$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft File: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft (raw, json) Hash identifier: guuwuyMMXspYeiEDyz/sRqVYrRPLb0T/e2psui4ucdc= Subject key identifier: 93:89:B6:76:FF:6E:22:BA:02:1C:E6:16:46:5B:86:5B:3F:47:76:E2 Authority key identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 Certificate issuer: /CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Certificate serial: 397EB134B879C2ED6618E74EDEF3733186E60608 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft Manifest number: 0217 Signing time: Thu 08 May 2025 10:34:11 +0000 Manifest this update: Thu 08 May 2025 10:29:11 +0000 Manifest next update: Fri 09 May 2025 13:53:11 +0000 Files and hashes: 1: 323830313a62363a3a2f33322d3438203d3e20323633303833.roa (hash: /sq5AM8I6YaMflMxl5q4xXK1dCuBrTD/NmShXyjbG5M=) 2: 3137392e3130362e3139322e302f31382d3234203d3e20323633303833.roa (hash: fFcuOyny+lMAM8e0QThYzGDXjn34h9O3teYEKFUfcPs=) 3: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl (hash: y/3G+NrRo1xKGc0oHJRny+r8caxEdF2Bh3YpPpn/1fU=) 4: 3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa (hash: rojlOjdeX3UrPuGCG6PrXeAls8xreKNh9ggg9OI9Em4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 13:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7e:b1:34:b8:79:c2:ed:66:18:e7:4e:de:f3:73:31:86:e6:06:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Validity Not Before: May 8 10:29:11 2025 GMT Not After : May 9 13:53:11 2025 GMT Subject: CN=9389B676FF6E22BA021CE616465B865B3F4776E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:01:fb:70:f7:e9:d6:6d:21:85:1f:db:ff: e9:c7:29:ee:03:59:73:03:b1:3d:5e:c7:8c:af:b3: 59:dd:5d:72:38:78:a8:a3:42:46:7e:a3:c9:0c:0e: 3f:17:b3:32:fc:d0:a9:f6:ba:de:f2:4d:dc:39:68: 62:9a:6d:a1:64:7c:a6:54:45:05:54:1d:fc:50:28: 38:42:14:47:a1:6a:a2:1f:50:4f:ba:c3:8d:7c:f8: 63:69:b1:71:1c:bc:b0:7d:9b:6e:de:58:a1:de:39: 25:b8:dd:9f:96:fd:f7:a5:2f:f2:fb:a2:cf:b6:32: fe:c3:09:2a:32:8c:1f:93:f4:08:d7:20:97:0b:fe: 19:e3:b1:d3:04:3f:90:f8:75:88:29:8b:b0:85:d3: 02:a0:41:5d:36:2b:35:5e:a2:f1:26:23:b0:c5:c5: ed:e1:b3:99:a5:42:14:ac:4c:91:6c:58:c1:36:97: 16:dd:f4:23:33:0f:08:c7:d4:14:1b:55:69:f6:2f: e4:0c:4f:06:a5:80:9a:db:f1:48:38:83:d3:fd:4a: ac:d6:3f:4d:54:66:14:40:8e:72:4b:65:a0:bf:30: cf:78:59:e9:de:4c:fd:22:df:34:6b:85:ff:40:ff: 3e:3b:79:b1:49:d7:79:88:9b:95:1d:ee:f2:9b:f6: 65:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:89:B6:76:FF:6E:22:BA:02:1C:E6:16:46:5B:86:5B:3F:47:76:E2 X509v3 Authority Key Identifier: keyid:F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:53:bf:22:70:80:20:92:bf:8c:6e:fc:9a:33:c4:db:9b:ff: 7d:e8:a9:65:22:2c:5d:ae:e1:dd:9b:27:5d:50:0b:5b:f3:99: 58:14:a2:9f:99:18:2e:73:81:64:db:18:d0:24:12:97:5c:63: e7:b1:e5:d3:65:88:e5:ae:6a:e2:8e:bf:6b:1b:57:7b:2c:7e: 02:00:79:af:cc:7c:aa:66:25:16:3f:e4:bc:d8:fa:0b:95:64: ae:be:58:dd:2e:de:8b:5f:ba:23:a1:28:25:d2:2f:b6:95:56: ed:3e:6d:67:d1:e2:22:ad:5d:bf:60:48:ac:23:6e:50:a3:90: 26:2c:a3:80:eb:d3:9b:f1:24:b5:43:b9:f0:8f:49:65:d1:66: fb:74:e0:26:0b:72:e1:55:ff:ec:3b:1d:9d:c0:66:78:0f:a5: 2c:15:b4:fa:fc:db:65:14:69:d2:c5:30:59:0e:e9:ca:1c:88: 82:8a:7f:02:80:d5:b6:43:fe:3f:a0:59:95:68:f3:b6:ac:e5: 8b:a9:22:8b:53:21:1b:fa:31:77:22:10:6f:3c:30:37:f4:db: 11:62:39:9b:31:17:30:b9:77:38:4e:93:03:d2:49:22:5d:f8: 05:67:19:f7:8c:01:f7:c9:1a:e3:bf:16:1d:b3:39:ec:68:81: 20:1b:dc:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOX6xNLh5wu1mGOdO3vNzMYbmBggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBOThGNzc5RDNCRUY2NTk1OTZCNjRCMzJCMjhFQjZB RkU4RUFCNTAeFw0yNTA1MDgxMDI5MTFaFw0yNTA1MDkxMzUzMTFaMDMxMTAvBgNV BAMTKDkzODlCNjc2RkY2RTIyQkEwMjFDRTYxNjQ2NUI4NjVCM0Y0Nzc2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PwH7cPfp1m0hhR/b/+nHKe4D WXMDsT1ex4yvs1ndXXI4eKijQkZ+o8kMDj8XszL80Kn2ut7yTdw5aGKabaFkfKZU RQVUHfxQKDhCFEehaqIfUE+6w418+GNpsXEcvLB9m27eWKHeOSW43Z+W/felL/L7 os+2Mv7DCSoyjB+T9AjXIJcL/hnjsdMEP5D4dYgpi7CF0wKgQV02KzVeovEmI7DF xe3hs5mlQhSsTJFsWME2lxbd9CMzDwjH1BQbVWn2L+QMTwalgJrb8Ug4g9P9SqzW P01UZhRAjnJLZaC/MM94WeneTP0i3zRrhf9A/z47ebFJ13mIm5Ud7vKb9mXbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUk4m2dv9uIroCHOYWRluGWz9HduIwHwYDVR0j BBgwFoAU8KmPd50772WVlrZLMrKOtq/o6rUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRt OWIvMS9GMEE5OEY3NzlEM0JFRjY1OTU5NkI2NEIzMkIyOEVCNkFGRThFQUI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwQTk4Rjc3OUQzQkVGNjU5 NTk2QjY0QjMyQjI4RUI2QUZFOEVBQjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRtOWIvMS9G MEE5OEY3NzlEM0JFRjY1OTU5NkI2NEIzMkIyOEVCNkFGRThFQUI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMFO/InCAIJK/jG78mjPE25v/feipZSIsXa7h3ZsnXVALW/OZWBSin5kYLnOB ZNsY0CQSl1xj57Hl02WI5a5q4o6/axtXeyx+AgB5r8x8qmYlFj/kvNj6C5Vkrr5Y 3S7ei1+6I6EoJdIvtpVW7T5tZ9HiIq1dv2BIrCNuUKOQJiyjgOvTm/EktUO58I9J ZdFm+3TgJgty4VX/7DsdncBmeA+lLBW0+vzbZRRp0sUwWQ7pyhyIgop/AoDVtkP+ P6BZlWjztqzli6kii1MhG/oxdyIQbzwwN/TbEWI5mzEXMLl3OE6TA9JJIl34BWcZ 94wB98ka478WHbM57GiBIBvctg== -----END CERTIFICATE-----Generated at Thu May 8 18:56:19 2025 by rpki-client