$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft File: C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft (raw, json) Hash identifier: lzYvIeagnpxtT00sfjcMXymlrqsB26oQb9qPea0veyo= Subject key identifier: 28:24:F3:7F:39:8B:C5:A9:BB:1E:0C:9C:83:38:2E:F8:C7:22:41:C6 Authority key identifier: C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7 Certificate issuer: /CN=C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7 Certificate serial: 3D6F1006217BDFC9431D8D407C855B5E9CDBD2E8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer Subject info access: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft Manifest number: 016E Signing time: Tue 29 Apr 2025 23:46:08 +0000 Manifest this update: Tue 29 Apr 2025 23:41:08 +0000 Manifest next update: Thu 01 May 2025 03:30:08 +0000 Files and hashes: 1: 3138392e3131332e3132382e302f32302d3234203d3e203532363632.roa (hash: q1DjdNr03vq3gtIeiumSp0kWWvZaHwOX0bMiVqb891s=) 2: C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.crl (hash: rFqC6m7+946iGrG26eOASkgJywNkE/gVkbM6g3IRaKw=) 3: 323830343a333362303a3a2f33322d3438203d3e203532363632.roa (hash: dKRcdpYQwGN4g/8SNRrmTcSy423QAHcOYImLbXn+XO4=) 4: 3137372e36372e32342e302f32322d3234203d3e203532363632.roa (hash: CaJ2YqX6hYjPow+L/+Ed8XjKqJ1iY+o5jqj7La4tRTg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.crl rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 May 2025 03:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6f:10:06:21:7b:df:c9:43:1d:8d:40:7c:85:5b:5e:9c:db:d2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7 Validity Not Before: Apr 29 23:41:08 2025 GMT Not After : May 1 03:30:08 2025 GMT Subject: CN=2824F37F398BC5A9BB1E0C9C83382EF8C72241C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:be:aa:c3:1e:59:90:70:84:3a:0c:aa:d7:d9: cf:2f:89:90:0c:cb:61:0b:02:ca:1d:d5:8e:14:b8: ee:0a:e1:ed:74:b6:8d:59:f1:12:9c:93:a5:fb:d6: 8c:37:8d:d0:3a:2b:f1:80:24:34:aa:68:ae:d9:e2: 9e:26:d4:d0:e4:b0:49:27:6d:a4:36:99:e2:32:35: e9:3d:d1:e2:13:d0:97:8e:98:2f:75:d5:22:17:82: 11:ba:6e:21:d7:b5:d1:2e:ae:11:0d:f1:58:99:08: 6e:d3:75:e7:9b:fc:a7:2c:34:ef:02:64:93:6b:84: b5:06:f3:36:45:30:b2:b8:29:c6:91:f5:0a:68:c1: d8:b9:64:9f:f2:e0:13:8c:ed:10:fc:c6:da:a1:0b: ae:9b:f4:9a:88:b9:fa:9f:e7:99:31:dd:a2:47:e0: 17:8a:c0:7c:0b:b1:80:a0:76:c0:1c:25:48:d3:1b: 91:ff:37:1b:de:a3:52:ac:d9:05:4d:b5:2f:54:3a: ea:23:13:b3:ba:4c:07:6c:03:c3:69:c4:05:d5:e2: 24:27:99:3b:db:2c:33:4b:2a:56:1d:38:20:0a:5f: 3e:80:be:61:ff:6f:e8:87:85:ad:e2:f2:4c:88:55: a6:89:65:a5:c4:53:8a:f1:da:da:67:3d:9e:80:0d: e1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:24:F3:7F:39:8B:C5:A9:BB:1E:0C:9C:83:38:2E:F8:C7:22:41:C6 X509v3 Authority Key Identifier: keyid:C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8f:65:e5:fd:42:6d:a2:7d:6d:59:01:30:95:d6:66:29:a7: a0:15:ba:10:55:d4:db:c2:e8:88:af:e3:b4:29:98:99:2e:a9: 83:c7:f2:1d:52:ad:f3:ae:98:dc:d8:8d:b7:ad:1c:fc:fc:06: e6:a9:28:3f:4e:38:18:24:35:49:14:42:ea:8b:55:e1:cb:d7: 55:c3:32:33:07:6c:81:65:a7:e2:50:58:98:c8:c2:bc:5d:31: 8b:a8:13:38:05:e2:c9:3e:3f:2b:2e:34:a8:2d:71:c8:b5:c8: 77:f3:4c:0b:70:d9:b1:ca:1d:0a:03:e8:67:f5:70:c1:01:4c: b1:9b:26:ba:97:ee:99:c4:68:ea:ed:5a:ba:49:ca:dc:31:67: 44:36:8b:1d:01:41:5c:44:02:f2:86:72:ae:74:65:9f:e5:3a: 9c:3c:37:ad:19:04:24:e3:e1:cb:7c:dd:fa:05:d5:3e:b9:18: 1e:0e:ba:fb:25:78:66:2f:c5:b3:00:ea:cc:65:b9:48:f5:e9: 81:8f:59:2f:0e:ad:8b:a0:cb:ac:db:44:34:38:2a:75:d1:49: 11:ae:a6:1a:0e:cc:fe:c2:1c:9e:be:19:0d:57:c6:e7:bd:2a: 12:62:ce:c3:f2:cd:9a:68:23:29:bb:01:73:5c:39:16:11:13: 59:aa:c1:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPW8QBiF738lDHY1AfIVbXpzb0ugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDMjk1RTZBNTgzRUU1QUZFRDY4OEJGNjdGQjVENjJE Q0UxNkZCNzAeFw0yNTA0MjkyMzQxMDhaFw0yNTA1MDEwMzMwMDhaMDMxMTAvBgNV BAMTKDI4MjRGMzdGMzk4QkM1QTlCQjFFMEM5QzgzMzgyRUY4QzcyMjQxQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkvqrDHlmQcIQ6DKrX2c8viZAM y2ELAsod1Y4UuO4K4e10to1Z8RKck6X71ow3jdA6K/GAJDSqaK7Z4p4m1NDksEkn baQ2meIyNek90eIT0JeOmC911SIXghG6biHXtdEurhEN8ViZCG7Tdeeb/KcsNO8C ZJNrhLUG8zZFMLK4KcaR9Qpowdi5ZJ/y4BOM7RD8xtqhC66b9JqIufqf55kx3aJH 4BeKwHwLsYCgdsAcJUjTG5H/Nxveo1Ks2QVNtS9UOuojE7O6TAdsA8NpxAXV4iQn mTvbLDNLKlYdOCAKXz6AvmH/b+iHha3i8kyIVaaJZaXEU4rx2tpnPZ6ADeHJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKCTzfzmLxam7Hgycgzgu+MciQcYwHwYDVR0j BBgwFoAUxcKV5qWD7lr+1oi/Z/tdYtzhb7cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWo4Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tD RFQvMC9DNUMyOTVFNkE1ODNFRTVBRkVENjg4QkY2N0ZCNUQ2MkRDRTE2RkI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1QzI5NUU2QTU4M0VFNUFG RUQ2ODhCRjY3RkI1RDYyRENFMTZGQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWo4Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tDRFQvMC9D NUMyOTVFNkE1ODNFRTVBRkVENjg4QkY2N0ZCNUQ2MkRDRTE2RkI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnY9l5f1CbaJ9bVkBMJXWZimnoBW6EFXU28LoiK/jtCmYmS6pg8fyHVKt866Y 3NiNt60c/PwG5qkoP044GCQ1SRRC6otV4cvXVcMyMwdsgWWn4lBYmMjCvF0xi6gT OAXiyT4/Ky40qC1xyLXId/NMC3DZscodCgPoZ/VwwQFMsZsmupfumcRo6u1auknK 3DFnRDaLHQFBXEQC8oZyrnRln+U6nDw3rRkEJOPhy3zd+gXVPrkYHg66+yV4Zi/F swDqzGW5SPXpgY9ZLw6ti6DLrNtENDgqddFJEa6mGg7M/sIcnr4ZDVfG570qEmLO w/LNmmgjKbsBc1w5FhETWarBwQ== -----END CERTIFICATE-----Generated at Wed Apr 30 15:46:29 2025 by rpki-client