$ rpki-client -vvf rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.mft File: 1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.mft (raw, json) Hash identifier: bE7OvWRSQKOPPxWabUQZwSyKn/SY/p/8Ho6Pku83hK8= Subject key identifier: B5:46:3D:12:27:D2:E9:2D:70:0E:AE:19:8D:5B:ED:EB:E2:0B:10:51 Authority key identifier: 1F:A0:26:D7:5F:EF:A5:8C:9C:F8:9B:20:F1:9E:F6:9D:27:DA:58:4F Certificate issuer: /CN=1FA026D75FEFA58C9CF89B20F19EF69D27DA584F Certificate serial: 3E472ECD33240B092CC6759211DE8D171D80980F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.cer Subject info access: rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.mft Manifest number: 25 Signing time: Mon 21 Apr 2025 23:38:42 +0000 Manifest this update: Mon 21 Apr 2025 23:33:42 +0000 Manifest next update: Wed 23 Apr 2025 01:42:42 +0000 Files and hashes: 1: 323830343a323364343a3a2f33322d313238203d3e20323634313836.roa (hash: ixHEyxbRuzDYWWQrvW0AFXTvsiKRklUOKp21R93cmBY=) 2: 1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.crl (hash: V0TyWba7o9yF6Vl40ede0m2khPNvo6IKHLuMZN2Uqk0=) 3: 3133382e39342e3139322e302f32322d3332203d3e20323634313836.roa (hash: hMoZagbe9u9DNqTzszNAaXKzDZe6RnVWel/LV//GqkY=) 4: 3134332e302e3138382e302f32322d3332203d3e20323634313836.roa (hash: kAzZo3IutYEWpbiAuX289vzF3O43kiYdJSetU/2uvhY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.crl rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Apr 2025 01:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:47:2e:cd:33:24:0b:09:2c:c6:75:92:11:de:8d:17:1d:80:98:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FA026D75FEFA58C9CF89B20F19EF69D27DA584F Validity Not Before: Apr 21 23:33:42 2025 GMT Not After : Apr 23 01:42:42 2025 GMT Subject: CN=B5463D1227D2E92D700EAE198D5BEDEBE20B1051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d8:02:4c:81:4c:cf:59:90:b1:e8:a3:41:f6: 7b:ff:24:7e:d9:40:32:6f:07:3c:ec:05:4a:34:6c: 29:be:f1:ac:39:b4:9e:eb:e2:82:e8:95:7f:05:5d: 1d:29:fa:07:52:c9:1f:02:34:f1:42:31:26:ff:93: 42:d8:4c:e6:ee:25:8a:04:0a:fd:4b:93:9b:b9:c4: dd:1f:c6:0d:f6:8f:16:f9:4b:5f:d4:a3:27:f2:18: 0b:d5:4a:22:1e:99:0a:ef:1f:aa:ff:bd:0c:e2:56: 7a:74:10:84:7f:54:a2:b1:b2:1f:ca:4e:75:16:94: 16:ba:74:fe:08:9a:f0:14:a1:0e:6b:ca:fa:e6:ab: d5:ca:a6:b8:ff:14:6f:9a:6f:c3:e7:f8:33:cc:26: f1:b1:b0:18:0a:82:5e:e7:f1:7e:80:de:89:5f:32: a9:16:ff:aa:29:fe:1e:7e:bc:07:85:7b:1d:d8:2a: cc:46:6d:99:a6:17:b9:2f:4a:6e:96:cd:7e:88:1b: 8d:33:d4:e6:74:7d:c3:5e:11:71:50:2e:6a:f6:dd: a1:02:94:02:cb:2d:ee:44:5d:ec:6f:05:33:e1:6c: d2:6b:d7:d7:ca:c4:4b:a3:5c:e5:38:12:f5:1b:9a: aa:c7:13:8c:23:9a:bd:65:90:af:8e:68:cd:e0:dc: 04:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:46:3D:12:27:D2:E9:2D:70:0E:AE:19:8D:5B:ED:EB:E2:0B:10:51 X509v3 Authority Key Identifier: keyid:1F:A0:26:D7:5F:EF:A5:8C:9C:F8:9B:20:F1:9E:F6:9D:27:DA:58:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:92:3a:98:7b:91:11:57:22:31:d8:67:9c:d6:92:19:df:22: 95:f0:db:b8:9f:1c:c7:7e:a0:01:88:b8:39:ae:7b:3f:10:1c: e3:38:de:a9:b4:b8:b2:73:c7:f7:6f:ce:12:aa:35:16:67:63: 43:f2:af:46:4e:09:86:35:d7:98:79:95:a0:84:53:1f:93:71: ba:04:e7:31:d0:26:9c:10:6b:6c:72:00:12:fb:16:df:5f:02: 45:1b:b9:b2:df:2c:bc:43:44:fe:e6:7f:64:c6:46:d9:dd:e5: b9:c4:1a:02:cf:25:d6:03:44:4e:29:f0:d3:df:47:4f:91:93: a7:a1:96:e5:0a:6b:95:df:8c:e0:e8:51:46:de:8c:ce:48:98: 79:5f:81:e6:40:82:f8:e7:e2:c8:c9:0a:f0:f0:32:19:28:c4: 71:6a:99:63:9b:03:26:c6:25:9c:37:65:6c:cf:c5:8d:d6:ce: 67:7c:6b:4d:02:32:96:7a:c1:ea:3c:79:ff:55:e5:0d:9c:ab: f1:d4:c7:a1:7f:a1:58:67:67:3f:9c:9e:5d:9d:c7:0e:71:7d: 79:ee:ff:03:5c:30:32:d6:34:6c:a9:96:b1:7b:87:02:4e:f5: e3:04:51:49:fd:bb:aa:dd:02:de:75:5a:df:02:7a:3b:d0:cd: 47:8d:8b:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPkcuzTMkCwksxnWSEd6NFx2AmA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZBMDI2RDc1RkVGQTU4QzlDRjg5QjIwRjE5RUY2OUQy N0RBNTg0RjAeFw0yNTA0MjEyMzMzNDJaFw0yNTA0MjMwMTQyNDJaMDMxMTAvBgNV BAMTKEI1NDYzRDEyMjdEMkU5MkQ3MDBFQUUxOThENUJFREVCRTIwQjEwNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV2AJMgUzPWZCx6KNB9nv/JH7Z QDJvBzzsBUo0bCm+8aw5tJ7r4oLolX8FXR0p+gdSyR8CNPFCMSb/k0LYTObuJYoE Cv1Lk5u5xN0fxg32jxb5S1/UoyfyGAvVSiIemQrvH6r/vQziVnp0EIR/VKKxsh/K TnUWlBa6dP4ImvAUoQ5ryvrmq9XKprj/FG+ab8Pn+DPMJvGxsBgKgl7n8X6A3olf MqkW/6op/h5+vAeFex3YKsxGbZmmF7kvSm6WzX6IG40z1OZ0fcNeEXFQLmr23aEC lALLLe5EXexvBTPhbNJr19fKxEujXOU4EvUbmqrHE4wjmr1lkK+OaM3g3AQ/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtUY9EifS6S1wDq4ZjVvt6+ILEFEwHwYDVR0j BBgwFoAUH6Am11/vpYyc+Jsg8Z72nSfaWE8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGZ5c1kzaXZqUnk1Z3JXQkxKeWdKU3BMb3dURzRiVHZHcjRKUVVvdmpO dXUvMC8xRkEwMjZENzVGRUZBNThDOUNGODlCMjBGMTlFRjY5RDI3REE1ODRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGQTAyNkQ3NUZFRkE1OEM5 Q0Y4OUIyMEYxOUVGNjlEMjdEQTU4NEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGZ5c1kzaXZqUnk1Z3JXQkxKeWdKU3BMb3dURzRiVHZHcjRKUVVvdmpOdXUvMC8x RkEwMjZENzVGRUZBNThDOUNGODlCMjBGMTlFRjY5RDI3REE1ODRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEJI6mHuREVciMdhnnNaSGd8ilfDbuJ8cx36gAYi4Oa57PxAc4zjeqbS4snPH 92/OEqo1FmdjQ/KvRk4JhjXXmHmVoIRTH5NxugTnMdAmnBBrbHIAEvsW318CRRu5 st8svENE/uZ/ZMZG2d3lucQaAs8l1gNETinw099HT5GTp6GW5Qprld+M4OhRRt6M zkiYeV+B5kCC+OfiyMkK8PAyGSjEcWqZY5sDJsYlnDdlbM/FjdbOZ3xrTQIylnrB 6jx5/1XlDZyr8dTHoX+hWGdnP5yeXZ3HDnF9ee7/A1wwMtY0bKmWsXuHAk714wRR Sf27qt0C3nVa3wJ6O9DNR42LAQ== -----END CERTIFICATE-----Generated at Tue Apr 22 17:27:41 2025 by rpki-client