$ rpki-client -vvf rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft File: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft (raw, json) Hash identifier: UJiYMKtXpEl3WYwFSIBtsb8fFXXCGLTtnFNFM55pt/U= Subject key identifier: 31:BD:94:F0:7B:1D:82:40:95:05:C4:9A:C9:F6:E9:DB:7A:8F:99:3D Authority key identifier: 99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54 Certificate issuer: /CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554 Certificate serial: 7AE02063F00BC409C13D7D5442DB869F4751B84E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer Subject info access: rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft Manifest number: 021B Signing time: Wed 14 May 2025 19:58:53 +0000 Manifest this update: Wed 14 May 2025 19:53:53 +0000 Manifest next update: Thu 15 May 2025 22:13:53 +0000 Files and hashes: 1: 99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl (hash: VnUgo/7bYJkYb5e82ieFLTtHFQF0waiJ0xE7AJNnGJA=) 2: 323830343a313635633a3a2f33322d3438203d3e20323633323834.roa (hash: 2PI5RKymGmz8mUp+uI2zB9l9pOFqFN2mMalTTIpWkw4=) 3: 3137392e3130372e34382e302f32322d3234203d3e20323633323834.roa (hash: 59L2ncly+4CTUTyhWleTXAijjeUxtcEeHxk7ZbQ1Y/o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 May 2025 20:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e0:20:63:f0:0b:c4:09:c1:3d:7d:54:42:db:86:9f:47:51:b8:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99A8F53F3426C983CA87D5D7ACF6AB5E14371554 Validity Not Before: May 14 19:53:53 2025 GMT Not After : May 15 22:13:53 2025 GMT Subject: CN=31BD94F07B1D82409505C49AC9F6E9DB7A8F993D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:21:e5:30:fe:d3:59:e1:49:f1:2d:1e:53: 4d:42:d1:17:44:f2:cb:f5:25:5e:ed:6f:92:46:40: 63:16:b6:38:9e:94:10:d3:a9:df:70:ee:3a:ab:0c: 34:5a:ac:3e:c2:e2:9f:28:b0:0c:a4:4d:cc:0a:11: 72:2a:c6:10:8d:3d:8e:5f:19:a5:0e:dd:a0:b2:bc: 19:cd:b2:5a:b2:a1:94:58:11:ce:bc:58:ea:3d:b7: bf:7b:2f:d7:1e:26:90:88:01:3a:cd:bd:9e:96:5b: 3b:06:05:0c:fd:a3:8f:88:8c:db:5e:1f:03:d5:da: f9:58:f5:b8:88:cb:60:fa:17:99:a4:63:f3:fd:0b: 65:2b:13:85:5d:a5:3a:9a:82:5c:ca:3f:51:38:e3: cc:71:fa:a7:38:aa:f2:fc:1b:e2:6b:69:f1:63:6f: 1c:9d:ee:8b:1a:ef:dc:8a:e5:3a:c9:d6:06:6f:c1: 85:d1:3b:3b:96:26:c2:47:cf:2c:1a:96:4f:08:87: 83:2e:c1:a0:d7:53:ff:3b:8c:32:9a:0c:68:7f:83: a7:d2:2f:b5:45:ef:ec:0b:5b:3d:9e:a6:e7:cb:a8: b6:7a:66:d0:42:90:3e:7f:b9:6c:ec:c4:93:65:d6: 01:81:c9:54:37:8e:ae:61:63:39:10:9c:25:2d:22: 4b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BD:94:F0:7B:1D:82:40:95:05:C4:9A:C9:F6:E9:DB:7A:8F:99:3D X509v3 Authority Key Identifier: keyid:99:A8:F5:3F:34:26:C9:83:CA:87:D5:D7:AC:F6:AB:5E:14:37:15:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnGeDD2bgbNQJgdEZvkwKLdHrogsJhjmzzx95ERJtFiu/1/99A8F53F3426C983CA87D5D7ACF6AB5E14371554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c2:87:1d:6c:f4:8e:d9:0a:01:40:5c:94:4e:b7:d5:2f:79: e1:74:53:86:20:84:25:06:66:9e:fb:9f:79:7b:8f:63:de:20: fd:e9:38:40:25:6e:8b:a4:d4:a5:5b:b1:53:f7:a0:75:25:e0: 9c:ec:b7:47:9c:f7:80:60:bc:1f:7e:23:e6:94:ff:f9:e7:f3: eb:d3:47:47:b2:2d:83:b1:95:db:64:81:e8:dd:64:e4:0b:13: 49:2e:29:5a:7c:eb:99:11:eb:4b:9b:37:fe:a5:74:8f:57:66: ca:41:a7:1c:5a:af:9c:4c:f3:95:6d:86:10:46:cb:5c:3c:fe: 79:3c:5d:f5:85:89:53:fd:01:58:48:6a:52:a7:ac:bb:de:97: 14:aa:70:c4:ff:70:a2:74:70:58:53:36:44:02:98:66:a8:03: 43:42:7d:e7:e2:7a:36:4e:38:69:b5:16:c1:c6:e1:ff:70:27: f4:3d:36:10:57:dc:1b:6a:ad:2a:87:1a:64:d6:e6:0f:58:77: d0:7f:92:ba:e2:78:fb:b5:e7:32:b4:9e:eb:4b:c2:35:5a:aa: 4a:67:a6:97:45:10:1f:13:ee:a5:cb:b4:45:77:f5:ca:d8:44: 7b:10:92:b6:87:08:ae:50:11:57:e3:03:8f:b4:c2:3f:e1:8f: c2:70:94:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeuAgY/ALxAnBPX1UQtuGn0dRuE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlBOEY1M0YzNDI2Qzk4M0NBODdENUQ3QUNGNkFCNUUx NDM3MTU1NDAeFw0yNTA1MTQxOTUzNTNaFw0yNTA1MTUyMjEzNTNaMDMxMTAvBgNV BAMTKDMxQkQ5NEYwN0IxRDgyNDA5NTA1QzQ5QUM5RjZFOURCN0E4Rjk5M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5AiHlMP7TWeFJ8S0eU01C0RdE 8sv1JV7tb5JGQGMWtjielBDTqd9w7jqrDDRarD7C4p8osAykTcwKEXIqxhCNPY5f GaUO3aCyvBnNslqyoZRYEc68WOo9t797L9ceJpCIATrNvZ6WWzsGBQz9o4+IjNte HwPV2vlY9biIy2D6F5mkY/P9C2UrE4VdpTqaglzKP1E448xx+qc4qvL8G+JrafFj bxyd7osa79yK5TrJ1gZvwYXROzuWJsJHzywalk8Ih4MuwaDXU/87jDKaDGh/g6fS L7VF7+wLWz2epufLqLZ6ZtBCkD5/uWzsxJNl1gGByVQ3jq5hYzkQnCUtIkuZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMb2U8HsdgkCVBcSayfbp23qPmT0wHwYDVR0j BBgwFoAUmaj1PzQmyYPKh9XXrParXhQ3FVQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR25HZUREMmJnYk5RSmdkRVp2a3dLTGRIcm9nc0poam16eng5NUVSSnRG aXUvMS85OUE4RjUzRjM0MjZDOTgzQ0E4N0Q1RDdBQ0Y2QUI1RTE0MzcxNTU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5QThGNTNGMzQyNkM5ODND QTg3RDVEN0FDRjZBQjVFMTQzNzE1NTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R25HZUREMmJnYk5RSmdkRVp2a3dLTGRIcm9nc0poam16eng5NUVSSnRGaXUvMS85 OUE4RjUzRjM0MjZDOTgzQ0E4N0Q1RDdBQ0Y2QUI1RTE0MzcxNTU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEcKHHWz0jtkKAUBclE631S954XRThiCEJQZmnvufeXuPY94g/ek4QCVui6TU pVuxU/egdSXgnOy3R5z3gGC8H34j5pT/+efz69NHR7Itg7GV22SB6N1k5AsTSS4p WnzrmRHrS5s3/qV0j1dmykGnHFqvnEzzlW2GEEbLXDz+eTxd9YWJU/0BWEhqUqes u96XFKpwxP9wonRwWFM2RAKYZqgDQ0J95+J6Nk44abUWwcbh/3An9D02EFfcG2qt KocaZNbmD1h30H+SuuJ4+7XnMrSe60vCNVqqSmeml0UQHxPupcu0RXf1ythEexCS tocIrlARV+MDj7TCP+GPwnCU8A== -----END CERTIFICATE-----Generated at Wed May 14 23:04:02 2025 by rpki-client