$ rpki-client -vvf rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft File: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft (raw, json) Hash identifier: pS7rNEZkeJvN0KrrZc+rj2om9wkWMo6y8Yp0+6VIOd8= Subject key identifier: 94:E2:18:15:9C:B9:69:71:00:A5:48:3A:4E:64:91:AC:F1:E2:EF:68 Authority key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 Certificate issuer: /CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Certificate serial: 3522CABC633A7BC2105D2B4F023CB5389BA84C41 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer Subject info access: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft Manifest number: 0157 Signing time: Sun 11 May 2025 10:37:22 +0000 Manifest this update: Sun 11 May 2025 10:32:22 +0000 Manifest next update: Mon 12 May 2025 10:40:22 +0000 Files and hashes: 1: 34352e3136312e33362e302f32322d3332203d3e20323638353030.roa (hash: XosRWuhy50p/XlmB964uJcpmK6P7/+s4YBWKrRfgxzQ=) 2: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl (hash: cPb4uxwsdGDH68Z9v2mkloejzYq3tL7gFdmCX49EJfQ=) 3: 323830343a353232633a3a2f33322d313238203d3e20323638353030.roa (hash: wuN8qHU/NQzTWfY0LflG0MyAQQTaz3Hq4vCYZX+edCU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 10:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:22:ca:bc:63:3a:7b:c2:10:5d:2b:4f:02:3c:b5:38:9b:a8:4c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Validity Not Before: May 11 10:32:22 2025 GMT Not After : May 12 10:40:22 2025 GMT Subject: CN=94E218159CB9697100A5483A4E6491ACF1E2EF68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c5:ca:67:50:af:f9:4e:cd:91:bb:1b:eb:88: ce:aa:dd:14:2b:2b:95:18:06:65:6d:3b:ca:75:c1: 6c:80:72:90:e6:e6:d2:d7:b5:69:86:16:68:2b:63: 5a:98:ee:b3:38:af:b9:81:0e:66:e2:ab:ea:28:96: 5f:59:7c:fd:b2:2e:a0:7c:3b:0b:08:0d:15:54:ae: 11:87:60:f0:d2:79:62:ab:d7:c6:4b:08:8e:91:66: 61:f7:a5:2f:83:10:c1:7a:e9:44:c2:7f:9e:95:bd: 79:91:b5:5f:72:6e:b4:9b:0a:48:c4:64:41:67:5b: 71:22:65:89:36:8b:94:18:4b:2a:16:03:cc:a4:18: d7:c8:c3:1b:5b:13:6f:64:37:01:9a:51:c5:96:5a: f3:47:1f:9a:c4:15:12:e6:50:7e:b4:94:c1:04:aa: c3:f8:bd:bc:e0:de:0c:ff:bc:b9:a4:d7:a4:f0:33: a4:c5:27:52:4c:8a:15:1c:f0:8d:29:3d:d3:03:60: 15:a5:18:b9:4a:ee:8a:b0:6c:17:5b:e2:a4:14:2b: 5f:90:11:ed:a1:51:1a:a8:fb:7e:84:b2:1c:e2:6f: 0a:b1:38:0a:bf:08:c0:df:d0:44:1b:d2:84:14:ca: c9:ba:ba:f1:66:69:f0:73:b4:b3:60:ca:5e:72:1f: 83:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E2:18:15:9C:B9:69:71:00:A5:48:3A:4E:64:91:AC:F1:E2:EF:68 X509v3 Authority Key Identifier: keyid:09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:2d:fd:be:b9:e2:60:63:73:2e:09:2d:59:88:67:19:84:63: 22:49:61:b5:c8:31:f2:00:81:80:28:e1:a2:49:9e:f8:e5:dd: dc:85:82:96:33:6c:39:37:bd:99:8b:51:0d:2e:22:e9:e3:8c: 70:80:95:80:59:5e:4c:0f:68:07:6e:33:74:5f:2b:9a:7f:72: fe:9b:f8:00:2f:5d:1f:ba:12:52:4f:54:9a:8e:29:4a:80:7a: 0f:30:05:75:19:8e:7e:27:ca:d0:e7:d4:b4:24:6b:a6:ca:4b: fa:f9:df:d2:f0:0b:13:6e:f2:72:02:fa:ed:2f:85:90:8e:f3: 84:b7:82:64:09:9b:20:45:2b:e8:c1:14:61:48:13:b4:fd:7f: 7e:d6:a6:02:02:69:bb:12:8a:a9:ba:10:42:d3:8a:e9:f3:65: 7b:e1:9d:7f:9d:00:c2:34:13:61:8e:42:4b:18:d4:30:3a:6f: e7:b1:d3:5e:1e:27:07:a7:45:dc:17:69:9f:06:5e:3a:5d:5f: c8:bd:9d:b6:f8:21:69:e3:9a:58:1c:2a:fb:b2:7d:5b:96:93: a3:49:e5:23:18:64:a6:d2:0f:c8:3d:0f:a5:d7:86:50:7c:7d: a1:9d:1c:a6:b6:ba:ce:44:1d:7a:d6:08:5d:0a:7b:20:38:de: 11:70:20:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNSLKvGM6e8IQXStPAjy1OJuoTEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlEOEQ0QTY3MDY5NTgwRTM0RjE2QUIwNDc0MjBCRDRB MDhENEZGMDAeFw0yNTA1MTExMDMyMjJaFw0yNTA1MTIxMDQwMjJaMDMxMTAvBgNV BAMTKDk0RTIxODE1OUNCOTY5NzEwMEE1NDgzQTRFNjQ5MUFDRjFFMkVGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVxcpnUK/5Ts2RuxvriM6q3RQr K5UYBmVtO8p1wWyAcpDm5tLXtWmGFmgrY1qY7rM4r7mBDmbiq+ooll9ZfP2yLqB8 OwsIDRVUrhGHYPDSeWKr18ZLCI6RZmH3pS+DEMF66UTCf56VvXmRtV9ybrSbCkjE ZEFnW3EiZYk2i5QYSyoWA8ykGNfIwxtbE29kNwGaUcWWWvNHH5rEFRLmUH60lMEE qsP4vbzg3gz/vLmk16TwM6TFJ1JMihUc8I0pPdMDYBWlGLlK7oqwbBdb4qQUK1+Q Ee2hURqo+36EshzibwqxOAq/CMDf0EQb0oQUysm6uvFmafBztLNgyl5yH4MtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlOIYFZy5aXEApUg6TmSRrPHi72gwHwYDVR0j BBgwFoAUCdjUpnBpWA408WqwR0IL1KCNT/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9D UWsvMC8wOUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RDhENEE2NzA2OTU4MEUz NEYxNkFCMDQ3NDIwQkQ0QTA4RDRGRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9DUWsvMC8w OUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABi39vrniYGNzLgktWYhnGYRjIklhtcgx8gCBgCjhokme+OXd3IWCljNsOTe9 mYtRDS4i6eOMcICVgFleTA9oB24zdF8rmn9y/pv4AC9dH7oSUk9Umo4pSoB6DzAF dRmOfifK0OfUtCRrpspL+vnf0vALE27ycgL67S+FkI7zhLeCZAmbIEUr6MEUYUgT tP1/ftamAgJpuxKKqboQQtOK6fNle+Gdf50AwjQTYY5CSxjUMDpv57HTXh4nB6dF 3BdpnwZeOl1fyL2dtvghaeOaWBwq+7J9W5aTo0nlIxhkptIPyD0PpdeGUHx9oZ0c pra6zkQdetYIXQp7IDjeEXAgDw== -----END CERTIFICATE-----Generated at Sun May 11 22:05:40 2025 by rpki-client