$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft File: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft (raw, json) Hash identifier: /Oefwicglcu3v6uKMNjGEh8p9S0tRxerS1g5uf9uwfg= Subject key identifier: 3C:C5:FC:38:87:70:73:B1:AD:F1:B0:2D:97:B9:09:66:A3:D6:EC:89 Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 Certificate issuer: /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Certificate serial: 30B2EE55E582EFBC52FE50F18CB04B826BBF4708 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject info access: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft Manifest number: 5C Signing time: Mon 12 May 2025 07:05:42 +0000 Manifest this update: Mon 12 May 2025 07:00:42 +0000 Manifest next update: Tue 13 May 2025 08:40:42 +0000 Files and hashes: 1: 3230302e362e3132382e302f32322d3332203d3e203532363934.roa (hash: cmMBAa8apGKZWHWfvXo7rXbYWd2EI5yW46+IKqeCJjo=) 2: 3137372e37332e33362e302f32322d3332203d3e203532363934.roa (hash: OGK41uRpAQwllRubLCRfh+WKpYG39IFoFH08wloP1PA=) 3: 323830343a6335383a3a2f33322d313238203d3e203532363934.roa (hash: 9O2EZ1ZOA5SxIxzwzkyeRpvslbdGVqnJeJ0v8OoeGGs=) 4: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl (hash: sVHvRyIS2xtsHs7mbUF4cPrIMEUvCau8jDsmWnggDXI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 08:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b2:ee:55:e5:82:ef:bc:52:fe:50:f1:8c:b0:4b:82:6b:bf:47:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Validity Not Before: May 12 07:00:42 2025 GMT Not After : May 13 08:40:42 2025 GMT Subject: CN=3CC5FC38877073B1ADF1B02D97B90966A3D6EC89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:83:dd:8d:33:45:72:0b:31:db:dd:17:fe:27: fa:d4:af:3a:a4:18:ac:a0:94:e6:e8:45:44:ec:c3: cf:8b:18:73:82:00:88:b5:70:ba:9e:95:5f:d6:27: ff:a7:a1:de:02:09:32:d9:10:da:b5:aa:a3:a1:87: 1b:6c:8e:ec:4b:8b:94:92:a3:33:6e:4f:b4:af:01: c7:28:9d:35:4c:6c:e3:b8:15:e0:c7:ab:dc:08:6b: bb:b5:f0:20:bd:4d:91:81:13:47:d4:64:7b:b2:57: 20:32:12:f1:19:29:1a:7b:2c:ad:b0:8f:a5:c7:2e: b1:29:f5:cc:69:2e:9f:a8:28:56:72:9a:5d:69:45: 8d:f6:f7:d8:a0:a4:d3:4d:ce:3f:9b:71:27:8d:45: 14:8a:2f:f1:40:22:92:ba:60:36:49:26:5f:8c:af: ba:d9:0a:37:fb:c1:4f:45:67:40:db:de:1e:50:1d: a0:25:c6:65:0f:8a:f2:57:bb:b9:84:4c:7e:9f:00: 89:fb:a7:f8:79:b2:65:5b:d6:1b:b0:82:90:67:9e: d0:c5:3f:8e:6c:62:6a:b5:19:ab:9e:25:c1:e1:bf: 54:03:68:8a:f0:90:3f:64:c2:60:07:18:67:9e:b7: 9e:14:94:98:d6:ff:71:c1:62:29:a5:23:d5:c4:e9: a6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C5:FC:38:87:70:73:B1:AD:F1:B0:2D:97:B9:09:66:A3:D6:EC:89 X509v3 Authority Key Identifier: keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:10:69:03:64:b8:d9:89:05:dd:1d:cb:05:b1:10:69:42:d6: 06:8b:ad:f6:00:58:fc:32:a0:46:19:e4:d3:c7:e1:4b:22:2e: 0b:a4:55:e0:28:57:2b:cd:07:f7:e5:81:51:d1:1d:61:37:f0: c3:c7:2d:a5:25:48:52:ae:2f:7d:86:d2:7a:0a:d2:58:b8:93: 82:a8:bc:c4:d3:89:18:37:17:e1:7b:e7:62:3a:ac:bd:d8:9b: 4d:1f:db:6a:5e:b4:81:5e:cd:84:49:18:5c:68:3f:0c:70:cb: a7:c2:f5:05:d3:cf:98:9f:c8:77:df:5f:14:3e:d3:78:59:19: 1c:f9:42:4a:e0:53:c1:aa:e0:4f:74:c7:e3:28:77:ad:c0:3a: 3f:a0:49:c4:a3:6c:67:d4:ca:57:00:d2:cc:ce:71:70:e5:7c: ed:cd:db:9d:ee:e3:b3:d1:d7:8f:12:90:5b:ca:1c:1b:f9:4f: e4:68:0a:02:f7:5f:b7:c3:d7:f8:e0:fa:d8:00:d9:c4:be:77: 32:bb:cd:58:36:4f:a4:3f:8d:4d:58:ff:fc:70:b5:a3:bf:0d: c2:7d:54:8d:22:62:44:c9:1a:b0:90:ef:1b:05:7b:96:63:85: b2:2d:3a:99:e7:6e:43:b3:8a:75:3b:8a:84:fd:fd:f4:26:6e: 8d:84:8c:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMLLuVeWC77xS/lDxjLBLgmu/RwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RBRjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURB NzNENzAwNzAeFw0yNTA1MTIwNzAwNDJaFw0yNTA1MTMwODQwNDJaMDMxMTAvBgNV BAMTKDNDQzVGQzM4ODc3MDczQjFBREYxQjAyRDk3QjkwOTY2QTNENkVDODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLg92NM0VyCzHb3Rf+J/rUrzqk GKyglOboRUTsw8+LGHOCAIi1cLqelV/WJ/+nod4CCTLZENq1qqOhhxtsjuxLi5SS ozNuT7SvAcconTVMbOO4FeDHq9wIa7u18CC9TZGBE0fUZHuyVyAyEvEZKRp7LK2w j6XHLrEp9cxpLp+oKFZyml1pRY3299igpNNNzj+bcSeNRRSKL/FAIpK6YDZJJl+M r7rZCjf7wU9FZ0Db3h5QHaAlxmUPivJXu7mETH6fAIn7p/h5smVb1huwgpBnntDF P45sYmq1GaueJcHhv1QDaIrwkD9kwmAHGGeet54UlJjW/3HBYimlI9XE6aZ3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPMX8OIdwc7Gt8bAtl7kJZqPW7IkwHwYDVR0j BBgwFoAUPa8cpIYz1C84lVxHyLoPrac9cAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3 cGQvMC8zREFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEQUYxQ0E0ODYzM0Q0MkYz ODk1NUM0N0M4QkEwRkFEQTczRDcwMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3cGQvMC8z REFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWRBpA2S42YkF3R3LBbEQaULWBout9gBY/DKgRhnk08fhSyIuC6RV4ChXK80H 9+WBUdEdYTfww8ctpSVIUq4vfYbSegrSWLiTgqi8xNOJGDcX4XvnYjqsvdibTR/b al60gV7NhEkYXGg/DHDLp8L1BdPPmJ/Id99fFD7TeFkZHPlCSuBTwargT3TH4yh3 rcA6P6BJxKNsZ9TKVwDSzM5xcOV87c3bne7js9HXjxKQW8ocG/lP5GgKAvdft8PX +OD62ADZxL53MrvNWDZPpD+NTVj//HC1o78Nwn1UjSJiRMkasJDvGwV7lmOFsi06 meduQ7OKdTuKhP399CZujYSMaA== -----END CERTIFICATE-----Generated at Mon May 12 12:55:18 2025 by rpki-client