$ rpki-client -vvf rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft File: 4856F1A3B30D5C7881DA87018005E5D420414FCA.mft (raw, json) Hash identifier: SRZeQH38J/oXG0eP7G8kZRdPNRe+buWvgdaKb1FxgAc= Subject key identifier: BB:AE:54:1E:5F:FC:1B:4C:57:C4:36:EF:9E:F3:61:3A:59:0F:E2:D7 Authority key identifier: 48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA Certificate issuer: /CN=4856F1A3B30D5C7881DA87018005E5D420414FCA Certificate serial: 1CF8766E3D164372942059DBB7178842923A408D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer Subject info access: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft Manifest number: 10 Signing time: Fri 04 Apr 2025 20:17:18 +0000 Manifest this update: Fri 04 Apr 2025 20:12:18 +0000 Manifest next update: Sat 05 Apr 2025 23:55:18 +0000 Files and hashes: 1: 4856F1A3B30D5C7881DA87018005E5D420414FCA.crl (hash: 1rGVA8rwr8qBgdtUBXj3ljrSaFEWWb5c+Y9qEWAvwqs=) 2: 3138372e33332e3230382e302f32302d3332203d3e203533303838.roa (hash: NBzUedd6ZxjbCTpvddwCofjpV/PLJrC91qO5bna3/S4=) 3: 3137372e32312e38302e302f32302d3332203d3e203533303838.roa (hash: wXf/RK8DqR/CjpwFvOAppiNi0Tr5aa7oPUSPTknLvSQ=) 4: 323830343a3336303a3a2f33322d313238203d3e203533303838.roa (hash: VzHvYSqj1UpdHPrHiFGlX041xdryfjksMALlGnDnEN4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 23:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:f8:76:6e:3d:16:43:72:94:20:59:db:b7:17:88:42:92:3a:40:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4856F1A3B30D5C7881DA87018005E5D420414FCA Validity Not Before: Apr 4 20:12:18 2025 GMT Not After : Apr 5 23:55:18 2025 GMT Subject: CN=BBAE541E5FFC1B4C57C436EF9EF3613A590FE2D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b7:41:a2:9f:53:08:65:4f:96:09:ad:d8:de: 44:bd:9e:2c:c8:ba:34:4e:05:5e:74:91:e8:48:ff: 5d:1d:96:6b:13:ce:bf:e1:f9:7b:24:45:ce:35:da: 46:a9:a7:f1:27:31:47:dd:80:80:3c:76:c8:74:57: 5a:3c:76:a4:fa:2b:d7:dc:89:4e:9d:98:c5:e3:3d: cc:81:1f:52:60:86:a1:be:31:60:53:d9:62:d4:b7: af:da:dc:91:70:3c:32:1a:a2:46:c4:00:04:85:31: 92:cb:44:f6:46:ae:f5:3f:12:ad:d6:aa:0f:aa:f3: a0:ec:0d:7e:a8:4c:a2:b9:b1:28:96:53:fc:02:e1: 8b:69:10:7a:3b:94:6c:b9:b3:6d:7a:0a:b5:8a:3a: 83:bd:37:f2:69:f7:70:6d:75:a9:ca:81:8e:cc:ac: b2:38:3b:96:db:44:e0:ba:8a:04:a0:48:6f:45:c2: c7:9d:04:25:35:ad:0f:9f:4b:a9:5f:d8:ae:b2:4a: c0:f8:75:8c:94:3b:68:e4:e6:7c:b2:db:25:58:b0: 92:2d:9c:cf:33:ca:1d:c1:08:2e:c6:a1:ef:ff:b9: 05:8d:60:e1:c6:38:cf:b1:b9:55:e1:a7:bf:3f:bb: 24:f2:af:c3:a4:80:e2:31:73:e2:a5:e0:26:90:a1: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AE:54:1E:5F:FC:1B:4C:57:C4:36:EF:9E:F3:61:3A:59:0F:E2:D7 X509v3 Authority Key Identifier: keyid:48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:2f:9a:4e:84:4f:c9:db:14:54:ac:f4:7d:22:60:b4:80:52: 7c:6d:7a:11:2c:98:7d:b0:4e:12:2d:8b:1d:ea:91:72:56:ba: 09:db:79:f4:a4:6f:15:21:bb:de:6d:03:e8:ac:78:73:5e:79: 7d:d2:c8:09:c8:66:03:57:36:06:47:02:c2:ef:de:13:86:07: bc:dd:72:25:e0:aa:3a:a6:7d:71:2d:b3:a9:58:89:04:28:7d: 64:8d:5f:50:82:07:8d:7a:ef:9b:00:d2:85:e0:e2:ff:2e:25: 6c:f2:08:a5:fb:ff:eb:93:1b:20:a5:8e:ad:c7:30:f0:7b:01: d7:1d:ba:7b:a9:0c:61:16:bb:4f:e5:f5:18:82:ce:98:f0:b5: 1d:60:41:9c:8f:4d:0b:d5:b8:0e:1f:3d:59:4c:db:c1:c4:b2: c4:04:c6:75:9a:46:ec:b5:6f:48:d9:d6:da:c9:50:ef:82:7c: 26:4c:0b:c1:b4:f6:95:8c:01:48:e2:d0:1a:dc:0f:6b:39:37: 43:78:2c:ba:31:40:86:05:84:9b:07:1f:22:fa:0c:22:96:d1: 95:b0:88:d1:95:91:03:99:7a:e3:ad:16:a2:d4:98:74:3b:06: c0:2f:4e:19:f6:95:0a:d9:7c:fe:7d:95:ac:39:9a:b2:4d:e6: 47:3b:8a:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHPh2bj0WQ3KUIFnbtxeIQpI6QI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NkYxQTNCMzBENUM3ODgxREE4NzAxODAwNUU1RDQy MDQxNEZDQTAeFw0yNTA0MDQyMDEyMThaFw0yNTA0MDUyMzU1MThaMDMxMTAvBgNV BAMTKEJCQUU1NDFFNUZGQzFCNEM1N0M0MzZFRjlFRjM2MTNBNTkwRkUyRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDft0Gin1MIZU+WCa3Y3kS9nizI ujROBV50kehI/10dlmsTzr/h+XskRc412kapp/EnMUfdgIA8dsh0V1o8dqT6K9fc iU6dmMXjPcyBH1JghqG+MWBT2WLUt6/a3JFwPDIaokbEAASFMZLLRPZGrvU/Eq3W qg+q86DsDX6oTKK5sSiWU/wC4YtpEHo7lGy5s216CrWKOoO9N/Jp93BtdanKgY7M rLI4O5bbROC6igSgSG9FwsedBCU1rQ+fS6lf2K6ySsD4dYyUO2jk5nyy2yVYsJIt nM8zyh3BCC7Goe//uQWNYOHGOM+xuVXhp78/uyTyr8OkgOIxc+Kl4CaQoeT3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUu65UHl/8G0xXxDbvnvNhOlkP4tcwHwYDVR0j BBgwFoAUSFbxo7MNXHiB2ocBgAXl1CBBT8owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWNoZXl4VG5HRG52dXd6eE0zOEY0dG9ZQzczVUhaNlU2aXpVeW9Sckdz Z3QvMC80ODU2RjFBM0IzMEQ1Qzc4ODFEQTg3MDE4MDA1RTVENDIwNDE0RkNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4NTZGMUEzQjMwRDVDNzg4 MURBODcwMTgwMDVFNUQ0MjA0MTRGQ0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWNoZXl4VG5HRG52dXd6eE0zOEY0dG9ZQzczVUhaNlU2aXpVeW9SckdzZ3QvMC80 ODU2RjFBM0IzMEQ1Qzc4ODFEQTg3MDE4MDA1RTVENDIwNDE0RkNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJi+aToRPydsUVKz0fSJgtIBSfG16ESyYfbBOEi2LHeqRcla6Cdt59KRvFSG7 3m0D6Kx4c155fdLICchmA1c2BkcCwu/eE4YHvN1yJeCqOqZ9cS2zqViJBCh9ZI1f UIIHjXrvmwDSheDi/y4lbPIIpfv/65MbIKWOrccw8HsB1x26e6kMYRa7T+X1GILO mPC1HWBBnI9NC9W4Dh89WUzbwcSyxATGdZpG7LVvSNnW2slQ74J8JkwLwbT2lYwB SOLQGtwPazk3Q3gsujFAhgWEmwcfIvoMIpbRlbCI0ZWRA5l6460WotSYdDsGwC9O GfaVCtl8/n2VrDmask3mRzuKwg== -----END CERTIFICATE-----Generated at Sat Apr 5 04:12:17 2025 by rpki-client