$ rpki-client -vvf rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft File: FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft (raw, json) Hash identifier: ZmFaaVQpQsS8n/m8SoSneG3Lrt9GsMosjhS5TGa9Zb0= Subject key identifier: 75:96:E3:48:88:D5:71:52:F4:9A:38:D8:75:DB:54:08:0E:CA:E6:A0 Authority key identifier: FE:FE:D5:72:32:6D:21:BF:FB:D7:33:CF:A0:CC:79:09:DC:EC:50:6E Certificate issuer: /CN=FEFED572326D21BFFBD733CFA0CC7909DCEC506E Certificate serial: 3BE8AFA6F2EE704C994D0E307C7A1DA7FEC0688B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.cer Subject info access: rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft Manifest number: 0202 Signing time: Mon 12 May 2025 07:38:12 +0000 Manifest this update: Mon 12 May 2025 07:33:12 +0000 Manifest next update: Tue 13 May 2025 11:24:12 +0000 Files and hashes: 1: FEFED572326D21BFFBD733CFA0CC7909DCEC506E.crl (hash: 0/WMhbMllsqqsZwHL/MWcBaqHYTFnt6Koq48EGnIucY=) 2: 34352e3136352e3234342e302f32322d3234203d3e20323638363936.roa (hash: DIbmUeE7K1T6Z+QDl25xPwXZ+5ZxXqILs/h/gviwyUw=) 3: 3230312e3135392e3136342e302f32322d3234203d3e20323638363936.roa (hash: 23Qxox38N+0YhSohoMOAf1e2FgGS9Y6vrQAHVJYJktM=) 4: 323830343a353533343a3a2f33322d3438203d3e20323638363936.roa (hash: 7sryI+8DuK4GbvXNpKah2ckHWzv7jMCK04AhX8Y/F9E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.crl rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 11:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e8:af:a6:f2:ee:70:4c:99:4d:0e:30:7c:7a:1d:a7:fe:c0:68:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEFED572326D21BFFBD733CFA0CC7909DCEC506E Validity Not Before: May 12 07:33:12 2025 GMT Not After : May 13 11:24:12 2025 GMT Subject: CN=7596E34888D57152F49A38D875DB54080ECAE6A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5e:20:ed:13:de:29:9a:3c:45:e4:a6:1f:6e: c2:d4:79:15:f4:4e:62:3d:34:8e:41:e6:eb:4e:3f: 5a:b8:40:d3:b0:7d:d9:a1:f4:8b:8e:7a:76:1c:25: 9a:f2:04:e4:71:02:70:f8:8d:cb:a4:8e:1c:d2:bd: d3:99:a5:96:d0:25:5c:54:ad:8d:59:88:01:3c:99: 0b:56:e8:1f:4d:19:26:55:b8:c4:36:9d:80:96:c4: e3:b8:3b:19:0f:78:b7:a9:be:d7:02:ab:36:a0:fd: b0:a4:ce:ef:8e:f2:f4:05:da:2e:99:e7:df:4b:6a: df:78:28:80:29:7f:c7:a3:9c:06:63:fd:10:1c:9e: 32:eb:9a:8f:0a:20:b1:0e:db:1a:6e:9d:55:90:76: 12:a3:63:c7:c8:b6:4d:47:a9:51:26:10:90:87:f4: c5:4f:fc:21:7e:d2:e4:4f:bb:cf:e3:cd:96:dd:d6: 93:ca:c4:db:f3:3e:f2:72:53:ff:d2:a0:51:cb:a7: a5:c4:d4:70:81:8c:37:bd:d9:8f:25:a1:09:95:99: 05:37:b5:a2:c4:65:f7:57:08:76:dc:64:a5:33:27: 72:23:3b:d0:63:67:4e:c1:ef:dc:c8:0d:f1:06:f7: 91:c8:8d:0b:b4:34:a4:9c:fb:7c:9c:dd:58:df:81: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:96:E3:48:88:D5:71:52:F4:9A:38:D8:75:DB:54:08:0E:CA:E6:A0 X509v3 Authority Key Identifier: keyid:FE:FE:D5:72:32:6D:21:BF:FB:D7:33:CF:A0:CC:79:09:DC:EC:50:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:88:80:ce:90:02:44:63:32:05:72:f6:3d:f6:15:fd:2e:09: 26:e2:55:a3:b8:81:6c:e9:cc:49:52:9e:76:51:c4:cd:95:bf: c9:79:59:55:13:cf:7a:c4:cc:f9:6c:4a:d7:59:a0:f0:5f:ce: 26:ed:c0:a7:8f:aa:38:2b:55:66:99:ed:89:a7:0b:89:30:cc: 24:20:c4:84:ba:8e:50:fd:46:6d:13:ca:18:ad:5e:7b:12:7e: fa:1b:c6:b0:4c:1b:2f:8f:85:2d:a2:2c:bd:e3:53:4a:50:9c: 88:40:2b:7c:db:7d:fb:bd:15:a8:e1:be:07:a3:e8:9a:ff:77: 9d:fd:72:2e:28:dc:e1:9d:0a:ba:3e:ee:5f:3b:4b:79:79:27: 02:08:1c:a2:78:a0:99:53:c1:27:dc:42:ca:03:a2:0e:a0:3d: 2b:ba:1a:72:f7:8d:5e:09:47:fe:b5:39:96:1e:99:70:fd:bc: 89:85:26:9b:d5:6b:c9:84:89:cc:79:66:80:c3:89:10:7e:82: 02:5f:7e:0c:e2:79:81:94:15:50:e9:f1:9e:36:43:ac:95:27: 10:5b:c6:4e:af:07:20:48:ec:6c:83:e2:2d:66:04:f5:da:cf: 93:d4:ed:ea:52:f8:7c:54:97:ff:ce:a9:2e:87:ed:a6:4c:d5: f5:bb:22:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO+ivpvLucEyZTQ4wfHodp/7AaIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVGRUQ1NzIzMjZEMjFCRkZCRDczM0NGQTBDQzc5MDlE Q0VDNTA2RTAeFw0yNTA1MTIwNzMzMTJaFw0yNTA1MTMxMTI0MTJaMDMxMTAvBgNV BAMTKDc1OTZFMzQ4ODhENTcxNTJGNDlBMzhEODc1REI1NDA4MEVDQUU2QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEXiDtE94pmjxF5KYfbsLUeRX0 TmI9NI5B5utOP1q4QNOwfdmh9IuOenYcJZryBORxAnD4jcukjhzSvdOZpZbQJVxU rY1ZiAE8mQtW6B9NGSZVuMQ2nYCWxOO4OxkPeLepvtcCqzag/bCkzu+O8vQF2i6Z 599Lat94KIApf8ejnAZj/RAcnjLrmo8KILEO2xpunVWQdhKjY8fItk1HqVEmEJCH 9MVP/CF+0uRPu8/jzZbd1pPKxNvzPvJyU//SoFHLp6XE1HCBjDe92Y8loQmVmQU3 taLEZfdXCHbcZKUzJ3IjO9BjZ07B79zIDfEG95HIjQu0NKSc+3yc3VjfgXrrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdZbjSIjVcVL0mjjYddtUCA7K5qAwHwYDVR0j BBgwFoAU/v7VcjJtIb/71zPPoMx5CdzsUG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUthY2FCTEs2c3g0RXhMVmdZcmNNYVN5NHhHVWFQTVVYQmQ0ZThkWWtR Q2cvMC9GRUZFRDU3MjMyNkQyMUJGRkJENzMzQ0ZBMENDNzkwOURDRUM1MDZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFRkVENTcyMzI2RDIxQkZG QkQ3MzNDRkEwQ0M3OTA5RENFQzUwNkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUthY2FCTEs2c3g0RXhMVmdZcmNNYVN5NHhHVWFQTVVYQmQ0ZThkWWtRQ2cvMC9G RUZFRDU3MjMyNkQyMUJGRkJENzMzQ0ZBMENDNzkwOURDRUM1MDZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADoiAzpACRGMyBXL2PfYV/S4JJuJVo7iBbOnMSVKedlHEzZW/yXlZVRPPesTM +WxK11mg8F/OJu3Ap4+qOCtVZpntiacLiTDMJCDEhLqOUP1GbRPKGK1eexJ++hvG sEwbL4+FLaIsveNTSlCciEArfNt9+70VqOG+B6Pomv93nf1yLijc4Z0Kuj7uXztL eXknAggconigmVPBJ9xCygOiDqA9K7oacveNXglH/rU5lh6ZcP28iYUmm9VryYSJ zHlmgMOJEH6CAl9+DOJ5gZQVUOnxnjZDrJUnEFvGTq8HIEjsbIPiLWYE9drPk9Tt 6lL4fFSX/86pLoftpkzV9bsiCA== -----END CERTIFICATE-----Generated at Mon May 12 12:26:15 2025 by rpki-client