$ rpki-client -vvf rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft File: BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft (raw, json) Hash identifier: AJrS8zaigCq1s7mnw2D4Z+bTRx/ClFpBTqICSgEplu4= Subject key identifier: E8:31:A2:80:C0:7F:46:82:D1:26:03:88:F7:7F:4C:D0:FC:6D:EF:2B Authority key identifier: BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25 Certificate issuer: /CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25 Certificate serial: 1D33CDC3F509FB0F9B5240D50877CE8DFE728F90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer Subject info access: rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft Manifest number: 021E Signing time: Thu 15 May 2025 09:44:39 +0000 Manifest this update: Thu 15 May 2025 09:39:39 +0000 Manifest next update: Fri 16 May 2025 10:37:39 +0000 Files and hashes: 1: 34352e3136352e3136362e302f32332d3332203d3e20323638363833.roa (hash: 5bSUPkODUWs9/kJhkVx3i4fO1qFGfYEB0H4MohPcXH8=) 2: 323830343a353530303a3a2f33342d313238203d3e20323638363833.roa (hash: CY1cgckh5LfihHbyiE5qbTbYicOGwA3cdqSQfEjeJok=) 3: 34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa (hash: SFgnoC9b6XsOBWOxtYvSuXC8DcOSjBAvZ5UdN6KIgQ0=) 4: BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl (hash: dtH9XeYOZ11ttyfvA0qw66Rt0z/QnYYBeFOVUICoH/I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 May 2025 10:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:33:cd:c3:f5:09:fb:0f:9b:52:40:d5:08:77:ce:8d:fe:72:8f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25 Validity Not Before: May 15 09:39:39 2025 GMT Not After : May 16 10:37:39 2025 GMT Subject: CN=E831A280C07F4682D1260388F77F4CD0FC6DEF2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f6:33:5c:f1:96:66:e7:52:c7:38:c9:ca:c5: e0:bb:c8:d9:cb:eb:1d:ac:df:60:0c:ed:42:7f:6a: 55:14:fe:bb:e6:94:60:cf:06:97:8a:29:80:cf:f2: c2:3b:b5:48:14:23:fe:db:aa:5d:45:d7:03:dd:13: f8:9e:65:22:9a:35:4b:c5:0d:bb:81:03:bd:48:e8: 48:a7:12:cc:56:68:52:72:30:ec:35:3e:88:a3:d6: 53:84:56:2d:8c:be:07:e7:dc:0d:ee:06:1d:e8:70: 8a:42:b8:60:e8:c4:47:52:db:44:38:02:dd:6b:a3: ac:44:5c:5c:10:c8:2d:92:ae:69:0e:7e:b7:09:08: 81:23:ee:99:33:e6:24:65:a2:c7:f6:a7:ff:87:60: 23:e1:4e:55:58:26:55:ee:7a:e3:c7:7e:81:bc:99: 76:8b:30:5b:6c:f6:c6:b9:d9:1a:30:cd:b4:81:4f: a0:29:de:83:6a:c8:1b:90:5a:06:a1:60:67:03:1e: 6e:96:17:f4:ea:71:05:eb:84:48:8a:0a:eb:91:d6: c4:66:c7:bd:8e:a6:d0:b2:de:1b:97:c0:cb:bc:90: 25:83:c1:fe:53:00:93:94:a5:36:91:38:e4:02:26: 99:0a:4a:3f:64:f7:d1:13:ad:c7:84:cd:c1:ca:64: 5d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:31:A2:80:C0:7F:46:82:D1:26:03:88:F7:7F:4C:D0:FC:6D:EF:2B X509v3 Authority Key Identifier: keyid:BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f3:4e:66:2f:21:d1:80:03:82:7a:e1:f3:9d:46:5c:29:cd: 98:cd:84:56:98:3b:91:03:b9:d4:8d:76:3d:b3:29:e3:00:0e: 35:6b:55:da:29:cf:59:7a:36:76:4f:cc:7f:2c:2e:86:43:78: 9d:bc:53:09:43:c6:4b:2f:88:4a:00:3f:48:24:64:c9:e7:27: 3f:93:af:da:7a:bb:ee:2b:e4:9a:0e:8b:36:38:ef:45:49:fd: 35:07:8e:7f:cc:5d:0d:21:43:22:c9:0e:e3:7f:7c:e6:17:0b: 48:9a:5b:ac:cb:d8:73:f1:1e:e6:7f:5f:ce:08:d7:83:78:0c: 99:00:31:eb:ab:94:06:c4:75:73:44:a0:76:ba:b0:85:76:b3: d3:7f:df:3c:03:e5:96:f4:a0:8e:ab:7e:d8:4c:2a:0e:a3:3c: 0f:e7:f0:5d:23:8d:b3:3d:43:13:54:f4:d4:32:f5:c1:d4:13: c9:d7:bf:c1:37:8c:b3:89:c1:31:0b:f4:3c:f6:f9:4b:f1:ef: ab:16:56:91:4c:64:99:4b:45:c2:43:5d:bf:cb:c6:41:69:b3: 1d:2c:f8:ba:4e:1e:3b:5d:b8:91:24:6a:d6:af:21:4b:94:04: b1:c5:af:2a:fc:5f:3c:c6:b5:3d:51:8f:71:14:a6:ad:f9:b4: f0:98:c7:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHTPNw/UJ+w+bUkDVCHfOjf5yj5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU5MTkxRjIyMkQzNkZGN0VEOTQwQTJCNUU0OTFFMkE4 MDIxREEyNTAeFw0yNTA1MTUwOTM5MzlaFw0yNTA1MTYxMDM3MzlaMDMxMTAvBgNV BAMTKEU4MzFBMjgwQzA3RjQ2ODJEMTI2MDM4OEY3N0Y0Q0QwRkM2REVGMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9jNc8ZZm51LHOMnKxeC7yNnL 6x2s32AM7UJ/alUU/rvmlGDPBpeKKYDP8sI7tUgUI/7bql1F1wPdE/ieZSKaNUvF DbuBA71I6EinEsxWaFJyMOw1Poij1lOEVi2Mvgfn3A3uBh3ocIpCuGDoxEdS20Q4 At1ro6xEXFwQyC2SrmkOfrcJCIEj7pkz5iRlosf2p/+HYCPhTlVYJlXueuPHfoG8 mXaLMFts9sa52RowzbSBT6Ap3oNqyBuQWgahYGcDHm6WF/TqcQXrhEiKCuuR1sRm x72OptCy3huXwMu8kCWDwf5TAJOUpTaROOQCJpkKSj9k99ETrceEzcHKZF3jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6DGigMB/RoLRJgOI939M0Pxt7yswHwYDVR0j BBgwFoAUvpGR8iLTb/ftlAorXkkeKoAh2iUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1lMRXd3c0Q4UXF3ZkxUaXN3UXFlZHZ2TVJTeWVyVlpyY0JkS1dCd0t2 eGsvMS9CRTkxOTFGMjIyRDM2RkY3RUQ5NDBBMkI1RTQ5MUUyQTgwMjFEQTI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFOTE5MUYyMjJEMzZGRjdF RDk0MEEyQjVFNDkxRTJBODAyMURBMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1lMRXd3c0Q4UXF3ZkxUaXN3UXFlZHZ2TVJTeWVyVlpyY0JkS1dCd0t2eGsvMS9C RTkxOTFGMjIyRDM2RkY3RUQ5NDBBMkI1RTQ5MUUyQTgwMjFEQTI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ/NOZi8h0YADgnrh851GXCnNmM2EVpg7kQO51I12PbMp4wAONWtV2inPWXo2 dk/MfywuhkN4nbxTCUPGSy+ISgA/SCRkyecnP5Ov2nq77ivkmg6LNjjvRUn9NQeO f8xdDSFDIskO43985hcLSJpbrMvYc/Ee5n9fzgjXg3gMmQAx66uUBsR1c0Sgdrqw hXaz03/fPAPllvSgjqt+2EwqDqM8D+fwXSONsz1DE1T01DL1wdQTyde/wTeMs4nB MQv0PPb5S/HvqxZWkUxkmUtFwkNdv8vGQWmzHSz4uk4eO124kSRq1q8hS5QEscWv KvxfPMa1PVGPcRSmrfm08JjHPw== -----END CERTIFICATE-----Generated at Thu May 15 17:12:27 2025 by rpki-client