$ rpki-client -vvf rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft File: 4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft (raw, json) Hash identifier: Ip09BjB58DaR2y4/qgBaBd2tkkjdOf/Msjan1DfyXh0= Subject key identifier: 2E:93:19:1D:78:38:2C:B8:5B:28:C2:A5:11:93:B1:62:36:1C:79:BE Authority key identifier: 4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E Certificate issuer: /CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E Certificate serial: 2839803E8F66D22F86D0B812E1E4BCE172C5E053 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer Subject info access: rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft Manifest number: 0217 Signing time: Mon 12 May 2025 13:13:45 +0000 Manifest this update: Mon 12 May 2025 13:08:45 +0000 Manifest next update: Tue 13 May 2025 13:49:45 +0000 Files and hashes: 1: 323830343a363033383a3a2f33322d3438203d3e20323639313533.roa (hash: T4iUaekwa7W+wWBiZBhsMW92NOY/WFlQgDoo76BdH1c=) 2: 4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl (hash: ETfgAQrHrrj4DStBoLZbHJFf2QCh7EoROfviyrhXVOE=) 3: 34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa (hash: tmAwqMhIhrFuqc+nYdV33Pa6/YiDFGZ4qnEWgs1O00c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 13:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:39:80:3e:8f:66:d2:2f:86:d0:b8:12:e1:e4:bc:e1:72:c5:e0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E Validity Not Before: May 12 13:08:45 2025 GMT Not After : May 13 13:49:45 2025 GMT Subject: CN=2E93191D78382CB85B28C2A51193B162361C79BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:c2:72:82:57:47:a9:87:53:a2:4e:4c:c2: a2:c6:41:ec:60:96:83:2e:28:b9:22:dd:c5:2f:68: fc:ee:dc:b2:7b:5a:36:77:11:64:e2:13:eb:66:5e: 16:ed:d0:3e:b3:2a:68:f4:b1:b0:36:bf:99:65:82: d5:31:29:2b:5d:8d:d3:22:02:b4:7d:c7:68:61:4e: 60:cb:10:91:ca:5c:12:d7:51:66:c7:82:1b:b2:38: e1:a5:25:26:be:32:7e:f6:2c:b6:40:68:21:ee:c3: e0:6c:8a:82:e8:bf:80:77:7d:26:8a:92:f4:3c:34: 3c:be:44:84:cf:29:0c:00:89:1a:bc:6c:d4:04:51: 15:41:ac:d0:45:2e:e0:a3:ff:11:4f:aa:46:9a:5b: 97:6e:5a:ff:f3:55:40:78:91:81:fe:30:63:93:e1: ea:45:a9:b4:42:57:2c:82:94:2e:9e:d0:10:dc:c6: 2a:73:ac:1c:79:53:eb:ca:22:8b:d9:2f:7b:2a:12: 48:7e:eb:52:29:8e:0f:e7:5e:97:b9:f7:e9:3a:fd: e6:4e:1d:b0:84:84:d0:b1:fa:0f:36:ef:e3:4e:0c: a0:3d:2a:cf:a6:37:8a:be:18:55:6d:49:8f:04:34: 84:83:1f:58:37:b7:64:c1:1f:a5:01:83:e3:b7:bf: ea:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:93:19:1D:78:38:2C:B8:5B:28:C2:A5:11:93:B1:62:36:1C:79:BE X509v3 Authority Key Identifier: keyid:4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:45:88:0f:95:9d:ad:ce:42:03:3f:aa:38:ea:63:04:ca:21: 5a:f3:21:b3:6f:f1:c8:e3:c2:c4:cc:8f:10:a4:14:42:e2:05: 25:78:a4:9a:da:9f:c9:29:ac:f3:e7:ec:d1:57:ff:fc:18:f2: c9:b1:28:15:7f:9c:31:a4:a3:f8:fd:39:b4:a2:55:46:b3:3c: 5e:fc:0d:d2:fc:32:bf:d7:8b:66:45:2a:0c:49:9b:0c:13:93: 13:44:5f:56:d9:1e:70:cb:a3:3a:3b:6e:d0:f9:94:1a:de:25: f4:3a:3f:08:69:5b:6e:e3:7b:0b:0f:38:9f:4c:bc:8e:71:85: 2d:bf:7b:6f:b2:58:24:0d:c8:07:77:12:84:56:36:c6:e1:b2: 44:82:58:3c:04:7b:25:10:18:f2:bb:50:b6:d9:71:4d:6d:35: 4a:2b:fa:9a:3e:de:af:41:6e:ec:2b:70:70:7b:f7:dc:21:e3: 40:08:bf:c4:db:a0:2f:db:d4:27:c7:06:56:2e:a1:d3:98:f0: 39:67:f1:60:4a:06:96:f5:4f:23:64:bd:19:16:dc:39:2a:fe: a8:56:d9:3a:17:63:0d:23:51:52:47:62:f2:d9:82:9a:20:78: 18:ca:d1:b5:ee:fa:9b:fd:df:39:cd:15:d1:73:11:95:9e:f6: 41:4f:5e:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKDmAPo9m0i+G0LgS4eS84XLF4FMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGQ0M2NTREQjQyNDhFRDlDQzhBRkM3RDYxQjcxRjcw QTQ4NzA3RTAeFw0yNTA1MTIxMzA4NDVaFw0yNTA1MTMxMzQ5NDVaMDMxMTAvBgNV BAMTKDJFOTMxOTFENzgzODJDQjg1QjI4QzJBNTExOTNCMTYyMzYxQzc5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJV8JygldHqYdTok5MwqLGQexg loMuKLki3cUvaPzu3LJ7WjZ3EWTiE+tmXhbt0D6zKmj0sbA2v5llgtUxKStdjdMi ArR9x2hhTmDLEJHKXBLXUWbHghuyOOGlJSa+Mn72LLZAaCHuw+BsioLov4B3fSaK kvQ8NDy+RITPKQwAiRq8bNQEURVBrNBFLuCj/xFPqkaaW5duWv/zVUB4kYH+MGOT 4epFqbRCVyyClC6e0BDcxipzrBx5U+vKIovZL3sqEkh+61Ipjg/nXpe59+k6/eZO HbCEhNCx+g827+NODKA9Ks+mN4q+GFVtSY8ENISDH1g3t2TBH6UBg+O3v+qVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULpMZHXg4LLhbKMKlEZOxYjYceb4wHwYDVR0j BBgwFoAUS/zGVNtCSO2cyK/H1htx9wpIcH4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3JaWHpmd2EyUDFpQzJVNmVNTVlGU1VrQnJmQzRDc2JVUjZ3QTJQVFZa QWgvMS80QkZDQzY1NERCNDI0OEVEOUNDOEFGQzdENjFCNzFGNzBBNDg3MDdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRkNDNjU0REI0MjQ4RUQ5 Q0M4QUZDN0Q2MUI3MUY3MEE0ODcwN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3JaWHpmd2EyUDFpQzJVNmVNTVlGU1VrQnJmQzRDc2JVUjZ3QTJQVFZaQWgvMS80 QkZDQzY1NERCNDI0OEVEOUNDOEFGQzdENjFCNzFGNzBBNDg3MDdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbkWID5Wdrc5CAz+qOOpjBMohWvMhs2/xyOPCxMyPEKQUQuIFJXikmtqfySms 8+fs0Vf//BjyybEoFX+cMaSj+P05tKJVRrM8XvwN0vwyv9eLZkUqDEmbDBOTE0Rf VtkecMujOjtu0PmUGt4l9Do/CGlbbuN7Cw84n0y8jnGFLb97b7JYJA3IB3cShFY2 xuGyRIJYPAR7JRAY8rtQttlxTW01Siv6mj7er0Fu7CtwcHv33CHjQAi/xNugL9vU J8cGVi6h05jwOWfxYEoGlvVPI2S9GRbcOSr+qFbZOhdjDSNRUkdi8tmCmiB4GMrR te76m/3fOc0V0XMRlZ72QU9ecg== -----END CERTIFICATE-----Generated at Mon May 12 19:17:07 2025 by rpki-client