$ rpki-client -vvf rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft File: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft (raw, json) Hash identifier: GP+78IrTLwg33/vJb0DrwgvkkxeHxWDvwD7z0mR2w1g= Subject key identifier: 15:99:A5:E2:C4:11:8D:62:E7:D7:0A:A0:10:15:10:AF:CA:F6:56:51 Authority key identifier: BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4 Certificate issuer: /CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4 Certificate serial: 7F1DA984B29ADC1F29D3F3FB9325B56075C150D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer Subject info access: rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft Manifest number: 01D4 Signing time: Thu 10 Apr 2025 09:04:21 +0000 Manifest this update: Thu 10 Apr 2025 08:59:21 +0000 Manifest next update: Fri 11 Apr 2025 12:39:21 +0000 Files and hashes: 1: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl (hash: nb27mALLLMWurNSTkWTq4UK5B89Ntyt3+h0JvfZybp4=) 2: 323830343a353738303a3a2f33322d3438203d3e20323632373334.roa (hash: 6PmjmTg0qFj+Vpl+t8ICe23yuGtZx6ZXcO49cR71Yp8=) 3: 3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa (hash: viidz0SzCgYo+ia6nn8hDFdjIUuWSnTz3zW/AEiDL+c=) 4: 3138362e3139352e302e302f32302d3234203d3e20323632373334.roa (hash: DhRxrtfQjT4NB8Bt8sfdP4LqhknKF3f3iI3zG7ssbkg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 11 Apr 2025 12:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1d:a9:84:b2:9a:dc:1f:29:d3:f3:fb:93:25:b5:60:75:c1:50:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4 Validity Not Before: Apr 10 08:59:21 2025 GMT Not After : Apr 11 12:39:21 2025 GMT Subject: CN=1599A5E2C4118D62E7D70AA0101510AFCAF65651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3b:a4:37:06:83:f1:cb:c2:f8:cd:9b:4e:5d: e5:97:93:9f:69:4c:d5:80:7b:3a:15:64:c9:00:87: cb:3d:3d:45:4f:4b:52:ee:94:5e:f5:1d:f0:51:61: 77:fa:57:53:34:20:a3:f9:d8:6c:fc:02:42:a0:ad: 41:de:0b:ac:df:31:cb:9c:40:82:57:61:f4:fd:84: 38:37:c8:16:17:f5:d0:d0:a4:33:2e:76:a6:c3:58: eb:f7:83:63:7b:67:22:66:0d:5e:11:54:3e:37:0b: c4:4b:2b:39:79:f4:2f:1a:b4:73:ca:e2:68:00:65: 7f:88:28:2e:9d:95:ff:66:fe:4f:e7:61:6f:7c:36: 94:c8:4b:98:af:93:7a:9e:49:2c:3b:8e:22:9b:4c: 7a:26:82:b2:fe:ab:4d:bc:15:5a:a9:ca:0d:03:90: 76:52:d0:98:69:8a:d8:2c:56:0c:47:83:82:14:d2: b3:d2:d2:74:8e:70:4a:5a:1a:7b:38:75:8d:1d:dd: 05:68:f3:37:52:e4:e2:24:20:48:52:3d:7f:ea:70: be:7f:f3:4a:37:c3:ba:e7:c8:77:3b:75:1b:dc:a2: f6:d5:c9:67:bc:09:a8:e6:bc:67:04:04:58:c1:a0: 3f:5c:84:f2:18:33:76:6c:66:8b:6b:d0:0c:b1:24: 6f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:99:A5:E2:C4:11:8D:62:E7:D7:0A:A0:10:15:10:AF:CA:F6:56:51 X509v3 Authority Key Identifier: keyid:BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7c:31:41:84:4c:1f:0f:1b:9f:c7:35:de:5f:d3:67:8a:ac: 4b:c3:20:20:7b:d3:5f:89:ce:81:e2:fe:38:b5:79:fe:4a:29: d6:cf:26:14:83:38:71:ae:a6:a6:04:f2:d2:9a:13:ec:a4:61: b9:22:20:81:08:7c:03:66:a0:7b:20:73:75:c4:3d:9a:22:a4: bb:36:98:20:b9:07:16:8d:78:6d:10:66:01:50:16:37:b8:b6: d8:67:da:79:94:d7:43:c9:fa:86:54:3c:33:02:8a:14:1a:fa: e4:33:05:06:20:a2:15:80:32:ee:64:6e:c9:63:d1:13:2d:e6: 5d:b5:98:7f:be:ae:41:cc:b0:b8:ca:1e:d6:4e:17:95:dc:48: 5d:dc:8c:a4:3a:f2:cc:c3:8b:e1:3c:f4:5e:45:14:bd:34:2d: 56:e1:cd:60:35:0c:bd:40:7e:71:e3:cc:72:b2:20:8b:d0:cf: 4d:db:e7:51:0d:99:f4:28:ad:2b:d9:16:9a:4f:ae:61:97:13: c3:3e:d1:03:e4:f7:39:81:f3:45:0c:45:e3:6f:94:13:fa:ae: ff:22:97:e6:38:7d:c6:28:bf:a9:d4:4f:69:05:ef:93:76:3c: f3:69:a3:d0:2c:4e:0b:f6:43:65:78:61:31:1c:fc:41:c9:62: 76:00:03:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfx2phLKa3B8p0/P7kyW1YHXBUNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRFQTNFMTRDMzJGMjlBQzgyRURBMTVCMkQ0RUQxQUQy NTA0RkZBNDAeFw0yNTA0MTAwODU5MjFaFw0yNTA0MTExMjM5MjFaMDMxMTAvBgNV BAMTKDE1OTlBNUUyQzQxMThENjJFN0Q3MEFBMDEwMTUxMEFGQ0FGNjU2NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhO6Q3BoPxy8L4zZtOXeWXk59p TNWAezoVZMkAh8s9PUVPS1LulF71HfBRYXf6V1M0IKP52Gz8AkKgrUHeC6zfMcuc QIJXYfT9hDg3yBYX9dDQpDMudqbDWOv3g2N7ZyJmDV4RVD43C8RLKzl59C8atHPK 4mgAZX+IKC6dlf9m/k/nYW98NpTIS5ivk3qeSSw7jiKbTHomgrL+q028FVqpyg0D kHZS0JhpitgsVgxHg4IU0rPS0nSOcEpaGns4dY0d3QVo8zdS5OIkIEhSPX/qcL5/ 80o3w7rnyHc7dRvcovbVyWe8CajmvGcEBFjBoD9chPIYM3ZsZotr0AyxJG+pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFZml4sQRjWLn1wqgEBUQr8r2VlEwHwYDVR0j BBgwFoAUveo+FMMvKayC7aFbLU7RrSUE/6QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1 UUEvMC9CREVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERUEzRTE0QzMyRjI5QUM4 MkVEQTE1QjJENEVEMUFEMjUwNEZGQTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1UUEvMC9C REVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZHwxQYRMHw8bn8c13l/TZ4qsS8MgIHvTX4nOgeL+OLV5/kop1s8mFIM4ca6m pgTy0poT7KRhuSIggQh8A2ageyBzdcQ9miKkuzaYILkHFo14bRBmAVAWN7i22Gfa eZTXQ8n6hlQ8MwKKFBr65DMFBiCiFYAy7mRuyWPREy3mXbWYf76uQcywuMoe1k4X ldxIXdyMpDryzMOL4Tz0XkUUvTQtVuHNYDUMvUB+cePMcrIgi9DPTdvnUQ2Z9Cit K9kWmk+uYZcTwz7RA+T3OYHzRQxF42+UE/qu/yKX5jh9xii/qdRPaQXvk3Y882mj 0CxOC/ZDZXhhMRz8QclidgAD7A== -----END CERTIFICATE-----Generated at Thu Apr 10 15:25:39 2025 by rpki-client