$ rpki-client -vvf rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/99B8055C0E1571E458C85ADC0655D744D588871C.mft File: 99B8055C0E1571E458C85ADC0655D744D588871C.mft (raw, json) Hash identifier: BXbR1znbFHjnudVExPnHH/kIHJImvD7WGbws6RDe82k= Subject key identifier: 87:99:20:6B:0F:E5:B3:8E:06:B2:43:E8:11:AD:71:56:05:6B:F0:E7 Authority key identifier: 99:B8:05:5C:0E:15:71:E4:58:C8:5A:DC:06:55:D7:44:D5:88:87:1C Certificate issuer: /CN=99B8055C0E1571E458C85ADC0655D744D588871C Certificate serial: 2608BFC550B8AA4C9F1897A97920DFB47EDAA3FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B8055C0E1571E458C85ADC0655D744D588871C.cer Subject info access: rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/99B8055C0E1571E458C85ADC0655D744D588871C.mft Manifest number: 4D Signing time: Thu 01 May 2025 22:11:12 +0000 Manifest this update: Thu 01 May 2025 22:06:12 +0000 Manifest next update: Sat 03 May 2025 00:42:12 +0000 Files and hashes: 1: 323830343a316536633a3a2f33322d3634203d3e20323634343238.roa (hash: Sc7JkD6PSXN0CSl1FtQDy56h6LtgSLijV+kLM99/Ywg=) 2: 99B8055C0E1571E458C85ADC0655D744D588871C.crl (hash: LKma5KExoMaFtiBa3XIyDqYe7OcC2ye5o8hGDUDZ09U=) 3: 3133312e3232312e3132342e302f32322d3332203d3e20323634343238.roa (hash: ZWxoSm2pusD5hYxIA2zPU8trtVh10UfiQduWpd9s1wo=) 4: 3134332e302e342e302f32322d3332203d3e20323634343238.roa (hash: bxnR3mV3SvcoFfyzCyCLrnUeCoaKcgDgjUZwBVZRfRE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/99B8055C0E1571E458C85ADC0655D744D588871C.crl rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/99B8055C0E1571E458C85ADC0655D744D588871C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B8055C0E1571E458C85ADC0655D744D588871C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 May 2025 00:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:08:bf:c5:50:b8:aa:4c:9f:18:97:a9:79:20:df:b4:7e:da:a3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99B8055C0E1571E458C85ADC0655D744D588871C Validity Not Before: May 1 22:06:12 2025 GMT Not After : May 3 00:42:12 2025 GMT Subject: CN=8799206B0FE5B38E06B243E811AD7156056BF0E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:aa:58:9d:d8:52:f4:c6:be:1f:8c:f3:05:66: c0:97:58:e1:2e:76:ce:eb:51:a7:c0:91:b9:02:f4: 8c:5f:74:3c:a8:72:1e:27:c1:7f:6c:59:c0:ef:1e: 1f:45:b3:c0:15:84:f5:a5:70:e9:7f:c5:9b:de:60: a8:74:65:d0:2f:7d:ad:73:a8:ee:dc:e1:cd:11:b3: f1:d0:d3:53:0f:47:b5:8b:b3:04:a6:53:48:62:46: 53:f7:f4:1a:9d:61:ac:49:ad:f1:c9:42:c5:70:50: 5d:9b:c3:43:7d:0f:4b:09:85:f0:c1:22:f7:5c:31: 65:58:30:44:48:29:8e:cd:94:ed:82:35:49:8f:91: 6a:14:3d:64:b4:d3:2f:d5:5d:55:97:60:42:96:03: a8:c3:9b:81:07:d2:ec:92:b4:9e:aa:7f:74:02:a9: 32:b4:b1:d9:d4:ee:85:e1:c2:83:01:6f:67:b6:fc: 81:da:d3:19:ae:c5:85:b6:c9:2c:ac:d2:39:ab:3c: fd:96:47:e3:99:5a:b0:3b:55:80:30:86:90:6e:8b: 6c:2f:04:fa:b4:6a:f3:18:6e:3b:c4:50:c4:77:01: 10:4e:e8:04:57:03:b3:28:22:3d:fd:34:7e:36:04: 02:05:1f:bd:b0:1f:de:96:0c:68:39:3b:2a:81:60: 61:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:99:20:6B:0F:E5:B3:8E:06:B2:43:E8:11:AD:71:56:05:6B:F0:E7 X509v3 Authority Key Identifier: keyid:99:B8:05:5C:0E:15:71:E4:58:C8:5A:DC:06:55:D7:44:D5:88:87:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/99B8055C0E1571E458C85ADC0655D744D588871C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B8055C0E1571E458C85ADC0655D744D588871C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/99B8055C0E1571E458C85ADC0655D744D588871C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f9:90:d4:56:a3:59:76:fa:91:d4:26:94:2e:c4:b6:ba:5e: 95:24:98:f0:7a:46:81:84:f5:b6:20:f5:93:97:97:73:4c:45: 29:72:7d:43:88:a5:62:dc:11:6d:10:75:0a:e3:80:38:e3:ef: b8:2f:2c:8a:2b:4f:80:a8:d6:d6:47:7c:56:81:46:eb:79:a8: 93:3a:e8:06:ef:63:b0:3f:0a:87:56:2f:f4:0b:2e:54:af:51: d9:7a:a8:cc:b4:ca:e2:63:cf:c2:06:e8:46:9e:4d:83:f2:fd: d7:5d:e8:c5:39:54:b3:34:e9:b9:9d:36:1e:82:26:37:57:b9: 43:ef:00:a7:fc:58:44:ff:4a:0d:c5:15:ce:17:53:b1:52:70: 0d:00:fc:7e:16:f5:ff:31:27:a0:36:bc:3f:6d:12:54:77:89: d6:94:c5:59:db:19:d9:ef:9a:95:0f:0f:d2:78:1b:fa:13:d4: f5:93:c7:08:b1:aa:a6:25:a7:9a:2d:57:9b:d9:84:e8:f0:0d: 83:af:01:42:82:20:75:2f:a9:0c:c0:1f:5c:26:35:52:e6:9c: 15:f7:f4:7c:c8:3a:91:d7:65:ca:44:12:f7:d3:a2:5c:00:6b: 26:0f:8a:ff:68:fb:1f:6c:42:71:f8:de:e4:2b:35:66:27:9e: 65:5f:39:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJgi/xVC4qkyfGJepeSDftH7ao/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlCODA1NUMwRTE1NzFFNDU4Qzg1QURDMDY1NUQ3NDRE NTg4ODcxQzAeFw0yNTA1MDEyMjA2MTJaFw0yNTA1MDMwMDQyMTJaMDMxMTAvBgNV BAMTKDg3OTkyMDZCMEZFNUIzOEUwNkIyNDNFODExQUQ3MTU2MDU2QkYwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqqlid2FL0xr4fjPMFZsCXWOEu ds7rUafAkbkC9IxfdDyoch4nwX9sWcDvHh9Fs8AVhPWlcOl/xZveYKh0ZdAvfa1z qO7c4c0Rs/HQ01MPR7WLswSmU0hiRlP39BqdYaxJrfHJQsVwUF2bw0N9D0sJhfDB IvdcMWVYMERIKY7NlO2CNUmPkWoUPWS00y/VXVWXYEKWA6jDm4EH0uyStJ6qf3QC qTK0sdnU7oXhwoMBb2e2/IHa0xmuxYW2ySys0jmrPP2WR+OZWrA7VYAwhpBui2wv BPq0avMYbjvEUMR3ARBO6ARXA7MoIj39NH42BAIFH72wH96WDGg5OyqBYGENAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUh5kgaw/ls44GskPoEa1xVgVr8OcwHwYDVR0j BBgwFoAUmbgFXA4VceRYyFrcBlXXRNWIhxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWJ1ZnVSTmNnaVZobWhITUw1Sm43d1d2N1RwVGNodk5oYmJLU0dYeHhX QnovMC85OUI4MDU1QzBFMTU3MUU0NThDODVBREMwNjU1RDc0NEQ1ODg4NzFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5QjgwNTVDMEUxNTcxRTQ1 OEM4NUFEQzA2NTVENzQ0RDU4ODg3MUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWJ1ZnVSTmNnaVZobWhITUw1Sm43d1d2N1RwVGNodk5oYmJLU0dYeHhXQnovMC85 OUI4MDU1QzBFMTU3MUU0NThDODVBREMwNjU1RDc0NEQ1ODg4NzFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATPmQ1FajWXb6kdQmlC7EtrpelSSY8HpGgYT1tiD1k5eXc0xFKXJ9Q4ilYtwR bRB1CuOAOOPvuC8siitPgKjW1kd8VoFG63mokzroBu9jsD8Kh1Yv9AsuVK9R2Xqo zLTK4mPPwgboRp5Ng/L9113oxTlUszTpuZ02HoImN1e5Q+8Ap/xYRP9KDcUVzhdT sVJwDQD8fhb1/zEnoDa8P20SVHeJ1pTFWdsZ2e+alQ8P0ngb+hPU9ZPHCLGqpiWn mi1Xm9mE6PANg68BQoIgdS+pDMAfXCY1UuacFff0fMg6kddlykQS99OiXABrJg+K /2j7H2xCcfje5Cs1ZieeZV852Q== -----END CERTIFICATE-----Generated at Fri May 2 09:54:27 2025 by rpki-client