$ rpki-client -vvf rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft File: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft (raw, json) Hash identifier: c1sxrn4DE1htMXalPnb0/hEutEnB+gW0eRl8aBzhRV4= Subject key identifier: 4A:35:5F:46:B2:59:D3:C6:D3:D2:CA:F4:DF:13:AC:53:B9:77:67:4F Authority key identifier: 95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 Certificate issuer: /CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Certificate serial: 0843952114C9A076DDF90232F0012F5A30E30F8A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject info access: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft Manifest number: 0218 Signing time: Sun 11 May 2025 13:10:28 +0000 Manifest this update: Sun 11 May 2025 13:05:28 +0000 Manifest next update: Mon 12 May 2025 14:33:28 +0000 Files and hashes: 1: 3230312e37312e372e302f32342d3234203d3e20323730323832.roa (hash: /WtmP6qlAyBRtqamlDGXfbXyCY7Sm+whrYU5PIZ7k0c=) 2: 954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl (hash: DcV9FtFIyEBBnCh6xXMikbEdSEKSN64CvzAiO8bi3Mw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 14:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:43:95:21:14:c9:a0:76:dd:f9:02:32:f0:01:2f:5a:30:e3:0f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744 Validity Not Before: May 11 13:05:28 2025 GMT Not After : May 12 14:33:28 2025 GMT Subject: CN=4A355F46B259D3C6D3D2CAF4DF13AC53B977674F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:2c:75:1b:41:21:25:69:ac:5b:1a:24:32: 09:ff:17:84:61:b2:53:84:8e:8d:35:a8:93:34:2a: b4:ff:93:18:93:44:5e:aa:bc:55:eb:45:a9:12:bc: a9:8c:e0:95:ac:dd:39:cb:c7:d4:70:5f:13:37:b1: 92:18:a7:f2:6d:1a:bd:6c:ac:16:93:44:45:6d:70: f2:bd:0e:49:b5:84:9e:42:6e:d0:47:df:77:89:ff: dc:8b:05:ff:3f:4d:85:ee:e4:19:fd:47:c0:d1:b5: 3d:37:40:93:4d:30:c7:6c:d9:70:d8:c3:79:2d:8c: 47:6c:43:dc:11:0b:b5:34:7b:f2:51:94:ba:4c:e5: d2:b8:92:33:42:f2:39:3c:44:ab:de:52:0e:66:d4: 1a:69:08:0c:a2:45:d5:51:a3:fb:fa:8d:ba:48:26: 64:c7:b0:3c:9d:94:7c:c2:2c:a8:82:73:99:be:3c: 40:3c:0f:be:6c:d3:63:c8:2f:71:ff:ae:55:5d:28: 02:7e:bd:32:c0:14:94:e0:e9:8a:d9:9b:c5:49:8f: 23:54:bc:25:e0:de:94:76:be:59:30:e3:cc:fe:b6: 01:3d:6d:82:19:88:62:9a:ca:cd:bf:c2:80:0a:a1: c7:6a:ce:77:3a:aa:a5:3c:a1:96:87:7f:63:17:ff: 6c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:35:5F:46:B2:59:D3:C6:D3:D2:CA:F4:DF:13:AC:53:B9:77:67:4F X509v3 Authority Key Identifier: keyid:95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f4:71:19:83:b9:52:cf:7d:d0:03:f1:97:4c:03:ef:8b:de: 00:c9:e5:a4:72:96:7f:b9:e4:8b:a9:be:76:43:8c:89:8f:6e: c7:c3:4a:66:6f:e6:dd:41:e8:ee:3a:80:1f:e0:f0:b6:d3:5a: 34:ec:8e:8f:4b:4f:4e:62:e1:35:28:c0:f3:7c:a8:e9:15:5a: 86:f4:21:5d:eb:45:27:1e:57:e0:c7:ca:47:9f:ad:a8:0e:a7: d0:98:aa:7a:86:48:9d:55:2c:b8:8b:bc:69:af:3d:5d:6c:f0: a4:f7:f1:b2:a9:72:e3:8f:67:49:5e:4b:1b:2a:c1:31:81:89: 3f:7e:4c:1e:dd:8b:23:4e:61:88:ff:76:1b:9d:ad:44:bf:db: 40:f7:e1:00:5f:44:f5:ba:0f:2d:75:31:bf:1c:02:01:a8:8f: 0f:ef:e6:aa:44:df:7b:b8:68:73:81:f4:c9:25:06:7e:fb:6e: e9:95:be:76:36:2f:8f:d2:65:6b:e7:02:20:e2:ab:20:55:93: 55:a5:45:00:0d:0f:4e:0c:14:86:7c:0e:b4:9e:06:54:34:22: 0c:fa:4b:8b:d3:4d:74:9e:bd:70:d4:79:26:f8:c2:f2:5a:74: 4c:2d:3c:bf:e2:07:ab:a9:6b:f6:11:3a:93:07:4c:50:c6:44: be:db:d6:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCEOVIRTJoHbd+QIy8AEvWjDjD4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QzlEQjEyODVDMEIyMkYwQkFDMEZFMzhGNzRGMEZE MjI3ODc0NDAeFw0yNTA1MTExMzA1MjhaFw0yNTA1MTIxNDMzMjhaMDMxMTAvBgNV BAMTKDRBMzU1RjQ2QjI1OUQzQzZEM0QyQ0FGNERGMTNBQzUzQjk3NzY3NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcSx1G0EhJWmsWxokMgn/F4Rh slOEjo01qJM0KrT/kxiTRF6qvFXrRakSvKmM4JWs3TnLx9RwXxM3sZIYp/JtGr1s rBaTREVtcPK9Dkm1hJ5CbtBH33eJ/9yLBf8/TYXu5Bn9R8DRtT03QJNNMMds2XDY w3ktjEdsQ9wRC7U0e/JRlLpM5dK4kjNC8jk8RKveUg5m1BppCAyiRdVRo/v6jbpI JmTHsDydlHzCLKiCc5m+PEA8D75s02PIL3H/rlVdKAJ+vTLAFJTg6YrZm8VJjyNU vCXg3pR2vlkw48z+tgE9bYIZiGKays2/woAKocdqznc6qqU8oZaHf2MX/2zbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSjVfRrJZ08bT0sr03xOsU7l3Z08wHwYDVR0j BBgwFoAUlUydsShcCyLwusD+OPdPD9Inh0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VF OWUvMS85NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1NEM5REIxMjg1QzBCMjJG MEJBQzBGRTM4Rjc0RjBGRDIyNzg3NDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R21FYkIyNzZLb1JFbVpuSlV5ejNON1pYTDFjUzdiNTJ6bWZ6eUxZU1VFOWUvMS85 NTRDOURCMTI4NUMwQjIyRjBCQUMwRkUzOEY3NEYwRkQyMjc4NzQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACvRxGYO5Us990APxl0wD74veAMnlpHKWf7nki6m+dkOMiY9ux8NKZm/m3UHo 7jqAH+DwttNaNOyOj0tPTmLhNSjA83yo6RVahvQhXetFJx5X4MfKR5+tqA6n0Jiq eoZInVUsuIu8aa89XWzwpPfxsqly449nSV5LGyrBMYGJP35MHt2LI05hiP92G52t RL/bQPfhAF9E9boPLXUxvxwCAaiPD+/mqkTfe7hoc4H0ySUGfvtu6ZW+djYvj9Jl a+cCIOKrIFWTVaVFAA0PTgwUhnwOtJ4GVDQiDPpLi9NNdJ69cNR5JvjC8lp0TC08 v+IHq6lr9hE6kwdMUMZEvtvWxQ== -----END CERTIFICATE-----Generated at Sun May 11 21:45:33 2025 by rpki-client