$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft File: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft (raw, json) Hash identifier: ikIBJzYWb9lSyxwe4fMtuXRDOav9myYe8FRUtvFYMYI= Subject key identifier: 0B:D1:B9:C0:52:F5:9C:2F:5F:0A:10:62:08:2F:7C:20:F6:22:03:62 Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 Certificate issuer: /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Certificate serial: 6B7E288093827B13C761C1D3A3D01EBA69242BA4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft Manifest number: 01E3 Signing time: Mon 12 May 2025 05:58:57 +0000 Manifest this update: Mon 12 May 2025 05:53:57 +0000 Manifest next update: Tue 13 May 2025 09:56:57 +0000 Files and hashes: 1: 3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (hash: Bv6Lyj5+VhdPqvZ/TGH9M1sdk0ISaNwfb7BbI7c/FPE=) 2: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl (hash: vb/qHXIL2weEe0ngbH57EfxagvZA84ImTKFNkNw2240=) 3: 3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (hash: WqEYa1LHKO/TdU02rXFXLwns464zC4VFuzHF7wOxsfA=) 4: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (hash: 0xs1tTdh2Qke0fip6d1TEfj28igzF6NdDvyXj3IPtmI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 09:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:7e:28:80:93:82:7b:13:c7:61:c1:d3:a3:d0:1e:ba:69:24:2b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Validity Not Before: May 12 05:53:57 2025 GMT Not After : May 13 09:56:57 2025 GMT Subject: CN=0BD1B9C052F59C2F5F0A1062082F7C20F6220362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b7:9a:11:d8:96:4f:8e:de:7b:e7:40:a9:c1: a6:4d:e3:2e:ab:5d:b8:9c:86:2a:ec:96:a0:fb:c2: 9b:37:96:5f:90:93:70:ac:56:77:0a:c3:c8:12:84: 5d:8a:d2:4b:a2:20:82:bb:cb:c3:0e:79:4a:9b:14: e0:f3:68:d0:7b:5d:93:30:f2:c6:8f:48:be:fa:0e: fc:3b:7f:62:1e:8d:a9:69:fd:eb:22:c3:bb:91:0e: 22:8c:4c:9d:05:5d:0e:9b:d3:c1:5e:56:0a:0e:77: 60:de:88:aa:2f:b2:15:38:cc:48:22:66:65:1c:66: b0:0c:af:e4:37:b8:f1:fc:10:b1:bc:9a:bd:46:a2: a7:22:23:a6:9f:79:ac:6d:93:54:b3:a0:01:3b:f1: 7a:3b:1c:d5:eb:93:ce:e4:b7:dd:f7:70:8d:76:1a: 6f:67:5b:ed:c1:ec:69:0d:23:ca:96:ec:e9:8a:0f: 47:6a:3f:a9:39:66:c6:a8:cf:c2:45:9d:fc:db:09: 13:04:af:3a:dc:56:96:b6:bd:f4:09:77:fe:04:2b: c3:cb:f5:b2:cd:a2:7f:3e:c1:12:a2:d4:59:0c:ad: 0a:7c:57:cf:6a:46:24:0f:11:fe:02:b6:9a:95:22: f0:b8:6a:fe:90:cb:ae:e0:fd:c8:65:8a:ef:b5:d7: d6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D1:B9:C0:52:F5:9C:2F:5F:0A:10:62:08:2F:7C:20:F6:22:03:62 X509v3 Authority Key Identifier: keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8f:a3:a0:fa:a3:29:f5:6b:70:5f:4f:59:54:17:51:05:21: 75:03:ab:3e:d9:1c:e0:f2:40:1d:fd:d3:10:ca:01:68:17:42: 09:22:20:2a:c2:78:d5:b3:8c:c0:00:38:3f:7e:b1:94:02:7b: 75:01:6b:39:5d:fe:fd:58:e6:3e:ae:f1:50:f4:0a:fa:ca:09: 1c:fa:e4:5b:65:ea:ed:af:6b:55:be:59:88:71:2b:b3:0f:05: 89:b1:94:f0:08:3f:2f:fd:e5:16:3a:6c:18:b3:d0:7f:be:ff: 7b:71:2f:95:d7:51:0c:eb:de:6b:8f:f5:61:51:9c:62:74:8c: 44:51:3f:79:6b:2c:b7:9d:55:9f:07:7a:f4:90:eb:b0:e6:79: 73:f7:64:35:f4:6e:8b:71:5f:b7:7f:0a:1d:2e:b5:f0:47:9b: 3f:e4:e9:2d:f1:18:93:ca:ca:af:1e:57:28:a5:1a:f4:ca:0d: 4d:5b:03:3e:60:89:cf:47:8c:7f:16:7a:cf:c5:b9:bc:7c:43: 46:49:26:65:73:e8:10:3b:69:e3:0c:f5:18:16:a2:50:29:9c: 1f:8d:6c:29:c5:68:3e:77:ee:20:3c:5b:a0:fe:b2:ae:57:48: d4:94:44:70:7c:d7:6a:c4:3b:29:c1:fc:fc:7d:16:a6:46:8a: fa:bc:d4:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa34ogJOCexPHYcHTo9AeumkkK6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF MDZBMjdFMjAeFw0yNTA1MTIwNTUzNTdaFw0yNTA1MTMwOTU2NTdaMDMxMTAvBgNV BAMTKDBCRDFCOUMwNTJGNTlDMkY1RjBBMTA2MjA4MkY3QzIwRjYyMjAzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbt5oR2JZPjt5750CpwaZN4y6r XbichirslqD7wps3ll+Qk3CsVncKw8gShF2K0kuiIIK7y8MOeUqbFODzaNB7XZMw 8saPSL76Dvw7f2Iejalp/esiw7uRDiKMTJ0FXQ6b08FeVgoOd2DeiKovshU4zEgi ZmUcZrAMr+Q3uPH8ELG8mr1GoqciI6afeaxtk1SzoAE78Xo7HNXrk87kt933cI12 Gm9nW+3B7GkNI8qW7OmKD0dqP6k5Zsaoz8JFnfzbCRMErzrcVpa2vfQJd/4EK8PL 9bLNon8+wRKi1FkMrQp8V89qRiQPEf4CtpqVIvC4av6Qy67g/chliu+119brAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUC9G5wFL1nC9fChBiCC98IPYiA2IwHwYDVR0j BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0 NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC82 NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfI+joPqjKfVrcF9PWVQXUQUhdQOrPtkc4PJAHf3TEMoBaBdCCSIgKsJ41bOM wAA4P36xlAJ7dQFrOV3+/VjmPq7xUPQK+soJHPrkW2Xq7a9rVb5ZiHErsw8FibGU 8Ag/L/3lFjpsGLPQf77/e3EvlddRDOvea4/1YVGcYnSMRFE/eWsst51Vnwd69JDr sOZ5c/dkNfRui3Fft38KHS618EebP+TpLfEYk8rKrx5XKKUa9MoNTVsDPmCJz0eM fxZ6z8W5vHxDRkkmZXPoEDtp4wz1GBaiUCmcH41sKcVoPnfuIDxboP6yrldI1JRE cHzXasQ7KcH8/H0WpkaK+rzUWA== -----END CERTIFICATE-----Generated at Mon May 12 22:46:21 2025 by rpki-client