$ rpki-client -vvf rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft File: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft (raw, json) Hash identifier: vFA0jGIEKLKv83sByzXkHqS/VvPLt12UIGKLOC4KVYM= Subject key identifier: 17:08:1E:1C:09:BE:94:7F:C0:21:78:13:F8:36:2D:67:34:AD:40:9F Authority key identifier: AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A Certificate issuer: /CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Certificate serial: 09D03E60DDB1E601624BA473AEC78E0F8AB87CDA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer Subject info access: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft Manifest number: 0200 Signing time: Tue 22 Apr 2025 11:09:32 +0000 Manifest this update: Tue 22 Apr 2025 11:04:32 +0000 Manifest next update: Wed 23 Apr 2025 12:20:32 +0000 Files and hashes: 1: 34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa (hash: 741FE6q+LhbUbEXCT3YEJH9sL+8gSKDI67qh5Q3QkQ4=) 2: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl (hash: 2jHQ2gfEiS+4i4KaO4h+YopzMTQUus+HupXipFTVD6A=) 3: 323830343a346563343a3a2f33322d3438203d3e20323638323831.roa (hash: ee5l23fWTv1/lWAMo2GfCZn3RRz28vPRce7gjAH3vSM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Apr 2025 12:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d0:3e:60:dd:b1:e6:01:62:4b:a4:73:ae:c7:8e:0f:8a:b8:7c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Validity Not Before: Apr 22 11:04:32 2025 GMT Not After : Apr 23 12:20:32 2025 GMT Subject: CN=17081E1C09BE947FC0217813F8362D6734AD409F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:53:7c:53:a4:58:c4:0e:3d:8a:52:a4:fd:17: ae:77:4a:90:a7:6b:0b:ea:eb:8e:bd:38:6d:ef:ff: 9d:7b:3a:67:28:ff:da:69:12:de:77:70:f6:10:33: b3:02:76:6d:79:a0:c3:5b:cb:56:ab:54:91:75:83: 81:6c:b8:b7:f6:a8:bd:e4:4d:4e:a0:42:ee:5e:8a: 22:3f:f2:2c:97:c7:5a:9e:b4:08:12:c9:ae:cf:df: 73:54:44:68:fc:06:87:e4:7a:3c:38:75:2e:c0:b1: 93:b7:9e:c3:58:5b:18:cf:c8:d5:ae:0b:27:60:61: 71:da:a0:60:9e:bf:23:4e:f0:ce:f7:78:74:5b:36: 97:48:ab:2c:a6:5a:2f:aa:5f:e7:c9:76:97:28:24: ea:52:79:87:7b:1f:c8:4a:c9:10:ad:a7:93:f3:06: 6e:bc:71:33:dc:02:9b:cc:4f:e3:38:69:37:51:aa: 15:84:4c:43:d2:48:a9:ae:ad:c7:46:21:b6:b0:87: 81:ce:c4:9e:1c:ca:ab:d1:b1:1d:00:ec:c4:14:be: a3:ce:11:bd:6e:75:79:27:93:bc:8e:79:17:a8:cd: ca:84:bc:df:2c:9a:17:28:70:92:d9:38:e8:d9:ad: f4:0b:03:c4:c2:13:1e:e6:08:e9:05:3a:99:fe:56: 0d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:08:1E:1C:09:BE:94:7F:C0:21:78:13:F8:36:2D:67:34:AD:40:9F X509v3 Authority Key Identifier: keyid:AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:dd:48:c3:30:1d:da:b9:1c:b3:4e:0e:83:57:13:d4:34:bb: 92:76:cc:d9:c3:f5:a2:10:37:a5:a6:f5:92:d6:6c:2f:87:27: da:75:be:01:b2:81:54:74:21:d9:4c:5d:9e:b9:44:71:35:22: 01:78:6a:d9:e6:87:8c:80:d4:23:83:43:aa:93:8e:a9:ed:4d: d9:5f:f6:d9:c8:54:a6:4e:3d:9d:5f:6d:ca:b1:7d:04:70:59: 93:32:23:05:b3:fc:90:e9:ef:cd:ce:48:d5:94:d7:f7:60:56: d9:08:b5:cf:c4:de:c9:33:ae:c3:d6:e7:70:4a:a0:26:d2:d5: 9f:3c:63:24:c7:5c:88:3d:9c:35:64:3b:ba:fa:3e:db:68:fa: 07:1a:16:b7:22:c8:5c:d4:06:1f:1d:7b:c3:cf:4f:cf:74:b4: 56:b2:41:e8:8f:2e:55:1e:f2:c3:f3:74:40:5f:1b:86:fe:03: 7a:d3:0b:70:b1:67:98:08:e0:61:6c:7f:d9:fa:25:94:4a:69: 14:34:cf:8d:7e:cd:ad:57:3a:74:f8:51:ab:bc:fa:50:da:52: 70:e2:a9:fa:68:74:bb:73:06:9d:cc:a1:ba:ed:63:61:03:83: 5b:2e:a7:f6:80:03:ed:1d:60:45:14:12:46:8d:69:f0:c1:a3: b6:0d:b4:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCdA+YN2x5gFiS6RzrseOD4q4fNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE2Rjg2QTA1RkQ5RjdEOUFCRTlFOEU5NUIyNDZBNENG RTJDOUUxQTAeFw0yNTA0MjIxMTA0MzJaFw0yNTA0MjMxMjIwMzJaMDMxMTAvBgNV BAMTKDE3MDgxRTFDMDlCRTk0N0ZDMDIxNzgxM0Y4MzYyRDY3MzRBRDQwOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHU3xTpFjEDj2KUqT9F653SpCn awvq6469OG3v/517Omco/9ppEt53cPYQM7MCdm15oMNby1arVJF1g4FsuLf2qL3k TU6gQu5eiiI/8iyXx1qetAgSya7P33NURGj8Bofkejw4dS7AsZO3nsNYWxjPyNWu CydgYXHaoGCevyNO8M73eHRbNpdIqyymWi+qX+fJdpcoJOpSeYd7H8hKyRCtp5Pz Bm68cTPcApvMT+M4aTdRqhWETEPSSKmurcdGIbawh4HOxJ4cyqvRsR0A7MQUvqPO Eb1udXknk7yOeReozcqEvN8smhcocJLZOOjZrfQLA8TCEx7mCOkFOpn+Vg3HAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFwgeHAm+lH/AIXgT+DYtZzStQJ8wHwYDVR0j BBgwFoAUqm+GoF/Z99mr6ejpWyRqTP4snhowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0 NUQvMS9BQTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNkY4NkEwNUZEOUY3RDlB QkU5RThFOTVCMjQ2QTRDRkUyQzlFMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0NUQvMS9B QTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKd1IwzAd2rkcs04Og1cT1DS7knbM2cP1ohA3pab1ktZsL4cn2nW+AbKBVHQh 2UxdnrlEcTUiAXhq2eaHjIDUI4NDqpOOqe1N2V/22chUpk49nV9tyrF9BHBZkzIj BbP8kOnvzc5I1ZTX92BW2Qi1z8TeyTOuw9bncEqgJtLVnzxjJMdciD2cNWQ7uvo+ 22j6BxoWtyLIXNQGHx17w89Pz3S0VrJB6I8uVR7yw/N0QF8bhv4DetMLcLFnmAjg YWx/2follEppFDTPjX7NrVc6dPhRq7z6UNpScOKp+mh0u3MGncyhuu1jYQODWy6n 9oAD7R1gRRQSRo1p8MGjtg20yA== -----END CERTIFICATE-----Generated at Wed Apr 23 04:20:13 2025 by rpki-client