$ rpki-client -vvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft File: D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft (raw, json) Hash identifier: WV3EpA10VADVuBWMvRIGpSKL3dGgq/bd0cLaQI+iRiY= Subject key identifier: 1C:A4:93:68:19:B6:B9:58:50:26:E1:8D:0C:BF:18:30:CB:18:03:F1 Authority key identifier: D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8 Certificate issuer: /CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8 Certificate serial: 3E0F5E5D819F6E8EF9E63FEE28897B84C7095979 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft Manifest number: 021D Signing time: Wed 14 May 2025 23:18:22 +0000 Manifest this update: Wed 14 May 2025 23:13:22 +0000 Manifest next update: Thu 15 May 2025 23:31:22 +0000 Files and hashes: 1: D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl (hash: YAEBGp4cQaDhZWYeMTDYHujztl+YwDVx5Q6B7eEC0sc=) 2: 3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa (hash: lpESvqoVhwYOSjN4Vj1yVDNhsu54LQTMAxhBhXWO+2I=) 3: 3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa (hash: HehrNIzW8YIj50NZzvz1VRN/ThMuVHcdZYg24/SmLgI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 May 2025 23:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:0f:5e:5d:81:9f:6e:8e:f9:e6:3f:ee:28:89:7b:84:c7:09:59:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8 Validity Not Before: May 14 23:13:22 2025 GMT Not After : May 15 23:31:22 2025 GMT Subject: CN=1CA4936819B6B9585026E18D0CBF1830CB1803F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:62:44:ad:b6:7d:09:de:0a:4c:89:98:8e:59: 01:21:1e:23:71:33:30:bf:ca:6e:05:da:26:ca:b8: 45:d5:fe:54:56:fe:a6:f3:3b:c3:2f:8c:b8:1d:d0: 3f:93:08:f9:bd:0f:fa:7c:5a:3a:10:f0:72:a1:5d: 3d:d9:58:b6:31:d5:9b:55:0e:24:78:58:43:cb:7e: e0:17:2a:bf:99:68:b1:ba:8a:fc:fb:b9:f5:ab:6d: df:9e:95:e3:25:0d:3b:d5:bf:75:d5:f4:d7:0b:54: dc:d5:99:dc:9f:9f:03:7d:31:2d:20:60:03:fd:b1: ea:f7:32:53:ea:e8:b2:a8:7c:43:b0:79:06:5d:90: 51:f2:2d:44:76:0b:e4:9e:36:cc:0d:65:f8:63:ae: 2a:d4:c2:fe:0a:03:a8:fd:52:66:52:6f:64:22:06: 7b:e9:bc:77:32:5d:b0:4d:d4:83:d7:7a:bb:7b:22: 06:85:6c:82:ef:48:c6:23:42:06:b5:92:dd:6a:f7: 16:be:bc:63:61:b8:c3:5f:16:fe:cd:d4:0e:26:a7: 7b:21:0c:78:f1:a0:14:6c:d7:5a:ae:a8:41:c9:f2: 5c:9a:ea:c7:71:22:06:76:a4:ab:74:33:a6:88:e0: b3:72:d6:9a:d4:df:86:ee:c0:86:d9:f0:46:9c:0b: bf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A4:93:68:19:B6:B9:58:50:26:E1:8D:0C:BF:18:30:CB:18:03:F1 X509v3 Authority Key Identifier: keyid:D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:1c:e6:3f:80:5b:1e:a0:c9:51:98:bf:8e:c2:b9:80:dc:da: df:54:a3:51:06:da:96:18:f9:06:d7:ac:2d:de:a6:80:cc:c8: 81:ac:1a:2c:6e:8e:67:5e:67:16:17:df:2d:7a:0f:fc:f2:ac: 63:b2:ad:49:be:27:00:32:f8:a4:82:7b:ad:a2:5b:2c:79:c4: 1d:e2:40:54:58:bf:d0:4f:2c:6b:0e:24:08:eb:5f:ae:d0:31: 08:e9:c4:b4:6d:65:c5:ab:28:c7:af:ba:3f:e4:c4:c5:dc:e4: 61:2a:a4:40:56:02:33:6f:23:cc:c5:c2:f1:8a:9d:af:d2:d0: 9e:cb:30:a5:e4:b4:a6:08:68:bc:c4:28:7f:50:19:59:e0:d1: e5:bc:97:ce:14:37:d8:9c:df:2c:5d:8d:a2:d5:99:c4:e4:f2: 97:b6:48:b3:d5:97:b8:38:ae:3f:ee:b4:51:7e:ba:65:e4:e6: de:86:4a:e8:5a:0a:8d:e9:ad:cf:eb:2c:23:26:91:97:c1:7e: b6:3a:df:d3:61:dc:c5:48:81:ef:57:07:18:76:11:3e:49:b2: bd:ad:d2:21:95:f2:96:fa:c9:ec:29:ed:b3:d4:d1:ec:b0:72: bc:65:f3:a6:0d:b9:62:66:60:95:77:79:11:ab:ca:55:3d:f5: c9:f0:ef:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPg9eXYGfbo755j/uKIl7hMcJWXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRCQTVDQ0ZCN0JGRTA5NEZDM0E0QTZBRTdENTI3RDM4 RkM2MDhEODAeFw0yNTA1MTQyMzEzMjJaFw0yNTA1MTUyMzMxMjJaMDMxMTAvBgNV BAMTKDFDQTQ5MzY4MTlCNkI5NTg1MDI2RTE4RDBDQkYxODMwQ0IxODAzRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFYkSttn0J3gpMiZiOWQEhHiNx MzC/ym4F2ibKuEXV/lRW/qbzO8MvjLgd0D+TCPm9D/p8WjoQ8HKhXT3ZWLYx1ZtV DiR4WEPLfuAXKr+ZaLG6ivz7ufWrbd+eleMlDTvVv3XV9NcLVNzVmdyfnwN9MS0g YAP9ser3MlPq6LKofEOweQZdkFHyLUR2C+SeNswNZfhjrirUwv4KA6j9UmZSb2Qi BnvpvHcyXbBN1IPXert7IgaFbILvSMYjQga1kt1q9xa+vGNhuMNfFv7N1A4mp3sh DHjxoBRs11quqEHJ8lya6sdxIgZ2pKt0M6aI4LNy1prU34buwIbZ8EacC7+zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHKSTaBm2uVhQJuGNDL8YMMsYA/EwHwYDVR0j BBgwFoAU1Lpcz7e/4JT8Okpq59Un04/GCNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHZMRVIzQXBpbkpMRWRUOXB5UFdRYlAzbVZmQmlDc1ljZkZnc1NucXpI M2kvMS9ENEJBNUNDRkI3QkZFMDk0RkMzQTRBNkFFN0Q1MjdEMzhGQzYwOEQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QkE1Q0NGQjdCRkUwOTRG QzNBNEE2QUU3RDUyN0QzOEZDNjA4RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHZMRVIzQXBpbkpMRWRUOXB5UFdRYlAzbVZmQmlDc1ljZkZnc1NucXpIM2kvMS9E NEJBNUNDRkI3QkZFMDk0RkMzQTRBNkFFN0Q1MjdEMzhGQzYwOEQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlhzmP4BbHqDJUZi/jsK5gNza31SjUQbalhj5BtesLd6mgMzIgawaLG6OZ15n FhffLXoP/PKsY7KtSb4nADL4pIJ7raJbLHnEHeJAVFi/0E8saw4kCOtfrtAxCOnE tG1lxasox6+6P+TExdzkYSqkQFYCM28jzMXC8Yqdr9LQnsswpeS0pghovMQof1AZ WeDR5byXzhQ32JzfLF2NotWZxOTyl7ZIs9WXuDiuP+60UX66ZeTm3oZK6FoKjemt z+ssIyaRl8F+tjrf02HcxUiB71cHGHYRPkmyva3SIZXylvrJ7Cnts9TR7LByvGXz pg25YmZglXd5EavKVT31yfDvmA== -----END CERTIFICATE-----Generated at Thu May 15 14:04:31 2025 by rpki-client