$ rpki-client -vvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft File: B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft (raw, json) Hash identifier: W2BInVhE9JE5m2W9L3hyyt86Eg6s3C/qjoj/Rum0YMQ= Subject key identifier: 08:E3:FE:50:7B:68:12:BB:E5:C0:ED:70:C6:75:85:FA:AA:52:E8:B2 Authority key identifier: B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19 Certificate issuer: /CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819 Certificate serial: 0AB4CF99C78CA9A1A8A34AB5AC19D91F7895A492 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer Subject info access: rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft Manifest number: 01E8 Signing time: Fri 04 Apr 2025 03:50:00 +0000 Manifest this update: Fri 04 Apr 2025 03:45:00 +0000 Manifest next update: Sat 05 Apr 2025 06:32:00 +0000 Files and hashes: 1: 3137302e3235342e38302e302f32322d3234203d3e20323635313030.roa (hash: 3cJ6i4eVfePj/znbhXPN+EEU/pcnQn4cPiUP8LWIC6M=) 2: 323830343a333264343a3a2f33322d3332203d3e20323635313030.roa (hash: oxHxONE9x52U+e5QcW3K1P/Di5t/pz6PYQ4GKPQ5jt0=) 3: 323830343a333264343a383030303a3a2f33332d3333203d3e20323635313030.roa (hash: nM938q4SN87BNGIJ3b3ggcn3PsaDtJUz1la3aiK7viU=) 4: B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl (hash: sCVFIJ4vd1cul1k9fdIX6NH+zyAuU7/K3oAUpFNu/XA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 06:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b4:cf:99:c7:8c:a9:a1:a8:a3:4a:b5:ac:19:d9:1f:78:95:a4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819 Validity Not Before: Apr 4 03:45:00 2025 GMT Not After : Apr 5 06:32:00 2025 GMT Subject: CN=08E3FE507B6812BBE5C0ED70C67585FAAA52E8B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8a:40:bc:20:04:ca:dd:11:2d:67:39:b3:f9: 6a:c6:21:4d:2b:a6:22:de:e6:84:f7:15:92:df:7a: f5:92:d5:37:10:93:7f:0e:0c:b2:81:29:80:8a:c6: a1:8d:dd:1c:12:37:d8:87:57:95:e8:4b:44:33:89: 52:5b:65:1f:a6:bd:6f:64:ba:53:ec:77:6d:e7:c8: ba:cd:6f:e5:86:7b:98:45:5d:7c:78:78:3d:2c:25: 5c:dd:27:7c:03:42:86:a1:2d:c2:15:62:e7:a6:fd: 6a:1f:9a:09:85:26:4d:98:19:e9:05:cc:c8:77:e0: 8e:73:ed:bd:c7:11:ce:96:d6:e7:a1:d4:6b:52:12: d7:ef:f1:e6:07:d5:26:d3:b2:f0:4c:32:87:84:df: be:16:5e:98:60:0e:23:35:57:46:d5:fb:b1:a4:2c: 7e:24:35:bc:5f:52:d2:81:2a:cd:20:39:2b:06:13: a8:34:ba:68:b7:f0:03:86:5b:78:3a:a2:8a:1a:45: 3f:2f:e0:eb:4c:a0:d2:c9:1f:c0:08:86:9f:63:c3: 0f:e6:e8:b2:40:0b:8e:72:70:9b:bf:84:6d:2c:7f: 32:7d:27:7d:09:87:0d:25:c5:f7:97:6e:e6:30:93: 04:83:8d:e4:76:3e:99:ed:a7:83:12:d6:95:38:82: 58:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E3:FE:50:7B:68:12:BB:E5:C0:ED:70:C6:75:85:FA:AA:52:E8:B2 X509v3 Authority Key Identifier: keyid:B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:48:0f:aa:72:2e:63:23:b0:6a:b8:6e:02:80:a0:59:cd:5e: 22:f5:78:6d:0c:5a:5e:ec:14:e8:77:3a:1c:1d:c4:f0:0f:69: 20:46:6f:3d:e8:dc:9b:c6:af:90:1a:6b:bd:4d:39:94:6e:8b: e9:e7:db:2d:51:c7:84:54:f9:89:ec:34:22:62:59:db:39:4a: 70:2f:21:d4:c9:ec:60:8e:22:c3:48:0c:22:ee:5f:f2:cd:4e: 5d:ac:48:1e:dd:c2:f2:f7:d8:af:40:6d:8a:fe:c5:72:d9:73: 95:05:67:78:d2:00:d2:02:6b:c2:72:13:80:73:74:e5:72:a8: 24:6a:9a:19:a4:af:7c:42:a0:a8:d9:fb:34:b7:b3:a0:ac:a0: 36:41:57:2c:01:cf:28:37:d2:1c:76:31:7d:4a:2f:5c:74:8e: 65:dc:0a:8e:40:c1:ec:e4:db:b4:03:ca:26:db:02:69:47:ab: 06:67:49:91:37:36:d3:9c:d3:95:66:05:75:ad:20:eb:75:5b: 49:0d:5e:2b:e4:3c:ae:31:60:5a:6f:1e:09:8e:08:6a:73:17: fe:39:bd:69:84:46:08:25:a7:c1:77:85:1c:84:c3:f5:60:a9: 58:be:db:7b:aa:1b:da:c8:ea:94:4b:94:93:dd:f0:5a:b2:ff: 0f:be:86:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCrTPmceMqaGoo0q1rBnZH3iVpJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGQzVGMDhCOEM0ODY0MDEzREMzQTRDQTQ3QzIyMDBC M0MyQjgxOTAeFw0yNTA0MDQwMzQ1MDBaFw0yNTA0MDUwNjMyMDBaMDMxMTAvBgNV BAMTKDA4RTNGRTUwN0I2ODEyQkJFNUMwRUQ3MEM2NzU4NUZBQUE1MkU4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJikC8IATK3REtZzmz+WrGIU0r piLe5oT3FZLfevWS1TcQk38ODLKBKYCKxqGN3RwSN9iHV5XoS0QziVJbZR+mvW9k ulPsd23nyLrNb+WGe5hFXXx4eD0sJVzdJ3wDQoahLcIVYuem/WofmgmFJk2YGekF zMh34I5z7b3HEc6W1ueh1GtSEtfv8eYH1SbTsvBMMoeE374WXphgDiM1V0bV+7Gk LH4kNbxfUtKBKs0gOSsGE6g0umi38AOGW3g6oooaRT8v4OtMoNLJH8AIhp9jww/m 6LJAC45ycJu/hG0sfzJ9J30Jhw0lxfeXbuYwkwSDjeR2Ppntp4MS1pU4glhpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCOP+UHtoErvlwO1wxnWF+qpS6LIwHwYDVR0j BBgwFoAUtfxfCLjEhkAT3DpMpHwiALPCuBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGFkWlNFZGdmc3J6c1dTYld1VFBKYnBFWHZUU0FWYXQ0bWdXdDl0Q0hM ZEQvMS9CNUZDNUYwOEI4QzQ4NjQwMTNEQzNBNENBNDdDMjIwMEIzQzJCODE5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RkM1RjA4QjhDNDg2NDAx M0RDM0E0Q0E0N0MyMjAwQjNDMkI4MTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGFkWlNFZGdmc3J6c1dTYld1VFBKYnBFWHZUU0FWYXQ0bWdXdDl0Q0hMZEQvMS9C NUZDNUYwOEI4QzQ4NjQwMTNEQzNBNENBNDdDMjIwMEIzQzJCODE5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXEgPqnIuYyOwarhuAoCgWc1eIvV4bQxaXuwU6Hc6HB3E8A9pIEZvPejcm8av kBprvU05lG6L6efbLVHHhFT5iew0ImJZ2zlKcC8h1MnsYI4iw0gMIu5f8s1OXaxI Ht3C8vfYr0Btiv7FctlzlQVneNIA0gJrwnITgHN05XKoJGqaGaSvfEKgqNn7NLez oKygNkFXLAHPKDfSHHYxfUovXHSOZdwKjkDB7OTbtAPKJtsCaUerBmdJkTc205zT lWYFda0g63VbSQ1eK+Q8rjFgWm8eCY4IanMX/jm9aYRGCCWnwXeFHITD9WCpWL7b e6ob2sjqlEuUk93wWrL/D76GDQ== -----END CERTIFICATE-----Generated at Fri Apr 4 17:57:41 2025 by rpki-client