$ rpki-client -vvf rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft File: 9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft (raw, json) Hash identifier: wm7nIRKrF2pc0OvpPfkPebvviFtDkeEz10XLoS2UTNY= Subject key identifier: CB:D9:FB:21:CB:BF:6E:D8:C9:6C:8E:85:ED:97:4D:17:AC:0D:64:21 Authority key identifier: 9A:A6:93:22:4E:78:5F:3D:03:76:FA:01:CC:D4:6E:7A:7D:A4:CE:60 Certificate issuer: /CN=9AA693224E785F3D0376FA01CCD46E7A7DA4CE60 Certificate serial: 07AB35C672E2B48752BE110F63B6F27A4FCBAA0A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer Subject info access: rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft Manifest number: 021B Signing time: Sun 11 May 2025 22:22:33 +0000 Manifest this update: Sun 11 May 2025 22:17:33 +0000 Manifest next update: Tue 13 May 2025 01:57:33 +0000 Files and hashes: 1: 9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.crl (hash: I1yo7K9yTru6mK7pymJPmLfZCnzPaadqKgPFcB/kUJw=) 2: 323830343a346263343a3a2f33322d3430203d3e20323637333238.roa (hash: 8YCQ1pEqfG8TZim2Qgau2Oe74gxnsmxIp/lq/UEeQbc=) 3: 34352e3233332e3135322e302f32322d3234203d3e20323637333238.roa (hash: N+mGNgubbJekFWOnADVO5cKOOG5Dw1zgNdMh+bSebuE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.crl rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 01:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ab:35:c6:72:e2:b4:87:52:be:11:0f:63:b6:f2:7a:4f:cb:aa:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AA693224E785F3D0376FA01CCD46E7A7DA4CE60 Validity Not Before: May 11 22:17:33 2025 GMT Not After : May 13 01:57:33 2025 GMT Subject: CN=CBD9FB21CBBF6ED8C96C8E85ED974D17AC0D6421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:fe:c0:d2:11:97:e0:00:a5:a6:ca:b8:aa: 32:7f:e5:5c:63:89:2f:54:e6:ef:ef:54:fe:a4:ef: 58:67:e3:7e:77:fa:d1:a6:7e:8f:24:5e:64:3d:76: 24:63:c9:6c:ba:fd:c4:ea:9d:a7:43:4d:f9:94:e3: 97:91:9a:2c:b2:bc:10:ff:50:61:af:46:85:40:a7: c1:b1:28:ac:47:c9:fd:6a:32:85:bf:a8:b9:d6:d1: 60:c9:c8:e2:18:d7:6b:a1:72:f3:7b:6f:04:dc:dd: c7:1b:3b:33:9d:31:cf:92:9f:63:0f:be:da:90:d0: fe:84:59:51:a4:12:e7:d1:e5:fc:76:d0:f0:ee:f7: 07:77:8b:9f:4d:07:a9:3e:d9:a7:17:ea:e4:c8:b2: 75:88:00:1c:4a:69:04:01:2a:e0:74:d5:09:80:92: d6:13:1a:a2:a8:02:dc:58:16:d6:af:ff:c1:c0:4d: 9e:a5:d1:59:cb:ef:f4:ff:8d:c7:9f:7c:4c:3f:b2: 50:a7:01:b7:26:dc:b7:8b:91:42:6d:c2:fe:a7:b9: 70:2e:f2:bd:23:e0:af:4b:da:f9:af:5d:f9:31:87: d2:42:61:91:35:fd:67:f5:0d:43:d8:94:1c:1e:91: 3c:e0:b0:28:7e:61:dc:e6:79:b4:65:ec:33:44:00: 41:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D9:FB:21:CB:BF:6E:D8:C9:6C:8E:85:ED:97:4D:17:AC:0D:64:21 X509v3 Authority Key Identifier: keyid:9A:A6:93:22:4E:78:5F:3D:03:76:FA:01:CC:D4:6E:7A:7D:A4:CE:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/1/9AA693224E785F3D0376FA01CCD46E7A7DA4CE60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d1:8f:9f:25:d8:17:67:68:f5:52:f4:26:f9:28:29:40:2c: b9:81:98:9e:cb:31:8f:a8:ee:37:59:27:44:19:63:e8:43:73: 19:ce:ab:39:75:43:a7:b6:a7:93:c3:77:ba:70:5c:31:e5:fe: b3:09:d0:75:e6:99:2e:23:f0:8a:f6:4d:de:bc:28:47:16:86: c2:9b:f4:4f:f9:9a:09:1b:15:e1:4b:aa:fc:44:0a:e5:ea:a9: 94:f8:2c:cb:cb:fd:e3:85:d1:be:fc:a6:eb:57:a8:be:19:72: f1:15:f9:8a:99:b5:dc:5b:ce:c3:cc:42:86:f8:f2:25:ae:d1: ca:56:73:5e:52:e4:46:4a:d4:ca:9f:b4:10:78:1a:14:d2:fd: 75:95:86:9f:ea:01:10:ed:36:65:97:bd:45:e4:1d:5e:23:fd: c2:cd:c5:4e:30:b4:a6:cc:06:45:b1:f4:28:fc:e2:46:75:a8: 0c:c1:50:7d:42:74:4f:ae:5a:56:3c:90:1a:f7:19:cd:99:2d: 98:67:20:c3:9d:af:93:f4:87:a8:dd:df:c4:52:8b:51:9d:3c: 88:70:e3:a6:56:83:cb:de:75:20:75:1c:46:d2:f8:9e:45:21: 84:fa:49:6c:71:ac:79:c2:85:e8:c0:51:d5:d2:f5:1f:5b:0b: 9c:86:7e:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUB6s1xnLitIdSvhEPY7byek/LqgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFBNjkzMjI0RTc4NUYzRDAzNzZGQTAxQ0NENDZFN0E3 REE0Q0U2MDAeFw0yNTA1MTEyMjE3MzNaFw0yNTA1MTMwMTU3MzNaMDMxMTAvBgNV BAMTKENCRDlGQjIxQ0JCRjZFRDhDOTZDOEU4NUVEOTc0RDE3QUMwRDY0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrYf7A0hGX4AClpsq4qjJ/5Vxj iS9U5u/vVP6k71hn4353+tGmfo8kXmQ9diRjyWy6/cTqnadDTfmU45eRmiyyvBD/ UGGvRoVAp8GxKKxHyf1qMoW/qLnW0WDJyOIY12uhcvN7bwTc3ccbOzOdMc+Sn2MP vtqQ0P6EWVGkEufR5fx20PDu9wd3i59NB6k+2acX6uTIsnWIABxKaQQBKuB01QmA ktYTGqKoAtxYFtav/8HATZ6l0VnL7/T/jceffEw/slCnAbcm3LeLkUJtwv6nuXAu 8r0j4K9L2vmvXfkxh9JCYZE1/Wf1DUPYlBwekTzgsCh+YdzmebRl7DNEAEE9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUy9n7Icu/btjJbI6F7ZdNF6wNZCEwHwYDVR0j BBgwFoAUmqaTIk54Xz0DdvoBzNRuen2kzmAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNURZWkdiUDhyZk1KWDlNY0xnU2ZDQUw4WUZTYWRFd3NnSDVaUGEyQmhn QVUvMS85QUE2OTMyMjRFNzg1RjNEMDM3NkZBMDFDQ0Q0NkU3QTdEQTRDRTYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBQTY5MzIyNEU3ODVGM0Qw Mzc2RkEwMUNDRDQ2RTdBN0RBNENFNjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NURZWkdiUDhyZk1KWDlNY0xnU2ZDQUw4WUZTYWRFd3NnSDVaUGEyQmhnQVUvMS85 QUE2OTMyMjRFNzg1RjNEMDM3NkZBMDFDQ0Q0NkU3QTdEQTRDRTYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp9GPnyXYF2do9VL0JvkoKUAsuYGYnssxj6juN1knRBlj6ENzGc6rOXVDp7an k8N3unBcMeX+swnQdeaZLiPwivZN3rwoRxaGwpv0T/maCRsV4Uuq/EQK5eqplPgs y8v944XRvvym61eovhly8RX5ipm13FvOw8xChvjyJa7RylZzXlLkRkrUyp+0EHga FNL9dZWGn+oBEO02ZZe9ReQdXiP9ws3FTjC0pswGRbH0KPziRnWoDMFQfUJ0T65a VjyQGvcZzZktmGcgw52vk/SHqN3fxFKLUZ08iHDjplaDy951IHUcRtL4nkUhhPpJ bHGsecKF6MBR1dL1H1sLnIZ+Ig== -----END CERTIFICATE-----Generated at Mon May 12 15:30:22 2025 by rpki-client