$ rpki-client -vvf rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft File: 86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft (raw, json) Hash identifier: JcKFgU3/5wMk8SIoRoJ8J0phPcnvFqnwANaOwMa4zkc= Subject key identifier: F0:9E:2C:9A:B6:70:2F:50:55:C3:DD:A6:85:93:9E:6F:15:EC:A0:E5 Authority key identifier: 86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0 Certificate issuer: /CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0 Certificate serial: 35F055FAA4C716BB83F57ABC5971FFEC2B374E5E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft Manifest number: 01DA Signing time: Thu 10 Apr 2025 13:02:28 +0000 Manifest this update: Thu 10 Apr 2025 12:57:28 +0000 Manifest next update: Fri 11 Apr 2025 14:50:28 +0000 Files and hashes: 1: 323830343a323638383a3a2f33322d3438203d3e20323632343832.roa (hash: Qdu7ZPvtWolsR6S18cFwU2L0RkOx/OTxPbCtP7nSMn0=) 2: 3133382e3138352e3231322e302f32322d3234203d3e20323632343832.roa (hash: B1N902gGkDJZjUPJf8kMlgOJ/iI731NAEvBLdvSXVgY=) 3: 86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl (hash: GSMLOOR79Rvm32Lj/KCsneJbrzjMr9Be+8UH6VuelPc=) 4: 3137372e35352e33322e302f32302d3234203d3e20323632343832.roa (hash: bfSoIykLJzsF+3x5osdnlysy+tXqP89AxDxIWy3zZ4E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 11 Apr 2025 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f0:55:fa:a4:c7:16:bb:83:f5:7a:bc:59:71:ff:ec:2b:37:4e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0 Validity Not Before: Apr 10 12:57:28 2025 GMT Not After : Apr 11 14:50:28 2025 GMT Subject: CN=F09E2C9AB6702F5055C3DDA685939E6F15ECA0E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:28:e1:41:0d:39:00:6c:ba:ca:a6:ac:b3: 95:a1:68:db:7a:46:c2:1b:a4:0e:26:4f:35:a5:41: a2:33:b8:8a:6d:87:f2:10:da:ee:5d:5a:7f:50:5a: b9:43:9f:45:fb:81:89:bd:39:45:ba:9c:69:54:a0: 06:f6:1f:84:1c:de:af:ba:c5:bd:e1:79:e9:26:e1: 91:cc:57:ea:77:84:67:39:2c:48:b3:11:55:1e:77: a5:c7:c5:a9:90:5e:f5:82:a7:aa:30:e0:61:09:92: 4a:95:38:3c:2e:02:90:a9:ca:9b:54:6a:7a:cd:1a: 43:a5:b8:5e:a6:fb:42:1c:4f:ce:b8:f8:cb:d8:77: a5:72:83:2b:5b:cf:47:c1:18:3c:fa:7a:8b:23:fc: 02:54:45:84:c5:3c:78:07:52:38:25:8c:87:d4:ec: 77:a9:a5:f3:23:23:94:dd:b2:3e:fe:46:11:4d:ec: b3:38:57:c5:cd:23:cf:83:16:df:f3:ab:cb:bd:ae: 74:08:d2:27:71:51:42:84:d2:4e:59:a0:35:09:81: 66:40:1b:74:20:02:9b:ef:98:6f:81:23:c4:11:a3: a3:ce:5f:ee:39:1c:ec:65:85:07:31:ea:b8:0a:8f: b9:f3:d7:cf:3a:1c:88:e0:8f:f0:b7:8f:8c:ea:ff: c7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9E:2C:9A:B6:70:2F:50:55:C3:DD:A6:85:93:9E:6F:15:EC:A0:E5 X509v3 Authority Key Identifier: keyid:86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c0:d4:0a:05:fe:fd:ba:42:62:1f:b4:40:28:e8:96:48:b3: f7:ee:a7:ee:e9:5e:19:0e:23:36:3c:f2:29:a8:2f:38:65:ba: 00:80:d1:f6:ba:0b:9e:fc:6d:9d:41:2c:f0:26:bf:41:cb:94: ef:d9:4f:72:cc:73:fa:56:d4:04:b1:06:ef:ff:50:74:95:21: 39:a2:b4:18:83:f5:e1:57:ea:a5:77:53:a2:10:3f:ca:c3:0e: 9d:3a:f4:68:ac:90:df:f4:72:c2:5a:92:13:fd:9b:7b:58:c3: 8f:fc:b3:05:c7:3b:6a:d9:8c:fa:9c:d0:84:d3:77:15:b4:b6: ea:84:7f:32:d4:f5:1f:46:57:57:3b:a1:f8:cf:b9:0f:44:43: 7c:fe:88:8b:60:51:db:a4:17:a5:f1:dc:6a:1c:d7:ac:ef:2d: 93:a4:b7:bd:f4:e5:a1:d4:45:7d:d9:da:33:3f:e1:96:4a:20: 6e:b2:26:f5:38:8b:1b:1c:0e:6e:9a:0e:d7:a2:f1:22:32:35: 11:64:29:55:18:aa:a2:d5:28:6e:fd:47:98:90:2e:2e:6a:c6: 73:48:be:ec:88:ad:c8:5e:39:cd:0a:06:6d:3b:73:3f:1e:4c: 38:38:fe:f6:a9:60:79:0f:dc:09:33:a0:83:2e:ec:b6:5f:ed: 27:eb:74:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNfBV+qTHFruD9Xq8WXH/7Cs3Tl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY4NjRCNzQxOUI4NzBDMUU4RTBBNEJFQTlFMzhGQzQ4 MzYzN0FEMDAeFw0yNTA0MTAxMjU3MjhaFw0yNTA0MTExNDUwMjhaMDMxMTAvBgNV BAMTKEYwOUUyQzlBQjY3MDJGNTA1NUMzRERBNjg1OTM5RTZGMTVFQ0EwRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ByjhQQ05AGy6yqass5WhaNt6 RsIbpA4mTzWlQaIzuIpth/IQ2u5dWn9QWrlDn0X7gYm9OUW6nGlUoAb2H4Qc3q+6 xb3heekm4ZHMV+p3hGc5LEizEVUed6XHxamQXvWCp6ow4GEJkkqVODwuApCpyptU anrNGkOluF6m+0IcT864+MvYd6Vygytbz0fBGDz6eosj/AJURYTFPHgHUjgljIfU 7HeppfMjI5Tdsj7+RhFN7LM4V8XNI8+DFt/zq8u9rnQI0idxUUKE0k5ZoDUJgWZA G3QgApvvmG+BI8QRo6POX+45HOxlhQcx6rgKj7nz1886HIjgj/C3j4zq/8c5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8J4smrZwL1BVw92mhZOebxXsoOUwHwYDVR0j BBgwFoAUhoZLdBm4cMHo4KS+qeOPxINjetAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1zYUZ0dVBudENGQ3FnNmhmcFNnVm1xeTJ3aHJKZUNZOEFKUHY0ZW5W NlAvMC84Njg2NEI3NDE5Qjg3MEMxRThFMEE0QkVBOUUzOEZDNDgzNjM3QUQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2ODY0Qjc0MTlCODcwQzFF OEUwQTRCRUE5RTM4RkM0ODM2MzdBRDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1zYUZ0dVBudENGQ3FnNmhmcFNnVm1xeTJ3aHJKZUNZOEFKUHY0ZW5WNlAvMC84 Njg2NEI3NDE5Qjg3MEMxRThFMEE0QkVBOUUzOEZDNDgzNjM3QUQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAesDUCgX+/bpCYh+0QCjolkiz9+6n7uleGQ4jNjzyKagvOGW6AIDR9roLnvxt nUEs8Ca/QcuU79lPcsxz+lbUBLEG7/9QdJUhOaK0GIP14VfqpXdTohA/ysMOnTr0 aKyQ3/RywlqSE/2be1jDj/yzBcc7atmM+pzQhNN3FbS26oR/MtT1H0ZXVzuh+M+5 D0RDfP6Ii2BR26QXpfHcahzXrO8tk6S3vfTlodRFfdnaMz/hlkogbrIm9TiLGxwO bpoO16LxIjI1EWQpVRiqotUobv1HmJAuLmrGc0i+7IityF45zQoGbTtzPx5MODj+ 9qlgeQ/cCTOggy7stl/tJ+t0Ag== -----END CERTIFICATE-----Generated at Thu Apr 10 19:58:21 2025 by rpki-client