$ rpki-client -vvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft File: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft (raw, json) Hash identifier: pWf8dnY4t6TsKKvQoGf6k25MfsHgkKohzESSifiu2vg= Subject key identifier: F7:82:5B:FE:C3:A5:C9:79:94:55:4D:33:8C:B4:26:0B:9D:22:F3:53 Authority key identifier: 5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9 Certificate issuer: /CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9 Certificate serial: 761FC678F379595A50FEEAFDF4DE8DC05208BB3A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer Subject info access: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft Manifest number: 01EB Signing time: Fri 04 Apr 2025 20:18:46 +0000 Manifest this update: Fri 04 Apr 2025 20:13:46 +0000 Manifest next update: Sat 05 Apr 2025 23:09:46 +0000 Files and hashes: 1: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl (hash: uaAflxzvjJK7fQcz+iT9qKUvBoBwTXouKEq65e+ixG8=) 2: 3137392e39362e3230302e302f32312d3234203d3e203532353730.roa (hash: ThFay1lLsaEu2jVa7XfNcUJbNcEHJjS8TO7JyZdIDyo=) 3: 3137372e38362e3131362e302f32322d3234203d3e203532353730.roa (hash: OGh0oSMiAuqwOXO84p0Xsd8bUAebLrAgyXg0x2c44tg=) 4: 323830343a313536343a3a2f33322d3336203d3e203532353730.roa (hash: FC1Wd69RrJidzRZVv4UIal/AXyu4NEituILPDllcaNg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 23:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:1f:c6:78:f3:79:59:5a:50:fe:ea:fd:f4:de:8d:c0:52:08:bb:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9 Validity Not Before: Apr 4 20:13:46 2025 GMT Not After : Apr 5 23:09:46 2025 GMT Subject: CN=F7825BFEC3A5C97994554D338CB4260B9D22F353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d2:d1:bd:17:dd:34:ad:17:f5:28:b8:99:7d: d7:ef:a7:46:c6:a1:46:b4:d9:74:66:bb:d0:75:fd: 4a:51:99:e4:9e:ab:21:0f:c9:c5:2c:f7:94:73:3f: 13:f8:ee:83:75:2d:b2:5a:46:27:90:0b:05:bc:b7: 1a:93:ee:e1:37:5f:1a:98:8b:8d:f9:64:44:7f:64: 80:e6:6b:45:54:71:09:88:d3:92:0b:b2:3f:01:d5: 03:aa:23:8e:42:20:c4:d5:e6:45:af:c4:95:c4:33: 3a:41:be:90:1d:4f:50:2c:b9:01:1b:46:cc:f7:a9: 01:71:f9:91:4b:0b:64:1c:87:04:bc:cd:c3:67:6d: 2a:f9:f5:00:82:f1:fb:a3:04:94:cc:15:5e:91:04: f8:32:a7:94:ba:b4:33:31:09:a9:39:d4:ad:df:64: 62:b4:59:82:e0:b3:45:46:69:7e:06:db:5c:ed:60: c6:b6:f9:1b:e6:b5:0e:1f:70:93:f7:ad:57:8d:a2: ec:6a:3a:8c:e0:eb:30:81:bc:5e:4c:af:50:0c:e6: e1:11:5a:4e:b1:0d:48:47:e1:37:f7:a3:85:99:a3: a7:de:28:51:bc:98:5f:25:26:8f:c7:9d:7e:ef:a4: d9:c9:d1:93:de:e6:bf:5e:fc:b9:1e:9c:f3:d0:94: 1a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:82:5B:FE:C3:A5:C9:79:94:55:4D:33:8C:B4:26:0B:9D:22:F3:53 X509v3 Authority Key Identifier: keyid:5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:78:c1:2c:80:74:87:bc:61:34:d8:1e:f9:30:85:70:fc:bc: 4f:21:73:fc:b3:28:f1:5c:ae:f9:27:9d:3e:91:d3:15:48:a1: c9:ad:59:20:d9:b7:95:34:e8:94:31:d1:00:5b:7b:65:65:a0: 53:6b:f9:ad:07:3e:99:59:00:d4:7b:db:ce:52:f4:b5:1f:25: f3:46:42:e3:32:09:4b:ad:4f:3c:e6:94:a8:5f:09:6c:f6:85: 5b:18:d3:7b:65:1c:81:c1:53:ee:32:8e:43:dc:ce:f0:98:db: 93:02:5f:f8:2d:23:ee:b1:a9:37:e8:57:6d:ca:76:ec:91:ed: c4:19:1e:31:d0:7f:80:b6:7e:16:db:34:42:3c:60:0e:d5:37: 4c:65:44:b6:f1:b7:ea:68:20:0c:54:41:89:94:50:b5:71:81: 30:cc:5f:e5:c1:20:be:28:85:f9:38:ba:ba:22:4c:bb:93:e4: d2:3b:85:71:cc:e9:cf:17:c9:98:05:8f:21:b5:64:b2:e6:93: 24:27:e3:4f:b5:02:24:6a:4b:9b:b3:13:5e:1c:6c:19:a1:7d: fd:9a:2e:51:58:bb:ce:7d:94:72:46:96:91:48:b6:6c:f4:cd: c9:a8:6c:0b:41:52:d4:07:bd:31:45:c7:e4:34:a7:91:7a:28: 78:23:2d:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdh/GePN5WVpQ/ur99N6NwFIIuzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNURDMjJDOUYzOEU0QjNBNUZGQUNDNzY4OUM2RUI1 MkE2NURCOTAeFw0yNTA0MDQyMDEzNDZaFw0yNTA0MDUyMzA5NDZaMDMxMTAvBgNV BAMTKEY3ODI1QkZFQzNBNUM5Nzk5NDU1NEQzMzhDQjQyNjBCOUQyMkYzNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx0tG9F900rRf1KLiZfdfvp0bG oUa02XRmu9B1/UpRmeSeqyEPycUs95RzPxP47oN1LbJaRieQCwW8txqT7uE3XxqY i435ZER/ZIDma0VUcQmI05ILsj8B1QOqI45CIMTV5kWvxJXEMzpBvpAdT1AsuQEb Rsz3qQFx+ZFLC2QchwS8zcNnbSr59QCC8fujBJTMFV6RBPgyp5S6tDMxCak51K3f ZGK0WYLgs0VGaX4G21ztYMa2+RvmtQ4fcJP3rVeNouxqOozg6zCBvF5Mr1AM5uER Wk6xDUhH4Tf3o4WZo6feKFG8mF8lJo/HnX7vpNnJ0ZPe5r9e/LkenPPQlBotAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU94Jb/sOlyXmUVU0zjLQmC50i81MwHwYDVR0j BBgwFoAUX/XcIsnzjks6X/rMdonG61KmXbkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5 ZDIvMS81RkY1REMyMkM5RjM4RTRCM0E1RkZBQ0M3Njg5QzZFQjUyQTY1REI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGRjVEQzIyQzlGMzhFNEIz QTVGRkFDQzc2ODlDNkVCNTJBNjVEQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5ZDIvMS81 RkY1REMyMkM5RjM4RTRCM0E1RkZBQ0M3Njg5QzZFQjUyQTY1REI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqnjBLIB0h7xhNNge+TCFcPy8TyFz/LMo8Vyu+SedPpHTFUihya1ZINm3lTTo lDHRAFt7ZWWgU2v5rQc+mVkA1HvbzlL0tR8l80ZC4zIJS61PPOaUqF8JbPaFWxjT e2UcgcFT7jKOQ9zO8JjbkwJf+C0j7rGpN+hXbcp27JHtxBkeMdB/gLZ+Fts0Qjxg DtU3TGVEtvG36mggDFRBiZRQtXGBMMxf5cEgviiF+Ti6uiJMu5Pk0juFcczpzxfJ mAWPIbVksuaTJCfjT7UCJGpLm7MTXhxsGaF9/ZouUVi7zn2UckaWkUi2bPTNyahs C0FS1Ae9MUXH5DSnkXooeCMtUg== -----END CERTIFICATE-----Generated at Sat Apr 5 13:27:26 2025 by rpki-client