$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft File: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft (raw, json) Hash identifier: xCKIVxq5qegtn/4wZM2zWcE3pASqTAb6VtKHhvoWCMU= Subject key identifier: A4:37:1B:53:2F:D0:39:D7:C1:F0:C9:0F:68:5B:DD:07:BE:BD:C7:60 Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7 Certificate issuer: /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7 Certificate serial: 3E7239C3CB71D75E3E2F8070E02B1F5392B2ADB2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer Subject info access: rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft Manifest number: 0218 Signing time: Sat 10 May 2025 02:55:21 +0000 Manifest this update: Sat 10 May 2025 02:50:21 +0000 Manifest next update: Sun 11 May 2025 04:13:21 +0000 Files and hashes: 1: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl (hash: HbMYqEPwUX0en1jAetvITQ0c6GznrJUaUKIgX7CnDhI=) 2: 323830343a6138633a3a2f33322d3438203d3e20323632323939.roa (hash: EeO9rj+ZkVIkb2Nu0/KE+IFQ8hNAOE0eB+Vu/g/K8/8=) 3: 3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa (hash: J9JKS/uOVSTf4lxE2/X712ak1j9CChp3U8mi1+Az2NM=) 4: 3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa (hash: zzuAYXVxZSPy90ckTABafh3wBDFSIA6yCF8t1bKcPTw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 04:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:72:39:c3:cb:71:d7:5e:3e:2f:80:70:e0:2b:1f:53:92:b2:ad:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7 Validity Not Before: May 10 02:50:21 2025 GMT Not After : May 11 04:13:21 2025 GMT Subject: CN=A4371B532FD039D7C1F0C90F685BDD07BEBDC760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e9:09:0c:00:a3:53:0f:9c:e6:3a:b2:90:d2: 12:f4:2b:f0:ba:23:be:41:6d:a9:0b:68:16:5d:df: 2e:4f:6f:be:61:b7:78:31:18:a4:68:60:8d:84:11: 34:83:75:4e:81:06:dc:19:be:65:ad:3d:9e:25:8a: 17:e3:68:ab:21:12:3c:3a:09:58:4d:4e:62:77:e1: 9b:33:53:4d:e2:b2:3c:bd:c2:12:14:43:e6:20:30: a1:8d:70:85:62:10:85:43:14:0d:23:9e:e7:6d:88: 1b:35:76:43:87:8c:84:92:80:fe:44:11:1b:30:9a: 37:1c:7a:d6:78:00:a6:42:cc:b1:59:98:4b:0f:fe: dd:4f:9a:ce:85:9b:9b:db:aa:ef:f7:e7:e5:de:5f: 12:b2:06:5d:00:ce:15:c1:61:bc:ff:17:46:a3:45: 83:ea:c3:b1:c6:2e:2d:b8:44:7b:36:f6:ca:3f:6a: c5:3d:a9:ba:60:14:03:47:fd:16:fb:65:5e:02:2b: 2d:15:e1:53:8f:33:c0:17:0b:0f:5d:19:6c:e9:f3: 7d:5e:21:91:de:63:af:b0:63:25:9d:1d:85:7c:f2: 01:23:0a:40:1d:4c:93:ca:c1:43:bb:10:5a:d3:42: 55:83:e1:be:ec:cc:10:8a:41:0e:35:d0:e1:9a:d6: 6c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:37:1B:53:2F:D0:39:D7:C1:F0:C9:0F:68:5B:DD:07:BE:BD:C7:60 X509v3 Authority Key Identifier: keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:87:6e:04:7b:2a:e6:10:88:8f:e4:70:4d:59:b1:25:d6:d2: da:bf:71:94:4c:d3:62:26:bf:9d:af:a3:57:9e:67:a7:3e:ae: 4b:44:6e:c8:03:dd:e6:b1:63:f8:21:a4:08:65:1d:66:04:10: c5:9e:45:0d:fe:65:d3:da:ba:83:7b:84:21:71:1a:37:e1:93: 35:bb:67:75:6e:d7:32:2a:94:09:06:c4:88:ee:9a:08:f8:9c: ad:07:f0:75:d7:5d:84:01:70:ca:ac:33:36:69:9b:0a:10:21: 68:4e:bc:2b:37:9e:bd:9f:51:f0:8b:e9:1b:d6:54:0e:30:16: ed:14:bd:d5:91:fa:f4:79:ad:38:a8:1b:11:1f:f9:70:f4:cd: 24:b6:8b:5d:33:9b:54:fc:59:bd:94:de:4e:c9:ef:e9:ff:18: de:64:16:be:2e:cd:5c:df:7d:c3:5b:93:25:fc:14:2a:1a:c4: 4c:76:88:5d:9c:07:f4:87:f1:e4:19:b0:88:eb:f9:c4:9a:bc: 10:67:04:b9:dc:01:f2:ee:2b:c7:bc:2b:fa:4d:d6:82:f6:4b: f8:de:83:03:7c:8f:b5:32:8d:dd:66:f3:55:7a:99:42:31:d0: c9:20:f9:4e:57:a0:4f:d1:eb:07:91:17:ed:9c:de:e0:ae:26: 5d:6a:b2:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPnI5w8tx114+L4Bw4CsfU5KyrbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAzRENDQTdERTc5QzhDNERBQkFBMTBBNkNBOUU5M0VB N0QzOURGNzAeFw0yNTA1MTAwMjUwMjFaFw0yNTA1MTEwNDEzMjFaMDMxMTAvBgNV BAMTKEE0MzcxQjUzMkZEMDM5RDdDMUYwQzkwRjY4NUJERDA3QkVCREM3NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6QkMAKNTD5zmOrKQ0hL0K/C6 I75BbakLaBZd3y5Pb75ht3gxGKRoYI2EETSDdU6BBtwZvmWtPZ4lihfjaKshEjw6 CVhNTmJ34ZszU03isjy9whIUQ+YgMKGNcIViEIVDFA0jnudtiBs1dkOHjISSgP5E ERswmjccetZ4AKZCzLFZmEsP/t1Pms6Fm5vbqu/35+XeXxKyBl0AzhXBYbz/F0aj RYPqw7HGLi24RHs29so/asU9qbpgFANH/Rb7ZV4CKy0V4VOPM8AXCw9dGWzp831e IZHeY6+wYyWdHYV88gEjCkAdTJPKwUO7EFrTQlWD4b7szBCKQQ410OGa1mybAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpDcbUy/QOdfB8MkPaFvdB769x2AwHwYDVR0j BBgwFoAUID3Mp955yMTauqEKbKnpPqfTnfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BH U0UvMS8yMDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwM0RDQ0E3REU3OUM4QzRE QUJBQTEwQTZDQTlFOTNFQTdEMzlERjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BHU0UvMS8y MDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtIduBHsq5hCIj+RwTVmxJdbS2r9xlEzTYia/na+jV55npz6uS0RuyAPd5rFj +CGkCGUdZgQQxZ5FDf5l09q6g3uEIXEaN+GTNbtndW7XMiqUCQbEiO6aCPicrQfw ddddhAFwyqwzNmmbChAhaE68KzeevZ9R8IvpG9ZUDjAW7RS91ZH69HmtOKgbER/5 cPTNJLaLXTObVPxZvZTeTsnv6f8Y3mQWvi7NXN99w1uTJfwUKhrETHaIXZwH9Ifx 5BmwiOv5xJq8EGcEudwB8u4rx7wr+k3WgvZL+N6DA3yPtTKN3WbzVXqZQjHQySD5 TlegT9HrB5EX7Zze4K4mXWqycA== -----END CERTIFICATE-----Generated at Sat May 10 13:24:27 2025 by rpki-client