$ rpki-client -vvf rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft File: 8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft (raw, json) Hash identifier: XdHQLR50UCMTN/xwofw7jaujWhKM03CLM1j2kSr7/Tk= Subject key identifier: A0:14:20:C9:AB:4A:99:50:F7:32:59:79:20:3F:98:79:D7:A3:C4:DA Authority key identifier: 8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5 Certificate issuer: /CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5 Certificate serial: 69B1B56848EE918B84F0BD8C2B9B8CB5322709B9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer Subject info access: rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft Manifest number: 01F3 Signing time: Sat 12 Apr 2025 00:34:39 +0000 Manifest this update: Sat 12 Apr 2025 00:29:39 +0000 Manifest next update: Sun 13 Apr 2025 03:59:39 +0000 Files and hashes: 1: 323830343a3732303a3a2f33322d3438203d3e20323632363231.roa (hash: mltDu46I6weMY5jZx2cVC8KWeJwKWTe757nY2EBwNLU=) 2: 3137372e38362e33322e302f32322d3234203d3e20323632363231.roa (hash: xKLrG/AO8ce4eep3uuETd57cPc6b1MP2a+DWkx2KnwU=) 3: 8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl (hash: ns8y2584ihu2+HfQtrnQw9dmqKLushE7XiVYoOZGITM=) 4: 3133312e302e34342e302f32322d3234203d3e20323632363231.roa (hash: 0Ek7QSABbX1hxlww4eo8kRpq1DnlPtP++8bb1A/727Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 03:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b1:b5:68:48:ee:91:8b:84:f0:bd:8c:2b:9b:8c:b5:32:27:09:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5 Validity Not Before: Apr 12 00:29:39 2025 GMT Not After : Apr 13 03:59:39 2025 GMT Subject: CN=A01420C9AB4A9950F7325979203F9879D7A3C4DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:33:0a:d3:4e:d4:7d:50:89:01:e2:9a:87:d5: 77:94:f2:5f:f1:5d:05:6e:5f:26:a7:c5:01:6d:e0: c3:a8:20:61:d1:f4:3e:3d:fa:8f:f9:95:19:87:9c: d6:ed:f1:5e:07:a3:46:50:7b:44:1d:51:eb:e9:4b: 59:96:8b:8c:fc:d2:9f:26:ea:b6:77:fe:40:77:cd: 70:be:ae:79:30:03:a9:6c:74:75:e9:d4:d5:30:18: 5c:79:e0:fe:0d:46:4b:3d:af:09:0d:f8:23:ca:ea: 72:7b:e4:90:a5:67:e5:c2:5e:a6:19:5a:dd:56:30: 3b:6a:c9:e5:aa:8f:21:d7:6e:6a:54:2d:c9:a3:69: 17:8c:12:a8:2f:54:52:99:28:90:6e:9b:da:16:a2: fb:8e:58:23:ce:34:7e:34:4c:42:54:b0:4e:44:de: 4c:84:1a:14:07:9e:a9:40:17:97:8b:15:6b:2b:9d: 43:91:9e:06:f8:36:1a:de:68:19:91:b4:91:20:3a: 86:22:01:1a:df:af:86:f5:71:db:2c:c5:09:b8:d0: f0:6a:3f:76:e7:7d:89:b9:ae:35:5a:e1:7f:cd:7f: 3c:e5:22:0f:d2:75:d7:d9:9c:b7:44:d6:29:70:46: b5:ca:92:9d:68:e2:2f:56:52:11:05:5c:93:43:4c: 38:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:14:20:C9:AB:4A:99:50:F7:32:59:79:20:3F:98:79:D7:A3:C4:DA X509v3 Authority Key Identifier: keyid:8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:0a:e2:6c:6c:0a:51:6b:97:90:94:41:6f:23:40:e4:21:e8: 62:ae:d8:6d:a4:96:4e:cb:c2:60:ce:a4:b8:fd:01:5d:8e:9c: ed:84:04:6b:0f:c2:bb:a9:14:05:bf:29:d6:3d:9d:af:11:16: 0f:72:53:58:e3:19:33:c1:c8:b0:fa:77:e2:81:98:86:64:9a: 3a:ea:9e:39:a5:e2:99:27:38:72:72:b0:62:d2:24:91:45:d9: e2:82:3c:38:ba:29:77:ba:35:8d:49:b0:f0:1a:20:c0:34:4f: 2d:cb:8a:2f:30:72:07:b0:ed:1a:0c:fa:e1:3d:a3:64:a0:5f: 6a:92:77:b1:e9:e5:ae:47:2d:2d:08:a7:5e:b9:fc:63:21:e3: ba:5e:83:af:27:5f:af:27:ca:34:52:c5:18:56:b1:cd:b6:e4: 8c:c7:8e:a7:4a:7a:52:8d:18:ab:6a:3e:48:1b:78:7e:20:7d: c3:47:ec:6a:98:f0:b3:c1:ab:0b:82:b7:97:b4:b8:23:3e:50: c1:14:34:97:48:40:70:d0:47:3c:4c:0c:ae:6f:ff:59:81:aa: 11:b1:aa:0c:9c:dd:98:3f:e6:57:83:cb:66:a9:75:b9:d6:e6: 19:93:b5:41:d6:13:8d:eb:ea:8e:be:31:49:82:92:12:56:1c: 3f:53:5f:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUabG1aEjukYuE8L2MK5uMtTInCbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2RkQ3M0I3RTI0RTcwNzcxMkVDMDA2MDQ3MUQ0NkVE REMxRDBBNTAeFw0yNTA0MTIwMDI5MzlaFw0yNTA0MTMwMzU5MzlaMDMxMTAvBgNV BAMTKEEwMTQyMEM5QUI0QTk5NTBGNzMyNTk3OTIwM0Y5ODc5RDdBM0M0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaMwrTTtR9UIkB4pqH1XeU8l/x XQVuXyanxQFt4MOoIGHR9D49+o/5lRmHnNbt8V4Ho0ZQe0QdUevpS1mWi4z80p8m 6rZ3/kB3zXC+rnkwA6lsdHXp1NUwGFx54P4NRks9rwkN+CPK6nJ75JClZ+XCXqYZ Wt1WMDtqyeWqjyHXbmpULcmjaReMEqgvVFKZKJBum9oWovuOWCPONH40TEJUsE5E 3kyEGhQHnqlAF5eLFWsrnUORngb4NhreaBmRtJEgOoYiARrfr4b1cdssxQm40PBq P3bnfYm5rjVa4X/NfzzlIg/SddfZnLdE1ilwRrXKkp1o4i9WUhEFXJNDTDgJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoBQgyatKmVD3Mll5ID+YedejxNowHwYDVR0j BBgwFoAUjG/XO34k5wdxLsAGBHHUbt3B0KUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR1hoaWtpclJFS0xtZlNqamRFZnJ5U2RVb2JoVTJYVHV2c1hqUHI3dmlN OGUvMS84QzZGRDczQjdFMjRFNzA3NzEyRUMwMDYwNDcxRDQ2RUREQzFEMEE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDNkZENzNCN0UyNEU3MDc3 MTJFQzAwNjA0NzFENDZFRERDMUQwQTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R1hoaWtpclJFS0xtZlNqamRFZnJ5U2RVb2JoVTJYVHV2c1hqUHI3dmlNOGUvMS84 QzZGRDczQjdFMjRFNzA3NzEyRUMwMDYwNDcxRDQ2RUREQzFEMEE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlAribGwKUWuXkJRBbyNA5CHoYq7YbaSWTsvCYM6kuP0BXY6c7YQEaw/Cu6kU Bb8p1j2drxEWD3JTWOMZM8HIsPp34oGYhmSaOuqeOaXimSc4cnKwYtIkkUXZ4oI8 OLopd7o1jUmw8BogwDRPLcuKLzByB7DtGgz64T2jZKBfapJ3senlrkctLQinXrn8 YyHjul6DrydfryfKNFLFGFaxzbbkjMeOp0p6Uo0Yq2o+SBt4fiB9w0fsapjws8Gr C4K3l7S4Iz5QwRQ0l0hAcNBHPEwMrm//WYGqEbGqDJzdmD/mV4PLZql1udbmGZO1 QdYTjevqjr4xSYKSElYcP1NfWw== -----END CERTIFICATE-----Generated at Sat Apr 12 16:41:59 2025 by rpki-client