$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft File: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft (raw, json) Hash identifier: 5OGJZcOx0kzywQJk18TFfwMxyMTA9eOJxWeWgobmI24= Subject key identifier: 75:60:61:FF:3E:BA:63:32:42:13:D5:5E:A8:BF:7E:40:BD:2B:84:A1 Authority key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 Certificate issuer: /CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Certificate serial: 7F607EFC12019E68A66B7531384C2564FEB3308F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer Subject info access: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft Manifest number: 0209 Signing time: Mon 28 Apr 2025 02:59:35 +0000 Manifest this update: Mon 28 Apr 2025 02:54:35 +0000 Manifest next update: Tue 29 Apr 2025 05:14:35 +0000 Files and hashes: 1: 3133382e39372e3130372e302f32342d3234203d3e203533313037.roa (hash: d37RWCzmBlHMXyTEoKWy+EnzDGvUsG4ci+hJH2k1A/Q=) 2: 323830343a323363383a3a2f33322d3332203d3e20323634313832.roa (hash: 3F2e2/DDYn3RX1xMVmaKyyDfXDqpy3jTInAQP0qhGc4=) 3: 3133382e39372e3130342e302f32322d3232203d3e203533313037.roa (hash: YxmutoTj6CF7MhqKkZWdp2PcBcnZPzoU+yCAdwcvIH8=) 4: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl (hash: 3dlto9Qipf+YjLQPTbtRgtw6fgw8HKujVuDrs0wBUak=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 05:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:60:7e:fc:12:01:9e:68:a6:6b:75:31:38:4c:25:64:fe:b3:30:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Validity Not Before: Apr 28 02:54:35 2025 GMT Not After : Apr 29 05:14:35 2025 GMT Subject: CN=756061FF3EBA63324213D55EA8BF7E40BD2B84A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:95:76:5e:a2:81:c1:0e:c7:dd:af:be:8f:45: 3c:ed:03:0c:43:b0:e0:39:8e:a4:89:46:ce:50:09: 45:9c:1d:73:c3:dc:5f:cb:44:5d:0b:f5:bb:5c:38: 10:4e:6d:5a:13:55:e3:db:7b:0a:95:36:2b:4b:d7: 98:5e:f6:7a:e7:62:68:d8:2c:61:2f:ce:cd:3c:1f: b3:5d:13:b2:63:28:8f:4c:5c:97:3d:5e:89:34:1c: 1b:1c:76:ad:70:bf:a1:15:04:0d:bd:95:83:d3:28: 82:fc:98:18:05:93:4b:71:a5:18:c6:84:de:a2:d0: ea:4d:bf:f7:e0:4a:71:d0:6a:53:74:b6:3a:1b:f7: b9:5a:fb:04:7d:15:62:0c:3b:9d:dd:19:28:b1:7f: 48:94:b9:3d:71:4c:f1:85:7c:e0:b6:98:ae:6b:71: a7:a2:c8:67:f1:68:41:0f:70:40:4f:f7:b9:e4:03: 41:64:50:47:f8:e3:03:56:03:45:a0:b0:b5:2c:bc: e9:a6:2c:c6:01:d5:23:0a:8a:51:36:bd:66:4f:e3: 50:67:e8:af:5c:13:53:ef:8a:39:65:22:9c:98:6c: 50:bf:d5:1f:c6:82:20:8f:d8:30:ac:39:fe:32:98: d0:3f:84:42:a0:0b:63:e4:81:6b:1b:0c:ed:25:39: cf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:60:61:FF:3E:BA:63:32:42:13:D5:5E:A8:BF:7E:40:BD:2B:84:A1 X509v3 Authority Key Identifier: keyid:71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:2a:6d:b8:d8:77:15:e6:30:f3:6b:40:f9:ff:f8:87:3f:1f: f9:3c:a7:ae:bf:c2:89:85:38:4c:88:a7:e3:39:d6:fa:1e:a2: 25:37:30:c7:50:50:df:bc:3c:9f:2d:a6:df:e3:69:45:9b:db: d4:70:33:04:72:13:8d:7a:42:0f:57:0a:2f:32:80:0d:02:c3: 49:66:75:73:a7:26:8e:2c:55:58:7d:8d:e3:1b:73:96:e6:54: bb:3e:cb:0f:53:39:9e:9a:6b:58:98:93:53:82:7a:8a:32:d3: f3:20:e8:15:1c:e2:ec:ce:41:4b:ad:5d:b0:c1:52:78:b2:69: 7d:fe:22:16:82:a1:56:44:13:5c:74:04:48:cd:a9:00:60:59: 76:6d:3a:3c:da:93:ee:0d:a9:c5:e0:60:a4:88:04:41:1b:d0: 46:1a:ec:7f:3e:a5:cd:10:96:8c:87:83:46:ef:cb:a5:a0:e9: 82:4e:7e:c4:25:6b:bb:f0:04:03:be:52:f2:73:e7:53:c2:29: 87:64:e6:63:76:d9:3f:66:ae:79:ff:17:4a:aa:d0:17:c7:3c: ab:7e:4c:e7:9c:c9:ab:0a:7a:d7:16:4c:b7:9e:99:c1:a4:b4: fb:04:28:f9:63:c5:98:f1:86:5b:40:13:bc:92:1f:f7:3d:e3: 1f:88:c7:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUf2B+/BIBnmima3UxOEwlZP6zMI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEyNUJFRERGRUMyOUMwQTRDRjU5MUU1RUI0MDgzOEJG RTNDN0FDMTAeFw0yNTA0MjgwMjU0MzVaFw0yNTA0MjkwNTE0MzVaMDMxMTAvBgNV BAMTKDc1NjA2MUZGM0VCQTYzMzI0MjEzRDU1RUE4QkY3RTQwQkQyQjg0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCblXZeooHBDsfdr76PRTztAwxD sOA5jqSJRs5QCUWcHXPD3F/LRF0L9btcOBBObVoTVePbewqVNitL15he9nrnYmjY LGEvzs08H7NdE7JjKI9MXJc9Xok0HBscdq1wv6EVBA29lYPTKIL8mBgFk0txpRjG hN6i0OpNv/fgSnHQalN0tjob97la+wR9FWIMO53dGSixf0iUuT1xTPGFfOC2mK5r caeiyGfxaEEPcEBP97nkA0FkUEf44wNWA0WgsLUsvOmmLMYB1SMKilE2vWZP41Bn 6K9cE1PvijllIpyYbFC/1R/GgiCP2DCsOf4ymNA/hEKgC2PkgWsbDO0lOc8XAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdWBh/z66YzJCE9VeqL9+QL0rhKEwHwYDVR0j BBgwFoAUcSW+3f7CnApM9ZHl60CDi/48esEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEhnSnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRi eksvMS83MTI1QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxMjVCRURERkVDMjlDMEE0 Q0Y1OTFFNUVCNDA4MzhCRkUzQzdBQzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEhnSnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRieksvMS83 MTI1QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEiptuNh3FeYw82tA+f/4hz8f+Tynrr/CiYU4TIin4znW+h6iJTcwx1BQ37w8 ny2m3+NpRZvb1HAzBHITjXpCD1cKLzKADQLDSWZ1c6cmjixVWH2N4xtzluZUuz7L D1M5npprWJiTU4J6ijLT8yDoFRzi7M5BS61dsMFSeLJpff4iFoKhVkQTXHQESM2p AGBZdm06PNqT7g2pxeBgpIgEQRvQRhrsfz6lzRCWjIeDRu/LpaDpgk5+xCVru/AE A75S8nPnU8Iph2TmY3bZP2auef8XSqrQF8c8q35M55zJqwp61xZMt56ZwaS0+wQo +WPFmPGGW0ATvJIf9z3jH4jHKQ== -----END CERTIFICATE-----Generated at Mon Apr 28 22:42:19 2025 by rpki-client