$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft File: A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft (raw, json) Hash identifier: CYX4SRsCHTvLa2Tbez7fuayogZJPsA6ichTiKCFMNT0= Subject key identifier: 0D:F3:E8:CF:30:7B:0F:82:98:01:FA:BB:D7:BF:52:25:04:95:44:5D Authority key identifier: A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8 Certificate issuer: /CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8 Certificate serial: 50D272378D3A6E9B020827252A00EAB2D7D65716 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft Manifest number: 01C9 Signing time: Fri 11 Apr 2025 06:37:36 +0000 Manifest this update: Fri 11 Apr 2025 06:32:36 +0000 Manifest next update: Sat 12 Apr 2025 10:30:36 +0000 Files and hashes: 1: 3137372e3133362e38382e302f32312d3234203d3e203238323737.roa (hash: SODCeqMppG+109Vh2sZlp+D9Z3QOeLYSsI9zH1eRlCA=) 2: 323830343a3264633a3a2f33322d3431203d3e203238323737.roa (hash: Ol+1Kw+Ben9pcieWrCajh7sb58yandi25g3jjxFoMQI=) 3: 3137392e35312e3137322e302f32322d3234203d3e203238323737.roa (hash: yI1dK9ENc+AfYHAbDnixcQKXD5zluVjisHo5V8kfMxg=) 4: 3138392e31342e38302e302f32302d3234203d3e203238323737.roa (hash: n7VK4GQZTYnWloqSAMHn76YqbnY1u2pgivENu6CiCes=) 5: A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl (hash: 1gl5S2SzVNRcPePoxxFc0kyGWivGcK6tpvB8HohS91I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 10:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d2:72:37:8d:3a:6e:9b:02:08:27:25:2a:00:ea:b2:d7:d6:57:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8 Validity Not Before: Apr 11 06:32:36 2025 GMT Not After : Apr 12 10:30:36 2025 GMT Subject: CN=0DF3E8CF307B0F829801FABBD7BF52250495445D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2e:49:00:30:6c:09:6b:5d:58:ea:21:02:03: 67:84:cb:74:78:c5:c6:7f:e7:5a:fe:9b:8f:01:cd: 88:93:58:53:a8:c3:92:f5:88:b4:b3:66:45:c3:29: ca:6c:64:79:be:e0:e0:ba:57:01:63:0e:9d:56:d4: a8:aa:6f:76:9e:74:6e:e6:40:01:d4:d4:96:ed:8e: de:fd:8a:5b:c0:e0:c4:43:e8:b3:6d:8e:ea:e8:bf: 00:37:9f:4b:d2:d2:73:df:93:8f:d7:3e:67:8a:e9: 70:9e:6b:53:92:69:a1:cd:da:fd:bb:88:58:89:ff: d2:3b:75:9a:b6:cc:a6:b5:92:b7:ae:71:eb:8b:54: c0:10:c4:eb:d2:50:72:ac:cd:65:1d:8b:33:85:59: fb:70:81:56:eb:6c:22:b7:0b:13:71:41:75:1b:31: b6:46:5a:10:ae:52:83:5d:fc:af:90:8a:0b:47:0c: b2:2c:f0:d9:8e:47:2f:6f:19:72:69:f0:ea:af:58: 22:b3:ad:98:84:83:a1:92:a2:2e:32:29:ad:13:83: 0e:ef:98:3b:3a:f1:47:a5:d1:1a:ac:f2:4a:6a:a3: c8:37:26:0b:dc:fe:06:67:fc:2d:44:2b:bd:e0:ba: eb:2f:2e:88:7b:87:5d:42:33:3f:5d:41:97:b9:bd: ef:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F3:E8:CF:30:7B:0F:82:98:01:FA:BB:D7:BF:52:25:04:95:44:5D X509v3 Authority Key Identifier: keyid:A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:13:2a:bb:d7:7f:d6:e1:ba:e4:89:17:9b:07:03:f8:7f:6b: 08:9d:67:22:f4:8f:92:1d:0d:73:83:e1:07:8a:60:7a:2e:88: b1:6c:44:0a:cb:01:50:6e:eb:eb:57:30:99:93:e4:53:83:fa: bd:5e:f5:18:e5:67:df:cd:05:73:d6:22:94:96:c5:2e:8b:d3: 87:ac:a7:08:51:db:34:23:3f:7a:fb:ee:1b:c4:51:2b:85:cb: 8d:d5:8d:70:49:6b:03:ac:8b:35:dd:f9:53:7f:c3:56:8a:87: 77:cd:b7:d8:17:90:10:f1:fc:f9:70:6f:3b:8a:7c:62:4a:a4: 85:1b:00:f3:39:ec:39:e1:5d:95:8a:02:2f:c6:68:27:bf:79: 78:c8:d2:ab:13:5a:33:9b:a9:99:e5:dc:aa:e2:9a:99:5e:34: 1e:49:36:dc:57:5b:0a:ec:e2:de:13:24:d4:e8:db:56:67:e1: 0a:a4:28:01:35:24:17:46:8a:a6:81:35:05:2d:03:08:39:57: 53:a6:47:da:d0:99:89:89:35:dd:da:57:a3:9b:d1:aa:59:ba: ee:c7:4f:16:bc:1d:f8:db:1d:ac:ba:3f:b0:75:a2:d6:80:aa: 40:53:81:d0:81:aa:8b:2d:f7:f6:6f:a9:f5:74:b6:3f:64:f6: de:4e:63:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUNJyN406bpsCCCclKgDqstfWVxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg2RjI5MDlBOENGOEE4MEMyMjM5RTVGOTUzRkYxQjRB QjlENzNDODAeFw0yNTA0MTEwNjMyMzZaFw0yNTA0MTIxMDMwMzZaMDMxMTAvBgNV BAMTKDBERjNFOENGMzA3QjBGODI5ODAxRkFCQkQ3QkY1MjI1MDQ5NTQ0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLkkAMGwJa11Y6iECA2eEy3R4 xcZ/51r+m48BzYiTWFOow5L1iLSzZkXDKcpsZHm+4OC6VwFjDp1W1Kiqb3aedG7m QAHU1Jbtjt79ilvA4MRD6LNtjurovwA3n0vS0nPfk4/XPmeK6XCea1OSaaHN2v27 iFiJ/9I7dZq2zKa1kreuceuLVMAQxOvSUHKszWUdizOFWftwgVbrbCK3CxNxQXUb MbZGWhCuUoNd/K+QigtHDLIs8NmORy9vGXJp8OqvWCKzrZiEg6GSoi4yKa0Tgw7v mDs68Uel0Rqs8kpqo8g3Jgvc/gZn/C1EK73guusvLoh7h11CMz9dQZe5ve/zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDfPozzB7D4KYAfq7179SJQSVRF0wHwYDVR0j BBgwFoAUqG8pCajPioDCI55flT/xtKudc8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDd0dnBGSEYzQmtaUGM1SlpTaVVMS3RqR212UGU0ZkFqeGlVMkRKWnFQ RzEvMC9BODZGMjkwOUE4Q0Y4QTgwQzIyMzlFNUY5NTNGRjFCNEFCOUQ3M0M4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4NkYyOTA5QThDRjhBODBD MjIzOUU1Rjk1M0ZGMUI0QUI5RDczQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDd0dnBGSEYzQmtaUGM1SlpTaVVMS3RqR212UGU0ZkFqeGlVMkRKWnFQRzEvMC9B ODZGMjkwOUE4Q0Y4QTgwQzIyMzlFNUY5NTNGRjFCNEFCOUQ3M0M4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIhMqu9d/1uG65IkXmwcD+H9rCJ1nIvSPkh0Nc4PhB4pgei6IsWxECssBUG7r 61cwmZPkU4P6vV71GOVn380Fc9YilJbFLovTh6ynCFHbNCM/evvuG8RRK4XLjdWN cElrA6yLNd35U3/DVoqHd8232BeQEPH8+XBvO4p8YkqkhRsA8znsOeFdlYoCL8Zo J795eMjSqxNaM5upmeXcquKamV40Hkk23FdbCuzi3hMk1OjbVmfhCqQoATUkF0aK poE1BS0DCDlXU6ZH2tCZiYk13dpXo5vRqlm67sdPFrwd+NsdrLo/sHWi1oCqQFOB 0IGqiy339m+p9XS2P2T23k5jfA== -----END CERTIFICATE-----Generated at Fri Apr 11 12:39:06 2025 by rpki-client