$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft File: B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft (raw, json) Hash identifier: mPiC8bvMwhgt7XoK69v4EczTyz1tD1CnGq/pMfBK49s= Subject key identifier: F3:D1:F4:EE:4F:26:76:CF:05:C0:1F:2B:E8:F4:10:9D:E0:EC:19:C4 Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D Certificate issuer: /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D Certificate serial: 4F9A054CFBCFCB912A704876EA97390C41E9C668 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft Manifest number: C1 Signing time: Sun 06 Apr 2025 20:57:58 +0000 Manifest this update: Sun 06 Apr 2025 20:52:58 +0000 Manifest next update: Mon 07 Apr 2025 23:53:58 +0000 Files and hashes: 1: 3137302e38322e32302e302f32332d3332203d3e20323636343430.roa (hash: +nAxPRtHcxrgkfrh1mtsvE/NhFZA9Y3xvxEZni9mbCY=) 2: 3137302e38322e32312e302f32342d3332203d3e20323636343430.roa (hash: beeX4B6MyKuGmrciweMX6QiNJiZS0b30i2PbXxCMlEg=) 3: 3137302e38322e32302e302f32342d3332203d3e20323636343430.roa (hash: 6NEYOLRI6MRrTzbOfEps6WpFR9L/MZ1xNz0hgxoPQ+g=) 4: B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl (hash: GO5H2m7mkVeNv7bxW3huC2q/rntYHxC4/Z6tnvPkPwM=) 5: 3137302e38322e32332e302f32342d3332203d3e20323636343430.roa (hash: 6PedwyVVFqTEjw2hbT1Tz2heBUwIRq91w7SbTmPftoM=) 6: 3137302e38322e32322e302f32332d3332203d3e20323636343430.roa (hash: VhhP8rnZ6UCnRJRiCucXMy4ncmyKDFOTf8Wxmj/hPMI=) 7: 3137302e38322e32302e302f32322d3332203d3e20323636343430.roa (hash: oSQRk40W0JY8sSyVmz7gA7J13dK7vc4st2hm/+lgUdA=) 8: 323830343a333764633a3a2f33322d313238203d3e20323636343430.roa (hash: qNAnNxMLf23lX/Toa0RnHfzZ1GHt/QjrCvGeOjqM+AY=) 9: 3137302e38322e32322e302f32342d3332203d3e20323636343430.roa (hash: DJne4kBD+xNmWBwcSI8pOxz3/iDzRXKwxTctYsGvKzY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 23:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9a:05:4c:fb:cf:cb:91:2a:70:48:76:ea:97:39:0c:41:e9:c6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D Validity Not Before: Apr 6 20:52:58 2025 GMT Not After : Apr 7 23:53:58 2025 GMT Subject: CN=F3D1F4EE4F2676CF05C01F2BE8F4109DE0EC19C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4c:04:af:8a:4c:c4:63:25:3e:89:0b:ef:4c: aa:f2:1f:ed:89:fc:a2:d7:10:10:d1:04:73:6a:15: 92:7f:db:3f:c1:c3:6b:4d:96:ef:68:18:5d:e3:e0: b1:86:c2:8a:a5:80:f5:c6:b9:6c:e3:56:e7:87:f8: 6c:9c:a2:05:d4:a4:37:00:65:a4:7f:dc:e7:37:38: 18:43:9c:09:06:e8:69:2e:e4:49:b5:78:8c:89:63: c1:ea:19:74:e3:58:4d:36:01:a8:8e:3e:28:c7:b3: 87:ff:c1:37:f1:4d:80:a1:b9:d7:4c:87:27:9a:50: 4d:cf:9d:60:9f:f4:3d:3b:e9:57:aa:eb:25:13:20: 17:cd:19:7d:f2:48:56:c6:ee:05:96:49:38:a1:7e: 2a:b4:74:a6:f1:ab:e2:2d:74:f0:17:a9:b7:dd:e4: 82:1b:ea:ab:e4:58:56:03:4b:a2:be:bf:0e:3b:c9: 3f:bc:08:3a:d3:5d:54:de:0f:b2:4d:36:76:ac:d6: f9:83:51:f5:f8:49:5a:92:ef:80:04:a4:08:43:25: 5f:b2:52:42:ea:f2:e2:b7:3b:b5:ba:cb:fe:80:73: 81:51:84:aa:f4:c8:a1:34:bf:9c:5a:93:b4:f3:62: 72:5c:df:e1:93:2e:f8:70:ba:47:f9:af:9f:4a:dd: 46:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D1:F4:EE:4F:26:76:CF:05:C0:1F:2B:E8:F4:10:9D:E0:EC:19:C4 X509v3 Authority Key Identifier: keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a5:77:ee:26:f0:93:1a:e6:e1:f0:55:c9:cc:89:1d:45:88: d4:07:ca:a3:62:0e:5e:d0:23:a1:70:02:71:46:f3:a4:81:cd: f8:dd:0b:7d:9e:18:ca:d4:c8:62:61:09:74:1b:34:75:a2:ce: 6e:a4:53:3f:9c:88:4d:60:3c:7d:c0:cf:7b:c1:e4:bd:c4:12: 4e:e8:87:d3:c8:e8:04:f1:2c:e6:70:10:6b:33:a2:71:36:bf: 19:6a:41:9d:cb:12:fd:e0:02:25:b9:cc:06:55:0c:b9:4a:53: f4:37:7f:cb:d3:50:e3:9a:87:2f:ce:ac:19:67:02:e7:25:89: 59:37:44:eb:04:78:23:5a:97:3c:cc:ba:84:f5:5d:7d:62:c8: 22:10:f5:cb:e2:f7:51:b3:50:af:76:5e:bf:cf:98:8f:4a:42: 3b:f4:9a:90:88:00:86:a8:6b:16:33:74:0d:f8:59:44:4e:37: 4e:13:70:a0:5a:27:70:b7:f8:89:70:f0:80:ee:79:53:c9:7b: ed:7b:c0:0d:af:ed:c7:e2:d0:55:90:72:01:d4:ef:0f:2e:4f: 5c:c6:cd:a2:06:f3:f5:b2:73:16:98:bd:53:c6:5e:3a:55:04: 97:aa:bf:22:48:b0:13:33:5d:72:fb:c4:9e:49:05:02:4f:fe: a5:0c:3a:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT5oFTPvPy5EqcEh26pc5DEHpxmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBEMEYxQ0UzMEEyQkMwRjNBREI2NkZEODI0Mjc1MDI1 ODk3NUUxRDAeFw0yNTA0MDYyMDUyNThaFw0yNTA0MDcyMzUzNThaMDMxMTAvBgNV BAMTKEYzRDFGNEVFNEYyNjc2Q0YwNUMwMUYyQkU4RjQxMDlERTBFQzE5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPTASvikzEYyU+iQvvTKryH+2J /KLXEBDRBHNqFZJ/2z/Bw2tNlu9oGF3j4LGGwoqlgPXGuWzjVueH+GycogXUpDcA ZaR/3Oc3OBhDnAkG6Gku5Em1eIyJY8HqGXTjWE02AaiOPijHs4f/wTfxTYChuddM hyeaUE3PnWCf9D076Veq6yUTIBfNGX3ySFbG7gWWSTihfiq0dKbxq+ItdPAXqbfd 5IIb6qvkWFYDS6K+vw47yT+8CDrTXVTeD7JNNnas1vmDUfX4SVqS74AEpAhDJV+y UkLq8uK3O7W6y/6Ac4FRhKr0yKE0v5xak7TzYnJc3+GTLvhwukf5r59K3UavAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU89H07k8mds8FwB8r6PQQneDsGcQwHwYDVR0j BBgwFoAUsNDxzjCivA8622b9gkJ1AliXXh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG9XVGJVR1BYS1hzN1FQQ2FEY1ZYQ1hYcGhzdlRmc1pDbXBSaXVxWk1r WTQvMC9CMEQwRjFDRTMwQTJCQzBGM0FEQjY2RkQ4MjQyNzUwMjU4OTc1RTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwRDBGMUNFMzBBMkJDMEYz QURCNjZGRDgyNDI3NTAyNTg5NzVFMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SG9XVGJVR1BYS1hzN1FQQ2FEY1ZYQ1hYcGhzdlRmc1pDbXBSaXVxWk1rWTQvMC9C MEQwRjFDRTMwQTJCQzBGM0FEQjY2RkQ4MjQyNzUwMjU4OTc1RTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWqV37ibwkxrm4fBVycyJHUWI1AfKo2IOXtAjoXACcUbzpIHN+N0LfZ4YytTI YmEJdBs0daLObqRTP5yITWA8fcDPe8HkvcQSTuiH08joBPEs5nAQazOicTa/GWpB ncsS/eACJbnMBlUMuUpT9Dd/y9NQ45qHL86sGWcC5yWJWTdE6wR4I1qXPMy6hPVd fWLIIhD1y+L3UbNQr3Zev8+Yj0pCO/SakIgAhqhrFjN0DfhZRE43ThNwoFoncLf4 iXDwgO55U8l77XvADa/tx+LQVZByAdTvDy5PXMbNogbz9bJzFpi9U8ZeOlUEl6q/ IkiwEzNdcvvEnkkFAk/+pQw6eg== -----END CERTIFICATE-----Generated at Mon Apr 7 13:42:52 2025 by rpki-client