$ rpki-client -vvf rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.mft File: 8547D0C1A84725BCC8A05B725C22293DAC420C79.mft (raw, json) Hash identifier: 4fUaKWr2m2bRTpfQyTFlKlbexfJi3QmHLncntftBfPA= Subject key identifier: D3:53:ED:9D:E3:BA:46:7F:D4:FB:1E:EE:00:F6:34:FE:F5:92:50:A1 Authority key identifier: 85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79 Certificate issuer: /CN=8547D0C1A84725BCC8A05B725C22293DAC420C79 Certificate serial: 0384D0DE6FA31D15D044C4645DA144B9371BD703 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer Subject info access: rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.mft Manifest number: 021C Signing time: Sun 11 May 2025 10:53:25 +0000 Manifest this update: Sun 11 May 2025 10:48:25 +0000 Manifest next update: Mon 12 May 2025 10:53:25 +0000 Files and hashes: 1: 323830343a6162303a3a2f33322d313238203d3e203532393037.roa (hash: LESmXmo+TCodqnOP6aszowbG14aPD4lNlhr/Pqeglfc=) 2: 3137372e32332e3130342e302f32322d3332203d3e203532393037.roa (hash: TT80HnR8RJGRbi6rzGlIhGjkzzHeLAplso3xMyz2jng=) 3: 8547D0C1A84725BCC8A05B725C22293DAC420C79.crl (hash: Cj3TceOD+afZk2rVrspk5UAF6mlCZ7aiW9EIGsA4YTs=) 4: 3138392e37362e38302e302f32302d3332203d3e203532393037.roa (hash: 6c6mDcPYXB4oPvgXQB4l1szMktTN+aR0Iigx33qgj6w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.crl rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 10:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:84:d0:de:6f:a3:1d:15:d0:44:c4:64:5d:a1:44:b9:37:1b:d7:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8547D0C1A84725BCC8A05B725C22293DAC420C79 Validity Not Before: May 11 10:48:25 2025 GMT Not After : May 12 10:53:25 2025 GMT Subject: CN=D353ED9DE3BA467FD4FB1EEE00F634FEF59250A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:15:85:fc:23:da:fb:33:9a:5d:27:10:2e:86: 56:c1:cc:a6:a4:01:70:6a:22:bb:05:c1:1c:76:e2: 4f:59:2d:ad:41:5a:c3:f1:61:52:3e:84:60:b8:04: 66:b3:47:02:e6:a3:51:9b:bb:9a:18:95:44:09:c7: b3:2e:8e:a7:f3:87:8e:24:34:cf:98:5a:e4:76:9c: b8:f8:3f:ee:35:85:54:1e:25:05:8f:db:7b:de:ef: 91:7d:5d:a5:11:f0:40:7f:79:a4:48:0b:9f:52:99: bf:1d:13:d0:b3:42:05:dd:65:87:0a:f6:db:88:3a: 6c:97:ad:fe:31:29:7a:bb:82:d7:dc:5e:4c:81:9b: d1:13:68:5f:f6:0b:ac:fa:8c:a9:d0:6c:c9:01:50: c8:0e:b8:cc:aa:2a:71:27:78:ac:05:14:52:c5:78: 28:2e:dd:4d:19:59:0c:94:4f:05:53:c9:86:5d:6b: 88:07:c7:2a:b9:20:29:e1:fa:34:67:e4:1f:82:c2: 60:79:d6:a0:fe:e8:81:2e:76:c0:ba:8d:26:85:57: ce:6f:76:7f:5a:0a:f4:f3:a4:e2:04:f3:83:c9:d4: b7:38:bf:42:74:3c:24:9d:4b:7e:a8:ba:5d:99:28: ae:58:ab:2f:5e:f5:65:b2:a9:9b:11:3f:20:35:d8: dd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:53:ED:9D:E3:BA:46:7F:D4:FB:1E:EE:00:F6:34:FE:F5:92:50:A1 X509v3 Authority Key Identifier: keyid:85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e6:0c:ca:97:78:21:c9:f9:23:d7:f2:47:51:b3:06:6a:a6: 5d:e7:fd:f8:86:4a:31:d8:90:e6:a8:a3:3e:5e:50:a3:1c:77: c9:7b:7a:d9:ae:b2:9c:54:b7:38:9c:f5:94:4a:37:75:c5:90: b7:00:22:c1:5d:bf:11:a5:25:eb:39:32:39:24:06:a8:c3:bf: 20:6f:c9:72:57:ae:74:fd:fc:43:3c:d6:17:9e:ef:f9:17:dd: 22:20:3d:fb:b4:3d:b6:ab:08:d4:43:f2:f7:0f:f9:13:93:d3: 85:72:36:77:c0:87:ab:fc:26:f4:8b:a5:d3:12:a1:76:cd:fd: b7:6f:e5:0a:5a:17:eb:85:66:3f:d9:17:0f:28:6b:94:52:02: 88:91:d2:bd:af:31:f2:2a:1e:15:28:1f:b2:65:44:8d:df:f5: 45:d9:04:1c:f8:75:f5:12:36:a1:38:d4:b1:76:21:f3:52:ad: 20:2c:0b:1f:d3:62:47:65:d6:22:f3:c2:ad:3a:85:60:4c:e4: 60:4c:09:fc:e3:5c:f9:4c:58:19:39:b3:c1:ae:ea:bc:ea:5f: df:98:11:6f:70:c0:b6:76:a1:d7:d8:89:d6:d6:5e:21:49:81: 4c:10:c2:ce:7e:49:5e:5f:2f:15:56:a4:9c:60:b9:50:36:01: 71:b4:75:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA4TQ3m+jHRXQRMRkXaFEuTcb1wMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU0N0QwQzFBODQ3MjVCQ0M4QTA1QjcyNUMyMjI5M0RB QzQyMEM3OTAeFw0yNTA1MTExMDQ4MjVaFw0yNTA1MTIxMDUzMjVaMDMxMTAvBgNV BAMTKEQzNTNFRDlERTNCQTQ2N0ZENEZCMUVFRTAwRjYzNEZFRjU5MjUwQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrFYX8I9r7M5pdJxAuhlbBzKak AXBqIrsFwRx24k9ZLa1BWsPxYVI+hGC4BGazRwLmo1Gbu5oYlUQJx7Mujqfzh44k NM+YWuR2nLj4P+41hVQeJQWP23ve75F9XaUR8EB/eaRIC59Smb8dE9CzQgXdZYcK 9tuIOmyXrf4xKXq7gtfcXkyBm9ETaF/2C6z6jKnQbMkBUMgOuMyqKnEneKwFFFLF eCgu3U0ZWQyUTwVTyYZda4gHxyq5ICnh+jRn5B+CwmB51qD+6IEudsC6jSaFV85v dn9aCvTzpOIE84PJ1Lc4v0J0PCSdS36oul2ZKK5Yqy9e9WWyqZsRPyA12N1ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU01PtneO6Rn/U+x7uAPY0/vWSUKEwHwYDVR0j BBgwFoAUhUfQwahHJbzIoFtyXCIpPaxCDHkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUxuY1JDcmNTUHNMeVFwWE4ybThmQ2l2QndKelRKQ25VQUViRlpvZndY Tm8vMS84NTQ3RDBDMUE4NDcyNUJDQzhBMDVCNzI1QzIyMjkzREFDNDIwQzc5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1NDdEMEMxQTg0NzI1QkND OEEwNUI3MjVDMjIyOTNEQUM0MjBDNzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUxuY1JDcmNTUHNMeVFwWE4ybThmQ2l2QndKelRKQ25VQUViRlpvZndYTm8vMS84 NTQ3RDBDMUE4NDcyNUJDQzhBMDVCNzI1QzIyMjkzREFDNDIwQzc5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAduYMypd4Icn5I9fyR1GzBmqmXef9+IZKMdiQ5qijPl5Qoxx3yXt62a6ynFS3 OJz1lEo3dcWQtwAiwV2/EaUl6zkyOSQGqMO/IG/JcleudP38QzzWF57v+RfdIiA9 +7Q9tqsI1EPy9w/5E5PThXI2d8CHq/wm9Iul0xKhds39t2/lCloX64VmP9kXDyhr lFICiJHSva8x8ioeFSgfsmVEjd/1RdkEHPh19RI2oTjUsXYh81KtICwLH9NiR2XW IvPCrTqFYEzkYEwJ/ONc+UxYGTmzwa7qvOpf35gRb3DAtnah19iJ1tZeIUmBTBDC zn5JXl8vFVaknGC5UDYBcbR1uA== -----END CERTIFICATE-----Generated at Sun May 11 20:01:40 2025 by rpki-client