$ rpki-client -vvf rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.mft File: E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.mft (raw, json) Hash identifier: P23uUQ/wTTk3ZrUw7gJq6LgnAMxhSak5SwQiYx7g3J4= Subject key identifier: 95:D3:BC:A3:20:0D:DD:E3:02:EE:3A:3A:73:BC:D5:96:EA:2E:A4:6F Authority key identifier: E5:2C:FD:D7:9A:BB:4B:9B:26:A8:AA:C3:84:6C:96:32:6A:03:EE:0E Certificate issuer: /CN=E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E Certificate serial: 5B1544F3402195EEC355CFE4B431D236414FA3C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.cer Subject info access: rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.mft Manifest number: 7A Signing time: Thu 01 May 2025 11:17:59 +0000 Manifest this update: Thu 01 May 2025 11:12:59 +0000 Manifest next update: Fri 02 May 2025 14:05:59 +0000 Files and hashes: 1: E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.crl (hash: HWUQLwaUErpYxbcvbr3jLeadRj6GAeFMNaqsz0z+6Rg=) 2: 34352e3137302e3137362e302f32322d3332203d3e20323639353036.roa (hash: iP0MiFNZ7MB4k+z5LnbGpHmdyCV10L4G21hPIzqxZZE=) 3: 34352e3138372e3232342e302f32322d3332203d3e20323639353036.roa (hash: QiNgulMEBvrgNySX89zkaKlw5CgByrNT8KCwh/GqcCA=) 4: 323830343a363561383a3a2f33322d313238203d3e20323639353036.roa (hash: jwmx9tY7aXmGV+BMQW0uL6eUDSmG/T2zxZnlXI4fwOU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.crl rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 14:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:15:44:f3:40:21:95:ee:c3:55:cf:e4:b4:31:d2:36:41:4f:a3:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E Validity Not Before: May 1 11:12:59 2025 GMT Not After : May 2 14:05:59 2025 GMT Subject: CN=95D3BCA3200DDDE302EE3A3A73BCD596EA2EA46F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:36:51:1f:3c:05:a7:e9:89:ce:1a:a4:c5:6c: dd:68:b9:4b:a0:59:16:ef:33:ee:b8:7b:37:7a:32: b8:76:47:6a:e5:23:c5:33:ad:28:91:4d:9a:cf:c8: f6:70:69:75:c2:03:79:27:d4:da:e4:66:b5:0b:2d: c2:f2:36:29:1d:2f:f9:3c:79:45:c2:53:96:50:bd: 5f:57:c0:2d:bf:9c:55:a6:d5:c8:51:6f:41:f0:33: 97:ab:ed:28:25:f2:f9:97:ac:f5:3b:dc:9d:9a:2e: 5b:e5:c3:6d:54:9d:46:66:90:c0:10:04:3d:58:f1: 02:d3:3b:e8:b2:de:e0:0f:f5:e0:62:14:4d:9c:2c: f0:63:a7:e3:29:a6:0e:1a:de:5f:f8:ff:28:7c:09: c9:b8:73:81:9e:0d:a1:d4:c0:4f:90:68:a8:b5:db: 39:13:87:d3:8d:ce:fe:1e:c2:ea:c2:b6:43:22:c9: fd:ad:e8:d8:f2:6e:2d:f5:2d:cb:07:76:9c:f0:d5: e7:bc:47:97:47:d2:5a:cb:75:5c:71:b2:8c:94:aa: 44:bc:45:af:cb:aa:8d:9a:6e:e6:f7:6b:ac:dc:6e: 8a:2d:a9:22:80:76:fe:7e:c2:22:a0:c6:c3:39:c2: 43:8f:a8:87:0d:d6:f6:98:6f:10:38:3b:1e:eb:bf: 48:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D3:BC:A3:20:0D:DD:E3:02:EE:3A:3A:73:BC:D5:96:EA:2E:A4:6F X509v3 Authority Key Identifier: keyid:E5:2C:FD:D7:9A:BB:4B:9B:26:A8:AA:C3:84:6C:96:32:6A:03:EE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e5:69:36:73:52:8a:1d:76:31:62:2b:29:86:c2:1c:ec:02: 19:50:ee:eb:18:10:e1:47:53:06:52:56:f5:64:b3:84:8b:7a: 40:f2:96:9f:62:d3:ef:7d:c7:db:dc:18:5f:58:24:9e:fc:40: 49:29:74:57:ad:83:d3:0b:c5:cb:58:ae:99:b8:0f:11:f2:8f: 5c:7c:ec:7d:b0:3a:a6:4d:d0:ff:53:77:4e:38:2d:33:b2:52: f5:db:bb:9a:3d:01:46:aa:c5:0f:26:97:1b:24:ea:51:e0:de: 9f:c3:c2:de:91:d8:8b:d9:d4:87:50:88:6b:73:c8:44:cf:06: 61:59:32:98:a5:c9:83:95:50:0c:c7:5c:59:31:49:a3:30:1a: 64:2b:7f:47:41:03:4e:4f:f9:c6:a2:a0:e1:7c:c6:3d:d2:50: c1:cb:a6:53:a6:db:0a:be:2b:83:ec:2f:31:f0:3b:15:f3:68: 17:dc:17:29:d3:e8:5c:6f:eb:8d:63:5b:ca:3a:dd:e1:63:d0: ed:42:84:1d:a8:de:01:a3:b2:c8:cc:4f:eb:70:83:9c:c7:ce: d1:44:0c:06:55:bf:8c:16:48:e7:b6:38:fe:b5:98:36:8a:bc: 99:10:3b:e0:15:4b:49:e5:0f:03:45:b2:08:3b:c7:5f:83:9e: fc:62:c8:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWxVE80Ahle7DVc/ktDHSNkFPo8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUyQ0ZERDc5QUJCNEI5QjI2QThBQUMzODQ2Qzk2MzI2 QTAzRUUwRTAeFw0yNTA1MDExMTEyNTlaFw0yNTA1MDIxNDA1NTlaMDMxMTAvBgNV BAMTKDk1RDNCQ0EzMjAwRERERTMwMkVFM0EzQTczQkNENTk2RUEyRUE0NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLNlEfPAWn6YnOGqTFbN1ouUug WRbvM+64ezd6Mrh2R2rlI8UzrSiRTZrPyPZwaXXCA3kn1NrkZrULLcLyNikdL/k8 eUXCU5ZQvV9XwC2/nFWm1chRb0HwM5er7Sgl8vmXrPU73J2aLlvlw21UnUZmkMAQ BD1Y8QLTO+iy3uAP9eBiFE2cLPBjp+Mppg4a3l/4/yh8Ccm4c4GeDaHUwE+QaKi1 2zkTh9ONzv4ewurCtkMiyf2t6Njybi31LcsHdpzw1ee8R5dH0lrLdVxxsoyUqkS8 Ra/Lqo2abub3a6zcbootqSKAdv5+wiKgxsM5wkOPqIcN1vaYbxA4Ox7rv0inAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUldO8oyAN3eMC7jo6c7zVluoupG8wHwYDVR0j BBgwFoAU5Sz915q7S5smqKrDhGyWMmoD7g4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEg1dG1kRmVDVmJ0UzQxR2E4bk5ucncxNVRyQU5vRDZrWFFUZThxNDJK TEsvMC9FNTJDRkRENzlBQkI0QjlCMjZBOEFBQzM4NDZDOTYzMjZBMDNFRTBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1MkNGREQ3OUFCQjRCOUIy NkE4QUFDMzg0NkM5NjMyNkEwM0VFMEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OEg1dG1kRmVDVmJ0UzQxR2E4bk5ucncxNVRyQU5vRDZrWFFUZThxNDJKTEsvMC9F NTJDRkRENzlBQkI0QjlCMjZBOEFBQzM4NDZDOTYzMjZBMDNFRTBFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApuVpNnNSih12MWIrKYbCHOwCGVDu6xgQ4UdTBlJW9WSzhIt6QPKWn2LT733H 29wYX1gknvxASSl0V62D0wvFy1iumbgPEfKPXHzsfbA6pk3Q/1N3TjgtM7JS9du7 mj0BRqrFDyaXGyTqUeDen8PC3pHYi9nUh1CIa3PIRM8GYVkymKXJg5VQDMdcWTFJ ozAaZCt/R0EDTk/5xqKg4XzGPdJQwcumU6bbCr4rg+wvMfA7FfNoF9wXKdPoXG/r jWNbyjrd4WPQ7UKEHajeAaOyyMxP63CDnMfO0UQMBlW/jBZI57Y4/rWYNoq8mRA7 4BVLSeUPA0WyCDvHX4Oe/GLIBQ== -----END CERTIFICATE-----Generated at Thu May 1 18:00:01 2025 by rpki-client