$ rpki-client -vvf rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft File: F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft (raw, json) Hash identifier: 7jyBLEQBB6wD0ChzAHNuoSIZTPj67QvpM97JfyZDeGk= Subject key identifier: CA:8B:B2:D0:CF:31:6C:5A:3E:AE:09:BE:2E:94:3D:81:16:E7:38:2A Authority key identifier: F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2 Certificate issuer: /CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2 Certificate serial: 768BBC26B43B0FD454C62F37878D371BA7EA9426 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft Manifest number: 0128 Signing time: Tue 13 May 2025 21:14:41 +0000 Manifest this update: Tue 13 May 2025 21:09:41 +0000 Manifest next update: Wed 14 May 2025 22:54:41 +0000 Files and hashes: 1: 3138392e33392e39362e302f32302d3332203d3e203238333035.roa (hash: YG1K/ShgfdXloHQLk0pvW55EZVjg/llKx1Tuu6evW98=) 2: 3138392e38352e3134342e302f32302d3332203d3e203238333035.roa (hash: UFI2Hj5+gnsvxuvuG9PgdFqnHIyMDPTGWkMjMAkRt5c=) 3: 323830343a323839383a3a2f33322d313238203d3e203238333035.roa (hash: XOZnUoacLdQhkw6zS/TgauzVEmit+11nBmmF+xAfHTw=) 4: F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl (hash: AWj1LKbdgWJIqLYMi+hej7RRB9eyrWfGnJKfTWfLwe0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 May 2025 22:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8b:bc:26:b4:3b:0f:d4:54:c6:2f:37:87:8d:37:1b:a7:ea:94:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2 Validity Not Before: May 13 21:09:41 2025 GMT Not After : May 14 22:54:41 2025 GMT Subject: CN=CA8BB2D0CF316C5A3EAE09BE2E943D8116E7382A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a5:31:01:08:a3:f4:6b:9e:1e:5b:82:c7:08: 95:02:9e:7d:01:1e:07:19:fa:9b:1c:82:e7:2b:ba: 90:67:bd:3d:bc:96:9f:e1:ba:88:d1:ef:d3:8b:91: f1:ae:c2:09:66:2f:7c:8a:af:a2:c9:a2:44:1a:ed: 3b:ec:1a:8e:26:9e:37:94:a2:8d:d2:ec:7b:e8:4a: 2f:46:7c:8c:11:ed:28:ad:45:35:f1:32:06:3a:23: 97:57:7a:31:45:66:0c:f3:e6:7e:7d:8a:2c:07:4b: 72:44:c6:4e:94:93:16:c9:32:27:27:01:9e:94:8c: 9d:70:1f:d6:5c:a0:2c:82:a0:32:c0:bf:0b:eb:1f: 75:b3:18:d3:02:a5:48:0c:49:9b:20:be:c5:44:79: ab:f5:3c:8b:dd:b3:3f:24:4c:fb:08:e4:9a:94:a5: b8:d0:c7:bd:0a:29:8f:58:3a:de:82:44:5c:3a:20: aa:09:4a:c2:a3:ae:49:cd:58:0c:1e:97:7d:a2:32: 1e:d4:d5:09:3e:71:72:b9:5e:da:66:90:0b:1a:f0: ec:3e:fe:d3:d8:e6:70:09:f7:5f:0e:8c:3e:2a:52: 76:89:07:f7:f2:0e:09:00:b5:58:31:dc:25:90:db: 4b:a5:19:09:ea:ef:94:23:85:21:b2:c5:bd:fa:4f: ad:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8B:B2:D0:CF:31:6C:5A:3E:AE:09:BE:2E:94:3D:81:16:E7:38:2A X509v3 Authority Key Identifier: keyid:F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:6c:f7:07:2d:37:d7:3a:e8:a7:c7:59:58:52:06:38:a4:38: 7e:cb:90:18:2a:09:8d:3f:82:91:bd:96:e4:02:ab:09:88:dd: 6a:15:9c:c7:1e:17:75:28:e3:7f:29:ef:92:80:4b:0d:31:ad: c9:ab:91:13:24:06:6b:11:e0:05:c1:1e:20:e7:ba:4e:2f:eb: 8e:8f:70:a7:da:1b:57:c5:9a:b8:5e:08:36:f2:f1:37:13:d2: c9:84:b6:3b:87:0a:48:65:c1:fc:8a:c3:d8:01:73:ab:30:35: 28:9a:76:68:5c:0e:13:76:6a:a1:b1:08:a4:ee:70:0f:7a:f0: 14:9f:69:cb:d2:de:24:2d:c1:36:55:e3:8c:ae:b1:e5:ea:56: c7:13:dd:57:a1:43:1b:20:8b:88:98:f6:d5:87:1f:90:50:3d: 1c:04:a1:81:f1:cd:2d:7a:33:10:b2:1d:05:30:a1:11:d8:8f: 08:d0:06:19:6f:54:17:f4:78:47:cc:06:5d:31:a9:b7:9f:53: 20:77:60:e6:b1:b7:55:00:68:ec:f9:93:a2:f2:b4:71:7c:21: 00:ab:6c:61:0c:4b:17:d5:32:3c:db:c9:2a:22:bb:df:59:1b: c1:1e:72:1c:29:fa:c9:d7:5f:13:d5:1d:3a:e9:e9:9a:07:73: f9:28:d7:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdou8JrQ7D9RUxi83h403G6fqlCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY4NTVDMzc4RjlDOUNBMzcxQ0VBQTM0MEE5RkNCRjQ4 RkM5REZBMjAeFw0yNTA1MTMyMTA5NDFaFw0yNTA1MTQyMjU0NDFaMDMxMTAvBgNV BAMTKENBOEJCMkQwQ0YzMTZDNUEzRUFFMDlCRTJFOTQzRDgxMTZFNzM4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjpTEBCKP0a54eW4LHCJUCnn0B HgcZ+pscgucrupBnvT28lp/huojR79OLkfGuwglmL3yKr6LJokQa7TvsGo4mnjeU oo3S7HvoSi9GfIwR7SitRTXxMgY6I5dXejFFZgzz5n59iiwHS3JExk6UkxbJMicn AZ6UjJ1wH9ZcoCyCoDLAvwvrH3WzGNMCpUgMSZsgvsVEeav1PIvdsz8kTPsI5JqU pbjQx70KKY9YOt6CRFw6IKoJSsKjrknNWAwel32iMh7U1Qk+cXK5XtpmkAsa8Ow+ /tPY5nAJ918OjD4qUnaJB/fyDgkAtVgx3CWQ20ulGQnq75QjhSGyxb36T63jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyouy0M8xbFo+rgm+LpQ9gRbnOCowHwYDVR0j BBgwFoAU9oVcN4+cnKNxzqo0Cp/L9I/J36IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOW1XUURSWG82Y2QyeDhLc2VkZG5rdktraG0zVUFLek56b3ZDWUU4Vnpo NUcvMC9GNjg1NUMzNzhGOUM5Q0EzNzFDRUFBMzQwQTlGQ0JGNDhGQzlERkEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2ODU1QzM3OEY5QzlDQTM3 MUNFQUEzNDBBOUZDQkY0OEZDOURGQTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OW1XUURSWG82Y2QyeDhLc2VkZG5rdktraG0zVUFLek56b3ZDWUU4VnpoNUcvMC9G Njg1NUMzNzhGOUM5Q0EzNzFDRUFBMzQwQTlGQ0JGNDhGQzlERkEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiGz3By031zrop8dZWFIGOKQ4fsuQGCoJjT+Ckb2W5AKrCYjdahWcxx4XdSjj fynvkoBLDTGtyauREyQGaxHgBcEeIOe6Ti/rjo9wp9obV8WauF4INvLxNxPSyYS2 O4cKSGXB/IrD2AFzqzA1KJp2aFwOE3ZqobEIpO5wD3rwFJ9py9LeJC3BNlXjjK6x 5epWxxPdV6FDGyCLiJj21YcfkFA9HAShgfHNLXozELIdBTChEdiPCNAGGW9UF/R4 R8wGXTGpt59TIHdg5rG3VQBo7PmTovK0cXwhAKtsYQxLF9UyPNvJKiK731kbwR5y HCn6yddfE9UdOunpmgdz+SjX5Q== -----END CERTIFICATE-----Generated at Wed May 14 06:54:41 2025 by rpki-client