$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft File: 2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json) Hash identifier: QpCj/O6Z1+uzir66nrkutuOby/ddyY61YlbihAhnfYw= Subject key identifier: 89:12:4B:A7:45:7C:73:B6:05:20:91:41:09:99:53:68:C1:63:33:03 Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A Certificate issuer: /CN=2AADFACED9C75E320914697A02E254A3D463839A Certificate serial: 6949C85E04E695D97D828A78E3DBE31E496268FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft Manifest number: 01E5 Signing time: Fri 04 Apr 2025 10:08:13 +0000 Manifest this update: Fri 04 Apr 2025 10:03:13 +0000 Manifest next update: Sat 05 Apr 2025 14:00:13 +0000 Files and hashes: 1: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: olPEUYzQeXbpm2M5qdX3HUxqCDHC3YBr2Etr9x7gT/w=) 2: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: DuI4Mug1p6teJxzujuasFd0ujWIU2EvbfZhNpCjPypI=) 3: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: x5iuGCn7iIiLA58Ndn3y1wpRpDwkwT6vAQ7aN6aSTBk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 14:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:49:c8:5e:04:e6:95:d9:7d:82:8a:78:e3:db:e3:1e:49:62:68:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A Validity Not Before: Apr 4 10:03:13 2025 GMT Not After : Apr 5 14:00:13 2025 GMT Subject: CN=89124BA7457C73B60520914109995368C1633303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8c:19:7a:e8:ee:09:b7:b3:3a:85:e3:cc:54: b1:ab:a4:b3:68:3e:aa:da:60:a6:3b:16:38:56:02: 50:2f:b3:a1:c6:90:d4:ef:00:ef:a8:2a:49:f6:3c: 9a:bb:85:a6:41:fa:76:a3:01:35:17:3c:08:98:ec: 59:ef:fc:8b:d7:b3:bb:8c:38:bf:5e:35:f4:cc:72: 5e:89:a0:e8:14:f4:17:f7:4c:9b:d6:95:55:f2:d9: da:23:93:9c:a2:aa:f4:15:b0:3b:58:4f:93:25:86: 12:2e:30:82:fe:24:ba:eb:67:81:fa:55:70:af:01: a6:f8:0b:33:f7:32:41:25:dc:3c:a2:2f:1a:e5:d4: ee:45:d8:f6:1b:b4:33:9c:a2:82:6f:aa:bd:4a:0f: c6:94:51:a6:e8:56:86:1e:66:42:bc:d0:a4:67:24: be:49:91:df:1d:aa:2e:67:1e:0c:b4:41:7a:fc:69: 12:d2:93:5f:27:75:4b:1a:f6:89:f8:a5:0b:07:0c: 5f:d0:f4:c8:fc:31:45:bc:79:1e:fb:31:71:82:92: 8c:42:3c:e8:b2:e6:10:6d:66:b5:51:3b:c8:86:28: 81:91:4a:2d:6e:18:4b:33:be:0c:e0:a5:86:4a:2b: 7e:e7:9d:89:01:c4:c4:91:62:d1:6f:30:86:39:bf: 95:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:12:4B:A7:45:7C:73:B6:05:20:91:41:09:99:53:68:C1:63:33:03 X509v3 Authority Key Identifier: keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:94:02:75:61:c4:b7:7d:7e:f9:ea:21:54:e1:13:11:e6:90: 12:b2:c0:68:93:b8:3b:bc:c2:75:97:e2:ab:9e:f2:e5:75:b4: c6:09:82:c7:38:e8:ed:b0:cb:85:26:ad:3b:52:6d:c5:43:40: 90:1f:c8:f8:82:eb:dc:15:b1:54:b8:ff:3d:44:88:5c:2f:e8: 43:2d:33:43:52:b0:12:5a:b4:2b:96:7d:83:15:61:92:75:c0: 70:db:c4:71:b9:40:68:e5:2a:34:c2:d2:6b:32:bc:87:4f:eb: 70:62:a9:1f:9b:68:32:5d:17:f5:ef:43:cf:6c:e3:47:5d:ef: a3:31:e2:82:4d:ec:38:31:84:61:a6:83:83:37:fd:68:21:ea: 20:92:8e:88:02:25:36:36:3b:83:31:b2:d9:47:a3:43:86:2e: e2:0e:11:97:da:de:a7:59:90:e7:bc:b6:2a:fe:af:34:32:a1: a9:0b:47:4d:8f:a9:c4:db:40:9a:a7:80:35:c8:b9:52:9e:37: f3:da:8d:d1:97:f9:86:9f:18:b4:41:d0:3c:5d:61:58:e6:d4: 9d:fc:d9:e7:54:fa:1d:53:09:cf:b4:52:c2:a2:3e:1b:24:cf: 4a:7a:46:4c:08:56:d7:81:50:5b:fa:69:3c:8e:3b:76:29:55: 5d:ea:59:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaUnIXgTmldl9gop449vjHkliaP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBREZBQ0VEOUM3NUUzMjA5MTQ2OTdBMDJFMjU0QTNE NDYzODM5QTAeFw0yNTA0MDQxMDAzMTNaFw0yNTA0MDUxNDAwMTNaMDMxMTAvBgNV BAMTKDg5MTI0QkE3NDU3QzczQjYwNTIwOTE0MTA5OTk1MzY4QzE2MzMzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyjBl66O4Jt7M6hePMVLGrpLNo PqraYKY7FjhWAlAvs6HGkNTvAO+oKkn2PJq7haZB+najATUXPAiY7Fnv/IvXs7uM OL9eNfTMcl6JoOgU9Bf3TJvWlVXy2dojk5yiqvQVsDtYT5MlhhIuMIL+JLrrZ4H6 VXCvAab4CzP3MkEl3DyiLxrl1O5F2PYbtDOcooJvqr1KD8aUUaboVoYeZkK80KRn JL5Jkd8dqi5nHgy0QXr8aRLSk18ndUsa9on4pQsHDF/Q9Mj8MUW8eR77MXGCkoxC POiy5hBtZrVRO8iGKIGRSi1uGEszvgzgpYZKK37nnYkBxMSRYtFvMIY5v5UvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiRJLp0V8c7YFIJFBCZlTaMFjMwMwHwYDVR0j BBgwFoAUKq36ztnHXjIJFGl6AuJUo9Rjg5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0Ru eW8vMS8yQUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQURGQUNFRDlDNzVFMzIw OTE0Njk3QTAyRTI1NEEzRDQ2MzgzOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0RueW8vMS8y QUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKpQCdWHEt31++eohVOETEeaQErLAaJO4O7zCdZfiq57y5XW0xgmCxzjo7bDL hSatO1JtxUNAkB/I+ILr3BWxVLj/PUSIXC/oQy0zQ1KwElq0K5Z9gxVhknXAcNvE cblAaOUqNMLSazK8h0/rcGKpH5toMl0X9e9Dz2zjR13vozHigk3sODGEYaaDgzf9 aCHqIJKOiAIlNjY7gzGy2UejQ4Yu4g4Rl9rep1mQ57y2Kv6vNDKhqQtHTY+pxNtA mqeANci5Up4389qN0Zf5hp8YtEHQPF1hWObUnfzZ51T6HVMJz7RSwqI+GyTPSnpG TAhW14FQW/ppPI47dilVXepZkw== -----END CERTIFICATE-----Generated at Sat Apr 5 05:55:10 2025 by rpki-client