$ rpki-client -vvf rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft File: 8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft (raw, json) Hash identifier: 92t6xftK9EWKcZmd4xRGXBapSNGtz5KLsG/dkSShwo0= Subject key identifier: 24:8F:1D:DE:7B:1F:6E:45:FB:72:F4:1B:97:10:06:99:D3:37:42:A1 Authority key identifier: 8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10 Certificate issuer: /CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810 Certificate serial: 393AE92A989F7675493E60DA9CEF91D1EBF1B184 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer Subject info access: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft Manifest number: 0195 Signing time: Fri 09 May 2025 12:08:40 +0000 Manifest this update: Fri 09 May 2025 12:03:40 +0000 Manifest next update: Sat 10 May 2025 15:38:40 +0000 Files and hashes: 1: 8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl (hash: Cf2R+xDgWSfygL4ynRbUp5jR9Qv/mz5yU5Sy3pKpc3k=) 2: 323830343a313735633a3a2f33322d313238203d3e20323633313430.roa (hash: x587Lrt580u6pX95jO9tbtO9fIEXDxxCy29IVbuBkhw=) 3: 3139312e362e3134302e302f32322d3332203d3e20323633313430.roa (hash: wMPhwjYkOWGZ9HZ4zm0ZYYXDA+LnFz+G36xuUiIu3RQ=) 4: 3136382e3230352e3134342e302f32322d3332203d3e20323633313430.roa (hash: RKRK6f2+50dUOAqFH5xX0UuHcDBZ7nt7CetvSRr7nOw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 May 2025 15:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3a:e9:2a:98:9f:76:75:49:3e:60:da:9c:ef:91:d1:eb:f1:b1:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810 Validity Not Before: May 9 12:03:40 2025 GMT Not After : May 10 15:38:40 2025 GMT Subject: CN=248F1DDE7B1F6E45FB72F41B97100699D33742A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:d6:5a:d8:0a:35:27:0c:87:aa:b3:eb:7b: a8:ba:0f:f2:e4:04:97:ed:b4:b8:60:52:09:93:f4: 04:c0:84:94:40:e4:05:45:2d:4c:20:29:23:5a:9a: aa:ea:c4:32:57:ae:b0:5d:1a:43:73:76:85:11:a6: a0:7d:c0:03:b9:c3:e1:09:08:a6:44:1d:ff:f9:a9: 7a:3f:d3:8a:13:9b:69:70:32:ca:14:2a:33:53:aa: ae:8a:7a:39:83:02:3c:85:c7:3f:53:e3:34:aa:cb: d3:d4:aa:55:05:72:4d:05:b4:87:23:cb:d9:cc:41: 3c:e1:4c:43:4c:18:8a:99:2d:dc:0e:48:c3:af:c8: d7:8f:b3:ac:89:13:3b:cd:a2:40:86:95:07:32:31: c8:14:1d:13:44:3d:3f:ec:4f:b2:33:a7:8c:b0:2c: 8c:65:91:b8:61:66:40:9f:a2:ea:e4:2c:43:5c:37: 67:45:8c:80:c2:c6:ca:ee:36:ab:22:66:36:2d:91: 8b:11:e3:b2:5c:1a:ca:25:67:cb:5e:05:b8:e6:71: 93:35:98:3a:6e:98:11:3a:57:fd:d3:de:0a:8d:b9: 3a:af:19:6f:98:b0:53:b3:d4:e3:70:e6:7f:3d:18: ec:ad:c3:27:0f:f2:9e:b2:36:4f:a9:63:e0:dc:39: 28:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8F:1D:DE:7B:1F:6E:45:FB:72:F4:1B:97:10:06:99:D3:37:42:A1 X509v3 Authority Key Identifier: keyid:8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:1f:aa:37:d2:5c:ae:87:49:93:a6:8d:d1:da:d7:56:11:30: fe:54:65:83:0b:12:8a:0b:81:43:32:06:ac:d7:86:c6:15:19: 86:4f:83:86:c0:45:4e:c0:de:57:c7:b2:c3:2d:cc:b2:df:c8: a3:cd:26:ae:06:6f:26:99:ea:d0:23:87:58:b8:99:3d:b7:9f: 1e:fa:02:c0:0c:0a:18:2a:d8:18:38:c8:36:00:40:4c:45:5b: 48:26:f8:11:93:e7:a0:8f:6e:c0:d2:4e:70:ef:e6:dc:21:0d: d4:ef:db:4c:b6:7f:54:5d:36:8d:15:e0:2c:31:eb:7d:25:7c: 5f:fc:82:b4:0e:9b:13:6a:e1:18:a5:13:34:0a:a4:da:dd:88: 19:ea:44:46:97:6d:d3:1e:47:26:88:5b:6b:c1:99:60:45:a3: c1:c1:35:87:e7:9d:14:60:bd:c7:13:f1:47:58:4f:4b:24:85: 52:b7:40:83:7a:51:d2:0c:ac:3a:85:1f:61:c3:18:fc:44:8b: e0:c5:7e:87:9c:79:95:b3:fd:36:bc:3f:61:cb:d4:04:51:19: 8f:17:f0:af:19:75:20:4c:c6:dd:35:d7:62:bf:a6:36:37:76: 67:d2:ef:86:88:78:a3:9e:ea:5a:8d:bd:22:d8:00:84:12:04: 0c:19:91:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOTrpKpifdnVJPmDanO+R0evxsYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYzMjdGRUZBNEU4Nzg4RkZDRkRDRDdDNkQxOTA2NDBG OEE2MjgxMDAeFw0yNTA1MDkxMjAzNDBaFw0yNTA1MTAxNTM4NDBaMDMxMTAvBgNV BAMTKDI0OEYxRERFN0IxRjZFNDVGQjcyRjQxQjk3MTAwNjk5RDMzNzQyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpIdZa2Ao1JwyHqrPre6i6D/Lk BJfttLhgUgmT9ATAhJRA5AVFLUwgKSNamqrqxDJXrrBdGkNzdoURpqB9wAO5w+EJ CKZEHf/5qXo/04oTm2lwMsoUKjNTqq6KejmDAjyFxz9T4zSqy9PUqlUFck0FtIcj y9nMQTzhTENMGIqZLdwOSMOvyNePs6yJEzvNokCGlQcyMcgUHRNEPT/sT7Izp4yw LIxlkbhhZkCfourkLENcN2dFjIDCxsruNqsiZjYtkYsR47JcGsolZ8teBbjmcZM1 mDpumBE6V/3T3gqNuTqvGW+YsFOz1ONw5n89GOytwycP8p6yNk+pY+DcOSh3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJI8d3nsfbkX7cvQblxAGmdM3QqEwHwYDVR0j BBgwFoAUjzJ/76ToeI/8/c18bRkGQPimKBAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnpWUjI5bmhrRkFyam0zYm9HNnhySkNWUFEzNmI1RGFlVnN5bjQ0U1p0 QUIvMC84RjMyN0ZFRkE0RTg3ODhGRkNGRENEN0M2RDE5MDY0MEY4QTYyODEwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGMzI3RkVGQTRFODc4OEZG Q0ZEQ0Q3QzZEMTkwNjQwRjhBNjI4MTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnpWUjI5bmhrRkFyam0zYm9HNnhySkNWUFEzNmI1RGFlVnN5bjQ0U1p0QUIvMC84 RjMyN0ZFRkE0RTg3ODhGRkNGRENEN0M2RDE5MDY0MEY4QTYyODEwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWB+qN9JcrodJk6aN0drXVhEw/lRlgwsSiguBQzIGrNeGxhUZhk+DhsBFTsDe V8eywy3Mst/Io80mrgZvJpnq0COHWLiZPbefHvoCwAwKGCrYGDjINgBATEVbSCb4 EZPnoI9uwNJOcO/m3CEN1O/bTLZ/VF02jRXgLDHrfSV8X/yCtA6bE2rhGKUTNAqk 2t2IGepERpdt0x5HJohba8GZYEWjwcE1h+edFGC9xxPxR1hPSySFUrdAg3pR0gys OoUfYcMY/ESL4MV+h5x5lbP9Nrw/YcvUBFEZjxfwrxl1IEzG3TXXYr+mNjd2Z9Lv hoh4o57qWo29ItgAhBIEDBmRMA== -----END CERTIFICATE-----Generated at Fri May 9 15:58:48 2025 by rpki-client