$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft File: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft (raw, json) Hash identifier: Ykcxp7jxS5wCKQUhodKoJNmfj9Qcw0HXREytrUOMgmI= Subject key identifier: BB:6B:8C:73:7C:C4:60:57:BB:55:8B:66:DA:AA:2D:97:32:F3:B4:9B Authority key identifier: D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC Certificate issuer: /CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Certificate serial: 501B98AF3F5E8339F914CFF9718F3949591BEE96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject info access: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft Manifest number: 4F Signing time: Mon 07 Apr 2025 12:32:13 +0000 Manifest this update: Mon 07 Apr 2025 12:27:13 +0000 Manifest next update: Tue 08 Apr 2025 14:50:13 +0000 Files and hashes: 1: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl (hash: Pw61GdZULmmbc2qMwayhp40pig1bdHu2HqBvcrYHVkA=) 2: 34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (hash: dGr5cTxS6sHO6LIXh/H72qtLHlSDxdG5hFZ+7Zrlor0=) 3: 323830343a346565343a3a2f33322d3438203d3e20323638323839.roa (hash: 8QVrrPvDESPyLlcybwCmEcTLp6Hw5J3De08ADxJOVDg=) 4: 3137302e3233332e32302e302f32322d3234203d3e20323638323839.roa (hash: 5XwCvfaoU64ymtIslXprTesI7aefy6dxcTH7KYUOQ3U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 08 Apr 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1b:98:af:3f:5e:83:39:f9:14:cf:f9:71:8f:39:49:59:1b:ee:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Validity Not Before: Apr 7 12:27:13 2025 GMT Not After : Apr 8 14:50:13 2025 GMT Subject: CN=BB6B8C737CC46057BB558B66DAAA2D9732F3B49B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:a2:f1:f7:9e:f3:e0:16:8f:24:7a:77:dc: 16:28:5a:19:e9:18:cd:0b:1f:35:04:ee:e2:ce:fe: 58:fe:a4:48:27:c2:43:e3:bd:04:c3:d0:87:fc:b4: 83:28:78:74:cf:2f:51:64:c1:ed:f3:67:66:ed:2e: 73:f5:80:ee:1d:06:fc:ac:99:6d:95:41:c7:35:ad: d7:d1:d3:48:1a:6e:51:29:ec:17:f7:ce:39:16:4a: 3f:e1:d5:ef:76:2f:f7:82:fa:0f:be:0c:1a:c2:a1: c3:39:14:9c:b1:b2:ad:b9:e0:58:40:5b:c5:d5:03: 3c:be:6a:1e:69:de:23:c5:ed:6b:a8:7a:de:19:bc: 2a:17:7c:82:99:42:53:8a:6f:f7:04:b3:de:79:db: 8f:f5:6d:e6:8a:8e:b0:be:59:0e:d9:f0:2b:c5:2e: 66:e3:46:9f:02:00:0a:ab:fb:64:81:72:7c:be:b0: 79:a0:e5:ef:9d:7a:0c:57:eb:e2:99:a0:17:51:e2: 8b:1a:05:43:bc:f3:c5:e7:11:86:9b:59:42:ba:5c: 4e:41:db:9d:04:b6:38:08:e1:d7:bf:30:1e:9c:28: 1a:75:b7:6c:ad:de:03:f8:d6:e9:9e:c3:02:3d:e4: e1:9d:c3:68:00:92:1d:6b:a4:45:ba:8d:f7:c3:67: c5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6B:8C:73:7C:C4:60:57:BB:55:8B:66:DA:AA:2D:97:32:F3:B4:9B X509v3 Authority Key Identifier: keyid:D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fa:19:01:30:be:b3:c0:9f:5b:03:70:1e:8e:b0:35:f5:49: b3:0a:93:d1:9a:87:f1:b8:5c:65:4f:05:12:16:9f:23:fd:48: 9f:15:67:01:6f:73:e5:58:30:17:31:0e:45:eb:13:67:cc:00: 37:fa:0a:17:0b:24:ac:b9:e3:9d:37:43:e9:1f:08:1e:63:d4: 70:2c:a0:3c:e7:6b:f9:cb:49:f9:cf:f4:1d:85:89:6c:22:0d: 2a:4c:8e:13:46:88:e7:4f:2c:41:95:e4:f5:64:67:ed:18:4c: c3:d5:d9:f6:c0:31:15:5f:f3:12:5f:ff:1c:bc:11:9f:7e:ff: e4:32:d7:e0:fd:88:d9:d6:ec:c4:5d:3e:a7:bf:28:03:d2:fe: 15:18:35:21:58:c3:fe:f4:05:67:8b:58:10:10:c1:42:8c:e3: 09:f9:a9:99:8c:b9:6b:92:e0:ed:4a:1a:70:12:bb:e5:34:94: 1c:ef:7d:a2:a5:9f:c0:7e:fe:22:58:df:02:a3:48:08:39:20: 05:b7:b3:1e:9f:dc:04:2e:dc:69:38:3b:9d:3e:9d:eb:49:46: 44:6f:00:8b:d8:f7:41:1f:fd:46:10:80:04:e7:e8:ba:fc:13: a9:0c:a8:5d:f1:52:5f:9a:50:74:22:80:be:84:6a:12:66:ab: 7f:ec:ee:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUBuYrz9egzn5FM/5cY85SVkb7pYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCQTdDMzVBNUMyNDIwNTg5QjMwQzMzRDlDRjEzNzQ1 MDVGM0RCQzAeFw0yNTA0MDcxMjI3MTNaFw0yNTA0MDgxNDUwMTNaMDMxMTAvBgNV BAMTKEJCNkI4QzczN0NDNDYwNTdCQjU1OEI2NkRBQUEyRDk3MzJGM0I0OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+c6Lx957z4BaPJHp33BYoWhnp GM0LHzUE7uLO/lj+pEgnwkPjvQTD0If8tIMoeHTPL1Fkwe3zZ2btLnP1gO4dBvys mW2VQcc1rdfR00gablEp7Bf3zjkWSj/h1e92L/eC+g++DBrCocM5FJyxsq254FhA W8XVAzy+ah5p3iPF7Wuoet4ZvCoXfIKZQlOKb/cEs95524/1beaKjrC+WQ7Z8CvF LmbjRp8CAAqr+2SBcny+sHmg5e+degxX6+KZoBdR4osaBUO888XnEYabWUK6XE5B 250EtjgI4de/MB6cKBp1t2yt3gP41umewwI95OGdw2gAkh1rpEW6jffDZ8WzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUu2uMc3zEYFe7VYtm2qotlzLztJswHwYDVR0j BBgwFoAU2Lp8NaXCQgWJswwz2c8TdFBfPbwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6 VnQvMC9EOEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QkE3QzM1QTVDMjQyMDU4 OUIzMEMzM0Q5Q0YxMzc0NTA1RjNEQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6VnQvMC9E OEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALPoZATC+s8CfWwNwHo6wNfVJswqT0ZqH8bhcZU8FEhafI/1InxVnAW9z5Vgw FzEOResTZ8wAN/oKFwskrLnjnTdD6R8IHmPUcCygPOdr+ctJ+c/0HYWJbCINKkyO E0aI508sQZXk9WRn7RhMw9XZ9sAxFV/zEl//HLwRn37/5DLX4P2I2dbsxF0+p78o A9L+FRg1IVjD/vQFZ4tYEBDBQozjCfmpmYy5a5Lg7UoacBK75TSUHO99oqWfwH7+ IljfAqNICDkgBbezHp/cBC7caTg7nT6d60lGRG8Ai9j3QR/9RhCABOfouvwTqQyo XfFSX5pQdCKAvoRqEmarf+zu2g== -----END CERTIFICATE-----Generated at Tue Apr 8 01:30:30 2025 by rpki-client