$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft (raw, json) Hash identifier: 0zOxMbs0MhWeQev7nGHwrXp9wlFfHWZ3Xm+Bffi0jN4= Subject key identifier: F6:28:F1:C6:EA:E4:B1:56:07:FC:C5:07:EA:3F:63:3B:96:8B:BF:2E Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Certificate serial: 4A4B709F2F4594DEE843928C1CE1D8ECDB953AF0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft Manifest number: 0219 Signing time: Wed 14 May 2025 01:00:45 +0000 Manifest this update: Wed 14 May 2025 00:55:45 +0000 Manifest next update: Thu 15 May 2025 04:14:45 +0000 Files and hashes: 1: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: wSJhi1S05V7GQRNGEWnijrWNvzw3gRpbBV6Jq+msVUQ=) 2: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl (hash: 7vFbkHHfAIZYAHBNz6ow15VNYcrK0hxUaDVXjBm9NkQ=) 3: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: yg/+CVjgu2k2RC6iZyS5wyy4SKTfUj/bl2VpXsl7RJA=) 4: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: otfkJ+39Wo2DP48qp0COa/OrUo7snPzB+Sul36LhuX0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 May 2025 02:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4b:70:9f:2f:45:94:de:e8:43:92:8c:1c:e1:d8:ec:db:95:3a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Validity Not Before: May 14 00:55:45 2025 GMT Not After : May 15 04:14:45 2025 GMT Subject: CN=F628F1C6EAE4B15607FCC507EA3F633B968BBF2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:df:11:0e:f5:4c:78:46:df:0f:4b:f0:4f:67: c0:ca:ea:b8:ca:92:db:88:f7:64:fc:d2:16:85:43: 53:d8:72:e3:65:4e:e7:60:76:8f:1e:4e:1f:4c:3e: 93:0c:9c:a0:01:41:ae:07:3f:81:2f:cb:ac:4e:fa: ae:b0:6a:ff:ca:21:5e:82:cf:6a:db:c9:00:6f:77: 5a:c7:ea:86:7c:b2:78:8e:52:31:d5:fc:9a:bb:7b: 05:93:40:18:5c:52:ce:c9:1c:83:67:34:2a:7a:13: 25:f0:96:7d:4f:c7:f9:d9:98:b4:62:9d:98:35:05: ad:8a:fb:11:57:15:34:fe:12:4f:6b:8e:b7:a8:ae: b1:a9:8f:44:df:ea:79:11:46:9c:45:1a:35:0a:3c: c6:dd:57:46:45:69:20:5d:7a:30:9e:02:cf:5c:17: a2:a1:42:a8:a2:78:2f:a5:6d:81:06:32:68:7e:17: 35:df:9d:88:ba:87:72:17:5b:84:05:a4:5e:04:af: 06:cb:1e:45:77:15:7a:97:1e:3b:9b:16:68:57:6f: 70:d9:22:6d:35:db:c8:fb:2a:ed:b9:bf:66:74:c1: e5:ff:6c:6d:ea:37:93:c0:41:1d:ee:64:f0:59:aa: 80:8e:4d:42:cf:d9:1a:eb:12:21:08:61:3e:bc:94: 81:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:28:F1:C6:EA:E4:B1:56:07:FC:C5:07:EA:3F:63:3B:96:8B:BF:2E X509v3 Authority Key Identifier: keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:9d:24:df:95:f6:bb:82:87:49:a5:c8:f1:e8:a2:99:0c:f8: 5d:27:1c:11:96:8e:13:b4:b8:3e:e9:21:74:55:79:42:f0:dc: b1:ab:79:73:21:cd:64:92:c6:be:0a:c2:f2:b7:b2:49:19:e9: e5:fa:26:2c:e3:d7:6b:b2:27:bf:d1:ab:e6:31:dc:09:0b:fa: e9:22:d8:c5:fd:da:cd:26:8d:eb:ae:88:35:76:e0:63:2c:8e: aa:20:ab:30:3a:76:dd:a4:c4:bd:51:4d:a1:99:27:1e:89:0d: 9f:64:9d:66:f6:57:f4:f1:1b:81:42:eb:01:a2:08:89:c2:17: 2d:e2:a9:64:e5:f0:7f:b3:62:17:20:cd:ab:69:90:de:71:a4: 55:64:61:f4:77:90:92:36:b2:ec:86:42:10:ca:e6:28:57:2e: d1:2f:09:38:f1:7a:95:1d:05:bf:49:f2:21:50:0e:c9:39:42: b8:31:17:a8:e6:4c:7e:d1:0e:c6:50:cf:3c:eb:b4:49:5f:7f: cb:75:7f:c9:99:cf:99:ca:e7:ae:5e:b6:16:8d:72:f2:50:6e: d3:be:ae:d5:ac:c6:2e:1d:fe:91:fc:73:6d:f7:3f:30:8a:cd: e6:ee:0d:f6:74:02:1b:68:91:2a:ec:0b:c2:7d:3e:bb:8a:e8: 29:d7:f0:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSktwny9FlN7oQ5KMHOHY7NuVOvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2 MUJGODVDRTAeFw0yNTA1MTQwMDU1NDVaFw0yNTA1MTUwNDE0NDVaMDMxMTAvBgNV BAMTKEY2MjhGMUM2RUFFNEIxNTYwN0ZDQzUwN0VBM0Y2MzNCOTY4QkJGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD23xEO9Ux4Rt8PS/BPZ8DK6rjK ktuI92T80haFQ1PYcuNlTudgdo8eTh9MPpMMnKABQa4HP4Evy6xO+q6wav/KIV6C z2rbyQBvd1rH6oZ8sniOUjHV/Jq7ewWTQBhcUs7JHINnNCp6EyXwln1Px/nZmLRi nZg1Ba2K+xFXFTT+Ek9rjreorrGpj0Tf6nkRRpxFGjUKPMbdV0ZFaSBdejCeAs9c F6KhQqiieC+lbYEGMmh+FzXfnYi6h3IXW4QFpF4ErwbLHkV3FXqXHjubFmhXb3DZ Im0128j7Ku25v2Z0weX/bG3qN5PAQR3uZPBZqoCOTULP2RrrEiEIYT68lIENAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9ijxxurksVYH/MUH6j9jO5aLvy4wHwYDVR0j BBgwFoAUi66ckOvFCC+AIFXvqmNgxmG/hc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNL ODUvMS84QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQUU5QzkwRUJDNTA4MkY4 MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS84 QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApJ0k35X2u4KHSaXI8eiimQz4XSccEZaOE7S4PukhdFV5QvDcsat5cyHNZJLG vgrC8reySRnp5fomLOPXa7Inv9Gr5jHcCQv66SLYxf3azSaN666INXbgYyyOqiCr MDp23aTEvVFNoZknHokNn2SdZvZX9PEbgULrAaIIicIXLeKpZOXwf7NiFyDNq2mQ 3nGkVWRh9HeQkjay7IZCEMrmKFcu0S8JOPF6lR0Fv0nyIVAOyTlCuDEXqOZMftEO xlDPPOu0SV9/y3V/yZnPmcrnrl62Fo1y8lBu076u1azGLh3+kfxzbfc/MIrN5u4N 9nQCG2iRKuwLwn0+u4roKdfw2g== -----END CERTIFICATE-----Generated at Wed May 14 05:03:51 2025 by rpki-client