$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft File: EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft (raw, json) Hash identifier: ezucBUg+pmMYSQhDLZy6KfV0OFcg7ZRneaLKKm5YI3E= Subject key identifier: A3:37:FC:AE:93:E8:27:79:C2:31:15:25:58:D0:FB:E8:68:94:A2:A8 Authority key identifier: EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73 Certificate issuer: /CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73 Certificate serial: 5B322165D2FB3EEA573670BEFD44B4CD4D80595E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer Subject info access: rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft Manifest number: 0223 Signing time: Fri 16 May 2025 20:00:00 +0000 Manifest this update: Fri 16 May 2025 19:55:00 +0000 Manifest next update: Sat 17 May 2025 20:44:00 +0000 Files and hashes: 1: 3137372e3132352e32302e302f32322d3234203d3e203532363335.roa (hash: zB3RAYBJ5ds+DR9vGHFVJDE/Fhcry/mu8n6ADfs/cdI=) 2: 323830343a6438303a3a2f33322d3438203d3e203532363335.roa (hash: h5ZbShRyf6a9djvBfVUYZNDwI63lUNghsgSzyARdb0k=) 3: EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl (hash: UoZUfNogtscCdLqLJNiyGfR8JYECYQtZURy3138sMws=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 May 2025 20:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:32:21:65:d2:fb:3e:ea:57:36:70:be:fd:44:b4:cd:4d:80:59:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73 Validity Not Before: May 16 19:55:00 2025 GMT Not After : May 17 20:44:00 2025 GMT Subject: CN=A337FCAE93E82779C231152558D0FBE86894A2A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:78:ba:b3:fe:bc:fb:39:19:05:c4:d4:d8: 1c:cd:c0:66:b7:f0:36:31:3e:f0:5c:f6:01:3b:11: e1:1c:d0:e2:cd:5a:a8:37:5c:07:8b:92:45:34:b2: fc:0b:c4:20:21:a1:32:87:9e:e5:b1:c0:98:41:8e: eb:c9:95:1e:dd:06:10:f6:c4:f5:85:c0:a1:43:01: 87:36:5f:00:b8:76:10:9d:fe:63:d0:b4:f9:eb:f6: b3:a0:4a:e6:cc:68:dc:16:4a:9e:26:69:11:22:ee: e8:98:22:5d:50:ab:ed:3c:bf:61:88:28:fe:19:5e: b7:3d:5e:61:d3:7a:44:24:83:19:ce:2e:db:97:75: b3:43:7e:c6:c8:52:70:d9:df:56:63:d6:9f:b5:3d: 4c:ea:e4:4b:c4:fe:e8:2c:79:1e:6f:18:de:6e:0e: 79:38:77:57:d8:81:b7:47:a3:fe:e5:74:d6:35:22: 86:63:cc:04:00:8d:3f:e6:9b:d7:17:25:20:e3:4b: 2e:eb:5e:55:8b:af:45:55:dd:d0:98:8e:b1:40:f3: 5e:de:72:f5:98:7a:c2:d4:b6:a0:df:93:04:4f:f0: 74:86:b8:4f:7e:dd:72:7c:45:63:8e:6b:24:1a:22: b3:5d:7e:39:a3:ec:fd:f9:d0:d5:45:97:f3:9e:87: ea:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:37:FC:AE:93:E8:27:79:C2:31:15:25:58:D0:FB:E8:68:94:A2:A8 X509v3 Authority Key Identifier: keyid:EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:7b:e3:fe:d3:31:ed:2d:c4:15:e5:dc:c6:ef:32:82:a1:84: 24:90:ba:92:bd:e6:ac:ea:2b:1e:e9:81:c9:2c:85:67:14:6d: ba:20:97:73:7f:d2:2f:31:90:0a:8c:1e:ed:31:49:2d:60:8b: e7:a6:07:7e:41:5c:f0:d5:8e:35:ba:b2:04:03:1f:c2:16:ec: 22:dc:61:43:91:32:ba:eb:0f:dd:ec:18:ce:bb:b2:93:e3:60: e9:8f:73:e5:89:19:50:d2:52:f7:18:01:74:50:4f:43:4f:e4: 6f:eb:f4:10:c9:88:3d:61:5f:ee:b7:31:3c:36:01:97:b1:11: cc:fc:51:3d:ae:07:3f:a4:eb:20:77:d3:ed:cd:3e:f6:4d:53: a8:8e:ec:3a:89:18:27:88:a7:f1:c7:fb:6f:0f:fe:b6:99:9d: cc:25:e5:bf:6e:fa:4a:b5:c0:ae:9e:4c:2d:96:59:8c:03:f4: 98:f1:76:d5:94:44:1e:b8:0e:4b:97:95:1a:75:32:6b:6c:38: 4a:09:d8:6a:d9:6e:e0:4b:1a:52:4e:d4:28:76:1b:d7:19:0b: 9f:26:b5:45:75:6d:aa:b7:2f:4a:c4:eb:88:bc:09:bf:f8:4e: 7c:25:18:30:8f:e9:2e:42:73:50:da:0e:6b:42:33:b8:b5:07: 96:77:bb:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWzIhZdL7PupXNnC+/US0zU2AWV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMwODY1NTgyMTU4NUEwQTVCN0Q2QTBFNTJGQzc0RUY1 MUY5MEU3MzAeFw0yNTA1MTYxOTU1MDBaFw0yNTA1MTcyMDQ0MDBaMDMxMTAvBgNV BAMTKEEzMzdGQ0FFOTNFODI3NzlDMjMxMTUyNTU4RDBGQkU4Njg5NEEyQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aHi6s/68+zkZBcTU2BzNwGa3 8DYxPvBc9gE7EeEc0OLNWqg3XAeLkkU0svwLxCAhoTKHnuWxwJhBjuvJlR7dBhD2 xPWFwKFDAYc2XwC4dhCd/mPQtPnr9rOgSubMaNwWSp4maREi7uiYIl1Qq+08v2GI KP4ZXrc9XmHTekQkgxnOLtuXdbNDfsbIUnDZ31Zj1p+1PUzq5EvE/ugseR5vGN5u Dnk4d1fYgbdHo/7ldNY1IoZjzAQAjT/mm9cXJSDjSy7rXlWLr0VV3dCYjrFA817e cvWYesLUtqDfkwRP8HSGuE9+3XJ8RWOOayQaIrNdfjmj7P350NVFl/Oeh+rLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUozf8rpPoJ3nCMRUlWND76GiUoqgwHwYDVR0j BBgwFoAU7AhlWCFYWgpbfWoOUvx071H5DnMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3RKR2p2cjZ1ZVZxU1NiRnV2Z1NIbnpORXlSMlZrSkh3TWN1OVRBOW1h bUUvMS9FQzA4NjU1ODIxNTg1QTBBNUI3RDZBMEU1MkZDNzRFRjUxRjkwRTczLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDMDg2NTU4MjE1ODVBMEE1 QjdENkEwRTUyRkM3NEVGNTFGOTBFNzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3RKR2p2cjZ1ZVZxU1NiRnV2Z1NIbnpORXlSMlZrSkh3TWN1OVRBOW1hbUUvMS9F QzA4NjU1ODIxNTg1QTBBNUI3RDZBMEU1MkZDNzRFRjUxRjkwRTczLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd3vj/tMx7S3EFeXcxu8ygqGEJJC6kr3mrOorHumBySyFZxRtuiCXc3/SLzGQ Cowe7TFJLWCL56YHfkFc8NWONbqyBAMfwhbsItxhQ5EyuusP3ewYzruyk+Ng6Y9z 5YkZUNJS9xgBdFBPQ0/kb+v0EMmIPWFf7rcxPDYBl7ERzPxRPa4HP6TrIHfT7c0+ 9k1TqI7sOokYJ4in8cf7bw/+tpmdzCXlv276SrXArp5MLZZZjAP0mPF21ZREHrgO S5eVGnUya2w4SgnYatlu4EsaUk7UKHYb1xkLnya1RXVtqrcvSsTriLwJv/hOfCUY MI/pLkJzUNoOa0IzuLUHlne7VA== -----END CERTIFICATE-----Generated at Sat May 17 03:40:39 2025 by rpki-client