$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft File: A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft (raw, json) Hash identifier: lw8L/g4e2ADDRaj07sFV0LD3/7c50oPajKK6vqe0O8s= Subject key identifier: 43:51:8B:1C:AA:61:0E:82:3E:71:AC:BA:32:8E:76:27:E9:B6:9E:EE Authority key identifier: A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8 Certificate issuer: /CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8 Certificate serial: 214ADEBA22181FD3D788C91C6675165E3CB261B7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft Manifest number: 01E4 Signing time: Thu 01 May 2025 11:34:59 +0000 Manifest this update: Thu 01 May 2025 11:29:59 +0000 Manifest next update: Fri 02 May 2025 13:56:59 +0000 Files and hashes: 1: 3137392e35312e3137322e302f32322d3234203d3e203238323737.roa (hash: yI1dK9ENc+AfYHAbDnixcQKXD5zluVjisHo5V8kfMxg=) 2: 3138392e31342e38302e302f32302d3234203d3e203238323737.roa (hash: n7VK4GQZTYnWloqSAMHn76YqbnY1u2pgivENu6CiCes=) 3: A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl (hash: 2b+T7CfjjWwtATA+7JNalN6sTvHRe52TRubI/a1bnzM=) 4: 323830343a3264633a3a2f33322d3431203d3e203238323737.roa (hash: Ol+1Kw+Ben9pcieWrCajh7sb58yandi25g3jjxFoMQI=) 5: 3137372e3133362e38382e302f32312d3234203d3e203238323737.roa (hash: SODCeqMppG+109Vh2sZlp+D9Z3QOeLYSsI9zH1eRlCA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 13:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:4a:de:ba:22:18:1f:d3:d7:88:c9:1c:66:75:16:5e:3c:b2:61:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8 Validity Not Before: May 1 11:29:59 2025 GMT Not After : May 2 13:56:59 2025 GMT Subject: CN=43518B1CAA610E823E71ACBA328E7627E9B69EEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:2b:b6:5f:03:c7:07:f4:64:af:76:14:63: ff:b8:24:32:33:e3:ba:99:e1:40:f1:e3:b4:3e:cf: 9c:27:e0:ae:f2:3a:6a:62:af:10:0f:72:8e:a5:12: 73:2f:37:00:76:4a:ee:0b:38:f9:4c:a4:63:9f:aa: c4:a4:80:05:47:02:3c:fd:2e:28:e2:e0:d0:b3:87: f0:dc:a1:49:a0:79:0f:e9:7d:36:36:5d:f7:94:0e: 8b:02:e8:3b:85:e2:7f:12:90:1c:14:6a:5e:b9:05: 5c:50:43:fb:76:47:e4:19:62:ac:78:db:e9:9f:07: 1c:13:d4:53:7a:c6:b5:72:be:11:1e:c8:a9:9e:a0: 22:a4:f3:47:83:3b:d2:c1:ee:7e:34:79:16:7b:19: 96:39:60:e8:c9:e6:81:f9:05:04:82:c5:e4:db:7c: 0c:03:49:6e:64:10:04:d5:93:bb:a8:4f:ac:c3:86: c9:b6:18:3c:aa:15:91:42:a9:a7:8a:99:91:28:e1: ca:24:6f:65:7c:56:43:d0:51:70:e3:0f:fe:af:28: ef:1c:d3:04:d9:f9:c0:21:5f:c8:58:5a:ad:4b:a8: f6:03:cd:17:17:ca:dc:c2:ca:1a:fd:5b:94:b3:c4: 6b:f9:36:95:c8:d7:c3:5a:3b:2c:fb:41:18:f5:42: 72:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:51:8B:1C:AA:61:0E:82:3E:71:AC:BA:32:8E:76:27:E9:B6:9E:EE X509v3 Authority Key Identifier: keyid:A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ca:01:6d:8c:db:ca:98:d7:bf:9a:c7:ec:26:ed:e4:8e:52: cb:58:eb:6a:74:2e:21:2e:55:5d:b8:fb:f7:64:13:07:6c:8d: 58:00:7b:a7:3a:cc:6d:c9:93:53:01:4f:6d:f1:d4:bc:1c:c3: 7d:3c:b0:ac:12:2f:4f:1e:a8:5a:22:77:02:e3:ed:64:f2:b4: 5a:9c:67:a5:1a:e1:de:98:d0:dd:f0:a6:11:05:5b:9e:f9:56: 41:75:7e:e1:c4:a4:1a:c2:04:08:5d:ec:54:3a:cd:db:c3:e5: 5e:4d:c8:dc:b5:d3:7d:87:21:49:43:f8:d0:a3:20:5c:c6:24: ab:ac:d7:20:90:7d:90:ee:c2:78:49:c9:87:cd:d9:7d:5f:5c: 24:1a:ac:ed:bd:ac:cd:ab:22:b3:b4:15:56:03:39:1b:16:78: 12:97:f7:8a:30:19:8d:ac:38:5e:5f:47:77:6e:ce:f5:f5:93: e7:81:0a:4f:78:43:17:a6:71:28:53:e8:40:01:ef:33:ef:a4: 8b:3f:10:fd:00:b5:40:b2:93:93:b1:53:53:62:3b:5a:e8:2e: 76:2e:82:6a:1e:2d:13:6c:ed:9f:e4:35:ca:7d:8b:b4:22:f8: 08:d2:0a:49:fd:3b:0c:de:3e:03:0f:87:19:71:fc:31:a0:c6: 9d:12:5e:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIUreuiIYH9PXiMkcZnUWXjyyYbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg2RjI5MDlBOENGOEE4MEMyMjM5RTVGOTUzRkYxQjRB QjlENzNDODAeFw0yNTA1MDExMTI5NTlaFw0yNTA1MDIxMzU2NTlaMDMxMTAvBgNV BAMTKDQzNTE4QjFDQUE2MTBFODIzRTcxQUNCQTMyOEU3NjI3RTlCNjlFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2yu2XwPHB/Rkr3YUY/+4JDIz 47qZ4UDx47Q+z5wn4K7yOmpirxAPco6lEnMvNwB2Su4LOPlMpGOfqsSkgAVHAjz9 Liji4NCzh/DcoUmgeQ/pfTY2XfeUDosC6DuF4n8SkBwUal65BVxQQ/t2R+QZYqx4 2+mfBxwT1FN6xrVyvhEeyKmeoCKk80eDO9LB7n40eRZ7GZY5YOjJ5oH5BQSCxeTb fAwDSW5kEATVk7uoT6zDhsm2GDyqFZFCqaeKmZEo4cokb2V8VkPQUXDjD/6vKO8c 0wTZ+cAhX8hYWq1LqPYDzRcXytzCyhr9W5SzxGv5NpXI18NaOyz7QRj1QnI3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQ1GLHKphDoI+cay6Mo52J+m2nu4wHwYDVR0j BBgwFoAUqG8pCajPioDCI55flT/xtKudc8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDd0dnBGSEYzQmtaUGM1SlpTaVVMS3RqR212UGU0ZkFqeGlVMkRKWnFQ RzEvMC9BODZGMjkwOUE4Q0Y4QTgwQzIyMzlFNUY5NTNGRjFCNEFCOUQ3M0M4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4NkYyOTA5QThDRjhBODBD MjIzOUU1Rjk1M0ZGMUI0QUI5RDczQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDd0dnBGSEYzQmtaUGM1SlpTaVVMS3RqR212UGU0ZkFqeGlVMkRKWnFQRzEvMC9B ODZGMjkwOUE4Q0Y4QTgwQzIyMzlFNUY5NTNGRjFCNEFCOUQ3M0M4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACcoBbYzbypjXv5rH7Cbt5I5Sy1jranQuIS5VXbj792QTB2yNWAB7pzrMbcmT UwFPbfHUvBzDfTywrBIvTx6oWiJ3AuPtZPK0WpxnpRrh3pjQ3fCmEQVbnvlWQXV+ 4cSkGsIECF3sVDrN28PlXk3I3LXTfYchSUP40KMgXMYkq6zXIJB9kO7CeEnJh83Z fV9cJBqs7b2szasis7QVVgM5GxZ4Epf3ijAZjaw4Xl9Hd27O9fWT54EKT3hDF6Zx KFPoQAHvM++kiz8Q/QC1QLKTk7FTU2I7Wugudi6Cah4tE2ztn+Q1yn2LtCL4CNIK Sf07DN4+Aw+HGXH8MaDGnRJe2g== -----END CERTIFICATE-----Generated at Fri May 2 04:30:10 2025 by rpki-client