$ rpki-client -vvf rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft File: 7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft (raw, json) Hash identifier: sA/HHfcbGJj11aYNeMDieGdmh1EzRKVfBM80VuP07Cc= Subject key identifier: 09:B3:DD:BD:4E:F5:D6:AA:02:51:55:6C:A1:E5:E6:3F:B1:AD:B8:72 Authority key identifier: 7C:B4:97:5F:BB:42:51:23:F7:AC:98:6A:07:12:79:CD:A9:2B:5B:CD Certificate issuer: /CN=7CB4975FBB425123F7AC986A071279CDA92B5BCD Certificate serial: 560D38F14B901068B4F096364EFC76BEA58B1693 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer Subject info access: rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft Manifest number: 021A Signing time: Sun 11 May 2025 18:05:22 +0000 Manifest this update: Sun 11 May 2025 18:00:22 +0000 Manifest next update: Mon 12 May 2025 18:26:22 +0000 Files and hashes: 1: 34352e3137302e3139322e302f32322d3232203d3e20323638313739.roa (hash: CV6R0pQQO+KCLH13Igq4teZRyyVXBmiJdfNydxmZSO8=) 2: 7CB4975FBB425123F7AC986A071279CDA92B5BCD.crl (hash: p2AAjuSwDATMaM/Ra6H1eKexk3BG6W6wE4GXg70N578=) 3: 323830343a353934303a3a2f33322d3332203d3e20323638313739.roa (hash: NfxsXVyOd3rKDYTUYvdfeaMgnhbQtQG/Cn15GYtSnfM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.crl rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 18:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:0d:38:f1:4b:90:10:68:b4:f0:96:36:4e:fc:76:be:a5:8b:16:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB4975FBB425123F7AC986A071279CDA92B5BCD Validity Not Before: May 11 18:00:22 2025 GMT Not After : May 12 18:26:22 2025 GMT Subject: CN=09B3DDBD4EF5D6AA0251556CA1E5E63FB1ADB872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2b:8f:50:c6:aa:1e:9d:df:98:f1:61:17:19: 97:91:11:78:a7:76:cc:65:c8:6f:ba:a6:52:58:cb: 76:61:3c:b5:7a:5e:f1:7d:ed:86:d1:6a:87:a8:68: d7:fd:a7:e9:7e:18:58:7f:df:93:1e:ff:6d:64:3c: b8:9e:25:39:d5:94:0b:1c:ab:d3:41:01:99:48:23: 03:66:80:da:ee:93:9c:88:dd:4d:42:d1:c2:81:23: 41:d3:73:a6:3d:8c:94:05:d6:7e:b4:0b:07:e5:50: 64:4c:61:22:5f:f1:6e:6a:59:43:b5:31:dc:aa:e9: f0:19:bf:75:e0:91:f9:a3:64:15:95:cf:69:c3:e6: 58:3c:87:c4:f5:b9:c3:bc:51:f8:59:03:94:c0:e6: 65:e3:af:e2:4f:fa:94:a5:5e:c8:15:46:f9:49:d8: 83:7d:dc:9f:04:53:e2:ca:4a:61:67:f3:cb:6d:04: 2e:a5:15:4a:70:a6:a2:7c:69:e2:c8:eb:e3:11:d9: 81:ce:47:a8:69:8b:d9:c8:47:88:14:c2:ee:8e:db: 77:e2:f8:dc:bd:f8:3d:64:56:5f:16:4f:e7:7d:e0: dd:84:8f:a0:73:c1:25:f2:9c:78:98:9c:97:bc:fd: 3b:cb:96:33:b1:07:66:71:3f:f4:50:8d:3d:8e:eb: e7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B3:DD:BD:4E:F5:D6:AA:02:51:55:6C:A1:E5:E6:3F:B1:AD:B8:72 X509v3 Authority Key Identifier: keyid:7C:B4:97:5F:BB:42:51:23:F7:AC:98:6A:07:12:79:CD:A9:2B:5B:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1zy1ubWWqH2AL6Ho5MBxUCjhFibabVTNC8A9VTLjN1S/1/7CB4975FBB425123F7AC986A071279CDA92B5BCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e2:7a:fa:bc:d5:9f:b0:4c:22:d3:00:b5:42:6b:07:d1:91: 6e:a6:9f:df:e2:c4:ab:81:67:70:33:61:99:61:4f:0e:b2:1d: 1b:c7:61:9d:a4:14:27:7c:97:50:c7:41:08:86:14:63:e5:e2: dc:dc:cc:83:1d:b0:2b:ed:3b:b8:38:0f:0b:65:be:9f:f8:4c: a3:e9:38:e4:f8:bf:cb:77:17:9a:3d:58:c3:1b:ba:4a:14:bc: a6:96:cc:06:f1:cd:ad:00:b3:ea:07:10:20:01:71:c7:63:87: fc:2d:0a:0a:a9:9b:a5:a1:ac:58:35:80:d3:7c:6a:4b:e3:be: 5e:5e:87:6b:6f:83:eb:8d:fe:60:37:fc:8a:a4:ac:f9:6d:8c: 11:49:6c:cb:96:24:49:ee:8e:ef:76:60:99:23:84:fc:34:6a: 81:da:19:9a:8e:2e:8f:f3:d6:10:e5:67:4a:d3:a4:df:4f:b0: fc:bd:e4:39:4b:86:da:6b:b9:b3:51:2c:c4:48:59:f7:f5:37: bd:c4:a2:a9:d6:78:e4:c7:2f:f1:c2:53:a1:0b:27:56:f3:87: 54:1e:00:b4:48:0d:a0:14:ee:38:3f:18:a5:6c:89:a7:e8:22: a9:f1:6f:67:53:53:b8:ff:5c:8f:27:ef:c0:62:71:24:c4:67: 1d:5e:7c:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVg048UuQEGi08JY2Tvx2vqWLFpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCNDk3NUZCQjQyNTEyM0Y3QUM5ODZBMDcxMjc5Q0RB OTJCNUJDRDAeFw0yNTA1MTExODAwMjJaFw0yNTA1MTIxODI2MjJaMDMxMTAvBgNV BAMTKDA5QjNEREJENEVGNUQ2QUEwMjUxNTU2Q0ExRTVFNjNGQjFBREI4NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEK49Qxqoend+Y8WEXGZeREXin dsxlyG+6plJYy3ZhPLV6XvF97YbRaoeoaNf9p+l+GFh/35Me/21kPLieJTnVlAsc q9NBAZlIIwNmgNruk5yI3U1C0cKBI0HTc6Y9jJQF1n60CwflUGRMYSJf8W5qWUO1 Mdyq6fAZv3XgkfmjZBWVz2nD5lg8h8T1ucO8UfhZA5TA5mXjr+JP+pSlXsgVRvlJ 2IN93J8EU+LKSmFn88ttBC6lFUpwpqJ8aeLI6+MR2YHOR6hpi9nIR4gUwu6O23fi +Ny9+D1kVl8WT+d94N2Ej6BzwSXynHiYnJe8/TvLljOxB2ZxP/RQjT2O6+ebAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCbPdvU711qoCUVVsoeXmP7GtuHIwHwYDVR0j BBgwFoAUfLSXX7tCUSP3rJhqBxJ5zakrW80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzF6eTF1YldXcUgyQUw2SG81TUJ4VUNqaEZpYmFiVlROQzhBOVZUTGpO MVMvMS83Q0I0OTc1RkJCNDI1MTIzRjdBQzk4NkEwNzEyNzlDREE5MkI1QkNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQjQ5NzVGQkI0MjUxMjNG N0FDOTg2QTA3MTI3OUNEQTkyQjVCQ0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzF6eTF1YldXcUgyQUw2SG81TUJ4VUNqaEZpYmFiVlROQzhBOVZUTGpOMVMvMS83 Q0I0OTc1RkJCNDI1MTIzRjdBQzk4NkEwNzEyNzlDREE5MkI1QkNELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADOJ6+rzVn7BMItMAtUJrB9GRbqaf3+LEq4FncDNhmWFPDrIdG8dhnaQUJ3yX UMdBCIYUY+Xi3NzMgx2wK+07uDgPC2W+n/hMo+k45Pi/y3cXmj1Ywxu6ShS8ppbM BvHNrQCz6gcQIAFxx2OH/C0KCqmbpaGsWDWA03xqS+O+Xl6Ha2+D643+YDf8iqSs +W2MEUlsy5YkSe6O73ZgmSOE/DRqgdoZmo4uj/PWEOVnStOk30+w/L3kOUuG2mu5 s1EsxEhZ9/U3vcSiqdZ45Mcv8cJToQsnVvOHVB4AtEgNoBTuOD8YpWyJp+giqfFv Z1NTuP9cjyfvwGJxJMRnHV58sA== -----END CERTIFICATE-----Generated at Mon May 12 10:49:26 2025 by rpki-client