$ rpki-client -vvf rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.mft File: CC8086D196E8A5C61982081F90E17B277D50F224.mft (raw, json) Hash identifier: Kt6oYGwHiTGD+M4sKwcAI0Ksfp3tA9n5xRb4ML0S2no= Subject key identifier: 52:6E:61:0E:A8:BA:17:61:AE:88:7E:14:24:4F:6C:03:75:43:4F:87 Authority key identifier: CC:80:86:D1:96:E8:A5:C6:19:82:08:1F:90:E1:7B:27:7D:50:F2:24 Certificate issuer: /CN=CC8086D196E8A5C61982081F90E17B277D50F224 Certificate serial: 7E5C6354C6030FFFC3BFDD9AC120A55F430D1121 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8086D196E8A5C61982081F90E17B277D50F224.cer Subject info access: rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.mft Manifest number: 0222 Signing time: Fri 16 May 2025 10:30:00 +0000 Manifest this update: Fri 16 May 2025 10:25:00 +0000 Manifest next update: Sat 17 May 2025 11:30:00 +0000 Files and hashes: 1: 34352e3136312e3139362e302f32322d3234203d3e20323635393035.roa (hash: vLmdo9KQ58nXNGaKvn9M76mAb5Rkp6osL4lr4pCuSjQ=) 2: CC8086D196E8A5C61982081F90E17B277D50F224.crl (hash: PLqRpyrmeyQME3NT7Teq9z5WGyPzY+fSFxU5C+6CWZc=) 3: 323830343a336661383a3a2f33322d3334203d3e20323635393035.roa (hash: qgrx0B2fzRiY47gXpq+yGna7KKXinyEb5ugH1d9L0GA=) 4: 3133312e3139362e3130302e302f32322d3234203d3e20323635393035.roa (hash: 7rU9aTdzNPtasJu1My8RTNY/tWo9mK2SMy8Pd77r0+I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.crl rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8086D196E8A5C61982081F90E17B277D50F224.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 May 2025 11:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:5c:63:54:c6:03:0f:ff:c3:bf:dd:9a:c1:20:a5:5f:43:0d:11:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8086D196E8A5C61982081F90E17B277D50F224 Validity Not Before: May 16 10:25:00 2025 GMT Not After : May 17 11:30:00 2025 GMT Subject: CN=526E610EA8BA1761AE887E14244F6C0375434F87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:01:3d:8a:90:ed:e1:4c:9b:91:32:45:46: 93:35:aa:96:79:ab:7c:2b:4f:bc:5f:68:80:74:d9: d3:82:51:59:29:9a:a0:44:c9:88:4a:a5:1a:a3:ab: 9b:a3:f3:43:b7:90:cc:0d:8f:74:6d:e2:1b:a7:57: 77:27:13:ba:b9:db:31:c1:78:53:e4:3a:27:aa:10: 55:f2:5e:56:dd:7e:f0:dc:f2:f1:e4:8a:24:49:75: 72:48:ce:49:27:49:fc:1b:6b:f9:3e:73:89:08:12: af:0d:32:f1:a0:8d:45:51:d2:a6:ea:78:b4:d0:4e: ab:6a:4a:a3:a9:f7:b3:23:60:a0:c9:b9:52:1e:88: 8c:09:9c:23:fa:ce:c7:c6:b5:34:a5:7c:01:56:97: c4:15:d3:69:3d:ec:66:88:64:7b:75:5f:ab:96:76: 9e:b2:ff:48:ee:ab:75:a0:d5:b8:84:af:77:cc:36: 7d:86:b1:2d:2d:f3:93:c6:da:e0:12:35:cf:87:27: 85:44:88:9d:3e:6d:4e:4b:33:d1:0c:57:25:1f:53: 7a:9f:d1:9a:df:31:73:4a:21:8c:88:53:44:28:64: 6c:92:a0:4f:7f:29:67:bc:43:0a:de:a4:d4:63:fe: 37:6f:66:87:08:07:e8:f4:b4:a2:5f:99:d1:8a:68: 72:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6E:61:0E:A8:BA:17:61:AE:88:7E:14:24:4F:6C:03:75:43:4F:87 X509v3 Authority Key Identifier: keyid:CC:80:86:D1:96:E8:A5:C6:19:82:08:1F:90:E1:7B:27:7D:50:F2:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8086D196E8A5C61982081F90E17B277D50F224.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d6:4e:a9:94:61:b3:5d:99:50:64:73:e7:ba:3a:52:5f:93: 65:1b:f3:35:17:52:d7:bf:be:a7:79:d2:da:e1:6d:e8:c4:46: f1:9c:6e:7f:d9:1b:ff:b4:fa:78:3d:97:50:13:61:22:e5:d7: f4:7f:40:0e:23:b2:03:a8:7e:8d:e9:5f:c9:00:1d:82:1c:1e: 11:bd:6e:15:94:6d:d8:ae:1b:d3:60:6e:6b:70:63:73:58:fb: 29:48:94:c4:2b:31:a8:40:a2:a0:34:2f:3c:ed:bf:11:9d:d5: 81:17:cf:02:f5:21:c2:53:94:f3:63:3b:1e:5e:9b:74:bd:ff: 89:8b:70:a6:c3:e6:ee:3a:8d:e3:f0:b8:35:f3:eb:27:96:b7: 4a:b3:af:fa:5a:33:fc:0b:41:c1:1c:d0:10:0f:6e:69:56:48: cf:e3:0d:4c:8f:79:e0:0a:7f:99:aa:29:15:b6:18:60:a6:c3: 62:30:5e:cd:09:d0:c6:04:bf:a6:1e:8f:64:c0:a6:56:8a:79: b0:ef:b2:16:6c:93:15:59:6b:46:35:93:18:63:82:d9:ec:f7: 69:4d:11:d5:95:f4:d9:cd:7d:f0:83:a4:26:1c:b1:ad:ff:a1: 03:13:a3:e0:68:f1:6b:33:48:2e:5c:c3:e6:1b:b3:6f:66:91: 8f:87:7f:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUflxjVMYDD//Dv92awSClX0MNESEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4MDg2RDE5NkU4QTVDNjE5ODIwODFGOTBFMTdCMjc3 RDUwRjIyNDAeFw0yNTA1MTYxMDI1MDBaFw0yNTA1MTcxMTMwMDBaMDMxMTAvBgNV BAMTKDUyNkU2MTBFQThCQTE3NjFBRTg4N0UxNDI0NEY2QzAzNzU0MzRGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVQE9ipDt4UybkTJFRpM1qpZ5 q3wrT7xfaIB02dOCUVkpmqBEyYhKpRqjq5uj80O3kMwNj3Rt4hunV3cnE7q52zHB eFPkOieqEFXyXlbdfvDc8vHkiiRJdXJIzkknSfwba/k+c4kIEq8NMvGgjUVR0qbq eLTQTqtqSqOp97MjYKDJuVIeiIwJnCP6zsfGtTSlfAFWl8QV02k97GaIZHt1X6uW dp6y/0juq3Wg1biEr3fMNn2GsS0t85PG2uASNc+HJ4VEiJ0+bU5LM9EMVyUfU3qf 0ZrfMXNKIYyIU0QoZGySoE9/KWe8QwrepNRj/jdvZocIB+j0tKJfmdGKaHInAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUm5hDqi6F2GuiH4UJE9sA3VDT4cwHwYDVR0j BBgwFoAUzICG0ZbopcYZgggfkOF7J31Q8iQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWZDMVlVUHY1ajhFOGtuYzdDWXREd3BudlgzNW5Ld0VTUGZEbXhTdUN1 RkovMS9DQzgwODZEMTk2RThBNUM2MTk4MjA4MUY5MEUxN0IyNzdENTBGMjI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDODA4NkQxOTZFOEE1QzYx OTgyMDgxRjkwRTE3QjI3N0Q1MEYyMjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWZDMVlVUHY1ajhFOGtuYzdDWXREd3BudlgzNW5Ld0VTUGZEbXhTdUN1RkovMS9D QzgwODZEMTk2RThBNUM2MTk4MjA4MUY5MEUxN0IyNzdENTBGMjI0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAatZOqZRhs12ZUGRz57o6Ul+TZRvzNRdS17++p3nS2uFt6MRG8Zxuf9kb/7T6 eD2XUBNhIuXX9H9ADiOyA6h+jelfyQAdghweEb1uFZRt2K4b02Bua3Bjc1j7KUiU xCsxqECioDQvPO2/EZ3VgRfPAvUhwlOU82M7Hl6bdL3/iYtwpsPm7jqN4/C4NfPr J5a3SrOv+loz/AtBwRzQEA9uaVZIz+MNTI954Ap/maopFbYYYKbDYjBezQnQxgS/ ph6PZMCmVop5sO+yFmyTFVlrRjWTGGOC2ez3aU0R1ZX02c198IOkJhyxrf+hAxOj 4GjxazNILlzD5huzb2aRj4d/cw== -----END CERTIFICATE-----Generated at Fri May 16 23:41:36 2025 by rpki-client