$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.mft File: AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.mft (raw, json) Hash identifier: jq/mXxrK7bcW538oUkcfYOCHGVHaIX7xHRLX0pBn4Os= Subject key identifier: 93:B3:58:66:CA:49:95:58:1B:DA:74:FF:28:52:05:89:7D:83:89:EC Authority key identifier: AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1 Certificate issuer: /CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1 Certificate serial: 5891B33AF3C6A3220D2C5C28AFD80AFF11C5D0C3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer Subject info access: rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.mft Manifest number: 021F Signing time: Sat 10 May 2025 00:53:41 +0000 Manifest this update: Sat 10 May 2025 00:48:41 +0000 Manifest next update: Sun 11 May 2025 04:21:41 +0000 Files and hashes: 1: 3133382e35392e3131322e302f32322d3234203d3e203238363036.roa (hash: PD3w4WnjFbM/fdsrpbeC54QTxA2zTd5rahKKxoLLpdQ=) 2: AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl (hash: p7+SPbebY5bbDJdQKvY+PfalOYWe/MeYcRW6muMGUlY=) 3: 323830343a34343a3a2f33322d3332203d3e203238363036.roa (hash: qa/VVhxguIpZ2tUnPquOwpqbPuCDAs2WExDmWbxgKrg=) 4: 3230312e32302e3136302e302f32342d3234203d3e203238363036.roa (hash: 15AExHLJbYfnkP2MaQjFBIzIC7WAATi3NwRP07bUBdE=) 5: 3230312e32302e3136302e302f32302d3233203d3e203238363036.roa (hash: muT0E/jtcLGXPA1TxIYw04xzIcEDfj3pY0zEHTmt0no=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 04:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:91:b3:3a:f3:c6:a3:22:0d:2c:5c:28:af:d8:0a:ff:11:c5:d0:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1 Validity Not Before: May 10 00:48:41 2025 GMT Not After : May 11 04:21:41 2025 GMT Subject: CN=93B35866CA4995581BDA74FF285205897D8389EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5c:1e:25:1c:ec:21:80:92:79:5d:d9:d0:2d: a5:b7:22:22:41:ec:ab:b0:c6:68:7a:63:1b:06:60: 6f:bb:2a:cc:c3:cb:88:e3:fd:c2:e1:70:22:bd:d6: 75:eb:21:40:e9:9d:bb:4a:90:a4:af:16:fd:4e:29: 04:69:69:19:7c:17:13:eb:90:90:37:39:a5:58:21: 46:c0:72:12:38:74:cc:f5:a3:7f:9a:35:48:83:ca: 41:ce:a0:9e:16:2b:20:b4:41:3d:4f:2f:48:05:5a: 8f:2d:c8:40:1e:7b:aa:e2:54:11:4c:c4:f1:53:dc: b4:1a:ed:31:2a:d1:6c:85:4b:7a:76:4f:ba:fe:1e: 33:48:ae:7f:d2:2c:8d:29:0d:3a:ad:ec:42:dc:9a: 0c:cf:b5:28:62:63:a1:d9:5e:a8:76:51:c2:5a:8c: 0e:4a:cb:05:d8:b8:eb:18:ad:50:01:33:0c:1b:44: 09:ce:c3:b1:17:2e:a2:c2:9a:03:67:f7:83:99:27: 61:67:3e:2f:ad:6e:5e:55:99:e9:ce:76:c2:6f:e6: cd:a7:c9:64:f1:89:c6:c5:02:da:b9:57:5e:5f:91: 79:ed:75:d2:00:e9:d5:af:18:dd:1b:74:99:dd:bc: e8:b1:92:2f:3c:35:c5:88:9a:3d:0a:89:e3:5c:4e: c6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B3:58:66:CA:49:95:58:1B:DA:74:FF:28:52:05:89:7D:83:89:EC X509v3 Authority Key Identifier: keyid:AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4b:b0:c1:9b:ea:d9:b8:cb:34:dd:bb:3f:72:c2:73:4b:70: 2b:72:b6:d2:67:d6:cb:05:49:9a:a3:d0:02:7e:a3:98:ab:a0: 09:6f:76:cc:cd:74:93:99:ed:53:71:39:cc:cb:c6:54:c4:34: 41:d4:48:8f:19:0f:d6:e9:bd:f9:59:1f:5f:42:e8:ed:5a:d0: c4:dd:d7:b3:8a:3b:8f:92:fe:3d:aa:52:1b:82:e7:cd:a7:27: ce:c0:4e:6d:60:45:f1:f2:a8:97:71:90:b8:fd:06:63:d4:73: 51:9c:cb:97:31:69:9a:2d:bb:74:f0:af:e4:c5:67:3f:12:62: 75:94:83:55:58:31:6f:c3:f9:a3:24:81:0f:86:38:01:f1:9f: 8f:5b:d3:ed:44:25:a9:ad:f6:29:1d:da:e0:a1:87:c9:3f:79: d3:6c:fe:01:65:d2:54:ae:f8:ab:45:20:77:02:13:03:dc:e1: 73:da:4a:90:14:69:ca:dc:3d:88:b9:16:30:49:57:fb:2a:99: 19:19:bd:14:fe:9e:4d:a7:03:94:c3:13:c0:04:38:d5:20:15: 92:8f:9e:0d:9b:40:79:59:1c:f8:eb:c7:f1:05:dc:ca:e9:e1: a2:a4:13:8e:b3:b9:3d:ee:7d:f5:d2:2a:7c:d9:d6:b2:46:b9: 9a:5a:c5:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWJGzOvPGoyINLFwor9gK/xHF0MMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFDOTE2QjlENEU4RkQzNzZBMEIyNDJGN0I3REM3QzVF NEU5QkREMTAeFw0yNTA1MTAwMDQ4NDFaFw0yNTA1MTEwNDIxNDFaMDMxMTAvBgNV BAMTKDkzQjM1ODY2Q0E0OTk1NTgxQkRBNzRGRjI4NTIwNTg5N0Q4Mzg5RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjXB4lHOwhgJJ5XdnQLaW3IiJB 7Kuwxmh6YxsGYG+7KszDy4jj/cLhcCK91nXrIUDpnbtKkKSvFv1OKQRpaRl8FxPr kJA3OaVYIUbAchI4dMz1o3+aNUiDykHOoJ4WKyC0QT1PL0gFWo8tyEAee6riVBFM xPFT3LQa7TEq0WyFS3p2T7r+HjNIrn/SLI0pDTqt7ELcmgzPtShiY6HZXqh2UcJa jA5KywXYuOsYrVABMwwbRAnOw7EXLqLCmgNn94OZJ2FnPi+tbl5VmenOdsJv5s2n yWTxicbFAtq5V15fkXntddIA6dWvGN0bdJndvOixki88NcWImj0KieNcTsbNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUk7NYZspJlVgb2nT/KFIFiX2DiewwHwYDVR0j BBgwFoAUqskWudTo/TdqCyQve33HxeTpvdEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0hveGpkZ3pvOW1pRmFrVzh3UDh1dmNaMUZucEc4NXBVTmh5Tm9RR0hu MlUvMS9BQUM5MTZCOUQ0RThGRDM3NkEwQjI0MkY3QjdEQzdDNUU0RTlCREQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBQzkxNkI5RDRFOEZEMzc2 QTBCMjQyRjdCN0RDN0M1RTRFOUJERDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0hveGpkZ3pvOW1pRmFrVzh3UDh1dmNaMUZucEc4NXBVTmh5Tm9RR0huMlUvMS9B QUM5MTZCOUQ0RThGRDM3NkEwQjI0MkY3QjdEQzdDNUU0RTlCREQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAakuwwZvq2bjLNN27P3LCc0twK3K20mfWywVJmqPQAn6jmKugCW92zM10k5nt U3E5zMvGVMQ0QdRIjxkP1um9+VkfX0Lo7VrQxN3Xs4o7j5L+PapSG4LnzacnzsBO bWBF8fKol3GQuP0GY9RzUZzLlzFpmi27dPCv5MVnPxJidZSDVVgxb8P5oySBD4Y4 AfGfj1vT7UQlqa32KR3a4KGHyT9502z+AWXSVK74q0UgdwITA9zhc9pKkBRpytw9 iLkWMElX+yqZGRm9FP6eTacDlMMTwAQ41SAVko+eDZtAeVkc+OvH8QXcyunhoqQT jrO5Pe599dIqfNnWska5mlrF0A== -----END CERTIFICATE-----Generated at Sat May 10 13:51:30 2025 by rpki-client