$ rpki-client -vvf rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft File: 849A24446B9E3C80503AA50B35CDFE864B50F299.mft (raw, json) Hash identifier: 3Px580vXTYXJdC/0BkZVSED2j/VrSjUgW/a10Kn72+U= Subject key identifier: 86:72:02:B5:E0:CB:AC:4C:4F:52:66:AA:ED:28:09:C6:97:1E:10:CA Authority key identifier: 84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99 Certificate issuer: /CN=849A24446B9E3C80503AA50B35CDFE864B50F299 Certificate serial: 13BC45FD7C660E38CD22CD46276DDBD46FD373A6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer Subject info access: rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft Manifest number: 021D Signing time: Mon 12 May 2025 18:04:39 +0000 Manifest this update: Mon 12 May 2025 17:59:39 +0000 Manifest next update: Tue 13 May 2025 20:29:39 +0000 Files and hashes: 1: 849A24446B9E3C80503AA50B35CDFE864B50F299.crl (hash: xfdMH5G1zuhebnrNlxSNGqQ0SGTyI6makuo2RDg8R1k=) 2: 3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa (hash: EW0bF1u4bur/zPzPb4/jkaTrzF2NSPUcuwmp/N5eHog=) 3: 323830343a323731633a3a2f33322d313238203d3e20323633383737.roa (hash: 9czPyLHsQNqWtZD0T0xfr5722IdYCGLe69IPEwzSaLE=) 4: 3133382e3138362e3137322e302f32322d3332203d3e20323633383737.roa (hash: F+6Q3rR9mW/bBvV3KMqzfE04ygqDKYoVUaMdkKLEkhA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 20:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:bc:45:fd:7c:66:0e:38:cd:22:cd:46:27:6d:db:d4:6f:d3:73:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849A24446B9E3C80503AA50B35CDFE864B50F299 Validity Not Before: May 12 17:59:39 2025 GMT Not After : May 13 20:29:39 2025 GMT Subject: CN=867202B5E0CBAC4C4F5266AAED2809C6971E10CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:48:0f:5e:d5:f6:bd:90:b1:93:e2:c9:b9: 3d:ad:df:6e:71:2b:04:37:3a:a1:a2:54:9e:6d:87: b5:ee:05:0c:6c:de:dd:3a:bc:ec:c9:96:f8:d3:c6: 6f:98:d2:72:f0:63:63:cb:e5:5c:87:37:ee:59:32: 23:b3:c0:eb:95:48:52:c1:cf:3b:19:23:94:88:b7: 11:d5:3f:71:35:78:0e:d8:52:31:8d:6b:95:b1:3b: ba:56:55:9f:8a:59:b6:f6:18:3c:1d:78:da:6d:3c: c9:59:05:21:95:47:a1:44:7b:a2:e4:82:ac:50:5e: ef:e8:5a:45:7b:ee:26:b6:78:a6:57:64:ca:28:36: 10:04:56:cf:0c:46:bb:e6:10:e4:6f:8b:1e:35:42: 22:66:fc:92:63:d7:b7:ed:76:19:c7:7d:d4:d3:f4: e5:4f:0c:f7:49:bc:53:59:25:0a:28:50:c1:fd:94: 7d:f0:25:c6:a0:2f:6b:5a:52:1b:17:e1:31:14:8f: 06:ad:f2:25:55:bb:d7:7d:f1:3f:7b:90:d9:13:dc: 48:9b:0b:2e:5a:2b:aa:3f:fb:7d:b3:47:54:88:63: a2:29:3d:75:70:96:24:99:7f:14:72:09:c3:53:82: eb:de:9a:0a:84:6d:11:cf:c3:2c:1c:28:7d:c7:c8: 7a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:72:02:B5:E0:CB:AC:4C:4F:52:66:AA:ED:28:09:C6:97:1E:10:CA X509v3 Authority Key Identifier: keyid:84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:39:08:73:94:1a:d5:f9:65:8c:3b:e9:45:f2:87:61:38:0d: de:f2:6d:24:22:9f:e6:29:2e:07:c5:e4:4e:25:3f:23:7d:dc: 90:59:dd:f5:c2:d7:cf:85:2e:13:1e:e3:ef:4e:f5:72:65:61: 21:4d:53:cf:a3:82:60:67:c3:08:82:ab:a7:3d:48:d4:9f:23: eb:8b:41:1c:bf:b4:c6:51:82:51:0c:0c:01:26:7b:18:1b:44: e6:13:28:5d:52:b8:af:31:26:f3:08:52:67:ee:0b:5f:04:87: f9:07:3a:9b:d3:38:b9:ad:2a:cf:0a:ef:63:07:2c:c6:e2:d5: 23:c7:30:51:9a:2a:5f:3a:5f:47:f9:40:60:26:7b:02:9d:13: 4f:e7:e8:55:8b:36:f1:79:73:4a:54:92:a5:c1:4d:88:04:e5: cc:4b:80:37:44:75:e1:35:82:ce:4d:5f:f8:86:7c:78:78:e0: dc:51:6d:eb:62:c5:88:ef:4a:17:17:61:8a:74:3f:aa:41:1b: 59:ac:c1:7a:61:f7:2d:a2:f3:a8:5d:f6:93:9e:47:b8:57:de: 4d:f9:5c:cc:fe:a7:61:b9:b7:f0:70:fc:a9:4c:a5:ba:f5:db: ae:8a:3a:18:62:07:97:a6:26:03:03:39:0f:50:2a:7d:5e:3a: 5f:55:98:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUE7xF/XxmDjjNIs1GJ23b1G/Tc6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5QTI0NDQ2QjlFM0M4MDUwM0FBNTBCMzVDREZFODY0 QjUwRjI5OTAeFw0yNTA1MTIxNzU5MzlaFw0yNTA1MTMyMDI5MzlaMDMxMTAvBgNV BAMTKDg2NzIwMkI1RTBDQkFDNEM0RjUyNjZBQUVEMjgwOUM2OTcxRTEwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCyEgPXtX2vZCxk+LJuT2t325x KwQ3OqGiVJ5th7XuBQxs3t06vOzJlvjTxm+Y0nLwY2PL5VyHN+5ZMiOzwOuVSFLB zzsZI5SItxHVP3E1eA7YUjGNa5WxO7pWVZ+KWbb2GDwdeNptPMlZBSGVR6FEe6Lk gqxQXu/oWkV77ia2eKZXZMooNhAEVs8MRrvmEORvix41QiJm/JJj17ftdhnHfdTT 9OVPDPdJvFNZJQooUMH9lH3wJcagL2taUhsX4TEUjwat8iVVu9d98T97kNkT3Eib Cy5aK6o/+32zR1SIY6IpPXVwliSZfxRyCcNTguvemgqEbRHPwywcKH3HyHrbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhnICteDLrExPUmaq7SgJxpceEMowHwYDVR0j BBgwFoAUhJokRGuePIBQOqULNc3+hktQ8pkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHVEZXQzZmthUGhiMUY1dEdmMTg4dXJZOUJETmt4b0RpSkRnVThCQTFy YzkvMS84NDlBMjQ0NDZCOUUzQzgwNTAzQUE1MEIzNUNERkU4NjRCNTBGMjk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0OUEyNDQ0NkI5RTNDODA1 MDNBQTUwQjM1Q0RGRTg2NEI1MEYyOTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHVEZXQzZmthUGhiMUY1dEdmMTg4dXJZOUJETmt4b0RpSkRnVThCQTFyYzkvMS84 NDlBMjQ0NDZCOUUzQzgwNTAzQUE1MEIzNUNERkU4NjRCNTBGMjk5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFjkIc5Qa1flljDvpRfKHYTgN3vJtJCKf5ikuB8XkTiU/I33ckFnd9cLXz4Uu Ex7j7071cmVhIU1Tz6OCYGfDCIKrpz1I1J8j64tBHL+0xlGCUQwMASZ7GBtE5hMo XVK4rzEm8whSZ+4LXwSH+Qc6m9M4ua0qzwrvYwcsxuLVI8cwUZoqXzpfR/lAYCZ7 Ap0TT+foVYs28XlzSlSSpcFNiATlzEuAN0R14TWCzk1f+IZ8eHjg3FFt62LFiO9K FxdhinQ/qkEbWazBemH3LaLzqF32k55HuFfeTflczP6nYbm38HD8qUyluvXbroo6 GGIHl6YmAwM5D1AqfV46X1WYeA== -----END CERTIFICATE-----Generated at Tue May 13 02:09:46 2025 by rpki-client