$ rpki-client -vvf rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft File: 8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft (raw, json) Hash identifier: MMrD6utsh+NgE7wxWpEcxTW/8RDZNes1ste8DTERpXU= Subject key identifier: 4D:C9:F4:88:71:2F:EA:22:C3:B4:0F:DE:66:27:1E:A4:DF:6D:C4:F8 Authority key identifier: 8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE Certificate issuer: /CN=8A873C3DC061821FFEF1C20E648451B8FE646FAE Certificate serial: 47082C73282987039871D7ACF5AD80356FE4F139 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer Subject info access: rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft Manifest number: 81 Signing time: Mon 12 May 2025 10:22:23 +0000 Manifest this update: Mon 12 May 2025 10:17:23 +0000 Manifest next update: Tue 13 May 2025 10:44:23 +0000 Files and hashes: 1: 8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl (hash: Q/5JVxo/gFcfWKjgUht+zV+vXP9YhDpe36lLQ9M9Ol4=) 2: 323830343a393266383a3a2f33322d3438203d3e20323734373436.roa (hash: 5fhRq321I9L3kTTV+fwC5X89HSpGKCAld/CiGq3rZfQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 10:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:08:2c:73:28:29:87:03:98:71:d7:ac:f5:ad:80:35:6f:e4:f1:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A873C3DC061821FFEF1C20E648451B8FE646FAE Validity Not Before: May 12 10:17:23 2025 GMT Not After : May 13 10:44:23 2025 GMT Subject: CN=4DC9F488712FEA22C3B40FDE66271EA4DF6DC4F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:aa:97:f4:23:43:f9:c1:92:99:cf:17:c2: c5:3c:68:eb:26:98:76:9d:c0:c0:95:91:be:f1:bd: 4a:5d:32:a5:dc:fd:8b:95:f2:53:95:28:d8:c1:9d: e9:c0:03:9b:78:c1:75:f3:e5:2e:11:f2:98:db:0a: bf:4c:48:55:07:87:b4:2e:59:02:4b:73:22:a7:38: bb:47:5c:df:36:f6:ff:8e:21:f2:89:e1:f2:2a:c4: 1d:0a:09:b8:7e:41:59:4b:9c:5a:ea:39:87:40:43: b8:23:d4:57:32:d5:13:27:a1:ad:d3:ba:45:cd:95: ec:f9:32:3b:20:a9:fc:b1:94:1b:c0:5e:40:84:66: 11:0c:2f:65:57:f3:ee:f6:05:22:ac:84:07:f4:ce: 3c:50:fe:5a:2d:ea:15:50:5c:78:b2:17:e9:56:2b: 8f:c6:d2:94:55:5f:0c:ad:1b:db:1a:93:7b:f2:b5: 47:8a:fb:69:21:5b:8f:11:ad:ae:d9:c6:1f:a0:ed: ab:31:a9:e6:54:36:54:86:50:58:10:2f:90:b7:84: a2:e0:44:fe:8d:30:bd:db:2f:3a:f7:29:8e:57:81: 5d:36:5b:2c:ae:45:db:e4:9b:7c:8d:cf:0a:5a:eb: 51:dc:c2:18:e7:64:9f:03:fc:c9:97:8f:47:c4:d7: 57:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C9:F4:88:71:2F:EA:22:C3:B4:0F:DE:66:27:1E:A4:DF:6D:C4:F8 X509v3 Authority Key Identifier: keyid:8A:87:3C:3D:C0:61:82:1F:FE:F1:C2:0E:64:84:51:B8:FE:64:6F:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A873C3DC061821FFEF1C20E648451B8FE646FAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzQ4xsNmJru5YadiHB8h1aeF5GSpKsgBsvYS6aKA1ake/0/8A873C3DC061821FFEF1C20E648451B8FE646FAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:fe:e2:1f:ef:49:3e:20:bf:8b:ba:57:19:f8:b7:13:f2:83: 86:56:ac:f4:d5:21:63:85:8b:02:5a:1d:da:bf:55:a4:3a:f8: 36:9a:0c:e3:a3:00:c5:1a:bc:7d:77:56:fb:89:30:85:9a:7a: ee:8b:a2:24:9c:1f:6d:11:56:7f:c5:30:b3:9d:5e:51:11:31: 57:f5:43:55:da:24:ae:a2:00:52:a5:b8:9d:5d:a1:72:da:42: 09:50:57:3b:f6:d0:a4:a2:be:3e:a7:07:52:3c:20:35:fa:0b: c2:e9:2c:26:e2:55:b7:56:c3:40:e6:43:7a:b0:7e:f0:ce:9c: 73:a0:ce:2c:ed:0a:6e:fb:58:75:5f:8d:72:6f:f5:32:1e:e1: e0:02:6a:a9:93:08:61:f8:65:e8:05:d1:4e:04:51:13:93:82: 58:8f:37:3e:18:c2:16:ad:6a:c0:56:f2:7b:34:ff:da:dc:a7: a0:54:b6:5a:0b:69:ba:43:85:dc:22:29:ed:2c:a5:d7:f8:49: cb:f7:f7:dc:2a:86:ed:4a:a7:9c:13:68:c5:8f:b6:1d:9d:96: 77:b3:ba:76:7e:a0:02:35:4c:de:c1:20:ed:f9:89:ed:3e:00: cf:9d:4f:c3:e5:fe:fd:a6:14:1f:26:3d:d6:18:6c:b7:37:c3: dc:95:91:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURwgscygphwOYcdes9a2ANW/k8TkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4NzNDM0RDMDYxODIxRkZFRjFDMjBFNjQ4NDUxQjhG RTY0NkZBRTAeFw0yNTA1MTIxMDE3MjNaFw0yNTA1MTMxMDQ0MjNaMDMxMTAvBgNV BAMTKDREQzlGNDg4NzEyRkVBMjJDM0I0MEZERTY2MjcxRUE0REY2REM0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4UqqX9CND+cGSmc8XwsU8aOsm mHadwMCVkb7xvUpdMqXc/YuV8lOVKNjBnenAA5t4wXXz5S4R8pjbCr9MSFUHh7Qu WQJLcyKnOLtHXN829v+OIfKJ4fIqxB0KCbh+QVlLnFrqOYdAQ7gj1Fcy1RMnoa3T ukXNlez5MjsgqfyxlBvAXkCEZhEML2VX8+72BSKshAf0zjxQ/lot6hVQXHiyF+lW K4/G0pRVXwytG9sak3vytUeK+2khW48Rra7Zxh+g7asxqeZUNlSGUFgQL5C3hKLg RP6NML3bLzr3KY5XgV02WyyuRdvkm3yNzwpa61HcwhjnZJ8D/MmXj0fE11eNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTcn0iHEv6iLDtA/eZicepN9txPgwHwYDVR0j BBgwFoAUioc8PcBhgh/+8cIOZIRRuP5kb64wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXpRNHhzTm1KcnU1WWFkaUhCOGgxYWVGNUdTcEtzZ0JzdllTNmFLQTFh a2UvMC84QTg3M0MzREMwNjE4MjFGRkVGMUMyMEU2NDg0NTFCOEZFNjQ2RkFFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBODczQzNEQzA2MTgyMUZG RUYxQzIwRTY0ODQ1MUI4RkU2NDZGQUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXpRNHhzTm1KcnU1WWFkaUhCOGgxYWVGNUdTcEtzZ0JzdllTNmFLQTFha2UvMC84 QTg3M0MzREMwNjE4MjFGRkVGMUMyMEU2NDg0NTFCOEZFNjQ2RkFFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADf7iH+9JPiC/i7pXGfi3E/KDhlas9NUhY4WLAlod2r9VpDr4NpoM46MAxRq8 fXdW+4kwhZp67ouiJJwfbRFWf8Uws51eURExV/VDVdokrqIAUqW4nV2hctpCCVBX O/bQpKK+PqcHUjwgNfoLwuksJuJVt1bDQOZDerB+8M6cc6DOLO0KbvtYdV+Ncm/1 Mh7h4AJqqZMIYfhl6AXRTgRRE5OCWI83PhjCFq1qwFbyezT/2tynoFS2WgtpukOF 3CIp7Syl1/hJy/f33CqG7UqnnBNoxY+2HZ2Wd7O6dn6gAjVM3sEg7fmJ7T4Az51P w+X+/aYUHyY91hhstzfD3JWRRw== -----END CERTIFICATE-----Generated at Mon May 12 22:13:17 2025 by rpki-client