$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft File: 65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft (raw, json) Hash identifier: 0DEpbCsily6nil8dxuC3opQ1fF0AxJ58Me05BwdkVCc= Subject key identifier: 16:C8:DC:37:43:57:B0:5C:2F:0C:AD:9A:22:DB:2A:81:55:BC:A2:BA Authority key identifier: 65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35 Certificate issuer: /CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35 Certificate serial: 79AF2D25CFB58DA0C666E8B9320E22F7EBB53BB5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer Subject info access: rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft Manifest number: 01EA Signing time: Fri 04 Apr 2025 10:29:15 +0000 Manifest this update: Fri 04 Apr 2025 10:24:15 +0000 Manifest next update: Sat 05 Apr 2025 10:30:15 +0000 Files and hashes: 1: 34352e3233312e3234372e302f32342d3234203d3e20323637323239.roa (hash: rvvstdgHKBLZiYLtTVjHHFsA+uSpDvcNe0UPKBADsyk=) 2: 34352e3233312e3234342e302f32342d3234203d3e20323637323239.roa (hash: uIH2mjCVfG7pE20vWSkkLBS63ZJyp6S52kPokhVi1tw=) 3: 34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa (hash: Kgc6lepf54SQs0P5cfSSwA50mFBjZkxshswJcKadY8k=) 4: 323830343a346134383a3a2f33322d3332203d3e20323637323239.roa (hash: EWD3i/ki1wnJKA/Qo3Ji//c/Z19FeS56qDgcRDssjXg=) 5: 34352e3233312e3234362e302f32342d3234203d3e20323637323239.roa (hash: 5XBvgNC7VdeKasM61QiJSuWCdzuhoDDJBsh9zncimSM=) 6: 65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl (hash: P7imqxg/A4tvv6a/rYJLasOMek1wml1JobAgOCVyDBA=) 7: 34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa (hash: y7s1GJrpBU/41xawr2NW3Z0qH/tHIDGlpxg27bF5HTQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 10:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:af:2d:25:cf:b5:8d:a0:c6:66:e8:b9:32:0e:22:f7:eb:b5:3b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35 Validity Not Before: Apr 4 10:24:15 2025 GMT Not After : Apr 5 10:30:15 2025 GMT Subject: CN=16C8DC374357B05C2F0CAD9A22DB2A8155BCA2BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9e:62:96:c7:3c:df:be:c1:1d:20:b4:67:da: b4:87:a2:c8:18:14:de:b4:3e:f7:61:c0:38:90:02: 50:1a:48:fe:e2:ba:51:10:b5:7b:be:3c:4e:7c:55: 41:f6:d2:c2:ba:30:07:9b:35:b3:0f:4a:a1:f8:e2: 99:df:da:b0:55:9b:e0:d0:10:4c:91:31:29:2a:97: 0a:08:a6:0d:d5:b4:cd:d2:e3:76:ba:fd:30:6b:1b: 6d:75:5b:be:3b:57:20:af:a5:5b:13:2e:f4:3b:6e: c4:8c:3c:5b:b7:10:62:ae:87:e8:03:cf:05:09:ec: 4a:7a:24:59:d8:91:71:3e:95:ec:b3:9f:44:b0:bf: b1:34:2d:df:e2:ff:38:79:3e:c7:ac:99:ee:12:5c: 6d:c7:1d:f4:2a:8b:12:09:c2:4c:25:69:b3:b8:2c: 58:23:1d:7c:93:a0:fc:83:0f:8f:a0:e3:06:6f:be: 4c:80:53:46:19:6f:d1:57:5f:0d:9e:93:17:a8:d9: de:e6:b1:e8:8a:e1:77:2d:2c:85:5f:20:1c:45:03: 14:1a:8d:61:c8:25:5b:5a:56:ef:c0:96:3e:31:92: b7:5b:8e:4f:b7:38:90:2a:57:ee:f4:d4:ec:82:05: 26:6b:64:1e:ab:0e:e1:21:4c:21:4e:4d:91:8a:de: 4b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C8:DC:37:43:57:B0:5C:2F:0C:AD:9A:22:DB:2A:81:55:BC:A2:BA X509v3 Authority Key Identifier: keyid:65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:5b:7c:b1:41:f1:73:2e:48:ee:46:e6:a6:72:5c:eb:6a:72: 0f:8d:22:ae:7d:ea:b9:ef:b9:22:e4:1f:74:86:64:2f:8e:d7: 73:62:0c:ac:a0:e9:c9:10:bc:e7:b9:c3:28:fe:8b:ea:a8:74: 4b:d9:a4:29:09:20:06:34:b0:4f:d5:b2:e4:d3:73:54:37:1f: 9e:f1:73:26:70:c1:0f:c2:da:69:9e:e0:d1:4b:92:14:ff:f1: 37:b9:55:3b:cb:4b:7a:66:ab:22:8a:8a:1c:98:86:37:f3:56: 2a:85:45:f6:b5:6b:70:22:1d:87:78:ad:d6:f5:64:f2:f2:4a: 2f:c8:be:c9:a2:95:53:a4:ea:cf:dd:07:93:88:9b:52:50:2d: 86:41:8b:f1:73:4c:ef:d2:90:c6:b8:8e:eb:0c:c1:f1:0f:e4: 1b:82:a9:c0:93:ad:c2:a7:71:12:be:52:39:2a:aa:7f:46:3e: 54:1e:40:f4:c9:66:37:c4:ec:65:67:f6:ff:91:8a:31:c0:60: 54:64:18:dc:3d:52:7b:df:13:18:46:2d:57:92:71:69:88:98: 53:f7:e9:a1:58:6e:ce:20:d1:b8:57:82:32:5a:f0:c0:18:b9: 89:2a:01:4f:f8:26:44:ab:3c:15:5e:a8:cc:23:bb:c7:33:09: 64:52:4b:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUea8tJc+1jaDGZui5Mg4i9+u1O7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEMjYxQURERTJEQThENUE4RDBGNzA5QzM4MEEzRDk2 RERDQkEzNTAeFw0yNTA0MDQxMDI0MTVaFw0yNTA0MDUxMDMwMTVaMDMxMTAvBgNV BAMTKDE2QzhEQzM3NDM1N0IwNUMyRjBDQUQ5QTIyREIyQTgxNTVCQ0EyQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXnmKWxzzfvsEdILRn2rSHosgY FN60PvdhwDiQAlAaSP7iulEQtXu+PE58VUH20sK6MAebNbMPSqH44pnf2rBVm+DQ EEyRMSkqlwoIpg3VtM3S43a6/TBrG211W747VyCvpVsTLvQ7bsSMPFu3EGKuh+gD zwUJ7Ep6JFnYkXE+leyzn0Swv7E0Ld/i/zh5Psesme4SXG3HHfQqixIJwkwlabO4 LFgjHXyToPyDD4+g4wZvvkyAU0YZb9FXXw2ekxeo2d7mseiK4XctLIVfIBxFAxQa jWHIJVtaVu/Alj4xkrdbjk+3OJAqV+701OyCBSZrZB6rDuEhTCFOTZGK3ktJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFsjcN0NXsFwvDK2aItsqgVW8orowHwYDVR0j BBgwFoAUZdJhrd4tqNWo0PcJw4Cj2W3cujUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQktacFQ0bUFKNkIyenRqeVdVazNqZ1FuWTRGTml4elNHb0xXR3pmdU5h ZXcvMS82NUQyNjFBRERFMkRBOEQ1QThEMEY3MDlDMzgwQTNEOTZERENCQTM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1RDI2MUFEREUyREE4RDVB OEQwRjcwOUMzODBBM0Q5NkREQ0JBMzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QktacFQ0bUFKNkIyenRqeVdVazNqZ1FuWTRGTml4elNHb0xXR3pmdU5hZXcvMS82 NUQyNjFBRERFMkRBOEQ1QThEMEY3MDlDMzgwQTNEOTZERENCQTM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXlt8sUHxcy5I7kbmpnJc62pyD40irn3que+5IuQfdIZkL47Xc2IMrKDpyRC8 57nDKP6L6qh0S9mkKQkgBjSwT9Wy5NNzVDcfnvFzJnDBD8LaaZ7g0UuSFP/xN7lV O8tLemarIoqKHJiGN/NWKoVF9rVrcCIdh3it1vVk8vJKL8i+yaKVU6Tqz90Hk4ib UlAthkGL8XNM79KQxriO6wzB8Q/kG4KpwJOtwqdxEr5SOSqqf0Y+VB5A9MlmN8Ts ZWf2/5GKMcBgVGQY3D1Se98TGEYtV5JxaYiYU/fpoVhuziDRuFeCMlrwwBi5iSoB T/gmRKs8FV6ozCO7xzMJZFJLOQ== -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:43 2025 by rpki-client