$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.mft File: 12284CDA6822A8D5AD2892F46CF3BBE009E300C8.mft (raw, json) Hash identifier: ysgeNjm3wpaTo1AyptSiZpvl5mdjQnAArj4niiNdz2Y= Subject key identifier: B6:F4:AF:60:E3:A1:2D:A4:A9:20:3D:72:3A:2F:1E:F8:D4:CC:DC:4C Authority key identifier: 12:28:4C:DA:68:22:A8:D5:AD:28:92:F4:6C:F3:BB:E0:09:E3:00:C8 Certificate issuer: /CN=12284CDA6822A8D5AD2892F46CF3BBE009E300C8 Certificate serial: 55D777F31987F201893602E2BA8B8DBCC0E0AAFF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.mft Manifest number: 10 Signing time: Sun 11 May 2025 14:57:56 +0000 Manifest this update: Sun 11 May 2025 14:52:56 +0000 Manifest next update: Mon 12 May 2025 16:50:56 +0000 Files and hashes: 1: 323830343a313030343a3a2f33322d3438203d3e20323633363134.roa (hash: TE8GcW0GVH6lmfMEnBmpCyszhLtUPaDXuWsOzVcMsOg=) 2: 3136382e3233322e3232302e302f32322d3234203d3e20323633363134.roa (hash: XP0L1gMmaI3RlDluXT0OJu+zF0oUkLgNkaJ0LBXJNWU=) 3: 3137372e32332e3130382e302f32322d3234203d3e20323633363134.roa (hash: RIIZ4CzZCP4EMwAUHr+UGUL0L8ODmas0S+R4yCq4INI=) 4: 12284CDA6822A8D5AD2892F46CF3BBE009E300C8.crl (hash: 1LI4Y4RBOJVH00P6yEGwbHwaXanaHzI3k3MKbPqxJsQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.crl rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 16:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d7:77:f3:19:87:f2:01:89:36:02:e2:ba:8b:8d:bc:c0:e0:aa:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12284CDA6822A8D5AD2892F46CF3BBE009E300C8 Validity Not Before: May 11 14:52:56 2025 GMT Not After : May 12 16:50:56 2025 GMT Subject: CN=B6F4AF60E3A12DA4A9203D723A2F1EF8D4CCDC4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:d1:c4:f3:86:68:f2:92:8f:96:eb:05:7e: 56:c8:fe:ff:c8:f8:43:9d:31:2a:ad:55:e0:55:0d: 67:c8:2c:61:30:29:25:34:b7:c0:ce:b4:06:cf:70: 8d:df:fe:1b:88:6e:bb:2a:e0:54:14:74:bf:a8:56: ef:fb:b3:32:08:28:38:c9:da:55:26:04:41:b9:07: ad:ca:40:00:51:70:f3:69:2e:d7:85:5f:67:69:fa: b8:ff:4d:69:78:bf:78:af:b5:17:6d:a9:eb:ca:09: 6f:0c:09:bd:e4:3b:e0:ff:f6:cf:5c:ea:57:09:29: b5:62:b6:34:e4:40:1e:e5:8b:82:78:0f:37:5d:61: c8:68:19:6e:b2:76:ef:e4:b6:88:3d:f8:39:c9:54: 0d:62:2c:b5:4e:e2:c5:b0:9f:67:1d:25:e8:bb:4e: 78:1d:b9:b4:fa:ba:e7:8f:b2:e1:d3:97:7c:9e:30: 61:00:e4:7c:3f:83:da:50:95:23:9c:ed:d8:c7:97: 19:69:88:a7:63:ed:cd:b7:5e:fa:dd:6e:a8:03:95: ea:dd:91:cc:4a:ac:6d:0f:08:05:40:ca:5e:6c:5c: c5:ef:5f:22:5c:cc:7a:67:df:c9:04:f8:b1:09:ea: d4:c3:5b:39:d4:5d:2e:57:86:9c:10:be:35:09:8b: b4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F4:AF:60:E3:A1:2D:A4:A9:20:3D:72:3A:2F:1E:F8:D4:CC:DC:4C X509v3 Authority Key Identifier: keyid:12:28:4C:DA:68:22:A8:D5:AD:28:92:F4:6C:F3:BB:E0:09:E3:00:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:be:a7:df:da:b3:cf:5e:c0:d2:8a:5b:32:9b:a2:96:93:f5: 0f:4d:0b:52:6f:1a:f7:19:98:45:fa:57:ca:b7:7a:7e:f5:16: 6b:af:c7:db:7a:6b:20:68:e8:d8:31:d5:a9:85:b0:a5:ec:a9: 34:37:0d:da:31:0b:74:c6:40:cc:ee:a6:be:6f:0c:fe:4a:59: 9d:42:37:c8:95:2c:c7:53:cb:76:59:62:7b:1b:76:a1:56:03: c4:83:f2:b9:f7:94:eb:5e:2e:a2:94:39:52:05:56:89:a4:8c: 1a:24:45:0d:2a:ef:d9:e1:2f:63:db:91:76:e6:35:88:24:55: 10:91:de:b2:93:b0:a8:a4:53:15:56:25:06:03:77:ee:7a:65: 4d:cf:bb:91:c4:71:c6:ae:bf:0c:f9:5f:01:80:a0:b7:ef:4f: 1d:95:31:ff:19:f7:85:f3:42:58:12:98:18:48:ac:d5:9c:44: 04:3b:a6:1e:d6:ab:5f:38:b9:8f:46:99:e7:b5:9e:93:b5:59: c5:36:a0:b5:3d:ad:8f:a3:95:d3:a6:7a:48:ee:6c:c0:9b:2b: 1f:16:cd:74:c0:10:81:43:cc:01:ac:ce:57:d8:30:1c:46:5c: 9c:c1:91:6f:97:c7:73:24:10:08:48:73:02:07:b6:f2:b2:7a: 3b:6d:ac:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVdd38xmH8gGJNgLiuouNvMDgqv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIyODRDREE2ODIyQThENUFEMjg5MkY0NkNGM0JCRTAw OUUzMDBDODAeFw0yNTA1MTExNDUyNTZaFw0yNTA1MTIxNjUwNTZaMDMxMTAvBgNV BAMTKEI2RjRBRjYwRTNBMTJEQTRBOTIwM0Q3MjNBMkYxRUY4RDRDQ0RDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5sdHE84Zo8pKPlusFflbI/v/I +EOdMSqtVeBVDWfILGEwKSU0t8DOtAbPcI3f/huIbrsq4FQUdL+oVu/7szIIKDjJ 2lUmBEG5B63KQABRcPNpLteFX2dp+rj/TWl4v3ivtRdtqevKCW8MCb3kO+D/9s9c 6lcJKbVitjTkQB7li4J4DzddYchoGW6ydu/ktog9+DnJVA1iLLVO4sWwn2cdJei7 TngdubT6uuePsuHTl3yeMGEA5Hw/g9pQlSOc7djHlxlpiKdj7c23XvrdbqgDlerd kcxKrG0PCAVAyl5sXMXvXyJczHpn38kE+LEJ6tTDWznUXS5XhpwQvjUJi7RXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtvSvYOOhLaSpID1yOi8e+NTM3EwwHwYDVR0j BBgwFoAUEihM2mgiqNWtKJL0bPO74AnjAMgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNlo0UGpqUHVnMmRick5hbWI1Zm0xTGdONUxpUFE5QllhUDVVdTNuWUpq OHUvMC8xMjI4NENEQTY4MjJBOEQ1QUQyODkyRjQ2Q0YzQkJFMDA5RTMwMEM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyMjg0Q0RBNjgyMkE4RDVB RDI4OTJGNDZDRjNCQkUwMDlFMzAwQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Nlo0UGpqUHVnMmRick5hbWI1Zm0xTGdONUxpUFE5QllhUDVVdTNuWUpqOHUvMC8x MjI4NENEQTY4MjJBOEQ1QUQyODkyRjQ2Q0YzQkJFMDA5RTMwMEM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg76n39qzz17A0opbMpuilpP1D00LUm8a9xmYRfpXyrd6fvUWa6/H23prIGjo 2DHVqYWwpeypNDcN2jELdMZAzO6mvm8M/kpZnUI3yJUsx1PLdlliext2oVYDxIPy ufeU614uopQ5UgVWiaSMGiRFDSrv2eEvY9uRduY1iCRVEJHespOwqKRTFVYlBgN3 7nplTc+7kcRxxq6/DPlfAYCgt+9PHZUx/xn3hfNCWBKYGEis1ZxEBDumHtarXzi5 j0aZ57Wek7VZxTagtT2tj6OV06Z6SO5swJsrHxbNdMAQgUPMAazOV9gwHEZcnMGR b5fHcyQQCEhzAge28rJ6O22smg== -----END CERTIFICATE-----Generated at Sun May 11 21:00:23 2025 by rpki-client