$ rpki-client -vvf rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft File: 9A8CDCA9443D140D02860AA0070928656A172CE1.mft (raw, json) Hash identifier: S5O7cXskRxSUPCLDEm441p0WRlQT1J66Ma8/P+8Gn/o= Subject key identifier: 0B:01:4B:E0:C7:3F:2A:5A:76:9A:1D:78:5A:BF:FD:D0:AD:D1:EF:89 Authority key identifier: 9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1 Certificate issuer: /CN=9A8CDCA9443D140D02860AA0070928656A172CE1 Certificate serial: 50C91FBBF0C9EE9D9DE1D7E1397E857C1088E1A4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer Subject info access: rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft Manifest number: 021B Signing time: Sun 11 May 2025 14:42:56 +0000 Manifest this update: Sun 11 May 2025 14:37:56 +0000 Manifest next update: Mon 12 May 2025 17:02:56 +0000 Files and hashes: 1: 9A8CDCA9443D140D02860AA0070928656A172CE1.crl (hash: jnIdozrjqYDbFLOphm6WX6h41Yju5Q2A9ZF6f/+y6J0=) 2: 323830343a333930633a3a2f33322d3438203d3e20323636353230.roa (hash: 6QI59QFSBypQTZ5kO9smMt1xwKHCr2mkAkTRBmyy6jQ=) 3: 34352e3137372e3134302e302f32322d3234203d3e20323636353230.roa (hash: 8R4rvXI+iMslyFXB4PeOWRFCLmpgdZrCcLVZ5KHaVfI=) 4: 3137302e3234352e39322e302f32322d3234203d3e20323636353230.roa (hash: UXdHA797b5kGmZTBMIoKW3ejH3LItHlI0iAJwdYv0OA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 17:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c9:1f:bb:f0:c9:ee:9d:9d:e1:d7:e1:39:7e:85:7c:10:88:e1:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8CDCA9443D140D02860AA0070928656A172CE1 Validity Not Before: May 11 14:37:56 2025 GMT Not After : May 12 17:02:56 2025 GMT Subject: CN=0B014BE0C73F2A5A769A1D785ABFFDD0ADD1EF89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bc:5b:33:40:d6:79:cf:c2:6b:cd:ad:ca:38: 4f:f2:7b:76:05:be:ca:7e:9f:1a:7b:5d:e8:8f:20: 49:24:c6:63:f0:3f:8d:bc:f2:b6:6c:0f:4b:e7:2b: 91:2e:27:9f:5f:c2:70:15:8a:30:23:a9:b8:d4:16: 8d:ad:b1:85:4b:bb:50:d3:a7:b0:d0:5d:1c:7d:de: 0a:aa:8d:1f:22:84:ba:d2:bb:51:8e:ec:18:73:65: bc:22:50:0e:03:6b:b6:48:56:88:09:c5:33:e8:d6: 89:84:74:71:48:5c:67:c7:1a:18:d3:b0:ae:64:1c: 3d:58:02:0e:b6:c8:ca:69:72:f4:52:c0:9d:ce:4e: b3:8c:2e:2f:23:87:e8:cf:fb:66:08:f6:fb:b6:ff: 8a:0d:dd:fb:ec:ba:f1:d3:3f:f2:a0:7b:8a:f0:2f: 93:e5:b7:a0:30:4e:fe:32:16:52:be:df:d5:9e:67: 27:f8:90:78:59:00:74:6c:e7:17:50:ee:25:e8:02: 61:d0:7d:a2:35:6b:13:4e:a8:6a:dc:fa:0e:68:05: 5e:69:c5:b6:ef:98:84:8b:1f:df:16:bb:80:b6:e6: 35:c7:81:bd:b3:44:75:d9:57:1e:34:11:86:44:56: 51:05:f9:5d:c3:bd:59:ba:7a:7e:d9:29:c4:ff:bc: 7e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:01:4B:E0:C7:3F:2A:5A:76:9A:1D:78:5A:BF:FD:D0:AD:D1:EF:89 X509v3 Authority Key Identifier: keyid:9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:bc:5f:8b:a8:d4:95:a0:0e:a8:84:17:48:20:9f:a8:55:5e: 27:2d:b5:67:f1:55:41:66:35:80:d8:f5:f3:4a:b0:5a:94:cc: 80:65:84:e1:ee:02:21:42:d0:4c:fd:82:c7:b4:57:cc:44:16: b1:e1:6a:c6:ea:8b:cf:96:72:de:08:08:b0:f8:ba:0c:95:ca: 89:f4:5a:71:b6:dc:3f:a4:70:78:65:62:e3:36:61:c3:54:19: bd:68:d6:27:c4:3f:c3:ec:49:97:91:e6:dc:0f:11:22:9e:7a: 31:47:52:a0:e5:77:3f:3a:b2:1a:3c:73:0c:8f:54:14:93:b4: 06:78:5f:65:6c:33:ed:63:1d:6c:35:06:46:0d:bf:53:76:42: 28:43:20:9f:95:d5:87:94:d2:37:71:5e:e3:76:f6:3c:67:59: 9b:a0:01:05:6d:5d:97:11:92:9e:42:3f:b9:52:da:c2:30:46: 8f:4a:6b:d2:dd:5c:dc:d3:81:51:1c:57:51:5e:43:47:38:d5: c3:fe:e4:5c:e8:a0:a1:94:01:47:2d:89:e6:a0:ea:03:3e:86: bd:4a:c3:87:f5:68:6d:70:fb:3b:ad:da:c0:34:c2:91:e4:9d: 0e:cd:49:73:43:50:ba:f1:33:c7:59:f4:94:13:06:28:27:2a: 0a:1a:a3:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUMkfu/DJ7p2d4dfhOX6FfBCI4aQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4Q0RDQTk0NDNEMTQwRDAyODYwQUEwMDcwOTI4NjU2 QTE3MkNFMTAeFw0yNTA1MTExNDM3NTZaFw0yNTA1MTIxNzAyNTZaMDMxMTAvBgNV BAMTKDBCMDE0QkUwQzczRjJBNUE3NjlBMUQ3ODVBQkZGREQwQUREMUVGODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOvFszQNZ5z8Jrza3KOE/ye3YF vsp+nxp7XeiPIEkkxmPwP4288rZsD0vnK5EuJ59fwnAVijAjqbjUFo2tsYVLu1DT p7DQXRx93gqqjR8ihLrSu1GO7BhzZbwiUA4Da7ZIVogJxTPo1omEdHFIXGfHGhjT sK5kHD1YAg62yMppcvRSwJ3OTrOMLi8jh+jP+2YI9vu2/4oN3fvsuvHTP/Kge4rw L5Plt6AwTv4yFlK+39WeZyf4kHhZAHRs5xdQ7iXoAmHQfaI1axNOqGrc+g5oBV5p xbbvmISLH98Wu4C25jXHgb2zRHXZVx40EYZEVlEF+V3DvVm6en7ZKcT/vH5rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCwFL4Mc/Klp2mh14Wr/90K3R74kwHwYDVR0j BBgwFoAUmozcqUQ9FA0ChgqgBwkoZWoXLOEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmd5TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlC VW0vMS85QThDRENBOTQ0M0QxNDBEMDI4NjBBQTAwNzA5Mjg2NTZBMTcyQ0UxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBOENEQ0E5NDQzRDE0MEQw Mjg2MEFBMDA3MDkyODY1NkExNzJDRTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qmd5TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlCVW0vMS85 QThDRENBOTQ0M0QxNDBEMDI4NjBBQTAwNzA5Mjg2NTZBMTcyQ0UxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZbxfi6jUlaAOqIQXSCCfqFVeJy21Z/FVQWY1gNj180qwWpTMgGWE4e4CIULQ TP2Cx7RXzEQWseFqxuqLz5Zy3ggIsPi6DJXKifRacbbcP6RweGVi4zZhw1QZvWjW J8Q/w+xJl5Hm3A8RIp56MUdSoOV3PzqyGjxzDI9UFJO0BnhfZWwz7WMdbDUGRg2/ U3ZCKEMgn5XVh5TSN3Fe43b2PGdZm6ABBW1dlxGSnkI/uVLawjBGj0pr0t1c3NOB URxXUV5DRzjVw/7kXOigoZQBRy2J5qDqAz6GvUrDh/VobXD7O63awDTCkeSdDs1J c0NQuvEzx1n0lBMGKCcqChqjjw== -----END CERTIFICATE-----Generated at Mon May 12 04:39:08 2025 by rpki-client