$ rpki-client -vvf rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft File: 2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft (raw, json) Hash identifier: sPZWGdUXMXwnR2XCTL+Z+pN/jWfsLz6PX5P74DdiPmI= Subject key identifier: 03:90:29:97:76:54:DB:C9:48:78:3B:D9:2E:43:CF:1D:D8:A3:DA:B6 Authority key identifier: 2A:A9:C0:C8:79:5C:1A:DD:1B:EE:9A:6C:17:22:3F:C7:CC:D4:C3:E3 Certificate issuer: /CN=2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3 Certificate serial: 54A4B6331770F00421D561023767A0A9F3758F7D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer Subject info access: rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft Manifest number: 9C Signing time: Sat 10 May 2025 01:40:20 +0000 Manifest this update: Sat 10 May 2025 01:35:20 +0000 Manifest next update: Sun 11 May 2025 05:28:20 +0000 Files and hashes: 1: 2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl (hash: MDv0oNiefVp9IKv0KaI73myuJ47A0MQzkOKNlRaH/aU=) 2: 34352e3136302e37362e302f32332d3332203d3e20323638343431.roa (hash: op6z5zv5bXYx/GC1V945At+HHF1/DnboG7Nwmgwomqc=) 3: 323830313a38303a323436303a3a2f34342d313238203d3e20323638343431.roa (hash: ZPSfVx1LgqAUvWD4JVlPK1AKbkJ6+EyPJ3Dbf/KroU0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 05:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a4:b6:33:17:70:f0:04:21:d5:61:02:37:67:a0:a9:f3:75:8f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3 Validity Not Before: May 10 01:35:20 2025 GMT Not After : May 11 05:28:20 2025 GMT Subject: CN=039029977654DBC948783BD92E43CF1DD8A3DAB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:46:af:62:34:f6:82:ce:2a:ff:a2:3c:bf: 6d:56:09:40:9a:ed:31:fe:90:c8:8d:b8:a7:d5:36: 95:36:8d:a4:bc:f3:2b:2f:de:34:fa:47:d9:dd:28: 07:46:8c:97:e1:16:33:53:10:a3:79:47:5d:a0:83: 5b:e8:b7:72:e3:54:4b:e8:5c:5c:e3:1e:dd:8f:35: 12:0c:7c:a2:cd:c2:b3:02:99:3b:1e:61:52:14:96: a8:9a:f0:a6:f6:4f:13:57:bf:89:a6:ba:bd:1b:07: 4e:81:9c:5d:f3:ed:9b:e9:2a:38:84:89:56:87:76: a2:19:63:0e:db:d4:14:9c:d8:23:18:48:0f:45:4b: da:ee:8b:a1:17:92:f1:55:07:0c:e2:19:07:a3:74: 93:c7:cd:de:d4:72:d7:74:74:29:85:78:88:fe:9e: cc:df:42:97:bb:f0:79:c9:51:83:3e:a0:cb:61:d5: 59:88:34:0c:28:e7:9c:3a:8f:d0:57:a7:02:60:3b: 34:03:b1:e2:cf:67:79:d2:91:8e:52:82:70:7c:e7: 6a:8e:bd:7f:df:e0:69:bc:94:01:d4:34:27:a6:99: 71:37:d7:42:74:df:83:65:02:3a:c4:7b:75:fe:66: c0:5a:bf:8f:40:23:af:42:69:11:6d:27:5f:aa:fd: 44:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:90:29:97:76:54:DB:C9:48:78:3B:D9:2E:43:CF:1D:D8:A3:DA:B6 X509v3 Authority Key Identifier: keyid:2A:A9:C0:C8:79:5C:1A:DD:1B:EE:9A:6C:17:22:3F:C7:CC:D4:C3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7f:3a:03:ed:1d:ea:30:51:ce:13:ca:5b:53:08:3a:ee:4f: 41:bf:cc:9f:ef:ae:33:c2:8d:b2:76:68:fb:b2:46:9f:c1:f3: 32:fc:4e:ab:0e:75:14:49:b6:41:04:30:61:d2:fe:0b:12:d1: da:b9:f2:e3:b6:b6:14:87:69:e5:dd:49:b3:92:8d:fa:7a:cf: 03:d4:cf:f9:7b:14:00:90:46:fa:80:e6:50:88:7b:51:86:73: 82:12:b7:ee:10:0f:d3:29:59:55:72:92:61:27:32:33:e6:07: ee:aa:7e:b5:71:d8:b5:1c:ea:39:1a:fc:81:ee:84:1c:88:fe: 0c:26:61:19:af:99:b8:63:b7:27:28:4b:65:19:39:89:bd:f1: cd:28:db:6c:f5:ca:a9:4b:f0:28:26:4d:a8:7a:46:cc:d4:94: f6:76:ea:76:c6:57:4f:d2:9f:87:ae:8c:78:c5:74:cf:28:c1: 63:3d:cd:6a:6c:d4:ac:52:80:95:9a:2b:37:ba:75:3e:33:c7: 07:f3:ac:4b:a1:86:a2:d7:39:2f:a4:53:26:f6:72:df:ae:80: be:ef:f2:3a:2a:62:ae:d5:31:78:2a:54:a7:c2:05:94:c7:aa: 8b:90:d1:c2:de:b1:93:bb:60:d8:eb:a4:35:7a:74:d6:ec:55: 59:ae:f2:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVKS2Mxdw8AQh1WECN2egqfN1j30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBOUMwQzg3OTVDMUFERDFCRUU5QTZDMTcyMjNGQzdD Q0Q0QzNFMzAeFw0yNTA1MTAwMTM1MjBaFw0yNTA1MTEwNTI4MjBaMDMxMTAvBgNV BAMTKDAzOTAyOTk3NzY1NERCQzk0ODc4M0JEOTJFNDNDRjFERDhBM0RBQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKzEavYjT2gs4q/6I8v21WCUCa 7TH+kMiNuKfVNpU2jaS88ysv3jT6R9ndKAdGjJfhFjNTEKN5R12gg1vot3LjVEvo XFzjHt2PNRIMfKLNwrMCmTseYVIUlqia8Kb2TxNXv4mmur0bB06BnF3z7ZvpKjiE iVaHdqIZYw7b1BSc2CMYSA9FS9rui6EXkvFVBwziGQejdJPHzd7Uctd0dCmFeIj+ nszfQpe78HnJUYM+oMth1VmINAwo55w6j9BXpwJgOzQDseLPZ3nSkY5SgnB852qO vX/f4Gm8lAHUNCemmXE310J034NlAjrEe3X+ZsBav49AI69CaRFtJ1+q/USfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUA5Apl3ZU28lIeDvZLkPPHdij2rYwHwYDVR0j BBgwFoAUKqnAyHlcGt0b7ppsFyI/x8zUw+MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0pDdXNtMUxUamRlN3Q3dnVSOUE1UkJRS0o0S0RkZTZtWVlVdTl6aGJ0 VWkvMC8yQUE5QzBDODc5NUMxQUREMUJFRTlBNkMxNzIyM0ZDN0NDRDRDM0UzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQTlDMEM4Nzk1QzFBREQx QkVFOUE2QzE3MjIzRkM3Q0NENEMzRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0pDdXNtMUxUamRlN3Q3dnVSOUE1UkJRS0o0S0RkZTZtWVlVdTl6aGJ0VWkvMC8y QUE5QzBDODc5NUMxQUREMUJFRTlBNkMxNzIyM0ZDN0NDRDRDM0UzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPn86A+0d6jBRzhPKW1MIOu5PQb/Mn++uM8KNsnZo+7JGn8HzMvxOqw51FEm2 QQQwYdL+CxLR2rny47a2FIdp5d1Js5KN+nrPA9TP+XsUAJBG+oDmUIh7UYZzghK3 7hAP0ylZVXKSYScyM+YH7qp+tXHYtRzqORr8ge6EHIj+DCZhGa+ZuGO3JyhLZRk5 ib3xzSjbbPXKqUvwKCZNqHpGzNSU9nbqdsZXT9Kfh66MeMV0zyjBYz3NamzUrFKA lZorN7p1PjPHB/OsS6GGotc5L6RTJvZy366Avu/yOipirtUxeCpUp8IFlMeqi5DR wt6xk7tg2OukNXp01uxVWa7ycw== -----END CERTIFICATE-----Generated at Sat May 10 09:56:11 2025 by rpki-client