$ rpki-client -vvf rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft File: 8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft (raw, json) Hash identifier: 5ncpLQhpug3LGbtrAH8CqEdYTGtHlVzwt5lDJrSNWfk= Subject key identifier: F6:CE:E3:81:23:27:1B:46:71:3E:5E:96:8F:0F:E6:D6:38:61:19:F3 Authority key identifier: 8E:C7:D5:A9:01:6A:AE:FC:41:0E:D4:66:E0:0B:14:EB:DC:E6:EE:7F Certificate issuer: /CN=8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F Certificate serial: 457B6F107F133B16B79706825D5810D9F9FCA3F7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer Subject info access: rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft Manifest number: 020E Signing time: Sat 03 May 2025 12:45:37 +0000 Manifest this update: Sat 03 May 2025 12:40:37 +0000 Manifest next update: Sun 04 May 2025 15:15:37 +0000 Files and hashes: 1: 3137302e37382e3130302e302f32322d3234203d3e20323636323737.roa (hash: EOg/hM1DxnfBQMJLRQ41kPRgUah10XE4r5WsOtjys1w=) 2: 323830343a333534303a3a2f33322d3438203d3e20323636323737.roa (hash: P1a8+zNmPoNV87lU1gPo9XyXRrpLc9cUorv71O21VUA=) 3: 8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl (hash: IZlJLiJKGLLAfuh5tu8fnit7Wt0yfs0Tdli4lMOvOSU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 04 May 2025 14:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:7b:6f:10:7f:13:3b:16:b7:97:06:82:5d:58:10:d9:f9:fc:a3:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F Validity Not Before: May 3 12:40:37 2025 GMT Not After : May 4 15:15:37 2025 GMT Subject: CN=F6CEE38123271B46713E5E968F0FE6D6386119F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c6:ba:c7:56:0b:26:22:5a:50:8b:3d:8d:29: bf:9d:71:20:e2:22:16:0d:aa:ca:ad:fa:4d:8a:ac: a1:b7:a1:04:f1:00:40:0e:66:3f:2b:35:08:35:dd: 70:34:28:dd:d2:cd:35:53:87:7f:88:ab:c0:03:12: e9:37:8e:47:79:00:2a:fc:17:36:b1:8e:ef:dc:99: 4c:6d:0d:23:33:73:90:fb:e8:ea:e4:e0:17:80:91: 71:77:78:7b:10:47:51:9a:c6:a8:4d:2f:50:db:27: 1a:1f:7a:42:53:00:b3:29:30:38:8e:2e:c3:0e:21: 4b:4e:59:4f:f3:bb:6b:70:f4:ad:49:ea:a0:1e:d6: ac:db:00:5b:26:d3:97:18:6c:3c:02:36:72:ab:c8: 72:b8:52:08:59:3d:98:1b:32:3a:5c:fe:40:45:52: e7:0b:1f:1c:7e:cd:7e:30:f3:17:b8:d2:64:08:af: f3:1d:97:25:a3:ed:46:28:bf:67:fe:a8:c8:a6:63: 94:1c:2a:c5:c0:0c:41:df:8a:24:24:8d:21:70:d1: 4a:42:09:b0:c5:6c:1e:eb:1c:f3:f8:71:64:09:f0: 56:e0:65:85:a2:3a:e6:12:ae:5b:cf:45:94:85:5f: bb:f7:cc:26:40:2f:4f:0b:0f:b7:39:b7:15:05:8a: b0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CE:E3:81:23:27:1B:46:71:3E:5E:96:8F:0F:E6:D6:38:61:19:F3 X509v3 Authority Key Identifier: keyid:8E:C7:D5:A9:01:6A:AE:FC:41:0E:D4:66:E0:0B:14:EB:DC:E6:EE:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PpeH4hUwHSmNV9hw7cx4RmF8otJNN8HPfwkmFn94uis/1/8EC7D5A9016AAEFC410ED466E00B14EBDCE6EE7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:af:6a:78:9a:48:28:e2:a7:bc:7b:ec:e3:0f:a6:57:8a:1c: 87:6a:6a:f2:94:28:15:42:d7:c6:b9:d9:78:88:bb:50:c4:38: da:f8:46:55:b6:eb:6c:28:5d:20:a4:d3:be:7f:59:96:df:bf: 50:a6:54:1a:c1:d6:1b:88:d2:e5:5d:6f:92:3d:9a:77:cc:1b: a6:55:17:e0:47:90:90:08:01:36:24:30:0d:71:45:39:3d:3d: 0e:0b:13:eb:d1:89:76:6c:c6:1d:d0:de:4a:76:71:d1:aa:1c: 7e:b8:68:9f:36:4c:8f:c4:cf:81:20:c7:80:45:4e:31:98:aa: 3c:b7:60:98:10:80:48:c1:f0:4d:ec:e4:86:3c:e8:e9:3a:fc: 13:64:0e:38:ab:57:5c:89:ed:4a:a8:eb:b3:0d:fe:07:ee:e4: 3d:53:22:b1:96:9d:0a:c0:b1:c9:33:ec:8c:33:70:be:49:f2: 78:c0:d6:5b:77:94:29:ff:ca:60:5a:d3:98:0a:f8:3c:cd:4e: 81:ca:e0:5d:3d:6d:d6:d4:f0:47:ec:b2:90:17:a0:f8:8b:cf: 46:b7:20:0e:50:de:b2:9d:66:73:bc:57:75:f5:3d:e1:5e:c6: c6:a2:a3:70:f4:8f:6f:cd:e8:72:d4:c0:1e:f9:b9:55:f4:da: d8:f2:5c:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURXtvEH8TOxa3lwaCXVgQ2fn8o/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVDN0Q1QTkwMTZBQUVGQzQxMEVENDY2RTAwQjE0RUJE Q0U2RUU3RjAeFw0yNTA1MDMxMjQwMzdaFw0yNTA1MDQxNTE1MzdaMDMxMTAvBgNV BAMTKEY2Q0VFMzgxMjMyNzFCNDY3MTNFNUU5NjhGMEZFNkQ2Mzg2MTE5RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWxrrHVgsmIlpQiz2NKb+dcSDi IhYNqsqt+k2KrKG3oQTxAEAOZj8rNQg13XA0KN3SzTVTh3+Iq8ADEuk3jkd5ACr8 Fzaxju/cmUxtDSMzc5D76Ork4BeAkXF3eHsQR1GaxqhNL1DbJxofekJTALMpMDiO LsMOIUtOWU/zu2tw9K1J6qAe1qzbAFsm05cYbDwCNnKryHK4UghZPZgbMjpc/kBF UucLHxx+zX4w8xe40mQIr/MdlyWj7UYov2f+qMimY5QcKsXADEHfiiQkjSFw0UpC CbDFbB7rHPP4cWQJ8FbgZYWiOuYSrlvPRZSFX7v3zCZAL08LD7c5txUFirCvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9s7jgSMnG0ZxPl6Wjw/m1jhhGfMwHwYDVR0j BBgwFoAUjsfVqQFqrvxBDtRm4AsU69zm7n8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlBwZUg0aFV3SFNtTlY5aHc3Y3g0Um1GOG90Sk5OOEhQZndrbUZuOTR1 aXMvMS84RUM3RDVBOTAxNkFBRUZDNDEwRUQ0NjZFMDBCMTRFQkRDRTZFRTdGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQzdENUE5MDE2QUFFRkM0 MTBFRDQ2NkUwMEIxNEVCRENFNkVFN0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlBwZUg0aFV3SFNtTlY5aHc3Y3g0Um1GOG90Sk5OOEhQZndrbUZuOTR1aXMvMS84 RUM3RDVBOTAxNkFBRUZDNDEwRUQ0NjZFMDBCMTRFQkRDRTZFRTdGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATa9qeJpIKOKnvHvs4w+mV4och2pq8pQoFULXxrnZeIi7UMQ42vhGVbbrbChd IKTTvn9Zlt+/UKZUGsHWG4jS5V1vkj2ad8wbplUX4EeQkAgBNiQwDXFFOT09DgsT 69GJdmzGHdDeSnZx0aocfrhonzZMj8TPgSDHgEVOMZiqPLdgmBCASMHwTezkhjzo 6Tr8E2QOOKtXXIntSqjrsw3+B+7kPVMisZadCsCxyTPsjDNwvknyeMDWW3eUKf/K YFrTmAr4PM1OgcrgXT1t1tTwR+yykBeg+IvPRrcgDlDesp1mc7xXdfU94V7GxqKj cPSPb83octTAHvm5VfTa2PJcuQ== -----END CERTIFICATE-----Generated at Sat May 3 17:26:21 2025 by rpki-client