$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft File: AFF600EA088C0C0C3160D75A952506A94913C8A8.mft (raw, json) Hash identifier: hIhKer+6SzKIzQlht5i3gwEH/4xHOC9eZ4XCqUKsnEU= Subject key identifier: BB:13:72:48:AE:28:88:2A:14:B4:EF:D3:54:9E:04:02:79:7D:87:16 Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 Certificate issuer: /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Certificate serial: 26E9EA1F03007393CC885349000DE516DB0CFB90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft Manifest number: 0212 Signing time: Sun 04 May 2025 05:20:00 +0000 Manifest this update: Sun 04 May 2025 05:15:00 +0000 Manifest next update: Mon 05 May 2025 05:49:00 +0000 Files and hashes: 1: 3138372e3131302e3137352e302f32342d3234203d3e203533313138.roa (hash: QtcVu1XQAYUwQTPLuTFKN1FgEEgoxsLavRGLPUw9mRs=) 2: 3137372e31322e3132332e302f32342d3234203d3e203533313138.roa (hash: Kq+MibEAzFGTBoCjjqLDshi/5eMUdsSQZ+YXEELUOww=) 3: 3138372e3131302e3137342e302f32342d3234203d3e203533313138.roa (hash: w84Anik40z83DFX3yj+lx1Zs+2i9lRNW4FQ+f7ZHMcc=) 4: 3137372e31322e39362e302f32302d3230203d3e203533313138.roa (hash: h2Oqn3qxt0UufdhIxmkJFNRD7NQUg5lP6kk9tXGbGJ4=) 5: 3137372e31322e3132322e302f32342d3234203d3e203533313138.roa (hash: FPOIK0HoDwaAUy65NC3MdxlbC9Je6s9SlFjedqzplPg=) 6: AFF600EA088C0C0C3160D75A952506A94913C8A8.crl (hash: mXKLROrEpbxAxn7AH9xJ7UpaYKdm5CvzkoqgFmGb/qk=) 7: 3137372e31322e3131322e302f32302d3230203d3e203533313138.roa (hash: jN25SYmZKfd1sPcHySVfXCIHkpd4KxWXs3ZwAiKGYuw=) 8: 3138372e3131302e3136302e302f32302d3230203d3e203533313138.roa (hash: e1vivfQZj0tcl6IkDpsHaEBQIUUaJo05ko9IXkK3Vy4=) 9: 323830343a3266343a3a2f33322d3332203d3e203533313138.roa (hash: FLOV3J4ELHykDuxEoc8TQNldBLQr0uQtj2VTGfj6c0Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 04 May 2025 23:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e9:ea:1f:03:00:73:93:cc:88:53:49:00:0d:e5:16:db:0c:fb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Validity Not Before: May 4 05:15:00 2025 GMT Not After : May 5 05:49:00 2025 GMT Subject: CN=BB137248AE28882A14B4EFD3549E0402797D8716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:57:45:e6:ca:eb:59:ae:c1:1b:54:9a:70: 98:7a:1c:cf:fb:b1:fb:ad:19:12:1d:d6:a3:68:72: 59:8c:38:df:1c:81:c2:56:c8:3d:06:9a:29:a3:e1: c9:5a:35:c4:d6:03:c3:5b:3f:f6:77:e7:1b:32:e4: 35:93:c1:ea:91:f3:1e:19:7a:a7:c1:87:f6:a7:df: 94:bc:2d:84:42:35:6c:4b:68:1a:b7:47:b2:02:2b: 34:07:ed:b1:e9:9d:e8:27:12:fd:8f:cb:cc:39:88: 80:df:c5:73:af:29:1e:c1:64:a9:5b:00:b4:fc:31: 3c:ad:50:fc:fe:a7:2d:33:c7:6b:d9:b8:4c:c5:8a: 46:a7:c2:64:20:9e:4e:1e:11:19:7d:2b:72:37:e2: 9e:d3:d0:8f:8c:a2:d2:e1:80:f8:b2:19:37:ca:c7: 93:25:9e:60:ae:76:f6:6d:55:66:10:8f:b6:10:e9: 5e:30:84:08:28:aa:89:82:39:05:b9:99:11:c1:a9: d4:5e:76:6a:98:44:5d:a4:64:d1:6d:8e:22:75:63: a3:36:d1:02:f3:a9:01:fc:39:fb:3d:b9:9a:56:86: e2:58:a8:86:d3:75:5b:8e:ff:f8:ba:cf:2d:53:b0: f9:db:b8:dd:d1:9b:2b:e9:db:c0:cc:f1:f6:63:36: 1e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:13:72:48:AE:28:88:2A:14:B4:EF:D3:54:9E:04:02:79:7D:87:16 X509v3 Authority Key Identifier: keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:81:e3:3b:3e:74:b7:68:49:ae:9b:a0:8d:ad:bb:f4:de:d9: a2:78:c4:19:4c:31:52:76:9a:dc:9b:a6:e5:ac:45:4b:1f:34: bd:7a:ad:11:e9:74:39:59:a2:22:ef:68:09:8b:7e:d7:c9:27: b6:25:e1:a2:47:e3:f2:d6:9a:bc:52:02:f3:c2:64:f9:c2:54: ec:d4:23:e8:7d:4b:34:55:7c:53:4c:c4:6e:58:cc:6f:a0:43: 80:93:3f:67:be:55:ab:0f:2b:2d:be:26:c7:26:ab:09:cc:82: 2e:da:0d:c1:3b:4a:a9:e8:35:a4:8b:f1:d7:c7:37:63:bd:41: 79:1e:6c:a1:b7:51:e5:5e:7b:65:ad:98:7e:0f:db:8d:33:ed: d2:a7:66:ed:0e:df:02:a0:66:75:6a:7d:a3:2d:e0:ae:14:20: c3:38:52:6a:69:8b:24:07:91:51:5e:fa:3c:af:21:2d:98:ab: ee:68:cb:34:93:3e:57:7e:0d:30:31:7c:12:70:2c:7f:13:10: ef:11:8c:6a:22:4f:f8:26:b5:b6:a7:4b:bd:59:23:75:be:e9: a7:da:99:2f:16:a0:c2:56:e7:48:e3:0c:24:21:60:60:07:08: 64:d4:d9:57:7c:fc:10:1f:cc:27:af:b8:03:5e:76:74:d4:bf: ce:bd:f3:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJunqHwMAc5PMiFNJAA3lFtsM+5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNjAwRUEwODhDMEMwQzMxNjBENzVBOTUyNTA2QTk0 OTEzQzhBODAeFw0yNTA1MDQwNTE1MDBaFw0yNTA1MDUwNTQ5MDBaMDMxMTAvBgNV BAMTKEJCMTM3MjQ4QUUyODg4MkExNEI0RUZEMzU0OUUwNDAyNzk3RDg3MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI01dF5srrWa7BG1SacJh6HM/7 sfutGRId1qNoclmMON8cgcJWyD0Gmimj4claNcTWA8NbP/Z35xsy5DWTweqR8x4Z eqfBh/an35S8LYRCNWxLaBq3R7ICKzQH7bHpnegnEv2Py8w5iIDfxXOvKR7BZKlb ALT8MTytUPz+py0zx2vZuEzFikanwmQgnk4eERl9K3I34p7T0I+MotLhgPiyGTfK x5MlnmCudvZtVWYQj7YQ6V4whAgoqomCOQW5mRHBqdRedmqYRF2kZNFtjiJ1Y6M2 0QLzqQH8Ofs9uZpWhuJYqIbTdVuO//i6zy1TsPnbuN3Rmyvp28DM8fZjNh7jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuxNySK4oiCoUtO/TVJ4EAnl9hxYwHwYDVR0j BBgwFoAUr/YA6giMDAwxYNdalSUGqUkTyKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ Y2ovMS9BRkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjYwMEVBMDg4QzBDMEMz MTYwRDc1QTk1MjUwNkE5NDkxM0M4QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQY2ovMS9B RkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR4HjOz50t2hJrpugja279N7ZonjEGUwxUnaa3Jum5axFSx80vXqtEel0OVmi Iu9oCYt+18kntiXhokfj8taavFIC88Jk+cJU7NQj6H1LNFV8U0zEbljMb6BDgJM/ Z75Vqw8rLb4mxyarCcyCLtoNwTtKqeg1pIvx18c3Y71BeR5sobdR5V57Za2Yfg/b jTPt0qdm7Q7fAqBmdWp9oy3grhQgwzhSammLJAeRUV76PK8hLZir7mjLNJM+V34N MDF8EnAsfxMQ7xGMaiJP+Ca1tqdLvVkjdb7pp9qZLxagwlbnSOMMJCFgYAcIZNTZ V3z8EB/MJ6+4A152dNS/zr3z0g== -----END CERTIFICATE-----Generated at Sun May 4 09:06:01 2025 by rpki-client