$ rpki-client -vvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft File: B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft (raw, json) Hash identifier: NwScTUlMmZZZlnMqd7Zi7z76Xl0XCmRYHO1Uo6ZE8Q8= Subject key identifier: 3C:05:FB:F0:D3:E1:8E:66:56:A6:DC:0D:FC:E7:6F:3C:3F:97:7C:D0 Authority key identifier: B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19 Certificate issuer: /CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819 Certificate serial: 4280EC6DCBCB4FF94514EEBB899E7A809272EB87 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer Subject info access: rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft Manifest number: 0208 Signing time: Sun 27 Apr 2025 21:10:00 +0000 Manifest this update: Sun 27 Apr 2025 21:05:00 +0000 Manifest next update: Mon 28 Apr 2025 21:16:00 +0000 Files and hashes: 1: 323830343a333264343a3a2f33322d3332203d3e20323635313030.roa (hash: oxHxONE9x52U+e5QcW3K1P/Di5t/pz6PYQ4GKPQ5jt0=) 2: 3137302e3235342e38302e302f32322d3234203d3e20323635313030.roa (hash: 3cJ6i4eVfePj/znbhXPN+EEU/pcnQn4cPiUP8LWIC6M=) 3: 323830343a333264343a383030303a3a2f33332d3333203d3e20323635313030.roa (hash: nM938q4SN87BNGIJ3b3ggcn3PsaDtJUz1la3aiK7viU=) 4: B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl (hash: 0khVxdH0G3Fd1BUCuDO+82f8PMQPc96Fkei8QekSiWA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 21:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:80:ec:6d:cb:cb:4f:f9:45:14:ee:bb:89:9e:7a:80:92:72:eb:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819 Validity Not Before: Apr 27 21:05:00 2025 GMT Not After : Apr 28 21:16:00 2025 GMT Subject: CN=3C05FBF0D3E18E6656A6DC0DFCE76F3C3F977CD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:41:29:ec:57:3e:6e:39:52:e1:0c:b7:bd:90: c8:56:91:90:52:2b:b7:9e:af:81:70:fe:8f:0f:37: bd:fa:5f:e4:27:7b:db:04:d0:06:b1:ec:b7:d3:51: 06:de:46:75:17:4c:1a:fd:88:8f:f6:4d:8a:9f:92: c8:03:5a:57:98:0a:92:07:31:6b:90:8c:13:f8:94: ca:51:d3:a9:bf:b0:be:c9:91:45:99:72:d4:4c:48: 56:42:6f:f0:30:45:5a:c3:5a:7e:0d:fd:8a:80:4c: e1:b9:3c:48:09:8c:de:f1:06:34:14:14:29:a3:bf: 95:52:1b:9d:64:4a:8b:b6:67:ab:f9:3b:c1:6d:bf: 00:4f:2a:e9:5f:1f:45:c5:45:31:b7:e6:d0:51:dc: b0:86:84:b7:3e:5f:2d:fc:f9:82:5c:dd:c4:fd:bb: 58:48:bf:28:78:48:28:42:b5:0b:a1:a3:47:38:7c: 28:f0:56:f1:70:99:81:c9:bd:23:45:29:1c:e8:45: bc:d3:fd:5e:3d:17:c8:29:89:30:cf:c3:c5:7f:0c: 72:6a:df:0f:1a:e2:b2:9e:1b:22:55:ac:2c:d6:2e: e5:cf:c0:23:cb:02:10:9e:49:09:a7:e3:c8:df:be: 6e:fe:45:70:66:ba:a9:f1:c0:14:cf:48:35:7f:37: 56:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:05:FB:F0:D3:E1:8E:66:56:A6:DC:0D:FC:E7:6F:3C:3F:97:7C:D0 X509v3 Authority Key Identifier: keyid:B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:15:66:ac:33:2e:cb:8d:74:f3:ae:d4:bc:c1:c2:02:d9:0c: 5d:b2:4b:85:95:61:42:5a:76:22:d0:8b:5a:7b:e7:cd:ed:e6: 3d:87:98:2c:3c:4a:72:6d:c7:63:ec:01:d2:48:a4:19:39:72: e9:86:8c:bf:36:a2:94:97:29:33:1c:bf:80:ff:d3:39:7b:1f: c9:30:54:d5:17:f1:6b:ac:0e:c3:1e:34:0a:19:4f:04:c4:39: 07:87:45:b8:c3:7c:bd:ec:14:72:77:5a:17:a4:83:1c:63:fc: b1:12:e9:4b:bf:93:9a:c8:d6:95:28:02:08:d0:8a:26:51:93: df:bb:c2:3b:6d:0b:51:02:77:f7:f6:61:05:6a:59:67:7e:f6: 7f:7e:34:8e:17:42:ab:e7:eb:51:26:24:42:55:16:c7:45:f8: ee:5d:2d:fd:e1:59:cf:a9:02:7f:b3:11:3d:66:7e:59:ca:3e: 21:eb:cd:4b:f4:47:3f:8e:07:d9:63:c5:ea:e7:27:b7:7a:9d: 1c:ca:33:d9:1f:7f:1b:27:c4:3e:55:d6:94:16:ae:47:60:6c: 6a:ab:ea:b5:95:e2:d0:89:29:fd:31:13:09:e4:85:b5:bb:d4: bd:b2:59:1a:dc:1c:83:06:76:65:58:4e:89:aa:03:15:4e:6e: 55:d0:56:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQoDsbcvLT/lFFO67iZ56gJJy64cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGQzVGMDhCOEM0ODY0MDEzREMzQTRDQTQ3QzIyMDBC M0MyQjgxOTAeFw0yNTA0MjcyMTA1MDBaFw0yNTA0MjgyMTE2MDBaMDMxMTAvBgNV BAMTKDNDMDVGQkYwRDNFMThFNjY1NkE2REMwREZDRTc2RjNDM0Y5NzdDRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+QSnsVz5uOVLhDLe9kMhWkZBS K7eer4Fw/o8PN736X+Qne9sE0Aax7LfTUQbeRnUXTBr9iI/2TYqfksgDWleYCpIH MWuQjBP4lMpR06m/sL7JkUWZctRMSFZCb/AwRVrDWn4N/YqATOG5PEgJjN7xBjQU FCmjv5VSG51kSou2Z6v5O8FtvwBPKulfH0XFRTG35tBR3LCGhLc+Xy38+YJc3cT9 u1hIvyh4SChCtQuho0c4fCjwVvFwmYHJvSNFKRzoRbzT/V49F8gpiTDPw8V/DHJq 3w8a4rKeGyJVrCzWLuXPwCPLAhCeSQmn48jfvm7+RXBmuqnxwBTPSDV/N1bFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPAX78NPhjmZWptwN/OdvPD+XfNAwHwYDVR0j BBgwFoAUtfxfCLjEhkAT3DpMpHwiALPCuBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGFkWlNFZGdmc3J6c1dTYld1VFBKYnBFWHZUU0FWYXQ0bWdXdDl0Q0hM ZEQvMS9CNUZDNUYwOEI4QzQ4NjQwMTNEQzNBNENBNDdDMjIwMEIzQzJCODE5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RkM1RjA4QjhDNDg2NDAx M0RDM0E0Q0E0N0MyMjAwQjNDMkI4MTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGFkWlNFZGdmc3J6c1dTYld1VFBKYnBFWHZUU0FWYXQ0bWdXdDl0Q0hMZEQvMS9C NUZDNUYwOEI4QzQ4NjQwMTNEQzNBNENBNDdDMjIwMEIzQzJCODE5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAexVmrDMuy410867UvMHCAtkMXbJLhZVhQlp2ItCLWnvnze3mPYeYLDxKcm3H Y+wB0kikGTly6YaMvzailJcpMxy/gP/TOXsfyTBU1Rfxa6wOwx40ChlPBMQ5B4dF uMN8vewUcndaF6SDHGP8sRLpS7+TmsjWlSgCCNCKJlGT37vCO20LUQJ39/ZhBWpZ Z372f340jhdCq+frUSYkQlUWx0X47l0t/eFZz6kCf7MRPWZ+Wco+IevNS/RHP44H 2WPF6ucnt3qdHMoz2R9/GyfEPlXWlBauR2BsaqvqtZXi0Ikp/TETCeSFtbvUvbJZ GtwcgwZ2ZVhOiaoDFU5uVdBWYQ== -----END CERTIFICATE-----Generated at Mon Apr 28 01:04:31 2025 by rpki-client