$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.mft File: 0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.mft (raw, json) Hash identifier: dURPk6v/5QSMKF0EvjNpxNfCgWFqF/rpRhI05l82st8= Subject key identifier: 57:49:38:98:23:DA:4B:F3:E8:45:EF:EC:1C:1D:0A:1A:6E:2F:93:15 Authority key identifier: 0C:9E:7A:58:1F:B3:4E:75:3F:90:B9:3C:9E:30:03:ED:6F:E1:D0:F0 Certificate issuer: /CN=0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0 Certificate serial: 09A339290959FCF2AED6F05684B85DC94EDCCA59 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.mft Manifest number: 08 Signing time: Sat 10 May 2025 23:17:16 +0000 Manifest this update: Sat 10 May 2025 23:12:16 +0000 Manifest next update: Mon 12 May 2025 01:28:16 +0000 Files and hashes: 1: 3137302e3234352e3132342e302f32322d3232203d3e20323636303232.roa (hash: c5glFMByvpnMIegNy5aaYzjOSeI+qm5ABaH+4pnoaIg=) 2: 0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.crl (hash: gIjJe4GZgx6D9FxcPTGTEZu2XxENu1zN58EtS3zCrHQ=) 3: 3137302e3234352e3132362e302f32332d3233203d3e20323636303232.roa (hash: iRw9/4rJpOYX60HrikKUD+hM5i546e6s3PpfIIP6X9Y=) 4: 3137302e3234352e3132342e302f32342d3234203d3e20323636303232.roa (hash: NyjvRqrsWW7DHKYMZ6MxBe2aS7uYJOKGkA+406fr9eQ=) 5: 3137302e3234352e3132352e302f32342d3234203d3e20323636303232.roa (hash: /G1Zbr3lal9RIdlygmz9QftomPKpcarPUTidAPRFrB4=) 6: 3137302e3234352e3132342e302f32332d3233203d3e20323636303232.roa (hash: O+oNKtxxAV4hi7g3gFIS54YA/83Cr3nfDSvimJlyFfs=) 7: 3137302e3234352e3132372e302f32342d3234203d3e20323636303232.roa (hash: YPjqMC53pPLv42dL6Pw9qLt/uKQ2XnkLPjSql2GVReY=) 8: 323830343a333934343a3a2f33322d3332203d3e20323636303232.roa (hash: eNek7s/NjIGaiJQf+4joY/oeeA6o2Xb2iDWz5nNf7mU=) 9: 3137302e3234352e3132362e302f32342d3234203d3e20323636303232.roa (hash: J3vPBe+lnQ/iFaCVqN2x7MdAQVBEj+rvWmJtEF9kUE0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.crl rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 01:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a3:39:29:09:59:fc:f2:ae:d6:f0:56:84:b8:5d:c9:4e:dc:ca:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0 Validity Not Before: May 10 23:12:16 2025 GMT Not After : May 12 01:28:16 2025 GMT Subject: CN=5749389823DA4BF3E845EFEC1C1D0A1A6E2F9315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c7:81:47:47:a4:52:a0:65:ce:19:81:e3:64: 25:9e:d8:62:40:98:16:aa:15:e4:a0:cd:2e:10:df: 94:32:f1:cf:78:36:c2:56:cd:9c:c7:ae:04:9b:08: 99:90:6b:d9:59:07:38:76:50:03:84:c7:59:fa:8a: a5:95:00:47:0a:ab:06:59:3f:68:59:c1:9e:34:0c: a1:a2:9b:d2:b9:f6:b7:6a:d3:4b:57:ee:e5:36:53: 77:0b:58:bf:9a:8b:3b:3c:b6:32:f9:00:a5:57:07: f4:3d:37:e6:c8:d7:3d:d1:8e:87:fd:6d:a4:fe:94: e6:0b:a4:0d:23:ac:8a:9c:9b:78:e7:79:ae:35:f8: f5:77:e4:e5:91:2b:83:d5:4d:12:1d:23:ea:9d:37: b0:89:7f:84:cb:64:d4:2f:e4:b5:80:e3:30:b2:51: 13:57:1d:b7:70:77:a2:97:b1:56:6c:48:4c:43:7d: 62:9e:6e:e3:93:14:e5:66:b7:fb:2e:38:f4:8f:d4: 42:97:03:8b:d4:d5:76:1b:79:b9:cd:ff:04:ff:ad: 09:11:a1:ce:f2:0d:cd:4f:0c:27:7a:20:00:bc:ca: 0d:06:49:6b:67:a9:18:50:f3:3b:9e:ae:11:b4:e5: bf:f2:c2:32:78:21:7b:31:42:ca:c0:6e:2d:c7:a0: 28:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:49:38:98:23:DA:4B:F3:E8:45:EF:EC:1C:1D:0A:1A:6E:2F:93:15 X509v3 Authority Key Identifier: keyid:0C:9E:7A:58:1F:B3:4E:75:3F:90:B9:3C:9E:30:03:ED:6F:E1:D0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/0C9E7A581FB34E753F90B93C9E3003ED6FE1D0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:b0:56:0f:9c:7f:95:95:aa:57:d4:cf:61:bc:f9:c5:14:57: 38:6d:cd:d3:82:06:a4:1d:e3:ab:94:cb:f4:07:43:bf:56:10: c2:bd:cb:b6:ed:94:2c:0a:5d:fb:4b:c0:a1:15:30:d9:88:d0: dd:3b:3b:23:d1:0f:6e:4e:a2:02:c5:1a:00:65:8b:50:d2:77: b4:fa:71:ac:e3:57:7b:68:bb:87:cf:a8:90:37:b0:0a:ce:d3: 3c:43:9e:b4:af:f0:f2:48:d8:4c:bd:80:72:4c:9e:09:69:ce: 4c:8e:9e:8c:a7:d5:f8:16:4f:1f:9a:0f:43:77:f9:ee:52:62: 80:ed:dd:bc:ea:5f:a0:27:32:23:fa:76:9f:54:47:9b:5a:5b: ea:75:dc:96:1f:0c:2d:e2:10:93:f8:1e:36:b7:c5:c2:fb:9e: 9c:1b:ba:be:f3:03:3a:2d:45:88:b4:25:ec:22:25:07:31:e6: 4b:55:f1:9e:58:ef:94:df:c4:aa:7d:d3:8a:81:8a:f5:47:b4: b3:f6:61:a3:78:77:f3:b3:57:1c:b0:a6:03:ea:3f:ea:45:a5: 13:e7:b0:2d:89:74:1d:52:cb:12:29:1e:2a:71:b3:e7:90:ec: 06:37:9c:5e:f6:01:96:7c:44:93:49:04:da:02:d2:3a:11:f6: 22:e7:12:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCaM5KQlZ/PKu1vBWhLhdyU7cylkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEM5RTdBNTgxRkIzNEU3NTNGOTBCOTNDOUUzMDAzRUQ2 RkUxRDBGMDAeFw0yNTA1MTAyMzEyMTZaFw0yNTA1MTIwMTI4MTZaMDMxMTAvBgNV BAMTKDU3NDkzODk4MjNEQTRCRjNFODQ1RUZFQzFDMUQwQTFBNkUyRjkzMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDix4FHR6RSoGXOGYHjZCWe2GJA mBaqFeSgzS4Q35Qy8c94NsJWzZzHrgSbCJmQa9lZBzh2UAOEx1n6iqWVAEcKqwZZ P2hZwZ40DKGim9K59rdq00tX7uU2U3cLWL+aizs8tjL5AKVXB/Q9N+bI1z3Rjof9 baT+lOYLpA0jrIqcm3jnea41+PV35OWRK4PVTRIdI+qdN7CJf4TLZNQv5LWA4zCy URNXHbdwd6KXsVZsSExDfWKebuOTFOVmt/suOPSP1EKXA4vU1XYbebnN/wT/rQkR oc7yDc1PDCd6IAC8yg0GSWtnqRhQ8zuerhG05b/ywjJ4IXsxQsrAbi3HoCgfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUV0k4mCPaS/PoRe/sHB0KGm4vkxUwHwYDVR0j BBgwFoAUDJ56WB+zTnU/kLk8njAD7W/h0PAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnc4RjVFb2Nkc0NrY040WWZLQlBrWUp0Tno0VUZEcEZMcnl0elZpN2dl dW4vMC8wQzlFN0E1ODFGQjM0RTc1M0Y5MEI5M0M5RTMwMDNFRDZGRTFEMEYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDOUU3QTU4MUZCMzRFNzUz RjkwQjkzQzlFMzAwM0VENkZFMUQwRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qnc4RjVFb2Nkc0NrY040WWZLQlBrWUp0Tno0VUZEcEZMcnl0elZpN2dldW4vMC8w QzlFN0E1ODFGQjM0RTc1M0Y5MEI5M0M5RTMwMDNFRDZGRTFEMEYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB7BWD5x/lZWqV9TPYbz5xRRXOG3N04IGpB3jq5TL9AdDv1YQwr3Ltu2ULApd +0vAoRUw2YjQ3Ts7I9EPbk6iAsUaAGWLUNJ3tPpxrONXe2i7h8+okDewCs7TPEOe tK/w8kjYTL2AckyeCWnOTI6ejKfV+BZPH5oPQ3f57lJigO3dvOpfoCcyI/p2n1RH m1pb6nXclh8MLeIQk/geNrfFwvuenBu6vvMDOi1FiLQl7CIlBzHmS1XxnljvlN/E qn3TioGK9Ue0s/Zho3h387NXHLCmA+o/6kWlE+ewLYl0HVLLEikeKnGz55DsBjec XvYBlnxEk0kE2gLSOhH2IucSWw== -----END CERTIFICATE-----Generated at Sun May 11 10:22:23 2025 by rpki-client