$ rpki-client -vvf rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft File: 849A24446B9E3C80503AA50B35CDFE864B50F299.mft (raw, json) Hash identifier: 34uuv2CVjzr9zOEPWmwuBICDO7qkMp7sHfQkvam68cg= Subject key identifier: F8:1C:86:90:A7:6A:2F:0E:D8:AD:E2:DE:D2:54:33:EC:93:FA:94:25 Authority key identifier: 84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99 Certificate issuer: /CN=849A24446B9E3C80503AA50B35CDFE864B50F299 Certificate serial: 08CED5021B5287B1F6EB46560278C44C2B355B0A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer Subject info access: rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft Manifest number: 0215 Signing time: Tue 06 May 2025 18:29:54 +0000 Manifest this update: Tue 06 May 2025 18:24:54 +0000 Manifest next update: Wed 07 May 2025 18:59:54 +0000 Files and hashes: 1: 849A24446B9E3C80503AA50B35CDFE864B50F299.crl (hash: 8rh8S91OrTgRCqpdcva2xE7dNcthgvsj49QQaosIuY0=) 2: 3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa (hash: EW0bF1u4bur/zPzPb4/jkaTrzF2NSPUcuwmp/N5eHog=) 3: 3133382e3138362e3137322e302f32322d3332203d3e20323633383737.roa (hash: F+6Q3rR9mW/bBvV3KMqzfE04ygqDKYoVUaMdkKLEkhA=) 4: 323830343a323731633a3a2f33322d313238203d3e20323633383737.roa (hash: 9czPyLHsQNqWtZD0T0xfr5722IdYCGLe69IPEwzSaLE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 07 May 2025 18:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ce:d5:02:1b:52:87:b1:f6:eb:46:56:02:78:c4:4c:2b:35:5b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849A24446B9E3C80503AA50B35CDFE864B50F299 Validity Not Before: May 6 18:24:54 2025 GMT Not After : May 7 18:59:54 2025 GMT Subject: CN=F81C8690A76A2F0ED8ADE2DED25433EC93FA9425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a8:bd:2a:af:22:4a:1a:01:ff:00:e7:c7:93: 0a:96:93:0b:31:69:d8:02:f4:ad:1f:7d:78:07:35: ee:13:dc:94:ef:5f:23:8e:5c:52:b7:24:2a:cc:54: 6c:8e:8b:9d:c9:fa:a4:cc:ad:9f:d2:28:46:52:10: ee:4c:fb:87:c0:fc:15:8e:2d:3d:68:f8:08:b5:27: e5:9b:fb:39:ad:53:13:ab:a5:2f:9b:4c:d9:19:ca: 98:9b:29:0f:c5:33:60:79:64:c1:2a:1b:90:d2:6d: 22:f5:44:30:b0:8f:af:46:4f:67:02:f7:e3:e9:a5: 8b:ff:c8:8f:44:53:c9:23:9e:3f:ce:b4:ac:97:12: f6:f0:c2:c7:04:fe:5e:d5:c3:ce:62:0e:46:bd:9e: a5:4e:1d:d9:03:4a:7b:8d:0c:1c:05:5e:d1:90:3d: f5:bc:4b:8f:77:5c:0e:c5:03:a7:9c:5a:52:19:9c: ad:4a:ab:5c:40:2d:b4:65:17:5c:ec:a5:42:d5:09: 36:a6:b8:0d:64:d7:fc:06:8b:13:42:e5:ab:aa:90: 93:36:4f:49:e9:b2:e2:20:dc:e6:ed:9b:74:24:a4: 81:f9:9e:54:61:42:2a:45:05:66:cb:35:89:d3:cf: 5c:c0:aa:42:18:3a:42:5a:b1:9d:bc:a4:74:3f:05: bd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1C:86:90:A7:6A:2F:0E:D8:AD:E2:DE:D2:54:33:EC:93:FA:94:25 X509v3 Authority Key Identifier: keyid:84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:5c:28:e4:79:fb:bd:81:ca:34:3d:c5:e4:28:4a:10:a5:90: ba:01:98:27:aa:f2:b7:d4:11:4e:ee:88:47:9b:24:19:c8:a1: 36:9d:4e:aa:2e:44:da:a3:19:b2:05:18:07:f8:fe:7e:8c:22: c0:e6:82:16:6c:f0:08:93:a5:0d:0d:ab:81:04:d4:9b:0d:12: 62:f5:be:04:0f:45:1c:3f:f7:3a:33:f0:0c:e7:b1:a0:c5:3f: 96:ee:b6:96:81:55:78:81:ca:8c:83:67:3d:74:88:07:af:80: e9:56:15:58:1c:b9:06:ba:b7:a1:39:6e:86:4a:9a:57:87:14: 9b:55:13:b9:38:15:42:2a:a8:43:21:1c:c2:c7:99:93:9a:96: c3:8a:8e:2d:f8:4f:14:4f:63:20:f1:b6:65:f8:e4:8a:df:bc: b4:c7:e3:fa:12:ce:3c:f9:77:03:53:b0:99:e1:a3:8b:bc:16: 99:bc:09:c8:76:de:92:50:7c:33:75:2c:3f:c4:19:27:9f:1b: 09:46:ad:f8:37:fd:96:92:89:09:28:8a:c4:7e:e7:3d:0a:d3: 34:8d:d2:ee:33:06:ef:e8:a9:58:cd:55:af:b2:f9:95:2b:2f: fc:75:b9:cd:77:59:04:88:5a:05:ff:7f:5b:e1:8e:35:c4:19: c1:06:ff:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCM7VAhtSh7H260ZWAnjETCs1WwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5QTI0NDQ2QjlFM0M4MDUwM0FBNTBCMzVDREZFODY0 QjUwRjI5OTAeFw0yNTA1MDYxODI0NTRaFw0yNTA1MDcxODU5NTRaMDMxMTAvBgNV BAMTKEY4MUM4NjkwQTc2QTJGMEVEOEFERTJERUQyNTQzM0VDOTNGQTk0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKqL0qryJKGgH/AOfHkwqWkwsx adgC9K0ffXgHNe4T3JTvXyOOXFK3JCrMVGyOi53J+qTMrZ/SKEZSEO5M+4fA/BWO LT1o+Ai1J+Wb+zmtUxOrpS+bTNkZypibKQ/FM2B5ZMEqG5DSbSL1RDCwj69GT2cC 9+PppYv/yI9EU8kjnj/OtKyXEvbwwscE/l7Vw85iDka9nqVOHdkDSnuNDBwFXtGQ PfW8S493XA7FA6ecWlIZnK1Kq1xALbRlF1zspULVCTamuA1k1/wGixNC5auqkJM2 T0npsuIg3Obtm3QkpIH5nlRhQipFBWbLNYnTz1zAqkIYOkJasZ28pHQ/Bb1jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+ByGkKdqLw7YreLe0lQz7JP6lCUwHwYDVR0j BBgwFoAUhJokRGuePIBQOqULNc3+hktQ8pkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHVEZXQzZmthUGhiMUY1dEdmMTg4dXJZOUJETmt4b0RpSkRnVThCQTFy YzkvMS84NDlBMjQ0NDZCOUUzQzgwNTAzQUE1MEIzNUNERkU4NjRCNTBGMjk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0OUEyNDQ0NkI5RTNDODA1 MDNBQTUwQjM1Q0RGRTg2NEI1MEYyOTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHVEZXQzZmthUGhiMUY1dEdmMTg4dXJZOUJETmt4b0RpSkRnVThCQTFyYzkvMS84 NDlBMjQ0NDZCOUUzQzgwNTAzQUE1MEIzNUNERkU4NjRCNTBGMjk5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmFwo5Hn7vYHKND3F5ChKEKWQugGYJ6ryt9QRTu6IR5skGcihNp1Oqi5E2qMZ sgUYB/j+fowiwOaCFmzwCJOlDQ2rgQTUmw0SYvW+BA9FHD/3OjPwDOexoMU/lu62 loFVeIHKjINnPXSIB6+A6VYVWBy5Brq3oTluhkqaV4cUm1UTuTgVQiqoQyEcwseZ k5qWw4qOLfhPFE9jIPG2Zfjkit+8tMfj+hLOPPl3A1OwmeGji7wWmbwJyHbeklB8 M3UsP8QZJ58bCUat+Df9lpKJCSiKxH7nPQrTNI3S7jMG7+ipWM1Vr7L5lSsv/HW5 zXdZBIhaBf9/W+GONcQZwQb/3g== -----END CERTIFICATE-----Generated at Tue May 6 22:15:11 2025 by rpki-client