$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft File: A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft (raw, json) Hash identifier: Eon+3qw77GFFCO5BdHzz8ry60G6TMsIaAVRAhNGzsuo= Subject key identifier: DD:46:54:0D:A5:5A:56:6E:7A:CA:92:17:68:CD:85:54:DC:4A:36:DD Authority key identifier: A8:BA:F5:6D:A9:19:0A:5B:F5:A9:6D:F8:EA:B0:FD:B9:0D:3F:37:5D Certificate issuer: /CN=A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D Certificate serial: 63918F78BF7ABDC72FBD56AD2230399026E5CA82 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer Subject info access: rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft Manifest number: 0128 Signing time: Sun 04 May 2025 14:09:02 +0000 Manifest this update: Sun 04 May 2025 14:04:02 +0000 Manifest next update: Mon 05 May 2025 15:30:02 +0000 Files and hashes: 1: 323830343a373737383a3a2f33322d3332203d3e20323731313830.roa (hash: qP53uLcUi8/lpPda1LFzdKBLMIoAo8Sn+EO7nc2hXIE=) 2: 3230302e3132352e3132392e302f32342d3234203d3e20323731313830.roa (hash: GjGIxQODll55fM7GGEt2OKOT8KlqYOsgqROs+76lfrw=) 3: 3230302e302e36342e302f32342d3234203d3e20323731313830.roa (hash: O2PvaX8MStIPfCaUBD+VMkNIQYW2aayK5GId4ojGLwc=) 4: 323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa (hash: WHHYl4WkCr9Dy7/p8D5SuvrsA2+YubqT77pimz+z1PQ=) 5: A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.crl (hash: tTggZIAYyrrdzwQ+mREwc1zK2uH/g1exslsFGar+S2w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.crl rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 05 May 2025 15:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:91:8f:78:bf:7a:bd:c7:2f:bd:56:ad:22:30:39:90:26:e5:ca:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D Validity Not Before: May 4 14:04:02 2025 GMT Not After : May 5 15:30:02 2025 GMT Subject: CN=DD46540DA55A566E7ACA921768CD8554DC4A36DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:34:0a:05:1b:6a:a4:11:9f:bf:7f:2f:69: 23:16:ab:de:12:67:ca:f4:53:44:90:c0:51:59:74: ef:45:a1:22:3a:9b:19:2e:b2:19:aa:0d:e9:0f:33: 43:29:98:b0:7e:73:0d:e9:cc:8b:99:d9:e4:8f:4c: 3e:ea:8d:bc:8f:bc:b8:1a:27:2c:0e:1e:7f:51:fc: 06:f4:86:c5:e7:a7:e1:d7:9e:da:1d:44:70:0d:21: 57:35:ef:11:59:92:13:75:ff:95:27:42:ad:57:03: 16:82:b2:4b:b0:f1:f8:48:e3:aa:71:39:20:19:e8: 2c:29:f0:79:05:f1:bd:b5:34:04:d5:69:35:5c:69: b8:2d:20:13:99:24:91:36:42:fe:b9:bc:26:95:e0: 7c:61:c5:43:83:6a:ee:ea:e6:d0:80:b8:c2:ff:9f: df:f9:54:9b:c1:3d:c0:18:27:36:0c:ff:ef:7c:4e: 32:9a:75:bf:86:d6:76:a7:f1:17:f0:26:60:68:15: e2:e3:73:34:1f:19:08:56:f0:37:e9:5b:f0:ec:7a: ac:e6:91:37:ee:45:5f:9b:3f:32:46:cb:23:f9:78: d3:89:ad:1b:1f:32:cd:70:08:37:17:9e:c9:c5:7d: b1:c2:c9:0f:29:e0:08:1d:aa:ac:8c:64:4f:ac:2f: 3a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:46:54:0D:A5:5A:56:6E:7A:CA:92:17:68:CD:85:54:DC:4A:36:DD X509v3 Authority Key Identifier: keyid:A8:BA:F5:6D:A9:19:0A:5B:F5:A9:6D:F8:EA:B0:FD:B9:0D:3F:37:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:db:fa:97:51:b4:95:4c:cc:75:d4:db:e3:3e:7d:b3:1d:43: fa:6d:dd:f8:52:83:a1:61:37:a5:8b:b1:74:ff:df:3f:d3:85: dd:07:49:00:82:f8:d1:86:0e:1b:44:f5:66:53:9b:ac:63:ef: dc:a3:ee:3f:6d:4b:a9:3c:43:7a:2e:01:6f:d2:8d:21:2b:a4: 76:45:76:72:b9:34:27:21:3e:7a:20:c5:81:89:aa:d2:e5:14: 08:db:79:0f:e7:ac:2a:00:bf:28:9f:2c:29:ff:41:67:56:3f: e9:68:82:a8:80:cd:50:a5:72:e1:87:c8:de:c9:24:24:89:82: 87:fb:41:bc:7d:99:d5:8e:a5:40:62:f1:de:54:04:38:74:1a: 7d:d4:9e:ea:76:aa:14:a3:6a:39:45:a8:a7:8d:83:78:81:7a: 3a:68:7a:77:30:e1:06:2e:e9:0d:8e:c9:9f:ad:83:71:8a:e3: 1d:b3:cb:be:7d:a3:f2:ad:80:95:8c:72:39:47:bc:87:dd:36: 98:73:3b:b2:99:92:4a:0f:e4:fc:b2:0e:9b:36:9b:97:76:9c: d0:fa:09:f5:47:c2:1b:49:3b:bc:ca:c6:f7:f8:fd:64:65:c8: 35:48:29:35:04:84:61:da:51:bb:df:ad:8a:85:57:e9:cf:0c: a3:61:2d:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY5GPeL96vccvvVatIjA5kCblyoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCQUY1NkRBOTE5MEE1QkY1QTk2REY4RUFCMEZEQjkw RDNGMzc1RDAeFw0yNTA1MDQxNDA0MDJaFw0yNTA1MDUxNTMwMDJaMDMxMTAvBgNV BAMTKERENDY1NDBEQTU1QTU2NkU3QUNBOTIxNzY4Q0Q4NTU0REM0QTM2REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqATQKBRtqpBGfv38vaSMWq94S Z8r0U0SQwFFZdO9FoSI6mxkushmqDekPM0MpmLB+cw3pzIuZ2eSPTD7qjbyPvLga JywOHn9R/Ab0hsXnp+HXntodRHANIVc17xFZkhN1/5UnQq1XAxaCskuw8fhI46px OSAZ6Cwp8HkF8b21NATVaTVcabgtIBOZJJE2Qv65vCaV4HxhxUODau7q5tCAuML/ n9/5VJvBPcAYJzYM/+98TjKadb+G1nan8RfwJmBoFeLjczQfGQhW8DfpW/Dseqzm kTfuRV+bPzJGyyP5eNOJrRsfMs1wCDcXnsnFfbHCyQ8p4AgdqqyMZE+sLzrFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3UZUDaVaVm56ypIXaM2FVNxKNt0wHwYDVR0j BBgwFoAUqLr1bakZClv1qW346rD9uQ0/N10wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEhkS3UxNzNpV2NOeXM1WWljTXlGNlI1S2tqVHduVlJrOFJkTXN5amhG WW8vMi9BOEJBRjU2REE5MTkwQTVCRjVBOTZERjhFQUIwRkRCOTBEM0YzNzVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4QkFGNTZEQTkxOTBBNUJG NUE5NkRGOEVBQjBGREI5MEQzRjM3NUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEhkS3UxNzNpV2NOeXM1WWljTXlGNlI1S2tqVHduVlJrOFJkTXN5amhGWW8vMi9B OEJBRjU2REE5MTkwQTVCRjVBOTZERjhFQUIwRkRCOTBEM0YzNzVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcdv6l1G0lUzMddTb4z59sx1D+m3d+FKDoWE3pYuxdP/fP9OF3QdJAIL40YYO G0T1ZlObrGPv3KPuP21LqTxDei4Bb9KNISukdkV2crk0JyE+eiDFgYmq0uUUCNt5 D+esKgC/KJ8sKf9BZ1Y/6WiCqIDNUKVy4YfI3skkJImCh/tBvH2Z1Y6lQGLx3lQE OHQafdSe6naqFKNqOUWop42DeIF6Omh6dzDhBi7pDY7Jn62DcYrjHbPLvn2j8q2A lYxyOUe8h902mHM7spmSSg/k/LIOmzabl3ac0PoJ9UfCG0k7vMrG9/j9ZGXINUgp NQSEYdpRu9+tioVX6c8Mo2Et+Q== -----END CERTIFICATE-----Generated at Mon May 5 08:12:35 2025 by rpki-client