$ rpki-client -vvf rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft File: B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft (raw, json) Hash identifier: UV+gicgt+qsrQrq1vxyMSV6uMkGaRVIJ+ZtQdsK3ELo= Subject key identifier: 67:0F:78:BB:5C:C0:7B:31:E6:31:C3:92:94:00:81:73:FA:DA:05:06 Authority key identifier: B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE Certificate issuer: /CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE Certificate serial: 694805A52E66C6FFBEE7D9F033F9D7C9FD31C85D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer Subject info access: rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft Manifest number: 01D7 Signing time: Tue 29 Apr 2025 07:40:42 +0000 Manifest this update: Tue 29 Apr 2025 07:35:42 +0000 Manifest next update: Wed 30 Apr 2025 10:03:42 +0000 Files and hashes: 1: 323830343a323639343a3a2f33322d3336203d3e20323633383430.roa (hash: Suyd1BGQfCVfrKz7eXe3gTSFcsCn18+rgyvtqMeiLXU=) 2: 3133382e3138352e3132342e302f32322d3234203d3e20323633383430.roa (hash: nTHnk58+NlGCzA2boJphxaatQL1TrBKE4lQslsXvu7o=) 3: B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl (hash: m16gw1+Je1IbATk2hUBYmMA6PnZ4AleD0dXRG+MZyHI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 10:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:48:05:a5:2e:66:c6:ff:be:e7:d9:f0:33:f9:d7:c9:fd:31:c8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE Validity Not Before: Apr 29 07:35:42 2025 GMT Not After : Apr 30 10:03:42 2025 GMT Subject: CN=670F78BB5CC07B31E631C39294008173FADA0506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:56:ea:ae:42:aa:46:b9:f7:f2:17:67:19:31: c2:25:64:00:72:3d:0c:b0:bf:5c:ee:95:5e:6b:c8: c5:02:ee:0c:42:e0:a0:40:cd:15:35:d6:4a:79:fb: 39:17:bc:5b:a6:d7:50:92:fe:61:f1:cb:3c:d4:54: f6:58:d5:ed:c6:2f:1a:94:f6:4d:f7:b2:55:a1:2a: d7:b0:53:fb:38:46:fb:73:24:ae:07:79:49:45:75: 05:7f:d0:cf:76:61:38:f5:81:c8:08:bb:9f:0e:ce: 39:41:78:86:46:2e:12:19:e3:db:31:b5:5c:5e:30: ad:6d:23:d1:50:af:58:05:cf:c9:37:cb:e3:73:b2: 7a:a3:17:62:00:f4:21:19:6f:e3:7c:91:e7:84:21: 00:5f:9d:e4:79:a5:78:5c:65:7d:d2:46:9d:b4:94: 98:d1:60:79:a7:43:a0:f8:21:32:60:69:74:23:55: 87:ee:78:d5:03:79:66:1b:b2:95:15:82:09:e1:2c: 34:8d:d1:ec:ba:3c:9d:ff:e4:08:34:8c:2f:ee:a2: 6f:3b:c4:79:f9:01:62:74:45:71:e3:14:c2:fa:b3: e4:67:8e:3b:ba:7a:9f:39:10:39:a9:20:5e:db:a4: 70:ed:3d:cc:34:d4:a5:ba:b0:53:fb:ea:8e:08:59: 3f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0F:78:BB:5C:C0:7B:31:E6:31:C3:92:94:00:81:73:FA:DA:05:06 X509v3 Authority Key Identifier: keyid:B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:2b:3a:87:13:30:a9:c6:aa:97:d5:d0:62:99:12:f4:68:a9: 12:0f:98:cc:86:01:63:f6:32:58:72:95:15:f2:c6:9e:91:c0: af:a5:a5:65:2c:20:07:e6:7e:b4:98:fa:56:3a:60:45:88:63: 88:85:42:58:99:58:d9:05:b2:c5:00:75:e6:d6:41:ce:bf:1d: ab:51:87:e1:17:81:c8:ce:4c:bb:12:04:4d:b0:b7:5d:2a:b6: 9f:7c:b2:16:be:20:ef:8a:5a:2c:c8:50:f0:22:00:db:81:63: cd:06:6e:98:6b:cd:e7:ea:cc:8c:e4:00:00:a9:8c:8b:29:d7: d1:c3:a8:a6:b9:31:65:f8:12:c6:3b:49:73:bd:af:b6:be:90: fe:b8:de:f2:99:20:47:f6:b3:1a:32:ef:75:95:f1:d9:c6:b7: 2f:b3:1f:ff:94:58:f1:da:1d:fe:19:98:d5:b2:3b:d4:40:9c: 0d:1b:65:d4:21:e9:8b:ff:17:0b:17:80:a4:fe:26:33:7e:9b: 11:26:63:54:d6:58:ea:31:4d:b4:c3:a3:a1:58:35:2e:06:65: 36:1d:02:7c:a1:eb:83:21:86:a4:fa:4f:6a:76:4a:95:4c:5c: 3f:21:e3:71:b5:e4:8a:30:ea:fa:31:53:ac:93:4e:b0:27:77: bb:27:58:b1 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUaUgFpS5mxv++59nwM/nXyf0xyF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1MjdDQjZBM0IxMkI5RjlBQjIxRENDQjA1MEI1OTBB OERGNUJGRTAeFw0yNTA0MjkwNzM1NDJaFw0yNTA0MzAxMDAzNDJaMDMxMTAvBgNV BAMTKDY3MEY3OEJCNUNDMDdCMzFFNjMxQzM5Mjk0MDA4MTczRkFEQTA1MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKVuquQqpGuffyF2cZMcIlZABy PQywv1zulV5ryMUC7gxC4KBAzRU11kp5+zkXvFum11CS/mHxyzzUVPZY1e3GLxqU 9k33slWhKtewU/s4RvtzJK4HeUlFdQV/0M92YTj1gcgIu58OzjlBeIZGLhIZ49sx tVxeMK1tI9FQr1gFz8k3y+NzsnqjF2IA9CEZb+N8keeEIQBfneR5pXhcZX3SRp20 lJjRYHmnQ6D4ITJgaXQjVYfueNUDeWYbspUVggnhLDSN0ey6PJ3/5Ag0jC/uom87 xHn5AWJ0RXHjFML6s+Rnjju6ep85EDmpIF7bpHDtPcw01KW6sFP76o4IWT8nAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUZw94u1zAezHmMcOSlACBc/raBQYwHwYDVR0j BBgwFoAUtlJ8tqOxK5+ash3MsFC1kKjfW/4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9Bb0NEeHQxdEFLWkQ2cVBVZ2NZNHQ2a3VUNVA0b05ZdU1CYmg5WkhtNERW LzAvQjY1MjdDQjZBM0IxMkI5RjlBQjIxRENDQjA1MEI1OTBBOERGNUJGRS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CNjUyN0NCNkEzQjEyQjlGOUFC MjFEQ0NCMDUwQjU5MEE4REY1QkZFLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fv Q0R4dDF0QUtaRDZxUFVnY1k0dDZrdVQ1UDRvTll1TUJiaDlaSG00RFYvMC9CNjUy N0NCNkEzQjEyQjlGOUFCMjFEQ0NCMDUwQjU5MEE4REY1QkZFLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA gSs6hxMwqcaql9XQYpkS9GipEg+YzIYBY/YyWHKVFfLGnpHAr6WlZSwgB+Z+tJj6 VjpgRYhjiIVCWJlY2QWyxQB15tZBzr8dq1GH4ReByM5MuxIETbC3XSq2n3yyFr4g 74paLMhQ8CIA24FjzQZumGvN5+rMjOQAAKmMiynX0cOoprkxZfgSxjtJc72vtr6Q /rje8pkgR/azGjLvdZXx2ca3L7Mf/5RY8dod/hmY1bI71ECcDRtl1CHpi/8XCxeA pP4mM36bESZjVNZY6jFNtMOjoVg1LgZlNh0CfKHrgyGGpPpPanZKlUxcPyHjcbXk ijDq+jFTrJNOsCd3uydYsQ== -----END CERTIFICATE-----Generated at Tue Apr 29 17:23:30 2025 by rpki-client