$ rpki-client -vvf rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft File: 244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft (raw, json) Hash identifier: ciwEdSYdaU+xkT0bMCtTnjF9Ooh+K4Bm3tcAiJMlKDc= Subject key identifier: 08:63:52:D1:8A:C2:9C:61:C5:2C:53:2A:94:28:7B:75:8C:90:C0:CC Authority key identifier: 24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F Certificate issuer: /CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F Certificate serial: 347B0E5A463891F91CD295EF1B07DC1D739A27E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer Subject info access: rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft Manifest number: 021B Signing time: Sat 10 May 2025 23:58:49 +0000 Manifest this update: Sat 10 May 2025 23:53:49 +0000 Manifest next update: Mon 12 May 2025 01:49:49 +0000 Files and hashes: 1: 244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl (hash: qPZkMp6JC4MfX1NjjK3FVJqnMnqnhbLPhqNCJ/epfYM=) 2: 3134332e3230382e3230342e302f32322d3234203d3e20323632343232.roa (hash: TgRt4L6a8pOv3SCwRQclmf3KBjiND8STFDG66uENJ+A=) 3: 323830343a3433633a3a2f33322d3430203d3e20323632343232.roa (hash: PLKMLaZ2a7H9L5imphdZ9G/Nf2BRc20xdttKf+egV64=) 4: 3137372e33392e38302e302f32312d3234203d3e20323632343232.roa (hash: +VsihtT40UXUDslQFosRezPR5S+3EFSwp+A0r5iVJB0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 01:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7b:0e:5a:46:38:91:f9:1c:d2:95:ef:1b:07:dc:1d:73:9a:27:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F Validity Not Before: May 10 23:53:49 2025 GMT Not After : May 12 01:49:49 2025 GMT Subject: CN=086352D18AC29C61C52C532A94287B758C90C0CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ca:e9:c4:dc:ee:08:12:c7:d4:4d:27:e9:f2: 32:de:45:a0:10:5b:f1:9b:aa:4b:e1:42:33:b1:18: 98:6e:bd:16:0a:c6:b5:1c:33:28:68:e4:32:b5:20: 0c:07:00:ee:ba:4c:c3:db:15:9c:db:14:4f:ca:0f: 30:38:2a:54:73:00:95:6d:35:a1:5c:35:6d:b4:14: d5:a3:d1:fe:fa:6a:3f:7c:c3:5c:29:f9:43:27:1b: 6e:62:9d:5c:4e:36:0d:f0:fd:33:a7:be:c8:b8:f0: d3:35:2f:f7:e1:bc:8a:f7:5d:c6:d6:ee:b9:dd:43: d7:7a:5a:f2:9c:6e:9c:19:8b:fb:ff:21:9d:2b:7c: 41:1c:cd:e3:d1:70:42:1b:7c:02:26:14:de:29:b5: 01:78:58:0a:10:90:bf:92:b5:67:a1:d6:46:15:84: d9:d6:4d:5e:d2:ac:d5:e0:64:15:89:d8:e7:21:4a: 03:11:0e:30:59:b8:4c:14:2d:a5:53:df:42:4b:c7: 91:3f:0e:fc:5d:f8:f5:f0:66:99:02:13:a4:2c:76: 7a:d2:3e:fb:4e:35:35:a4:c7:82:01:92:f7:ef:af: 82:68:8e:78:9c:3b:05:5d:bf:0d:35:1d:be:1b:f8: 00:e0:0f:85:56:c6:7a:b9:2b:d4:41:45:71:9e:05: fd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:63:52:D1:8A:C2:9C:61:C5:2C:53:2A:94:28:7B:75:8C:90:C0:CC X509v3 Authority Key Identifier: keyid:24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:6a:06:5b:1e:44:6d:bc:f8:29:77:b3:44:d1:17:b8:79:93: 0c:20:e4:8d:6e:4e:0b:25:c1:b6:23:34:0f:b1:8a:33:e7:d6: d9:48:3a:33:9b:f7:5e:f2:d8:c0:8c:c0:e2:75:a7:c3:27:5b: 9f:93:5e:56:0b:3c:c9:fe:fb:d9:44:0e:b2:e0:45:98:c1:28: 49:47:45:79:10:c1:b0:58:f7:0f:92:8c:ca:f5:b4:a6:54:59: a9:f0:e3:96:37:1b:00:14:1a:4d:af:39:b3:f9:35:2a:b5:1c: 22:d1:ce:68:4c:92:57:ab:6b:d3:f1:e6:2a:e9:89:d2:b6:5b: 5b:50:79:91:b6:6a:66:46:18:9c:f3:55:dd:a6:6c:d4:26:db: 2a:e7:c8:3f:3a:cb:5c:97:bb:71:4c:78:bd:76:80:e5:13:93: cf:76:b9:74:6f:dc:b9:82:ce:04:75:fc:a3:71:ce:6c:c3:f5: 49:e4:86:df:52:08:6c:29:5f:e3:c2:23:88:30:7f:9b:3d:5d: 67:07:fd:c0:40:d1:4f:f7:cc:36:36:8f:63:e1:0d:69:71:07: 14:2b:d8:04:c9:82:d6:41:b1:5a:ee:40:13:51:88:bd:7f:7e: c8:e5:06:b9:75:19:1a:d1:0e:6e:74:97:6a:54:d8:9e:fe:22: cd:97:ae:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNHsOWkY4kfkc0pXvGwfcHXOaJ+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ0Mzg4RERGRTlBOTlENzFDRUIyN0NEQjZDNzY2MzdE MjJDQUI4RjAeFw0yNTA1MTAyMzUzNDlaFw0yNTA1MTIwMTQ5NDlaMDMxMTAvBgNV BAMTKDA4NjM1MkQxOEFDMjlDNjFDNTJDNTMyQTk0Mjg3Qjc1OEM5MEMwQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUyunE3O4IEsfUTSfp8jLeRaAQ W/GbqkvhQjOxGJhuvRYKxrUcMyho5DK1IAwHAO66TMPbFZzbFE/KDzA4KlRzAJVt NaFcNW20FNWj0f76aj98w1wp+UMnG25inVxONg3w/TOnvsi48NM1L/fhvIr3XcbW 7rndQ9d6WvKcbpwZi/v/IZ0rfEEczePRcEIbfAImFN4ptQF4WAoQkL+StWeh1kYV hNnWTV7SrNXgZBWJ2OchSgMRDjBZuEwULaVT30JLx5E/Dvxd+PXwZpkCE6QsdnrS PvtONTWkx4IBkvfvr4JojnicOwVdvw01Hb4b+ADgD4VWxnq5K9RBRXGeBf2BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCGNS0YrCnGHFLFMqlCh7dYyQwMwwHwYDVR0j BBgwFoAUJEOI3f6amdcc6yfNtsdmN9Isq48wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2Vrb0FxUWVYek5LRUFYcUdNZHdxWmY5VGc3TmRKUXJiU2FlaHgxZEtn bWcvMS8yNDQzODhEREZFOUE5OUQ3MUNFQjI3Q0RCNkM3NjYzN0QyMkNBQjhGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0NDM4OERERkU5QTk5RDcx Q0VCMjdDREI2Qzc2NjM3RDIyQ0FCOEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2Vrb0FxUWVYek5LRUFYcUdNZHdxWmY5VGc3TmRKUXJiU2FlaHgxZEtnbWcvMS8y NDQzODhEREZFOUE5OUQ3MUNFQjI3Q0RCNkM3NjYzN0QyMkNBQjhGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADmoGWx5Ebbz4KXezRNEXuHmTDCDkjW5OCyXBtiM0D7GKM+fW2Ug6M5v3XvLY wIzA4nWnwydbn5NeVgs8yf772UQOsuBFmMEoSUdFeRDBsFj3D5KMyvW0plRZqfDj ljcbABQaTa85s/k1KrUcItHOaEySV6tr0/HmKumJ0rZbW1B5kbZqZkYYnPNV3aZs 1CbbKufIPzrLXJe7cUx4vXaA5ROTz3a5dG/cuYLOBHX8o3HObMP1SeSG31IIbClf 48IjiDB/mz1dZwf9wEDRT/fMNjaPY+ENaXEHFCvYBMmC1kGxWu5AE1GIvX9+yOUG uXUZGtEObnSXalTYnv4izZeuWQ== -----END CERTIFICATE-----Generated at Sun May 11 17:11:54 2025 by rpki-client