$ rpki-client -vvf rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft File: 9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft (raw, json) Hash identifier: Il7GNBVLn4+MhoKjFYIHWV8MQI9tmnoq7zGp731oTyI= Subject key identifier: B6:EF:E5:71:14:6D:AE:B0:EB:4D:AD:AD:E9:88:36:A9:A9:A7:25:C1 Authority key identifier: 9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F Certificate issuer: /CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F Certificate serial: 27E1724D3BE39EAECEE37DFA0FAAC5DD73B7F119 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer Subject info access: rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft Manifest number: 020E Signing time: Sat 03 May 2025 10:24:59 +0000 Manifest this update: Sat 03 May 2025 10:19:59 +0000 Manifest next update: Sun 04 May 2025 10:41:59 +0000 Files and hashes: 1: 3137372e31302e32382e302f32322d3234203d3e20323632383431.roa (hash: psmOj8EmDDzyd0bmAsj109hherhULfNzcjmq4S7y+B4=) 2: 323830343a6662303a3a2f33322d3332203d3e20323632383431.roa (hash: RbYXVffjJdvIeDJVoaVQ4H7OCdhMNRWApBNY9cjM2es=) 3: 3137372e3133362e3231362e302f32312d3234203d3e20323632383431.roa (hash: pkwtlkOIUTOW0vCXw7qG1lC1xTCoa8/0oVE1nZMmSW4=) 4: 3137372e31302e32342e302f32322d3234203d3e20323632383431.roa (hash: U+A01WCuvZZPHwlM0t2T4L3RVjEHPKcBpkgoSeAHY4M=) 5: 9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl (hash: TUJZERuAy5ic9b4ErkJNJPw2eoQhm5mKBHXqh7EoDps=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 04 May 2025 10:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e1:72:4d:3b:e3:9e:ae:ce:e3:7d:fa:0f:aa:c5:dd:73:b7:f1:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F Validity Not Before: May 3 10:19:59 2025 GMT Not After : May 4 10:41:59 2025 GMT Subject: CN=B6EFE571146DAEB0EB4DADADE98836A9A9A725C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:35:dd:dd:eb:61:e8:2a:b4:2b:21:de:2d:54: d7:dc:54:d2:ab:80:53:ff:99:40:d1:96:2c:dc:3a: 8f:02:4a:f3:f2:98:92:81:df:73:ce:be:5b:30:8b: f1:3b:ec:9d:ae:a4:62:99:59:a6:92:af:bb:b8:f8: 57:24:34:d8:5e:ca:b9:71:5d:38:73:9c:25:73:7d: b3:d9:44:a9:96:27:e0:d1:a4:54:54:b2:d0:71:57: d9:a0:b7:b1:42:85:20:ea:ed:56:de:a8:74:04:40: 40:b8:b6:72:88:10:df:a5:ac:06:05:d3:4b:91:67: 65:ea:7e:81:c0:4a:28:c8:4d:be:af:fb:d0:3e:70: 0b:a0:ce:6f:8c:fa:f1:d8:40:b8:23:6c:9d:27:bc: 20:b9:70:ba:a0:71:ca:ce:91:eb:d4:94:40:9e:20: ef:85:53:74:5f:17:c3:6f:dd:3f:95:71:33:71:0e: e8:78:6c:81:83:71:92:7c:08:c0:06:d6:88:87:41: 7b:20:da:9e:d5:87:90:52:cc:79:dc:68:78:d8:1a: 39:78:a8:78:f3:fe:1a:4e:f5:78:3a:2c:0b:9e:74: a9:50:3c:7f:f0:80:57:1b:19:85:b1:20:99:f0:ae: 14:b2:02:92:1a:4b:ac:f3:89:28:4e:b6:d9:f4:04: 05:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EF:E5:71:14:6D:AE:B0:EB:4D:AD:AD:E9:88:36:A9:A9:A7:25:C1 X509v3 Authority Key Identifier: keyid:9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d7:60:5a:1a:0c:37:12:2d:de:71:e2:c5:ea:46:17:ac:ea: 8e:60:b6:08:ea:3b:6d:bf:6d:07:06:b3:85:e3:1c:b7:7e:f0: ce:8d:52:17:5a:c3:ab:5b:06:29:2d:40:d2:b9:13:02:4a:6b: ef:73:0a:3b:62:29:d7:d4:2e:ea:80:f2:96:03:55:36:a1:29: 36:e2:a8:1c:2d:99:eb:ec:e3:8f:d8:74:03:21:c9:4b:66:09: a1:a0:cc:c6:f3:07:55:33:73:25:52:b0:3f:8d:45:98:d5:9c: 38:d1:dc:b4:b0:b4:d9:98:32:a0:42:7a:65:6d:38:ef:93:ad: aa:02:42:da:6b:e7:2a:e6:59:77:51:51:e0:76:d4:3e:bf:24: 10:4a:a1:44:ca:d8:ff:d4:d1:c0:c2:90:1d:d8:35:71:75:dd: 0a:33:cc:6f:fe:61:d2:08:39:0d:0e:6a:48:63:74:40:90:8f: 6c:da:61:ed:b6:15:b6:04:76:9f:04:28:51:e8:3e:9e:4f:fe: 54:99:1b:e0:96:29:29:8d:bb:51:0c:66:ba:92:af:18:71:5f: 38:d5:e6:8b:77:0d:f3:f8:5e:47:cc:94:36:b1:ea:4d:14:27: 73:75:df:23:61:f9:c4:bb:bc:4e:91:a3:6c:02:72:ab:1a:a8: db:ab:be:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ+FyTTvjnq7O4336D6rF3XO38RkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxRDdDNDc4RDg4MEUwOTNDODNEQ0JFMURFNDBERTg4 RUY4NTQ2RjAeFw0yNTA1MDMxMDE5NTlaFw0yNTA1MDQxMDQxNTlaMDMxMTAvBgNV BAMTKEI2RUZFNTcxMTQ2REFFQjBFQjREQURBREU5ODgzNkE5QTlBNzI1QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsNd3d62HoKrQrId4tVNfcVNKr gFP/mUDRlizcOo8CSvPymJKB33POvlswi/E77J2upGKZWaaSr7u4+FckNNheyrlx XThznCVzfbPZRKmWJ+DRpFRUstBxV9mgt7FChSDq7VbeqHQEQEC4tnKIEN+lrAYF 00uRZ2XqfoHASijITb6v+9A+cAugzm+M+vHYQLgjbJ0nvCC5cLqgccrOkevUlECe IO+FU3RfF8Nv3T+VcTNxDuh4bIGDcZJ8CMAG1oiHQXsg2p7Vh5BSzHncaHjYGjl4 qHjz/hpO9Xg6LAuedKlQPH/wgFcbGYWxIJnwrhSyApIaS6zziShOttn0BAVFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtu/lcRRtrrDrTa2t6Yg2qamnJcEwHwYDVR0j BBgwFoAUnh18R42IDgk8g9y+HeQN6I74VG8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSE1MVXZuOXRnV2NTalZGc3VHMldac3BpZEFIamRpaThnelByd1JGUEYy UG4vMS85RTFEN0M0NzhEODgwRTA5M0M4M0RDQkUxREU0MERFODhFRjg1NDZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFMUQ3QzQ3OEQ4ODBFMDkz QzgzRENCRTFERTQwREU4OEVGODU0NkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SE1MVXZuOXRnV2NTalZGc3VHMldac3BpZEFIamRpaThnelByd1JGUEYyUG4vMS85 RTFEN0M0NzhEODgwRTA5M0M4M0RDQkUxREU0MERFODhFRjg1NDZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHddgWhoMNxIt3nHixepGF6zqjmC2COo7bb9tBwazheMct37wzo1SF1rDq1sG KS1A0rkTAkpr73MKO2Ip19Qu6oDylgNVNqEpNuKoHC2Z6+zjj9h0AyHJS2YJoaDM xvMHVTNzJVKwP41FmNWcONHctLC02ZgyoEJ6ZW0475OtqgJC2mvnKuZZd1FR4HbU Pr8kEEqhRMrY/9TRwMKQHdg1cXXdCjPMb/5h0gg5DQ5qSGN0QJCPbNph7bYVtgR2 nwQoUeg+nk/+VJkb4JYpKY27UQxmupKvGHFfONXmi3cN8/heR8yUNrHqTRQnc3Xf I2H5xLu8TpGjbAJyqxqo26u++g== -----END CERTIFICATE-----Generated at Sat May 3 15:26:48 2025 by rpki-client