$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.mft File: 000E8F0F5BCF155986A68F056DBFD3BAA939FE78.mft (raw, json) Hash identifier: Xk3T5OYYUXANyqTmTB4iolRyR0NrBuvvynwwPBp4k+s= Subject key identifier: AC:5E:98:C0:8D:68:32:A1:F9:6A:D2:F7:F7:11:0A:29:16:EA:45:5D Authority key identifier: 00:0E:8F:0F:5B:CF:15:59:86:A6:8F:05:6D:BF:D3:BA:A9:39:FE:78 Certificate issuer: /CN=000E8F0F5BCF155986A68F056DBFD3BAA939FE78 Certificate serial: 253CB1C2CD01B006B74A997636D9206DA6528890 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.cer Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.mft Manifest number: F0 Signing time: Fri 09 May 2025 23:52:17 +0000 Manifest this update: Fri 09 May 2025 23:47:17 +0000 Manifest next update: Sun 11 May 2025 01:49:17 +0000 Files and hashes: 1: 323830343a6332633a3a2f33322d313238203d3e203238313931.roa (hash: 1IdDBv8DZUOuEo0fzv9kUqDmkSQq4AgAMpIYQ1dFasc=) 2: 3138362e3139332e3137362e302f32302d3332203d3e203238313931.roa (hash: c2urmIKEu6tZU24sCn4bd7V6NlwlOt5R6/ocpGM45nQ=) 3: 000E8F0F5BCF155986A68F056DBFD3BAA939FE78.crl (hash: 9djJegpAZQ7j4pSbZSHRPgqqcLZS8YRJMFzIG17A1ug=) 4: 3138392e39302e33322e302f32302d3332203d3e203238313931.roa (hash: 2rrScVU9LjdZ0hVnH/EWwjnl9SrJD4d3Fi75/n++Ltw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.crl rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 01:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:3c:b1:c2:cd:01:b0:06:b7:4a:99:76:36:d9:20:6d:a6:52:88:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000E8F0F5BCF155986A68F056DBFD3BAA939FE78 Validity Not Before: May 9 23:47:17 2025 GMT Not After : May 11 01:49:17 2025 GMT Subject: CN=AC5E98C08D6832A1F96AD2F7F7110A2916EA455D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:a3:47:ea:c9:27:bd:6f:63:2f:d4:30:d1: 6f:b5:39:6b:0e:ad:b9:20:7f:af:64:a9:3a:78:39: 03:ce:20:34:be:ff:e2:50:75:96:19:12:73:6a:14: 36:dd:ff:14:9f:ad:de:80:d4:b3:95:29:71:c1:6a: 9d:a3:41:64:38:4a:2c:73:ab:1a:e2:23:61:46:20: 49:bc:47:b3:fb:c3:75:d1:7e:80:a9:2f:44:7d:48: 1f:ea:19:58:be:00:f5:25:91:18:05:10:0c:e5:a7: f5:db:85:a7:52:6a:9d:ea:c6:39:96:35:1d:6b:00: a2:2e:ee:82:f6:f9:9d:fa:07:3f:90:0b:8b:46:4f: f7:38:2c:f8:8a:2f:d8:c7:b2:37:3c:db:d3:78:fc: 37:4c:fc:0b:a5:dc:9d:a9:b4:be:a2:1a:5f:f6:e3: b4:17:ff:ec:f5:8a:b4:c1:f4:95:cc:50:09:fb:d8: 28:b5:22:bc:3f:60:d7:89:f5:ad:1c:9a:7a:a2:43: 0b:98:fd:61:b3:69:ee:70:55:e3:08:ae:d7:97:f5: 15:84:fd:6f:59:74:63:6d:c0:72:ed:9a:82:e1:d3: c1:01:c6:8d:8f:a7:7d:75:30:b6:ae:78:77:08:9b: cc:62:64:66:72:7a:43:9f:b0:51:b0:68:e5:6b:2a: 01:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5E:98:C0:8D:68:32:A1:F9:6A:D2:F7:F7:11:0A:29:16:EA:45:5D X509v3 Authority Key Identifier: keyid:00:0E:8F:0F:5B:CF:15:59:86:A6:8F:05:6D:BF:D3:BA:A9:39:FE:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a5:69:15:aa:a3:33:23:8a:9a:9a:b0:4d:89:b6:f7:d5:8e: 33:e9:44:bc:61:64:6b:f4:41:ae:b3:63:8b:75:48:4d:9d:21: da:f5:7a:a7:4c:e1:4f:12:92:a2:07:74:a9:9c:aa:40:36:21: 3a:8c:e3:64:25:e0:93:4b:1f:7d:9a:2b:f0:49:bf:5e:a2:8d: ba:64:cc:2d:c8:da:34:1f:0a:1d:0e:d9:ac:38:6d:3a:a8:e8: a3:7c:47:1f:2c:ba:9e:bb:3c:85:d5:9d:ad:8c:97:b9:43:da: d4:63:24:19:88:97:25:bc:3c:0c:3a:a3:df:4a:71:c9:81:62: 34:92:a8:41:76:15:d7:e6:e2:2f:7a:ac:7d:05:8f:a9:f9:87: 05:16:c4:2f:13:60:6b:05:91:19:60:0f:98:79:51:2b:a5:5b: 12:97:be:79:12:df:57:5e:c0:6c:bd:41:7b:1e:a6:38:6f:e4: 96:0c:38:b0:22:9a:51:8a:77:a3:b6:ae:7b:41:69:e4:ac:1f: f4:da:49:da:df:42:fd:63:a1:db:5e:4c:cd:40:0c:75:fc:ca: 4f:cb:5e:05:a2:7a:44:0e:1d:b4:b1:7d:e5:1b:aa:f3:3b:0f: 2e:d5:23:a2:de:bc:73:f8:d1:cc:56:a3:74:8b:84:95:2f:7f: 4f:8a:6a:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJTyxws0BsAa3Spl2NtkgbaZSiJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwRThGMEY1QkNGMTU1OTg2QTY4RjA1NkRCRkQzQkFB OTM5RkU3ODAeFw0yNTA1MDkyMzQ3MTdaFw0yNTA1MTEwMTQ5MTdaMDMxMTAvBgNV BAMTKEFDNUU5OEMwOEQ2ODMyQTFGOTZBRDJGN0Y3MTEwQTI5MTZFQTQ1NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFH6NH6sknvW9jL9Qw0W+1OWsO rbkgf69kqTp4OQPOIDS+/+JQdZYZEnNqFDbd/xSfrd6A1LOVKXHBap2jQWQ4Sixz qxriI2FGIEm8R7P7w3XRfoCpL0R9SB/qGVi+APUlkRgFEAzlp/XbhadSap3qxjmW NR1rAKIu7oL2+Z36Bz+QC4tGT/c4LPiKL9jHsjc829N4/DdM/Aul3J2ptL6iGl/2 47QX/+z1irTB9JXMUAn72Ci1Irw/YNeJ9a0cmnqiQwuY/WGzae5wVeMIrteX9RWE /W9ZdGNtwHLtmoLh08EBxo2Pp311MLaueHcIm8xiZGZyekOfsFGwaOVrKgGxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrF6YwI1oMqH5atL39xEKKRbqRV0wHwYDVR0j BBgwFoAUAA6PD1vPFVmGpo8Fbb/Tuqk5/ngwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5 R1MvMC8wMDBFOEYwRjVCQ0YxNTU5ODZBNjhGMDU2REJGRDNCQUE5MzlGRTc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMEU4RjBGNUJDRjE1NTk4 NkE2OEYwNTZEQkZEM0JBQTkzOUZFNzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5R1MvMC8w MDBFOEYwRjVCQ0YxNTU5ODZBNjhGMDU2REJGRDNCQUE5MzlGRTc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHaVpFaqjMyOKmpqwTYm299WOM+lEvGFka/RBrrNji3VITZ0h2vV6p0zhTxKS ogd0qZyqQDYhOozjZCXgk0sffZor8Em/XqKNumTMLcjaNB8KHQ7ZrDhtOqjoo3xH Hyy6nrs8hdWdrYyXuUPa1GMkGYiXJbw8DDqj30pxyYFiNJKoQXYV1+biL3qsfQWP qfmHBRbELxNgawWRGWAPmHlRK6VbEpe+eRLfV17AbL1Bex6mOG/klgw4sCKaUYp3 o7aue0Fp5Kwf9NpJ2t9C/WOh215MzUAMdfzKT8teBaJ6RA4dtLF95Ruq8zsPLtUj ot68c/jRzFajdIuElS9/T4pqhw== -----END CERTIFICATE-----Generated at Sat May 10 16:47:30 2025 by rpki-client