$ rpki-client -vvf rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft File: 72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft (raw, json) Hash identifier: p3UdAUxAzA/VcOyxu01GUZvD7mlb8JZaWHqzRCc7F5g= Subject key identifier: 49:F2:53:B1:1F:6B:4C:D9:CC:47:E4:17:D8:30:76:DE:CC:69:41:13 Authority key identifier: 72:CB:F8:70:1C:7C:0A:ED:63:F7:B6:95:5F:D6:EA:C6:5C:E3:2E:C5 Certificate issuer: /CN=72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5 Certificate serial: 2134846B4E6D357B1897C9629E62B11B7F8FCAD0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer Subject info access: rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft Manifest number: 7B Signing time: Mon 12 May 2025 16:24:56 +0000 Manifest this update: Mon 12 May 2025 16:19:56 +0000 Manifest next update: Tue 13 May 2025 17:05:56 +0000 Files and hashes: 1: 323830343a393264633a3a2f33322d3336203d3e20323734373337.roa (hash: rKtywLS1zxT4+jk+4qBxZeJh+sNRpKnf9wjGS48HysM=) 2: 72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl (hash: ynv+VBoVUpnRHD4kwAuNRwB+pi3B4x2Z25m/3kuEUcI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 17:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:34:84:6b:4e:6d:35:7b:18:97:c9:62:9e:62:b1:1b:7f:8f:ca:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5 Validity Not Before: May 12 16:19:56 2025 GMT Not After : May 13 17:05:56 2025 GMT Subject: CN=49F253B11F6B4CD9CC47E417D83076DECC694113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cf:55:bb:03:41:3a:4d:8c:01:72:34:d3:35: c0:e4:4e:77:0b:30:aa:9d:7b:c9:79:99:e8:fb:eb: 2c:2e:f2:13:d6:95:3b:83:68:c4:be:15:c8:6f:81: c2:8e:d5:f9:8c:8f:fa:d7:fd:e7:7a:50:5d:18:89: 1c:76:59:f0:0c:7a:83:13:34:9a:46:15:0f:64:ce: 95:07:fe:47:8a:db:2a:56:75:31:09:b2:b0:43:6d: 4a:96:0e:d0:b7:16:9e:87:65:9f:73:ee:91:71:71: 4b:ee:16:0a:90:51:87:f9:c8:1c:9d:a6:9b:e9:1c: 72:4a:45:e9:42:7a:95:7f:9a:41:7d:54:7f:2f:11: a5:88:02:f4:7a:96:28:71:36:22:af:03:99:98:9a: 52:aa:38:1c:f6:d4:64:81:c7:ca:8c:70:3a:53:24: 53:f0:bc:25:41:c7:c8:8a:a4:a3:e7:2c:37:75:6f: df:4e:90:78:40:fe:a6:9d:25:fb:d0:54:58:9b:81: 60:16:c6:ca:f5:49:77:ff:aa:ab:00:ce:f0:5e:5a: 3a:10:3a:ab:55:8c:4a:b6:b7:ae:7e:85:8e:5f:a3: 7b:e8:7b:da:d5:50:22:c1:42:08:b4:86:d7:92:4a: f8:96:42:12:bb:15:07:72:a9:45:fe:be:64:62:83: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F2:53:B1:1F:6B:4C:D9:CC:47:E4:17:D8:30:76:DE:CC:69:41:13 X509v3 Authority Key Identifier: keyid:72:CB:F8:70:1C:7C:0A:ED:63:F7:B6:95:5F:D6:EA:C6:5C:E3:2E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DANnD3VHoaiNZLyuciKsGC78KNJg3iMXwA6BvNzmn2vF/0/72CBF8701C7C0AED63F7B6955FD6EAC65CE32EC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:65:e8:21:3b:21:db:03:5f:56:98:d5:27:6c:6b:f7:1a:77: 4a:a2:a9:0b:be:a9:2e:28:42:73:1e:b6:73:48:2f:82:ef:16: 16:bd:a4:1e:a5:ea:14:19:5e:2c:48:20:83:e1:bf:45:cb:52: 23:92:46:3a:b9:72:dc:4f:a5:48:9b:ef:0d:33:22:85:9e:ad: f7:46:f0:de:11:42:cf:21:f8:c6:79:7a:d7:70:2b:dd:62:0b: 4f:e2:a5:e7:b0:0b:80:01:43:9e:91:6b:60:ff:23:27:b4:18: c3:3e:71:40:7a:78:df:f0:ac:5b:80:16:81:a3:de:bf:97:81: f2:e9:5e:fd:fc:7b:5d:d8:98:70:37:82:83:b4:80:64:46:63: 73:cc:9d:5c:df:ec:fc:7f:d0:25:d4:a4:20:05:0b:25:fe:f1: e2:9a:8e:78:1c:b2:21:df:6c:08:f2:31:ba:c6:63:28:aa:a2: 98:c9:53:2c:fe:ad:62:e5:4d:1a:55:af:fa:fc:a6:97:e1:9b: ca:96:1f:4c:2b:e5:7c:36:83:42:35:10:71:78:e5:ad:04:2d: b4:09:cf:5d:ed:df:3c:33:5e:df:2b:2f:37:3a:c0:4a:a7:a0: 95:7e:b1:24:02:36:b1:a1:4c:88:95:76:21:80:b1:d5:80:2f: ad:cb:bf:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUITSEa05tNXsYl8linmKxG3+PytAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJDQkY4NzAxQzdDMEFFRDYzRjdCNjk1NUZENkVBQzY1 Q0UzMkVDNTAeFw0yNTA1MTIxNjE5NTZaFw0yNTA1MTMxNzA1NTZaMDMxMTAvBgNV BAMTKDQ5RjI1M0IxMUY2QjRDRDlDQzQ3RTQxN0Q4MzA3NkRFQ0M2OTQxMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrz1W7A0E6TYwBcjTTNcDkTncL MKqde8l5mej76ywu8hPWlTuDaMS+FchvgcKO1fmMj/rX/ed6UF0YiRx2WfAMeoMT NJpGFQ9kzpUH/keK2ypWdTEJsrBDbUqWDtC3Fp6HZZ9z7pFxcUvuFgqQUYf5yByd ppvpHHJKRelCepV/mkF9VH8vEaWIAvR6lihxNiKvA5mYmlKqOBz21GSBx8qMcDpT JFPwvCVBx8iKpKPnLDd1b99OkHhA/qadJfvQVFibgWAWxsr1SXf/qqsAzvBeWjoQ OqtVjEq2t65+hY5fo3voe9rVUCLBQgi0hteSSviWQhK7FQdyqUX+vmRigwGBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSfJTsR9rTNnMR+QX2DB23sxpQRMwHwYDVR0j BBgwFoAUcsv4cBx8Cu1j97aVX9bqxlzjLsUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREFObkQzVkhvYWlOWkx5dWNpS3NHQzc4S05KZzNpTVh3QTZCdk56bW4y dkYvMC83MkNCRjg3MDFDN0MwQUVENjNGN0I2OTU1RkQ2RUFDNjVDRTMyRUM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyQ0JGODcwMUM3QzBBRUQ2 M0Y3QjY5NTVGRDZFQUM2NUNFMzJFQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REFObkQzVkhvYWlOWkx5dWNpS3NHQzc4S05KZzNpTVh3QTZCdk56bW4ydkYvMC83 MkNCRjg3MDFDN0MwQUVENjNGN0I2OTU1RkQ2RUFDNjVDRTMyRUM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATGXoITsh2wNfVpjVJ2xr9xp3SqKpC76pLihCcx62c0gvgu8WFr2kHqXqFBle LEggg+G/RctSI5JGOrly3E+lSJvvDTMihZ6t90bw3hFCzyH4xnl613Ar3WILT+Kl 57ALgAFDnpFrYP8jJ7QYwz5xQHp43/CsW4AWgaPev5eB8ule/fx7XdiYcDeCg7SA ZEZjc8ydXN/s/H/QJdSkIAULJf7x4pqOeByyId9sCPIxusZjKKqimMlTLP6tYuVN GlWv+vyml+GbypYfTCvlfDaDQjUQcXjlrQQttAnPXe3fPDNe3ysvNzrASqeglX6x JAI2saFMiJV2IYCx1YAvrcu/9w== -----END CERTIFICATE-----Generated at Tue May 13 02:31:39 2025 by rpki-client