$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft File: AFF600EA088C0C0C3160D75A952506A94913C8A8.mft (raw, json) Hash identifier: Hjl04O+ZltGs3Qx+xTgn0C0Y7IvoGF5vFdCLFkYevxc= Subject key identifier: BD:F4:CA:8A:F5:61:81:A9:D8:97:B0:F3:08:31:AF:AB:D2:1F:BF:E6 Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 Certificate issuer: /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Certificate serial: 2CCCAFB0DDE79D9EE5D4E3AC508204D14A854A6D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft Manifest number: 0224 Signing time: Sat 17 May 2025 03:20:00 +0000 Manifest this update: Sat 17 May 2025 03:15:00 +0000 Manifest next update: Sun 18 May 2025 06:44:00 +0000 Files and hashes: 1: 3137372e31322e3131322e302f32302d3230203d3e203533313138.roa (hash: jN25SYmZKfd1sPcHySVfXCIHkpd4KxWXs3ZwAiKGYuw=) 2: 323830343a3266343a3a2f33322d3332203d3e203533313138.roa (hash: FLOV3J4ELHykDuxEoc8TQNldBLQr0uQtj2VTGfj6c0Q=) 3: 3138372e3131302e3137352e302f32342d3234203d3e203533313138.roa (hash: Og14qieFhd2yPSbUgzfLCt9UBveopB8PQo+8zpZO8is=) 4: 3137372e31322e3132332e302f32342d3234203d3e203533313138.roa (hash: Kq+MibEAzFGTBoCjjqLDshi/5eMUdsSQZ+YXEELUOww=) 5: 3137372e31322e3132322e302f32342d3234203d3e203533313138.roa (hash: FPOIK0HoDwaAUy65NC3MdxlbC9Je6s9SlFjedqzplPg=) 6: 3138372e3131302e3136302e302f32302d3230203d3e203533313138.roa (hash: VQ2nRm2+YMc/UCt8ERS/C8ZPSft97reB3mR1kQAvLaI=) 7: 3137372e31322e39362e302f32302d3230203d3e203533313138.roa (hash: h2Oqn3qxt0UufdhIxmkJFNRD7NQUg5lP6kk9tXGbGJ4=) 8: AFF600EA088C0C0C3160D75A952506A94913C8A8.crl (hash: pQcDL3HKUMx1AT5TZgBvzNsBkBucWQxvrY3I2p+Bq4o=) 9: 3138372e3131302e3137342e302f32342d3234203d3e203533313138.roa (hash: Uhs2EnhLYS3vvCI6rXGY44HBJ7cQCIiuaZCLEF3JbUA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 18 May 2025 06:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:cc:af:b0:dd:e7:9d:9e:e5:d4:e3:ac:50:82:04:d1:4a:85:4a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Validity Not Before: May 17 03:15:00 2025 GMT Not After : May 18 06:44:00 2025 GMT Subject: CN=BDF4CA8AF56181A9D897B0F30831AFABD21FBFE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:6a:a0:ec:e7:72:1c:09:4c:57:ff:ee:ed: 66:08:e9:ed:9b:73:92:ed:b5:aa:1a:ad:88:35:76: bb:c4:e0:5f:47:0b:24:85:45:17:ab:e6:8b:2b:79: 7b:ae:1f:9d:fc:6b:3a:7e:b4:59:f3:11:8a:4d:73: ff:57:1c:a5:f7:1a:9f:7a:5d:62:00:aa:ba:21:f8: 39:97:bc:59:ca:96:46:0e:c7:60:a2:a5:55:b7:8b: d2:18:90:38:1f:52:27:af:5e:74:fa:d9:ea:1b:cc: 83:d1:34:df:f9:50:d0:f4:4b:e9:69:07:5c:93:91: 46:1e:b6:89:2f:9e:fd:d4:39:a5:7f:df:46:b3:5b: e6:c1:fc:1f:71:5f:3b:0a:22:0c:8d:58:b7:c9:3a: e1:89:b3:9a:10:a0:7b:ff:f6:47:91:a2:86:20:b9: 6f:fd:7d:4f:55:60:cf:ed:1a:0d:3a:8d:00:93:66: 4f:d2:85:7e:d0:a0:5e:01:03:cc:b3:87:5b:f7:24: 01:ff:9b:fd:5c:ca:1d:6f:2a:d9:96:90:2d:a8:14: 94:68:cf:a7:c2:f1:9e:85:1e:56:56:85:f7:c0:e5: 30:85:26:63:c8:7f:e0:b9:3c:a3:75:d6:d3:ef:96: 86:fd:8f:ba:e0:00:90:e0:76:38:93:3a:fc:96:d2: 9a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F4:CA:8A:F5:61:81:A9:D8:97:B0:F3:08:31:AF:AB:D2:1F:BF:E6 X509v3 Authority Key Identifier: keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:98:aa:fa:ce:eb:b4:a3:78:3a:10:e9:aa:f8:78:13:6c:ad: 06:f7:72:da:e7:a3:d6:98:2d:ba:eb:df:df:cf:49:88:54:e3: 73:bd:34:0b:f1:61:1a:b1:b6:ec:16:6e:65:82:08:cc:ee:30: 8b:72:bb:15:99:59:3e:3d:c0:28:b1:c9:c5:6c:33:5a:39:e4: ed:eb:41:b4:a7:1d:f4:cb:40:bd:ed:25:d9:7a:0a:5e:46:8d: 4b:a5:10:61:13:9a:b9:27:1d:03:4d:ea:f3:82:4c:41:92:05: 92:64:e9:74:44:a9:07:d0:68:8f:99:45:9f:db:f5:19:6f:33: bf:09:d5:4d:91:8e:4e:cb:9a:81:28:c0:dc:6d:3b:68:58:ee: c6:e4:37:16:25:ab:53:d0:93:53:47:a7:ed:6c:16:3b:53:e9: 62:a9:a5:b1:14:4e:0c:77:ee:3b:ed:ee:f6:7d:f8:ee:99:81: 57:e3:9c:68:14:70:46:04:d8:fa:27:41:31:91:90:a9:0e:bf: 3b:58:46:99:12:d7:52:39:24:86:a1:fc:60:c5:ae:fb:f4:87: 03:18:b4:9e:00:c9:ec:8b:8f:80:12:5f:3b:36:31:87:d4:c0: 63:e2:2d:26:49:d2:ca:bc:d2:61:65:98:59:76:5b:8e:ab:f9: 06:3c:d5:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULMyvsN3nnZ7l1OOsUIIE0UqFSm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNjAwRUEwODhDMEMwQzMxNjBENzVBOTUyNTA2QTk0 OTEzQzhBODAeFw0yNTA1MTcwMzE1MDBaFw0yNTA1MTgwNjQ0MDBaMDMxMTAvBgNV BAMTKEJERjRDQThBRjU2MTgxQTlEODk3QjBGMzA4MzFBRkFCRDIxRkJGRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10mqg7OdyHAlMV//u7WYI6e2b c5LttaoarYg1drvE4F9HCySFRRer5osreXuuH538azp+tFnzEYpNc/9XHKX3Gp96 XWIAqroh+DmXvFnKlkYOx2CipVW3i9IYkDgfUievXnT62eobzIPRNN/5UND0S+lp B1yTkUYetokvnv3UOaV/30azW+bB/B9xXzsKIgyNWLfJOuGJs5oQoHv/9keRooYg uW/9fU9VYM/tGg06jQCTZk/ShX7QoF4BA8yzh1v3JAH/m/1cyh1vKtmWkC2oFJRo z6fC8Z6FHlZWhffA5TCFJmPIf+C5PKN11tPvlob9j7rgAJDgdjiTOvyW0pq/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvfTKivVhganYl7DzCDGvq9Ifv+YwHwYDVR0j BBgwFoAUr/YA6giMDAwxYNdalSUGqUkTyKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ Y2ovMS9BRkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjYwMEVBMDg4QzBDMEMz MTYwRDc1QTk1MjUwNkE5NDkxM0M4QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQY2ovMS9B RkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnZiq+s7rtKN4OhDpqvh4E2ytBvdy2uej1pgtuuvf389JiFTjc700C/FhGrG2 7BZuZYIIzO4wi3K7FZlZPj3AKLHJxWwzWjnk7etBtKcd9MtAve0l2XoKXkaNS6UQ YROauScdA03q84JMQZIFkmTpdESpB9Boj5lFn9v1GW8zvwnVTZGOTsuagSjA3G07 aFjuxuQ3FiWrU9CTU0en7WwWO1PpYqmlsRRODHfuO+3u9n347pmBV+OcaBRwRgTY +idBMZGQqQ6/O1hGmRLXUjkkhqH8YMWu+/SHAxi0ngDJ7IuPgBJfOzYxh9TAY+It JknSyrzSYWWYWXZbjqv5BjzVMQ== -----END CERTIFICATE-----Generated at Sat May 17 08:36:49 2025 by rpki-client