$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft File: 8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft (raw, json) Hash identifier: mo7+okIW3KVvxE/zAq21eh4a6m89CJ4cuX8hS0qnnGc= Subject key identifier: DE:DD:F2:3C:87:9C:42:0F:7D:2E:EA:58:32:37:1C:FC:A6:7C:1C:56 Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05 Certificate issuer: /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505 Certificate serial: 0247A123AB8BA637CB03454F811E26D0F4A11CD6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer Subject info access: rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft Manifest number: 021E Signing time: Mon 12 May 2025 07:10:22 +0000 Manifest this update: Mon 12 May 2025 07:05:22 +0000 Manifest next update: Tue 13 May 2025 09:23:22 +0000 Files and hashes: 1: 3230302e3138372e3130312e302f32342d3234203d3e20323730363833.roa (hash: rbaOKt87D3c/UdScnRw1BNEUloJVfu1i1+4xUlIseJA=) 2: 3230302e3138372e3130302e302f32332d3233203d3e20323730363833.roa (hash: BxB6GE4kHFzE5wUoGDmDFcb0CWCHJJOVcEpZmmtAjxI=) 3: 3230302e3138372e3130322e302f32342d3234203d3e20323730363833.roa (hash: +Z0ru9BsWPOHlK8tWb0IGKgXDXi0PyLC2vV8M76GVfU=) 4: 323830343a366663343a3a2f33322d3438203d3e20323730363833.roa (hash: 9XM9sCu/TTNlq6V0+SeS3wOQF44MqPp8oXHMdR1O5SQ=) 5: 8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl (hash: pwzhghhEoHaxiRd6HvEijjP8AYolIrCc0v+PfgtifAU=) 6: 3230302e3138372e3130302e302f32342d3234203d3e20323730363833.roa (hash: nskPvpUAon2GR7geuGsQF/wkm/R59aEnIpAp4kUkmdg=) 7: 3230302e3138372e3130302e302f32322d3232203d3e20323730363833.roa (hash: vzsfIDw2oqflztrjwgdkWaCyFMfSI1wnTfFDvenx+5k=) 8: 3230302e3138372e3130322e302f32332d3233203d3e20323730363833.roa (hash: o0hcy/9RDOTJR5RMuj3MyjZzVFgfCkfY0wQiAz+xBIc=) 9: 3230302e3138372e3130332e302f32342d3234203d3e20323730363833.roa (hash: KActml71cD6wjVfmrA4DV2SdMETPMc7+yZI29YEKnmM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 09:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:47:a1:23:ab:8b:a6:37:cb:03:45:4f:81:1e:26:d0:f4:a1:1c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505 Validity Not Before: May 12 07:05:22 2025 GMT Not After : May 13 09:23:22 2025 GMT Subject: CN=DEDDF23C879C420F7D2EEA5832371CFCA67C1C56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:96:2d:0f:72:d3:a1:4e:90:c9:b0:10:8e:77: 3f:0e:ef:04:cc:d7:f6:cf:4b:28:87:18:ea:a4:61: 34:44:0f:e6:a2:92:d7:88:01:47:b1:8b:17:26:61: b6:5c:4a:97:b3:8f:49:4f:b8:68:7d:6d:38:ae:b8: 7a:ee:83:3c:68:f9:b6:7f:59:12:0a:20:39:69:d0: 1b:82:90:e8:1a:a2:ad:50:f9:41:97:33:d8:e1:7c: 9a:8f:13:c5:19:b3:1a:38:5d:d3:34:3b:04:96:6f: 42:07:c4:1e:ad:e7:75:db:46:e3:30:d7:22:75:d1: 44:0a:f4:76:8e:c3:91:8f:79:b2:a2:a1:11:fd:0b: 0e:19:23:23:65:8c:47:0a:07:e2:96:b3:95:dd:4f: 4a:73:4c:d5:e7:16:af:9a:d9:e1:0f:5a:0c:c4:75: da:a7:2d:36:ac:4d:26:08:62:94:d9:71:53:6e:6f: 75:01:e5:b5:dd:44:52:b6:7f:f1:49:f1:5e:c9:b7: 44:2b:d0:8b:32:79:49:71:63:78:78:f3:9a:95:6d: 7c:63:93:8b:80:ac:11:10:d8:99:47:e4:04:3f:13: c5:4c:a5:cd:c1:4a:f0:f5:f0:ca:68:e3:60:a1:fb: aa:4f:09:5b:5c:83:17:99:84:f1:c5:2f:76:8f:74: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DD:F2:3C:87:9C:42:0F:7D:2E:EA:58:32:37:1C:FC:A6:7C:1C:56 X509v3 Authority Key Identifier: keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:47:bf:81:f0:b5:6b:4e:08:5e:0e:3e:54:04:a3:05:d4:29: 1c:78:2b:e5:29:6a:fa:f0:f8:9d:2f:30:49:70:76:fc:0d:db: 88:98:38:c8:b2:14:e3:49:08:52:90:23:b2:37:4f:e6:ed:05: 1a:f2:c5:c2:33:d9:40:b4:8b:0a:c0:b6:6c:f0:ab:46:e7:01: be:74:ec:22:c8:e6:03:9e:59:7f:15:42:09:1b:70:c3:49:cd: 6e:52:72:50:6d:d4:8e:b3:ac:b5:1a:b9:e6:39:8c:6a:98:4d: bc:1a:5b:83:8c:a8:c1:76:e5:72:ec:90:77:18:bc:28:83:07: 1a:24:8c:58:18:0b:fa:df:a2:ca:c5:6c:11:15:02:f6:71:4c: bf:f9:51:65:3c:ea:d4:da:00:ee:29:fa:4c:be:46:91:37:94: b4:f8:08:3d:b8:22:b9:9b:6e:42:37:91:aa:26:03:91:0c:e5: aa:e1:c0:19:92:d2:e2:cb:5c:4a:b5:79:19:4c:8d:d3:f4:15: d3:7f:03:56:19:e6:d8:eb:af:78:c7:b3:10:65:72:e5:01:0e: d4:50:7c:0c:ed:c7:72:e7:35:b1:34:90:9a:c4:7f:b8:22:de: 03:ef:56:de:7d:bb:24:06:17:f3:0d:21:6b:f4:5b:10:18:96: ba:4b:1b:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAkehI6uLpjfLA0VPgR4m0PShHNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVBMjE0OTlEOUY3NkRBODVFRUM4RDhCMUE4RTNCMDY5 RDRDNzUwNTAeFw0yNTA1MTIwNzA1MjJaFw0yNTA1MTMwOTIzMjJaMDMxMTAvBgNV BAMTKERFRERGMjNDODc5QzQyMEY3RDJFRUE1ODMyMzcxQ0ZDQTY3QzFDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEli0PctOhTpDJsBCOdz8O7wTM 1/bPSyiHGOqkYTRED+aikteIAUexixcmYbZcSpezj0lPuGh9bTiuuHrugzxo+bZ/ WRIKIDlp0BuCkOgaoq1Q+UGXM9jhfJqPE8UZsxo4XdM0OwSWb0IHxB6t53XbRuMw 1yJ10UQK9HaOw5GPebKioRH9Cw4ZIyNljEcKB+KWs5XdT0pzTNXnFq+a2eEPWgzE ddqnLTasTSYIYpTZcVNub3UB5bXdRFK2f/FJ8V7Jt0Qr0IsyeUlxY3h485qVbXxj k4uArBEQ2JlH5AQ/E8VMpc3BSvD18Mpo42Ch+6pPCVtcgxeZhPHFL3aPdH1lAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3t3yPIecQg99LupYMjcc/KZ8HFYwHwYDVR0j BBgwFoAUjqIUmdn3bahe7I2LGo47Bp1MdQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkN4dEtnVk5qMlRQZ0cyOHJOUXp6VnI0bjIxNXRWUUV4TWdnSkF1TnJI UHkvMS84RUEyMTQ5OUQ5Rjc2REE4NUVFQzhEOEIxQThFM0IwNjlENEM3NTA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQTIxNDk5RDlGNzZEQTg1 RUVDOEQ4QjFBOEUzQjA2OUQ0Qzc1MDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkN4dEtnVk5qMlRQZ0cyOHJOUXp6VnI0bjIxNXRWUUV4TWdnSkF1TnJIUHkvMS84 RUEyMTQ5OUQ5Rjc2REE4NUVFQzhEOEIxQThFM0IwNjlENEM3NTA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2Ue/gfC1a04IXg4+VASjBdQpHHgr5Slq+vD4nS8wSXB2/A3biJg4yLIU40kI UpAjsjdP5u0FGvLFwjPZQLSLCsC2bPCrRucBvnTsIsjmA55ZfxVCCRtww0nNblJy UG3UjrOstRq55jmMaphNvBpbg4yowXblcuyQdxi8KIMHGiSMWBgL+t+iysVsERUC 9nFMv/lRZTzq1NoA7in6TL5GkTeUtPgIPbgiuZtuQjeRqiYDkQzlquHAGZLS4stc SrV5GUyN0/QV038DVhnm2OuveMezEGVy5QEO1FB8DO3Hcuc1sTSQmsR/uCLeA+9W 3n27JAYX8w0ha/RbEBiWuksbBQ== -----END CERTIFICATE-----Generated at Mon May 12 16:50:36 2025 by rpki-client