$ rpki-client -vvf rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.mft File: 2E99EC5426678FEDA87CF25917DEEA66BCE0738C.mft (raw, json) Hash identifier: +2qKKHOgtyVOMpVHClcXqHtILy4XDehQX0V15DN4WSk= Subject key identifier: 76:22:02:5D:06:D7:D9:7F:7A:FD:21:9B:99:AB:07:A6:F7:3A:71:65 Authority key identifier: 2E:99:EC:54:26:67:8F:ED:A8:7C:F2:59:17:DE:EA:66:BC:E0:73:8C Certificate issuer: /CN=2E99EC5426678FEDA87CF25917DEEA66BCE0738C Certificate serial: 0AFDACCD88F1DEF5009B4E3B406F033AE3C0D8E3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.cer Subject info access: rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.mft Manifest number: 4C Signing time: Sun 11 May 2025 10:33:44 +0000 Manifest this update: Sun 11 May 2025 10:28:44 +0000 Manifest next update: Mon 12 May 2025 10:33:44 +0000 Files and hashes: 1: 3137392e39362e3136382e302f32312d3234203d3e20323632363631.roa (hash: A/qwNQzIGj82qdzf6XkGa6lZkbd1iITOuAkzpuXr728=) 2: 323830343a313534383a3a2f33322d3438203d3e20323632363631.roa (hash: fDNk7WYvfETnylSMgQzWfLYJV+UC4XP4uGXurBov028=) 3: 3137372e3132382e3231362e302f32322d3234203d3e20323632363631.roa (hash: 91UFMxdQa0TjoB/UqzxHg4dYSB5PWS6pw+uFyCH27ho=) 4: 2E99EC5426678FEDA87CF25917DEEA66BCE0738C.crl (hash: L86SN04boFXMgb1TEK4grKnbwgJZUxnlm4A8HSqZkkU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.crl rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 10:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:fd:ac:cd:88:f1:de:f5:00:9b:4e:3b:40:6f:03:3a:e3:c0:d8:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E99EC5426678FEDA87CF25917DEEA66BCE0738C Validity Not Before: May 11 10:28:44 2025 GMT Not After : May 12 10:33:44 2025 GMT Subject: CN=7622025D06D7D97F7AFD219B99AB07A6F73A7165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8b:26:46:a6:4a:da:9f:08:c2:da:51:98:a2: 38:0d:13:4d:f1:24:6c:85:0c:2c:61:e8:37:9a:04: df:b7:ab:a7:d1:3f:f4:07:de:dd:b8:81:bf:91:9f: ac:51:51:0d:11:a3:9f:7a:70:67:03:e4:c7:00:50: 55:98:a4:21:36:a1:dd:e3:ec:8a:2f:a2:a0:c3:30: 8a:d2:dd:08:1a:a3:ea:87:c0:17:58:ae:00:e5:07: e8:2c:97:6b:92:19:ce:f6:6d:37:6e:22:bb:29:7f: 29:63:3d:a0:14:02:0f:a4:00:8a:03:2f:e9:83:e4: a8:a4:72:22:ff:21:19:8d:c5:f1:47:26:1f:9d:38: ce:f4:e7:c1:e8:16:64:56:5d:9c:e1:f5:33:30:07: 5e:34:93:df:c0:02:f3:56:b9:7d:75:e7:0f:4a:8a: de:6e:00:ce:49:84:73:11:b8:8f:b1:62:c4:87:2b: b1:8e:57:cb:70:51:42:f3:25:d4:2a:13:43:e3:d3: f0:73:72:32:fb:33:e9:f7:85:f9:d8:cb:20:f0:cf: 58:50:27:b7:84:2d:7c:31:65:23:4e:c4:53:ef:74: b7:ac:9b:51:1f:30:cc:93:ba:a5:2d:05:37:e1:d7: f2:60:90:e2:0d:a2:d1:14:15:91:ea:bb:9c:aa:ae: ae:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:22:02:5D:06:D7:D9:7F:7A:FD:21:9B:99:AB:07:A6:F7:3A:71:65 X509v3 Authority Key Identifier: keyid:2E:99:EC:54:26:67:8F:ED:A8:7C:F2:59:17:DE:EA:66:BC:E0:73:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:77:7c:fb:a8:b4:8b:85:e3:1c:22:dd:7c:fb:85:22:fb:31: 4d:51:d9:89:4a:40:a4:02:d0:9e:fb:8e:25:94:60:92:26:c3: dd:13:b2:ba:27:84:cd:af:e4:3e:75:03:36:89:d2:3c:7f:84: 53:fb:31:4b:b8:23:5d:f5:01:22:b4:ed:9b:09:ec:a0:c3:2f: ae:03:71:14:0c:6a:bc:9d:8a:77:ab:da:bd:33:03:ae:4f:7a: 3e:ea:ab:f3:31:cc:28:e8:d3:7d:49:4a:bd:c1:b6:8e:54:81: 52:86:2b:9c:ac:f8:47:6e:b1:b4:ff:2a:ab:b8:58:5d:a9:6c: 0b:ef:f3:9e:ae:63:5f:46:22:47:d5:93:50:02:10:37:c4:74: ee:ee:0c:04:a2:62:76:1d:06:98:1d:5c:24:43:15:8c:76:a1: 8b:cc:58:c8:e8:7b:84:69:85:3a:f9:47:02:b5:5d:78:f7:cd: 4a:6a:94:b2:ff:62:b4:df:d0:81:05:b8:72:44:a4:89:3b:3e: 2a:62:e3:6d:ef:a5:94:6d:2a:ba:17:ea:7b:a2:6c:e1:cd:10: 4e:c9:ee:14:c0:9b:0c:86:f1:9f:d9:39:bc:47:78:07:0e:f0: 4d:46:78:88:b0:5b:2d:25:9e:de:5f:ae:ad:9f:bc:2e:40:43: 14:58:99:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCv2szYjx3vUAm047QG8DOuPA2OMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU5OUVDNTQyNjY3OEZFREE4N0NGMjU5MTdERUVBNjZC Q0UwNzM4QzAeFw0yNTA1MTExMDI4NDRaFw0yNTA1MTIxMDMzNDRaMDMxMTAvBgNV BAMTKDc2MjIwMjVEMDZEN0Q5N0Y3QUZEMjE5Qjk5QUIwN0E2RjczQTcxNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhiyZGpkranwjC2lGYojgNE03x JGyFDCxh6DeaBN+3q6fRP/QH3t24gb+Rn6xRUQ0Ro596cGcD5McAUFWYpCE2od3j 7IovoqDDMIrS3Qgao+qHwBdYrgDlB+gsl2uSGc72bTduIrspfyljPaAUAg+kAIoD L+mD5KikciL/IRmNxfFHJh+dOM7058HoFmRWXZzh9TMwB140k9/AAvNWuX115w9K it5uAM5JhHMRuI+xYsSHK7GOV8twUULzJdQqE0Pj0/BzcjL7M+n3hfnYyyDwz1hQ J7eELXwxZSNOxFPvdLesm1EfMMyTuqUtBTfh1/JgkOINotEUFZHqu5yqrq5pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdiICXQbX2X96/SGbmasHpvc6cWUwHwYDVR0j BBgwFoAULpnsVCZnj+2ofPJZF97qZrzgc4wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWtOVWNqb1o0azhkcEdQUDYxZEdBRkxCb1JkOXVpV3BDUHZlSmdjUHV1 SzYvMC8yRTk5RUM1NDI2Njc4RkVEQTg3Q0YyNTkxN0RFRUE2NkJDRTA3MzhDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFOTlFQzU0MjY2NzhGRURB ODdDRjI1OTE3REVFQTY2QkNFMDczOEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWtOVWNqb1o0azhkcEdQUDYxZEdBRkxCb1JkOXVpV3BDUHZlSmdjUHV1SzYvMC8y RTk5RUM1NDI2Njc4RkVEQTg3Q0YyNTkxN0RFRUE2NkJDRTA3MzhDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHnd8+6i0i4XjHCLdfPuFIvsxTVHZiUpApALQnvuOJZRgkibD3ROyuieEza/k PnUDNonSPH+EU/sxS7gjXfUBIrTtmwnsoMMvrgNxFAxqvJ2Kd6vavTMDrk96Puqr 8zHMKOjTfUlKvcG2jlSBUoYrnKz4R26xtP8qq7hYXalsC+/znq5jX0YiR9WTUAIQ N8R07u4MBKJidh0GmB1cJEMVjHahi8xYyOh7hGmFOvlHArVdePfNSmqUsv9itN/Q gQW4ckSkiTs+KmLjbe+llG0quhfqe6Js4c0QTsnuFMCbDIbxn9k5vEd4Bw7wTUZ4 iLBbLSWe3l+urZ+8LkBDFFiZCg== -----END CERTIFICATE-----Generated at Sun May 11 21:08:02 2025 by rpki-client