$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft File: AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json) Hash identifier: QLE5fD7u0kVaOsFoVlqOtzxZo+dm/GjJO30o5iqi0BQ= Subject key identifier: 31:74:4F:DB:9A:73:44:35:C9:06:67:41:EB:4E:B2:2D:FA:51:7C:A6 Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Certificate serial: 58880CD408E97F93C4EDA94AEE9237D12751BF42 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft Manifest number: 0220 Signing time: Thu 15 May 2025 18:00:01 +0000 Manifest this update: Thu 15 May 2025 17:55:01 +0000 Manifest next update: Fri 16 May 2025 20:37:01 +0000 Files and hashes: 1: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: G+9fnKDKYzXcNVDiQbyVgNQLvfSyrAWnEylFjOb1cKM=) 2: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: JHU7hFLVcz7KCri5GGmgpJSrExwyJApMd1LcVi/3ahc=) 3: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: XrgPqt2d+yXrgA5qVsA3hVOyOYJP6pNSPVOYcSw37As=) 4: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: 2YZk72SApSWXgXZjMo1hCC5Lz7z2wRueRCYi5QQbSYs=) 5: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: g+h7ZeJQoiwltb4pTrWxNjM0uMiKUgQuoMSR90spDQE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 May 2025 20:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:88:0c:d4:08:e9:7f:93:c4:ed:a9:4a:ee:92:37:d1:27:51:bf:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Validity Not Before: May 15 17:55:01 2025 GMT Not After : May 16 20:37:01 2025 GMT Subject: CN=31744FDB9A734435C9066741EB4EB22DFA517CA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c4:95:e3:28:ce:eb:76:d5:a5:b8:77:be:fe: e8:68:c5:7c:dd:bd:c2:7c:6b:54:03:a9:b2:4f:b0: 1c:8b:5a:2f:56:0f:ab:77:32:f3:1f:d4:95:b6:0a: de:ce:95:46:32:1c:c3:37:bc:78:08:f9:6c:f7:f1: 26:59:a9:15:28:c6:d2:5b:18:84:61:ee:22:12:d6: 14:4d:d9:63:46:c7:4f:14:37:4f:66:2e:9e:34:36: a4:7d:91:7f:c9:73:db:7e:74:8b:39:9a:22:1a:06: 02:72:1c:70:76:f1:4f:97:6a:95:bc:1a:39:24:42: fa:09:90:37:d4:54:3c:36:7c:b8:11:4a:1f:12:fa: 63:d9:33:8a:af:9f:25:75:f7:7f:ec:bf:d6:e7:ad: 5f:e4:c1:f9:74:17:10:fc:53:1f:2d:cb:06:af:87: 8b:99:2d:75:ad:5a:52:34:d1:33:35:6b:81:06:f4: c4:b4:8b:2b:e3:7a:70:3f:a8:e8:ba:11:5a:c6:1e: 82:fe:9d:22:3d:88:75:3d:0a:f9:55:40:08:7b:db: 59:e5:ab:7f:40:3c:7f:6a:40:ba:ff:ae:8c:58:50: 77:a5:5f:8e:50:ff:24:73:42:42:b1:d7:5e:4e:a4: a7:72:67:e4:29:c0:c2:c2:8b:a1:b9:8e:49:b6:2a: 9f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:74:4F:DB:9A:73:44:35:C9:06:67:41:EB:4E:B2:2D:FA:51:7C:A6 X509v3 Authority Key Identifier: keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:e1:81:27:e8:50:c7:5f:ef:98:39:33:29:d1:1f:52:a7:d6: 2a:ea:60:e7:a9:6f:e3:92:aa:ec:b8:e2:ec:fb:b3:d6:94:30: 3e:06:b6:23:a2:09:0c:06:35:42:7c:c6:94:7b:1a:89:00:84: 4a:3f:1e:96:de:1a:db:05:23:2f:7e:96:01:69:11:2b:b4:71: c6:e2:dc:c2:26:a4:45:8b:53:bf:b8:67:52:dd:19:ce:bc:73: 93:4e:7f:4a:88:1b:24:9b:fd:c8:84:82:d2:f8:cb:55:f3:ef: 69:73:01:d1:8e:98:32:7e:55:3b:aa:36:73:29:3e:17:b0:fa: da:30:18:58:92:da:89:95:42:62:bc:e7:50:35:2e:5b:b9:f4: 10:d0:e1:ac:7a:ed:08:97:e2:e5:c2:a6:cc:08:0b:49:8c:a8: a9:58:00:78:6d:f0:a7:66:da:48:4e:a4:5e:d2:33:c3:17:41: 32:93:e5:d8:1e:38:88:55:07:51:fd:ba:3a:10:c8:24:bc:1e: c2:6b:17:02:64:1a:24:e5:7f:58:f3:d2:09:05:45:16:4f:7b: ce:33:08:80:42:61:67:e7:86:c3:97:4b:c1:7c:c5:f6:91:47: ad:58:be:ec:dd:a5:76:23:1d:6f:8d:db:c1:cd:d7:b3:1a:7c: bd:34:18:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWIgM1Ajpf5PE7alK7pI30SdRv0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDNTI5RkIyNDNCNzc4MEEyMEIyN0EyQzRFNzNEQUY2 NUMyNTAyMTAeFw0yNTA1MTUxNzU1MDFaFw0yNTA1MTYyMDM3MDFaMDMxMTAvBgNV BAMTKDMxNzQ0RkRCOUE3MzQ0MzVDOTA2Njc0MUVCNEVCMjJERkE1MTdDQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmxJXjKM7rdtWluHe+/uhoxXzd vcJ8a1QDqbJPsByLWi9WD6t3MvMf1JW2Ct7OlUYyHMM3vHgI+Wz38SZZqRUoxtJb GIRh7iIS1hRN2WNGx08UN09mLp40NqR9kX/Jc9t+dIs5miIaBgJyHHB28U+XapW8 GjkkQvoJkDfUVDw2fLgRSh8S+mPZM4qvnyV193/sv9bnrV/kwfl0FxD8Ux8tywav h4uZLXWtWlI00TM1a4EG9MS0iyvjenA/qOi6EVrGHoL+nSI9iHU9CvlVQAh721nl q39APH9qQLr/roxYUHelX45Q/yRzQkKx115OpKdyZ+QpwMLCi6G5jkm2Kp8nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMXRP25pzRDXJBmdB606yLfpRfKYwHwYDVR0j BBgwFoAUr8Up+yQ7d4CiCyeixOc9r2XCUCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQ UUIvMS9BRkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQzUyOUZCMjQzQjc3ODBB MjBCMjdBMkM0RTczREFGNjVDMjUwMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQUUIvMS9B RkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQeGBJ+hQx1/vmDkzKdEfUqfWKupg56lv45Kq7Lji7Puz1pQwPga2I6IJDAY1 QnzGlHsaiQCESj8elt4a2wUjL36WAWkRK7RxxuLcwiakRYtTv7hnUt0Zzrxzk05/ SogbJJv9yISC0vjLVfPvaXMB0Y6YMn5VO6o2cyk+F7D62jAYWJLaiZVCYrznUDUu W7n0ENDhrHrtCJfi5cKmzAgLSYyoqVgAeG3wp2baSE6kXtIzwxdBMpPl2B44iFUH Uf26OhDIJLwewmsXAmQaJOV/WPPSCQVFFk97zjMIgEJhZ+eGw5dLwXzF9pFHrVi+ 7N2ldiMdb43bwc3Xsxp8vTQYwA== -----END CERTIFICATE-----Generated at Fri May 16 00:52:47 2025 by rpki-client