG31ooG1fYC69C5yopd18z4w2/0/4A72675E0CB992AE4B9D50A44FF4387FA780D7CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a3:cb:d7:d8:07:6c:36:c6:fe:9a:b2:0e:da:9e:84:5c:fe: 32:93:a3:4b:58:f0:6b:f4:a7:44:67:a6:78:b7:2b:fe:5e:d3: 49:bb:23:65:95:33:5c:89:3a:c7:df:fb:3f:c2:74:12:9b:c2: 99:b0:bc:da:09:19:85:7e:82:03:8c:32:8f:dd:9d:80:42:5e: 61:fb:b8:05:6f:5d:30:dd:5c:3f:6e:07:04:bf:cc:b8:70:9a: 55:3d:d4:3c:f8:0c:2b:7b:0e:bc:34:2f:58:27:61:9a:87:f0: 18:4c:10:0c:db:c0:cd:5d:4e:f9:ab:1e:8e:63:a5:c3:f0:75: 0b:8e:57:e9:49:aa:a1:9b:bc:30:86:c3:5e:9f:27:4b:1e:81: fb:de:35:7e:b7:fe:24:d3:d5:f9:d5:e5:a2:e8:2b:b0:49:93: ca:5f:56:1a:fd:49:f0:aa:69:6e:14:80:8c:75:9b:aa:1a:9e: 8d:c0:ad:a4:b0:86:88:1d:6d:f9:bd:df:db:0a:cb:ee:da:c7: 19:52:04:63:50:4c:23:a2:9b:99:7f:51:45:93:0c:8e:dd:b8: 18:99:93:58:bc:4a:f7:af:87:97:22:5e:3a:6b:90:23:b2:4d: 79:be:db:2f:fe:ba:f8:14:9e:67:81:2c:47:db:19:22:62:f7: 83:36:9b:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMS85M0CpWMvONp2FINzLoxuAfNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE3MjY3NUUwQ0I5OTJBRTRCOUQ1MEE0NEZGNDM4N0ZB NzgwRDdDRjAeFw0yNTA1MTAyMDM0MTZaFw0yNTA1MTEyMTQ4MTZaMDMxMTAvBgNV BAMTKEM4Qjc1QTIzRjY4RDg5NkFEMzdGMDUzMTE5OUNFODY2M0FGQjg3NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DDGE/n6gDuPPQDjjB+lNne6N DEQYt4SihcFW0VdKQokj1zzWMg3JMwS8Yn4PUU7TJFwSVUBbJlD07bL45k8Lm/PC FyGMpoAH0lWMh2zJ/1UgvxZAD0nu9Txyy6t+1+jW41f5IeMRY+ZWGGMFt30FqpIL VUyOexauGgFGXouEYdO76v2okha3KrPKP/bJ+MDmb9NulQMb7WcA3jxEqXZAAS/5 1KAZpPNMOHimn7O0mgGylIwSlkYW6q+FIToEABoOKVBpsPbRQSgEn06xdPv2pegV fJp1TvcVDvbz6eEPWM54EVQfJJPLBO2Xi37+5y5hKbG9TSE5KnI5hzp9uEFdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyLdaI/aNiWrTfwUxGZzoZjr7h3AwHwYDVR0j BBgwFoAUSnJnXgy5kq5LnVCkT/Q4f6eA188wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3BacTRwRnFqcEJ1WEp5SngyMlhHMzFvb0cxZllDNjlDNXlvcGQxOHo0 dzIvMC80QTcyNjc1RTBDQjk5MkFFNEI5RDUwQTQ0RkY0Mzg3RkE3ODBEN0NGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBNzI2NzVFMENCOTkyQUU0 QjlENTBBNDRGRjQzODdGQTc4MEQ3Q0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3BacTRwRnFqcEJ1WEp5SngyMlhHMzFvb0cxZllDNjlDNXlvcGQxOHo0dzIvMC80 QTcyNjc1RTBDQjk5MkFFNEI5RDUwQTQ0RkY0Mzg3RkE3ODBEN0NGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD6PL19gHbDbG/pqyDtqehFz+MpOjS1jwa/SnRGemeLcr/l7TSbsjZZUzXIk6 x9/7P8J0EpvCmbC82gkZhX6CA4wyj92dgEJeYfu4BW9dMN1cP24HBL/MuHCaVT3U PPgMK3sOvDQvWCdhmofwGEwQDNvAzV1O+asejmOlw/B1C45X6UmqoZu8MIbDXp8n Sx6B+941frf+JNPV+dXlougrsEmTyl9WGv1J8KppbhSAjHWbqhqejcCtpLCGiB1t +b3f2wrL7trHGVIEY1BMI6KbmX9RRZMMjt24GJmTWLxK96+HlyJeOmuQI7JNeb7b L/66+BSeZ4EsR9sZImL3gzabbg== -----END CERTIFICATE-----Generated at Sun May 11 13:40:40 2025 by rpki-client