$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.mft File: B27B85F02C63CD742721D85E375F5A98C91ED00B.mft (raw, json) Hash identifier: 573yp7p2zCSdOZe24lesZKGhtXVI/aTWDijKucDTEUE= Subject key identifier: 66:B3:DD:8C:AF:70:F2:0E:80:9B:C8:B1:F1:E0:6C:4D:D6:EA:00:BC Authority key identifier: B2:7B:85:F0:2C:63:CD:74:27:21:D8:5E:37:5F:5A:98:C9:1E:D0:0B Certificate issuer: /CN=B27B85F02C63CD742721D85E375F5A98C91ED00B Certificate serial: 164C021316314C4C810D8CA4106E79DF8490CC62 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27B85F02C63CD742721D85E375F5A98C91ED00B.cer Subject info access: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.mft Manifest number: 0D Signing time: Wed 14 May 2025 06:36:42 +0000 Manifest this update: Wed 14 May 2025 06:31:42 +0000 Manifest next update: Thu 15 May 2025 08:50:42 +0000 Files and hashes: 1: 3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa (hash: 2wuK83kGggWH4E8N6EQeR0Ft9R1UVymLSxczmk6VfBc=) 2: B27B85F02C63CD742721D85E375F5A98C91ED00B.crl (hash: Uqn53NOlmvIrhYghOmzADdcPd40yxogY66ChzE9bBUs=) 3: 3137302e38302e36382e302f32322d3234203d3e20323633393035.roa (hash: rbpFePIighvyZfYolRY0ciD0LBZZ3+jrzRt5MfVVy98=) 4: 323830343a323738303a3a2f33322d3334203d3e20323633393035.roa (hash: q++Y8uDb0QZkkc+9358Zhs1Jsl0QBiuDx2Mno5lvNRs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.crl rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27B85F02C63CD742721D85E375F5A98C91ED00B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 May 2025 02:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:4c:02:13:16:31:4c:4c:81:0d:8c:a4:10:6e:79:df:84:90:cc:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B27B85F02C63CD742721D85E375F5A98C91ED00B Validity Not Before: May 14 06:31:42 2025 GMT Not After : May 15 08:50:42 2025 GMT Subject: CN=66B3DD8CAF70F20E809BC8B1F1E06C4DD6EA00BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:04:6f:a5:6a:b1:12:f3:18:5b:7d:ba:65:e6: f3:46:a2:e8:77:b6:ce:d4:24:57:df:5d:94:ea:42: 7e:43:95:25:3e:6d:f1:81:44:42:de:15:57:56:21: ae:82:05:67:94:5a:89:87:5d:be:cd:e6:43:7c:21: 4a:21:d3:05:5c:f5:8e:11:10:c6:b9:ec:f0:01:3e: 79:eb:35:0e:23:4d:88:fb:45:ba:2a:3c:9e:22:c8: 7b:e3:1e:d0:ec:49:78:e7:6a:96:a9:8b:a1:7d:84: 32:8c:f3:58:1a:ad:d8:a1:70:99:5a:d6:de:c4:ea: 47:cb:7f:b7:31:f1:0f:ca:c0:e9:8b:27:23:bc:53: 8a:a1:c4:06:e5:f1:93:0d:a7:79:4c:46:2a:ed:cc: e7:85:5a:7f:a5:55:04:b5:7a:d1:40:1d:5b:1e:4e: b4:66:98:1d:db:19:f7:56:a0:a4:89:51:a4:81:40: b0:de:9a:f7:62:fd:a3:c1:b0:d8:ab:2a:bb:68:b6: e9:45:ca:80:a0:44:a9:16:f6:d1:8e:39:25:d0:3a: f9:47:ed:c3:45:d8:89:c4:b4:0f:f5:01:b5:75:2e: 58:0a:ea:ed:62:8f:ec:36:e0:63:43:32:d0:0d:01: d4:55:18:1d:ed:4e:a5:d8:f7:a1:b4:d1:43:ae:cb: 09:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B3:DD:8C:AF:70:F2:0E:80:9B:C8:B1:F1:E0:6C:4D:D6:EA:00:BC X509v3 Authority Key Identifier: keyid:B2:7B:85:F0:2C:63:CD:74:27:21:D8:5E:37:5F:5A:98:C9:1E:D0:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27B85F02C63CD742721D85E375F5A98C91ED00B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:db:6c:af:73:b8:c0:36:8f:bf:04:50:62:f0:67:b9:15:d2: 22:1c:31:cd:42:33:a9:b7:5d:48:a0:d3:d9:f5:a0:02:90:65: ae:6e:38:19:9e:28:8d:2d:af:e4:5c:10:ab:44:f6:0e:78:22: aa:5f:b5:25:94:76:41:80:c5:3a:8b:cf:cf:54:7a:59:46:7f: fa:e3:98:bf:b5:85:3c:d2:7f:b2:c3:a7:b0:46:13:c2:6c:63: bf:cd:fc:a3:75:4b:f7:48:dd:e4:7e:e4:4f:e0:e5:97:3a:63: bb:f4:d2:6a:44:bd:08:81:09:84:b0:dc:a3:8c:bf:68:23:13: 80:0b:21:79:24:57:8e:ce:a2:74:01:6e:97:92:4b:0d:03:80: 51:5b:9d:e7:b0:8e:82:c2:b5:bd:b8:44:b7:cb:80:f9:8f:40: b3:37:2a:f3:51:01:71:31:67:7e:18:df:50:1d:f7:3f:d8:37: 80:5d:64:08:8e:de:6f:9c:10:00:96:df:27:56:69:6a:d2:53: 13:96:d4:42:e4:63:ac:15:89:b2:9a:ef:d8:ab:1e:e1:93:a3: 7a:e3:dd:49:c0:b2:72:da:eb:7d:b4:8b:18:ea:18:e1:8c:d0: 7d:e5:11:5b:81:ea:da:dd:69:61:ac:65:38:a9:04:14:4f:38: 76:8b:4a:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFkwCExYxTEyBDYykEG5534SQzGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI3Qjg1RjAyQzYzQ0Q3NDI3MjFEODVFMzc1RjVBOThD OTFFRDAwQjAeFw0yNTA1MTQwNjMxNDJaFw0yNTA1MTUwODUwNDJaMDMxMTAvBgNV BAMTKDY2QjNERDhDQUY3MEYyMEU4MDlCQzhCMUYxRTA2QzRERDZFQTAwQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTBG+larES8xhbfbpl5vNGouh3 ts7UJFffXZTqQn5DlSU+bfGBRELeFVdWIa6CBWeUWomHXb7N5kN8IUoh0wVc9Y4R EMa57PABPnnrNQ4jTYj7RboqPJ4iyHvjHtDsSXjnapapi6F9hDKM81gardihcJla 1t7E6kfLf7cx8Q/KwOmLJyO8U4qhxAbl8ZMNp3lMRirtzOeFWn+lVQS1etFAHVse TrRmmB3bGfdWoKSJUaSBQLDemvdi/aPBsNirKrtotulFyoCgRKkW9tGOOSXQOvlH 7cNF2InEtA/1AbV1LlgK6u1ij+w24GNDMtANAdRVGB3tTqXY96G00UOuywmnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZrPdjK9w8g6Am8ix8eBsTdbqALwwHwYDVR0j BBgwFoAUsnuF8CxjzXQnIdheN19amMke0AswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBj eUYvMC9CMjdCODVGMDJDNjNDRDc0MjcyMUQ4NUUzNzVGNUE5OEM5MUVEMDBCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyN0I4NUYwMkM2M0NENzQy NzIxRDg1RTM3NUY1QTk4QzkxRUQwMEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBjeUYvMC9C MjdCODVGMDJDNjNDRDc0MjcyMUQ4NUUzNzVGNUE5OEM5MUVEMDBCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvdtsr3O4wDaPvwRQYvBnuRXSIhwxzUIzqbddSKDT2fWgApBlrm44GZ4ojS2v 5FwQq0T2Dngiql+1JZR2QYDFOovPz1R6WUZ/+uOYv7WFPNJ/ssOnsEYTwmxjv838 o3VL90jd5H7kT+Dllzpju/TSakS9CIEJhLDco4y/aCMTgAsheSRXjs6idAFul5JL DQOAUVud57COgsK1vbhEt8uA+Y9Aszcq81EBcTFnfhjfUB33P9g3gF1kCI7eb5wQ AJbfJ1ZpatJTE5bUQuRjrBWJsprv2Kse4ZOjeuPdScCyctrrfbSLGOoY4YzQfeUR W4Hq2t1pYaxlOKkEFE84dotKTQ== -----END CERTIFICATE-----Generated at Wed May 14 11:44:43 2025 by rpki-client