$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft File: D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft (raw, json) Hash identifier: McmEirhVnD6+3QRU/gUACuJZWah0QKLAVL1jEoYoHHo= Subject key identifier: D2:E2:AA:73:42:A0:F2:58:11:9A:54:33:2C:51:54:1E:20:61:7C:7A Authority key identifier: D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7 Certificate issuer: /CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7 Certificate serial: 5D16A98B59E4C23FE7F5F8E4B6C1E3F5C15005D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer Subject info access: rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft Manifest number: 021A Signing time: Wed 14 May 2025 14:12:28 +0000 Manifest this update: Wed 14 May 2025 14:07:28 +0000 Manifest next update: Thu 15 May 2025 16:18:28 +0000 Files and hashes: 1: 323830343a323232633a3230303a3a2f34302d3434203d3e20323634353936.roa (hash: 4WfY395mZG09TAJBlglrJ2+AGNkxszTkWrOd/jFq97I=) 2: 3133382e35392e34302e302f32322d3232203d3e20323634353936.roa (hash: XnVkcTWY1UepTeJFNoHSnfqh5tfoOGO7WDyCyMCDNr0=) 3: 3133382e35392e34302e302f32332d3234203d3e20323634353936.roa (hash: IxeH3r/sFEiXVYIAo+TPTL502Cb54lnUrgRZsRd4ZAQ=) 4: 3133382e35392e34322e302f32332d3234203d3e20323634353936.roa (hash: 8uH1M0wq02HcEJjgqGHP5ef+LUQ1IxvHjaniOF5wfbk=) 5: 323830343a323232633a3330303a3a2f34302d3434203d3e20323634353936.roa (hash: EkD5UCro5wn9CN2PhPsCdrnoNqHq6UEXt74AshpdDUA=) 6: 323830343a323232633a3130303a3a2f34302d3434203d3e20323634353936.roa (hash: LlyQfC3AFfR8obryAFvmZaC5+HCwgUNR4DlkF/AN7qE=) 7: D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl (hash: +IuhROhOotLeiH2Z87R848W1RwsoeIG76C1rzB8Nnu8=) 8: 323830343a323232633a3a2f33322d3332203d3e20323634353936.roa (hash: gISfXxqBU/leqiaZdS+4MXquTkxMfgyyZKbU9WY/D4s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 May 2025 16:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:16:a9:8b:59:e4:c2:3f:e7:f5:f8:e4:b6:c1:e3:f5:c1:50:05:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7 Validity Not Before: May 14 14:07:28 2025 GMT Not After : May 15 16:18:28 2025 GMT Subject: CN=D2E2AA7342A0F258119A54332C51541E20617C7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e4:e2:be:88:8d:2d:b7:2d:78:6d:3a:d5:ba: 1e:9f:83:83:59:37:da:ea:5f:42:ec:75:c0:dc:09: 7e:a0:b5:bf:88:24:7b:d2:7c:67:24:0a:4b:f5:45: 93:03:90:3d:20:80:5b:3f:90:30:0f:75:99:ea:94: d2:83:c3:2a:5a:29:fe:a4:d5:0d:b9:b2:1e:6d:de: 7f:39:d5:eb:6d:8d:37:9c:be:26:52:94:98:13:c5: 54:16:4f:86:b5:bc:1c:a2:5f:7a:20:f1:0b:31:09: 89:8d:49:55:eb:63:3f:76:6f:29:9f:06:52:7b:c0: 33:b1:4c:d9:dc:e1:89:56:39:23:0d:59:37:6e:7a: b8:7f:ad:e2:bf:5f:6c:f6:73:3c:8b:4a:d6:9c:cd: 16:1f:8e:4b:cb:b8:64:ea:8f:aa:1b:3a:04:92:92: e8:94:e2:da:9a:f0:4b:4e:f8:6c:ba:3d:8a:5d:52: 66:6b:ab:51:8e:82:96:56:41:b6:4f:1e:47:4c:69: 27:d6:7b:22:55:08:00:dd:b7:a8:e0:4e:82:b2:4b: da:71:39:af:36:02:d3:c8:31:5e:fa:4e:0f:80:3a: 92:b5:31:20:16:db:cb:25:7f:52:0d:ca:f0:18:dd: 84:6b:58:66:e0:a2:33:18:95:26:01:16:10:ba:79: b8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E2:AA:73:42:A0:F2:58:11:9A:54:33:2C:51:54:1E:20:61:7C:7A X509v3 Authority Key Identifier: keyid:D8:3B:D8:1B:DC:0A:01:D1:AE:F1:AF:D4:0B:C6:A4:E7:2C:94:11:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/1/D83BD81BDC0A01D1AEF1AFD40BC6A4E72C9411F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:c4:9e:e0:d8:52:61:a0:92:4a:c4:b7:93:c1:33:7a:d4:81: 59:2a:65:4a:61:05:8f:5d:3c:c5:96:a0:0c:7e:87:11:18:1f: 91:b9:14:2c:48:10:cc:b4:7b:09:d1:f6:c6:b6:bc:fc:5f:6e: 4e:0f:e3:e1:99:3f:46:8e:10:ff:3f:07:ae:f3:06:fa:19:ec: bc:57:29:5b:3d:9d:91:04:4a:75:b5:78:83:f5:dd:02:85:90: d9:b7:9a:8f:b5:38:13:fe:e2:64:45:30:8e:db:08:c8:a0:e4: 0a:b7:36:d9:50:11:f8:0d:2f:0a:59:da:b1:36:b5:9e:5b:a5: f9:d5:de:50:d9:c6:32:d6:58:da:2c:5e:3a:f8:13:6e:0b:ef: 08:c5:73:8b:bc:b9:7f:19:a0:a0:7a:18:cd:26:83:4c:a4:91: 44:b6:06:bf:e0:bd:92:96:da:aa:2b:a1:c4:c5:12:81:26:7e: bb:2e:41:fd:2f:34:b4:b2:39:5f:b2:fc:cb:40:87:8a:da:d1: 2e:74:06:b1:35:66:3b:af:4b:b8:02:d0:48:1a:26:56:31:89: 63:03:e5:78:ce:0b:59:4a:2b:11:b6:a0:d2:25:e5:c5:aa:2b: 66:26:43:a3:07:ee:25:61:82:f2:e1:eb:99:0c:f9:29:f1:58: a1:64:84:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXRapi1nkwj/n9fjktsHj9cFQBdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgzQkQ4MUJEQzBBMDFEMUFFRjFBRkQ0MEJDNkE0RTcy Qzk0MTFGNzAeFw0yNTA1MTQxNDA3MjhaFw0yNTA1MTUxNjE4MjhaMDMxMTAvBgNV BAMTKEQyRTJBQTczNDJBMEYyNTgxMTlBNTQzMzJDNTE1NDFFMjA2MTdDN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd5OK+iI0tty14bTrVuh6fg4NZ N9rqX0LsdcDcCX6gtb+IJHvSfGckCkv1RZMDkD0ggFs/kDAPdZnqlNKDwypaKf6k 1Q25sh5t3n851ettjTecviZSlJgTxVQWT4a1vByiX3og8QsxCYmNSVXrYz92bymf BlJ7wDOxTNnc4YlWOSMNWTduerh/reK/X2z2czyLStaczRYfjkvLuGTqj6obOgSS kuiU4tqa8EtO+Gy6PYpdUmZrq1GOgpZWQbZPHkdMaSfWeyJVCADdt6jgToKyS9px Oa82AtPIMV76Tg+AOpK1MSAW28slf1INyvAY3YRrWGbgojMYlSYBFhC6ebhxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0uKqc0Kg8lgRmlQzLFFUHiBhfHowHwYDVR0j BBgwFoAU2DvYG9wKAdGu8a/UC8ak5yyUEfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkttRkRuRjZiWHZFWWJMcGJuaFpFV0VreGpHclpSUXBwWFFLNEZuVVRO VlovMS9EODNCRDgxQkRDMEEwMUQxQUVGMUFGRDQwQkM2QTRFNzJDOTQxMUY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4M0JEODFCREMwQTAxRDFB RUYxQUZENDBCQzZBNEU3MkM5NDExRjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkttRkRuRjZiWHZFWWJMcGJuaFpFV0VreGpHclpSUXBwWFFLNEZuVVROVlovMS9E ODNCRDgxQkRDMEEwMUQxQUVGMUFGRDQwQkM2QTRFNzJDOTQxMUY3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV8Se4NhSYaCSSsS3k8EzetSBWSplSmEFj108xZagDH6HERgfkbkULEgQzLR7 CdH2xra8/F9uTg/j4Zk/Ro4Q/z8HrvMG+hnsvFcpWz2dkQRKdbV4g/XdAoWQ2bea j7U4E/7iZEUwjtsIyKDkCrc22VAR+A0vClnasTa1nlul+dXeUNnGMtZY2ixeOvgT bgvvCMVzi7y5fxmgoHoYzSaDTKSRRLYGv+C9kpbaqiuhxMUSgSZ+uy5B/S80tLI5 X7L8y0CHitrRLnQGsTVmO69LuALQSBomVjGJYwPleM4LWUorEbag0iXlxaorZiZD owfuJWGC8uHrmQz5KfFYoWSEkg== -----END CERTIFICATE-----Generated at Wed May 14 23:09:33 2025 by rpki-client