$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft File: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft (raw, json) Hash identifier: w/k7p2RtcyScvFqIzlxE9h0bwJS3pAmQ3wf1eG72+EI= Subject key identifier: 10:14:78:6B:3F:FA:D1:5A:0E:B2:ED:DE:EA:EF:8B:11:49:09:41:1F Authority key identifier: 28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9 Certificate issuer: /CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9 Certificate serial: 3FD8675DE9DF8CB5F0ACBD72AAE05BE9AEB12965 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer Subject info access: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft Manifest number: 01F0 Signing time: Sun 27 Apr 2025 18:40:49 +0000 Manifest this update: Sun 27 Apr 2025 18:35:49 +0000 Manifest next update: Mon 28 Apr 2025 22:31:49 +0000 Files and hashes: 1: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl (hash: tWUk2mt9a09rZA7XrXKZDUQR6J7yt1AL1Luh9fdVvKY=) 2: 323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa (hash: uIquRLf1o2jdjOFSQRwCQgQeJopCGHlj6eVpPkoczCw=) 3: 323830343a383863343a3a2f34382d3438203d3e20323732373932.roa (hash: pMsNE9PZdxPUZQ1ee0l8kve5nW5PLVXShE79wF6S0BA=) 4: 323830343a383863343a3a2f33322d3332203d3e20323732373932.roa (hash: EtesB69AQ6y4O933L4QCUQfBeeDeqAjblxt7W0bJGXA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 22:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d8:67:5d:e9:df:8c:b5:f0:ac:bd:72:aa:e0:5b:e9:ae:b1:29:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9 Validity Not Before: Apr 27 18:35:49 2025 GMT Not After : Apr 28 22:31:49 2025 GMT Subject: CN=1014786B3FFAD15A0EB2EDDEEAEF8B114909411F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9d:48:31:59:4d:3c:f6:8a:6d:81:8d:78:01: eb:cd:28:3c:de:a3:a4:e3:a4:85:79:8c:fb:9a:09: ba:5c:d9:4f:f0:2d:80:19:ed:9f:07:b6:c1:f4:91: f6:c2:7b:fc:5e:6a:13:d3:13:66:87:74:0e:c4:4c: 87:9b:02:58:02:fe:cd:7f:0d:2f:3a:9f:a6:88:cd: be:52:1e:38:e0:9f:18:83:37:24:16:a7:7d:7e:fa: 86:79:44:2b:e0:f1:5f:86:86:24:44:c8:a7:ac:b8: 8c:e6:e2:d9:b4:cf:58:50:bb:3a:53:ab:e4:4d:8c: 5a:db:0d:82:ac:3f:2b:1b:5b:39:4e:1d:50:d1:82: df:d9:59:1a:88:d2:b5:50:57:39:39:9b:4c:14:89: 91:92:2c:75:be:c2:9f:3d:43:31:ba:de:4a:6b:af: b5:d1:64:b7:39:57:b8:c2:33:8e:0b:8c:8c:fb:8c: 50:7b:2e:34:1e:8b:a2:9d:a4:5b:e0:a6:43:fe:77: 4d:2a:39:58:90:5b:80:73:c7:8d:17:ac:aa:5e:6a: 1c:26:0a:2f:35:a6:a2:4c:13:e9:fc:c7:3f:de:5a: b5:a7:be:3a:d6:5c:ff:15:87:96:39:fb:26:52:83: 9a:14:f7:36:d0:e8:93:0e:b7:bf:28:7e:87:1a:04: eb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:14:78:6B:3F:FA:D1:5A:0E:B2:ED:DE:EA:EF:8B:11:49:09:41:1F X509v3 Authority Key Identifier: keyid:28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:48:69:6f:d5:ff:5c:75:ef:d3:5d:77:d3:2d:ce:e9:9e:37: 03:9d:b2:15:4e:87:8d:2d:34:9a:1f:fe:80:de:54:b2:f0:4e: 82:8c:13:6a:92:48:72:f6:8e:f4:f2:10:42:30:7d:20:3a:29: 87:e8:42:67:0f:18:c6:64:ca:5f:ac:26:18:1c:ff:75:3f:ba: ac:23:2c:0d:c1:d3:fc:14:25:31:45:aa:c6:11:1f:7c:0e:08: 1f:5d:48:de:61:3c:02:a6:db:67:0b:95:f4:45:43:9d:91:90: 6e:59:8d:95:5e:53:6b:82:3b:39:3f:fb:86:0a:c8:ac:cb:36: 93:03:69:f6:df:9c:20:89:5e:eb:79:23:54:54:ab:bd:60:60: e4:10:82:c2:07:82:74:81:c6:97:17:10:bd:6b:62:ea:cd:fb: 6a:01:94:f1:ff:06:47:d6:78:76:9e:5a:09:5a:49:dc:bb:c8: c9:2c:41:b6:1a:45:e4:a3:bd:ec:df:7f:66:80:be:26:e0:a0: 29:f4:31:0b:09:9d:53:d6:59:6e:1a:8c:af:b2:3f:e0:1e:ed: e3:b6:ed:22:77:88:41:f0:59:79:d6:67:20:02:61:0e:08:3b: 2a:8a:c4:1b:3d:2b:2c:51:ae:7e:ca:b1:4b:88:63:ee:6a:26: 5c:75:5f:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP9hnXenfjLXwrL1yquBb6a6xKWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwMEFGOEU2NzJGNjRFMDJDRUM1RDA0N0VERUIyQUQ4 NkI0N0VEOTAeFw0yNTA0MjcxODM1NDlaFw0yNTA0MjgyMjMxNDlaMDMxMTAvBgNV BAMTKDEwMTQ3ODZCM0ZGQUQxNUEwRUIyRURERUVBRUY4QjExNDkwOTQxMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvnUgxWU089optgY14AevNKDze o6TjpIV5jPuaCbpc2U/wLYAZ7Z8HtsH0kfbCe/xeahPTE2aHdA7ETIebAlgC/s1/ DS86n6aIzb5SHjjgnxiDNyQWp31++oZ5RCvg8V+GhiREyKesuIzm4tm0z1hQuzpT q+RNjFrbDYKsPysbWzlOHVDRgt/ZWRqI0rVQVzk5m0wUiZGSLHW+wp89QzG63kpr r7XRZLc5V7jCM44LjIz7jFB7LjQei6KdpFvgpkP+d00qOViQW4Bzx40XrKpeahwm Ci81pqJME+n8xz/eWrWnvjrWXP8Vh5Y5+yZSg5oU9zbQ6JMOt78ofocaBOs9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEBR4az/60VoOsu3e6u+LEUkJQR8wHwYDVR0j BBgwFoAUKACvjmcvZOAs7F0Eft6yrYa0ftkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVZtczhUV2ZYYkdSdlFrQlBkQnV0S0RtbzRNZlFydDhNNUJNUzZKd2hw Zm8vMS8yODAwQUY4RTY3MkY2NEUwMkNFQzVEMDQ3RURFQjJBRDg2QjQ3RUQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MDBBRjhFNjcyRjY0RTAy Q0VDNUQwNDdFREVCMkFEODZCNDdFRDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVZtczhUV2ZYYkdSdlFrQlBkQnV0S0RtbzRNZlFydDhNNUJNUzZKd2hwZm8vMS8y ODAwQUY4RTY3MkY2NEUwMkNFQzVEMDQ3RURFQjJBRDg2QjQ3RUQ5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHUhpb9X/XHXv01130y3O6Z43A52yFU6HjS00mh/+gN5UsvBOgowTapJIcvaO 9PIQQjB9IDoph+hCZw8YxmTKX6wmGBz/dT+6rCMsDcHT/BQlMUWqxhEffA4IH11I 3mE8AqbbZwuV9EVDnZGQblmNlV5Ta4I7OT/7hgrIrMs2kwNp9t+cIIle63kjVFSr vWBg5BCCwgeCdIHGlxcQvWti6s37agGU8f8GR9Z4dp5aCVpJ3LvIySxBthpF5KO9 7N9/ZoC+JuCgKfQxCwmdU9ZZbhqMr7I/4B7t47btIneIQfBZedZnIAJhDgg7KorE Gz0rLFGufsqxS4hj7momXHVfMA== -----END CERTIFICATE-----Generated at Mon Apr 28 09:21:02 2025 by rpki-client