$ rpki-client -vvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft File: 5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft (raw, json) Hash identifier: HQwX18L+4mV3VoGmU16Izl3Mfe0XHz27cP+jFm1SvYQ= Subject key identifier: 6F:3B:24:8A:85:53:35:FA:62:73:59:B6:4E:44:23:B9:33:3D:EE:8A Authority key identifier: 5A:68:B8:8E:02:7E:5A:12:DC:69:EA:EA:AC:20:11:ED:1D:28:25:A2 Certificate issuer: /CN=5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2 Certificate serial: 354947051987070CC40C1447A0041CCD58EC9D8D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft Manifest number: 0225 Signing time: Sat 17 May 2025 19:34:12 +0000 Manifest this update: Sat 17 May 2025 19:29:12 +0000 Manifest next update: Sun 18 May 2025 22:40:12 +0000 Files and hashes: 1: 3230302e3232352e34382e302f32312d3234203d3e203631363130.roa (hash: elC9EAeygoRx2H+jiQPOuMLjKX/QJPWSaf/amaZZvrc=) 2: 323830343a386165303a3a2f33322d3332203d3e203631363130.roa (hash: xmmz9LTZttl2Xfzv5kWiCmHEssTo7PK1z0cqHjKY0mE=) 3: 5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.crl (hash: vq5yxjo9RyJwvtoWtmC9Z63WAJL8BClbwqJKcqEgqyE=) 4: 3138372e38372e32382e302f32322d3234203d3e203631363130.roa (hash: yPua/Ofud6POhXVBl+Vv3ibZEIZGIKOcu8JE11PZEDQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.crl rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 18 May 2025 18:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:49:47:05:19:87:07:0c:c4:0c:14:47:a0:04:1c:cd:58:ec:9d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2 Validity Not Before: May 17 19:29:12 2025 GMT Not After : May 18 22:40:12 2025 GMT Subject: CN=6F3B248A855335FA627359B64E4423B9333DEE8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fa:59:4d:11:38:52:38:a4:c8:80:be:41:6a: dc:5e:4b:b0:5f:27:09:8c:41:b0:4f:89:72:91:43: b8:89:41:76:d0:b1:ff:4b:a0:8f:c1:e1:e3:8f:a6: 67:9a:bf:bf:67:3b:36:b5:cb:c7:cf:8e:21:9a:37: 66:9d:7d:30:7a:c4:b9:a6:cd:f2:e6:90:39:f4:0d: 5c:5d:b5:75:84:7b:a6:91:1e:23:d1:f1:b1:13:44: 5f:db:8f:cf:6d:b2:08:28:36:49:d4:eb:e4:37:4d: 62:9f:fa:34:6c:e0:ba:45:83:74:85:d3:1c:4c:7a: 2d:bd:d1:1d:bb:0b:71:14:86:da:9f:c6:9e:5b:94: 3a:f6:5e:35:ed:57:ac:b9:05:3f:2a:1c:ba:b0:ea: 11:e8:ec:c4:d4:4d:45:28:56:32:3f:f5:00:32:69: 87:01:22:04:94:fa:7d:fc:c9:87:e0:a5:85:f8:14: 8b:5d:e0:c0:5e:31:f0:62:c9:ab:6c:15:b6:25:f7: e4:d6:c3:b4:d3:c9:4f:a7:09:19:be:25:cf:79:18: 8d:40:8f:9a:3b:f6:6b:ae:f3:c9:e2:43:66:22:ae: 82:9c:11:d5:79:02:15:dd:69:9d:fa:1c:1e:5a:0d: f8:8a:83:22:35:18:68:78:00:47:c0:07:f9:5e:60: bd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3B:24:8A:85:53:35:FA:62:73:59:B6:4E:44:23:B9:33:3D:EE:8A X509v3 Authority Key Identifier: keyid:5A:68:B8:8E:02:7E:5A:12:DC:69:EA:EA:AC:20:11:ED:1D:28:25:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:cb:d2:b4:ab:1d:31:af:b2:be:93:a5:f2:b3:01:86:32:e4: 6c:42:75:b9:37:ee:01:01:7e:05:5e:89:ab:27:69:d9:4c:07: 77:eb:c8:52:e0:2f:cf:13:b4:33:19:65:8e:5d:d6:4b:41:eb: b3:01:e6:23:d1:76:f9:a7:53:6a:7c:46:e5:b3:a5:4d:47:a8: ef:98:0a:5b:01:5c:80:2f:3a:82:2f:2f:58:11:ce:9b:75:1c: 95:9f:18:22:c7:69:4b:c4:97:9e:5e:f6:e2:43:a4:ef:01:09: 8a:ca:34:27:9f:b2:fd:bf:9f:b8:73:e5:06:ca:50:98:1f:2c: 8e:3f:15:48:08:9a:77:ed:9f:27:4f:f1:5d:58:02:c3:75:60: d6:51:59:2d:42:58:d9:b5:23:55:03:f6:b7:9a:4b:0d:19:7a: 4f:50:1b:c2:fb:ca:1f:48:61:ac:29:bd:fd:d2:98:9b:e4:8a: af:77:6f:bf:1a:95:94:c6:19:e9:73:c9:71:2f:6f:05:72:7c: af:0d:9b:53:d0:82:b3:9a:f1:3a:94:39:94:4b:2d:5e:f3:94: 58:67:3e:9f:05:b7:2f:ba:32:1b:f8:e6:f5:39:69:9e:ca:fd: f3:40:bd:80:66:c7:05:1c:dd:1d:bc:41:52:d3:d9:58:32:81: fa:c9:6a:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNUlHBRmHBwzEDBRHoAQczVjsnY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE2OEI4OEUwMjdFNUExMkRDNjlFQUVBQUMyMDExRUQx RDI4MjVBMjAeFw0yNTA1MTcxOTI5MTJaFw0yNTA1MTgyMjQwMTJaMDMxMTAvBgNV BAMTKDZGM0IyNDhBODU1MzM1RkE2MjczNTlCNjRFNDQyM0I5MzMzREVFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx+llNEThSOKTIgL5BatxeS7Bf JwmMQbBPiXKRQ7iJQXbQsf9LoI/B4eOPpmeav79nOza1y8fPjiGaN2adfTB6xLmm zfLmkDn0DVxdtXWEe6aRHiPR8bETRF/bj89tsggoNknU6+Q3TWKf+jRs4LpFg3SF 0xxMei290R27C3EUhtqfxp5blDr2XjXtV6y5BT8qHLqw6hHo7MTUTUUoVjI/9QAy aYcBIgSU+n38yYfgpYX4FItd4MBeMfBiyatsFbYl9+TWw7TTyU+nCRm+Jc95GI1A j5o79muu88niQ2YiroKcEdV5AhXdaZ36HB5aDfiKgyI1GGh4AEfAB/leYL3fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUbzskioVTNfpic1m2TkQjuTM97oowHwYDVR0j BBgwFoAUWmi4jgJ+WhLcaerqrCAR7R0oJaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODV0QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51 RlcvMS81QTY4Qjg4RTAyN0U1QTEyREM2OUVBRUFBQzIwMTFFRDFEMjgyNUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBNjhCODhFMDI3RTVBMTJE QzY5RUFFQUFDMjAxMUVEMUQyODI1QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODV0QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51RlcvMS81 QTY4Qjg4RTAyN0U1QTEyREM2OUVBRUFBQzIwMTFFRDFEMjgyNUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ8vStKsdMa+yvpOl8rMBhjLkbEJ1uTfuAQF+BV6Jqydp2UwHd+vIUuAvzxO0 Mxlljl3WS0HrswHmI9F2+adTanxG5bOlTUeo75gKWwFcgC86gi8vWBHOm3UclZ8Y IsdpS8SXnl724kOk7wEJiso0J5+y/b+fuHPlBspQmB8sjj8VSAiad+2fJ0/xXVgC w3Vg1lFZLUJY2bUjVQP2t5pLDRl6T1AbwvvKH0hhrCm9/dKYm+SKr3dvvxqVlMYZ 6XPJcS9vBXJ8rw2bU9CCs5rxOpQ5lEstXvOUWGc+nwW3L7oyG/jm9Tlpnsr980C9 gGbHBRzdHbxBUtPZWDKB+slq2A== -----END CERTIFICATE-----Generated at Sun May 18 01:59:43 2025 by rpki-client