$ rpki-client -vvf rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft File: 1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft (raw, json) Hash identifier: kHb2fDX8eg1ZJtU+NPQQ7Zv44l6HJjJUW6p88deDUUI= Subject key identifier: 9A:6E:D1:0F:CC:66:20:97:E3:DA:DF:17:5F:2F:0E:78:78:29:52:0C Authority key identifier: 1B:10:04:FC:54:CD:C4:0D:C5:66:7B:1D:6B:18:3C:CE:A2:DA:4F:FD Certificate issuer: /CN=1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD Certificate serial: 3F7467B5F8A5A13FFD60888DD28147B2120C3344 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft Manifest number: 01E8 Signing time: Fri 04 Apr 2025 09:29:30 +0000 Manifest this update: Fri 04 Apr 2025 09:24:30 +0000 Manifest next update: Sat 05 Apr 2025 10:20:30 +0000 Files and hashes: 1: 1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.crl (hash: qPZBZoqsTLBBl6nZCxLSupfCTfhbTWXmWc47qMp2p9U=) 2: 323830343a366164633a3a2f33322d313238203d3e20323730333632.roa (hash: upt5TT8FOe5QeiqNDsn3IDhYY1D4DQPiIPI86XKa+co=) 3: 3139302e38392e36302e302f32322d3332203d3e20323730333632.roa (hash: fPEm+NpCAcAsprkPLhJ4egK5AQYpLpE+TEJKErpEX0k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.crl rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 10:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:74:67:b5:f8:a5:a1:3f:fd:60:88:8d:d2:81:47:b2:12:0c:33:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD Validity Not Before: Apr 4 09:24:30 2025 GMT Not After : Apr 5 10:20:30 2025 GMT Subject: CN=9A6ED10FCC662097E3DADF175F2F0E787829520C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:65:90:6e:03:39:eb:fb:82:4f:c6:56:68:9b: 7c:b6:af:6d:09:cd:fa:61:fd:2f:3c:43:f9:64:bf: 46:95:f3:30:82:fe:64:85:74:4b:18:75:b2:86:ce: e3:5a:d6:92:c0:e9:b8:cd:9c:12:d1:14:e8:1e:ca: 8e:10:f4:67:c7:f9:4e:b0:df:5e:7e:83:0c:2f:c1: 01:6f:8d:f8:30:39:b2:b9:ab:88:a2:99:ca:4d:d5: 2e:b2:10:b1:2f:fe:bb:dd:44:e8:2e:fe:75:54:b6: 71:5f:28:f5:cc:e5:08:45:7e:82:a2:e6:b3:9d:dd: 49:d4:dc:f1:55:bc:2b:bf:0f:0c:be:73:1f:77:73: f8:86:a2:db:e4:f9:02:71:d8:8c:ed:37:28:67:aa: 8e:0d:04:be:63:bd:44:af:0a:2b:5f:c3:81:78:2a: 68:e6:58:0d:27:a3:23:b9:3b:9b:e3:5d:4e:e7:3d: 5a:5e:8e:27:28:97:0c:fb:17:06:0d:a6:06:ba:7f: 38:4d:60:2f:bc:1f:6f:2e:34:42:3e:83:11:30:33: 21:a1:da:e2:42:9a:f8:3f:d4:4b:f4:7d:12:af:e4: de:6a:c6:98:be:03:7a:c1:52:dc:aa:1d:55:c8:b5: 18:e0:50:7e:5d:83:4c:b7:c9:60:2e:97:05:87:25: dd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6E:D1:0F:CC:66:20:97:E3:DA:DF:17:5F:2F:0E:78:78:29:52:0C X509v3 Authority Key Identifier: keyid:1B:10:04:FC:54:CD:C4:0D:C5:66:7B:1D:6B:18:3C:CE:A2:DA:4F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:9c:91:07:b4:72:fe:fb:41:3e:f5:04:d5:53:d2:b1:b6:fe: 88:35:8b:7f:58:65:9f:85:df:c2:6c:c1:a9:1b:e5:8e:51:59: 32:b0:7c:fe:81:ed:9a:c9:f1:4f:7c:78:44:de:16:4c:30:31: e7:1a:fd:0f:5c:5e:63:07:93:6b:c6:96:58:c0:59:83:e3:75: 2b:39:72:1f:34:23:d6:37:df:cb:d1:8b:51:f8:a4:44:e0:be: 13:81:d8:e8:22:2f:ab:6e:73:2d:23:d3:30:37:5f:8f:6e:67: 5f:bc:d0:15:f8:bd:86:1c:97:ec:52:ab:9d:98:12:90:62:d5: 05:b8:eb:3b:d8:e3:5f:a9:ae:01:47:e0:67:ad:a3:fe:18:34: 8c:c6:02:96:25:c8:1e:a7:4f:91:a3:11:f2:aa:2f:75:3c:18: 03:37:9a:77:35:03:42:1c:b6:fe:11:72:b3:b6:32:0a:72:55: 89:ef:e8:16:0f:a6:e6:6e:4b:5e:f9:af:8c:f8:76:c4:7f:34: be:c2:f1:28:4f:2b:54:f8:6c:07:49:8d:44:6f:86:c5:48:de: fa:99:c3:14:ca:7d:fb:bb:1c:bf:6e:ed:79:b8:be:37:6c:0c: 3c:0e:e1:64:2c:dc:28:e0:e9:8c:65:55:e5:24:35:d9:bf:63: 4c:31:de:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP3RntfiloT/9YIiN0oFHshIMM0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIxMDA0RkM1NENEQzQwREM1NjY3QjFENkIxODNDQ0VB MkRBNEZGRDAeFw0yNTA0MDQwOTI0MzBaFw0yNTA0MDUxMDIwMzBaMDMxMTAvBgNV BAMTKDlBNkVEMTBGQ0M2NjIwOTdFM0RBREYxNzVGMkYwRTc4NzgyOTUyMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ZZBuAznr+4JPxlZom3y2r20J zfph/S88Q/lkv0aV8zCC/mSFdEsYdbKGzuNa1pLA6bjNnBLRFOgeyo4Q9GfH+U6w 315+gwwvwQFvjfgwObK5q4iimcpN1S6yELEv/rvdROgu/nVUtnFfKPXM5QhFfoKi 5rOd3UnU3PFVvCu/Dwy+cx93c/iGotvk+QJx2IztNyhnqo4NBL5jvUSvCitfw4F4 KmjmWA0noyO5O5vjXU7nPVpejicolwz7FwYNpga6fzhNYC+8H28uNEI+gxEwMyGh 2uJCmvg/1Ev0fRKv5N5qxpi+A3rBUtyqHVXItRjgUH5dg0y3yWAulwWHJd3vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmm7RD8xmIJfj2t8XXy8OeHgpUgwwHwYDVR0j BBgwFoAUGxAE/FTNxA3FZnsdaxg8zqLaT/0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHY5bzR2REtGaHk0UHgzaHczUENGaVN6c250cGUybldzR3A3MjVFbkJ2 ZzUvMi8xQjEwMDRGQzU0Q0RDNDBEQzU2NjdCMUQ2QjE4M0NDRUEyREE0RkZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCMTAwNEZDNTRDREM0MERD NTY2N0IxRDZCMTgzQ0NFQTJEQTRGRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHY5bzR2REtGaHk0UHgzaHczUENGaVN6c250cGUybldzR3A3MjVFbkJ2ZzUvMi8x QjEwMDRGQzU0Q0RDNDBEQzU2NjdCMUQ2QjE4M0NDRUEyREE0RkZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFpyRB7Ry/vtBPvUE1VPSsbb+iDWLf1hln4XfwmzBqRvljlFZMrB8/oHtmsnx T3x4RN4WTDAx5xr9D1xeYweTa8aWWMBZg+N1KzlyHzQj1jffy9GLUfikROC+E4HY 6CIvq25zLSPTMDdfj25nX7zQFfi9hhyX7FKrnZgSkGLVBbjrO9jjX6muAUfgZ62j /hg0jMYCliXIHqdPkaMR8qovdTwYAzeadzUDQhy2/hFys7YyCnJVie/oFg+m5m5L XvmvjPh2xH80vsLxKE8rVPhsB0mNRG+GxUje+pnDFMp9+7scv27tebi+N2wMPA7h ZCzcKODpjGVV5SQ12b9jTDHezw== -----END CERTIFICATE-----Generated at Fri Apr 4 17:59:40 2025 by rpki-client