$ rpki-client -vvf rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft File: 0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft (raw, json) Hash identifier: eQm+NBJ2DkzaQ4u05WPwuSo6uqPDgH1MOq5SQxh2c2s= Subject key identifier: B6:57:4D:7E:66:E4:0A:8E:72:DC:14:EA:5E:EA:A6:C8:34:31:79:0A Authority key identifier: 0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08 Certificate issuer: /CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08 Certificate serial: 5D4A6AF80CFCD87F74C8BFF847370C187C943450 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft Manifest number: 0222 Signing time: Fri 16 May 2025 20:04:32 +0000 Manifest this update: Fri 16 May 2025 19:59:32 +0000 Manifest next update: Sat 17 May 2025 23:38:32 +0000 Files and hashes: 1: 323830343a356363303a3a2f33322d3438203d3e20323638393238.roa (hash: k92FdWEorNxKTyarjpxwu6x7nUdmTkLXLHku6hKnTFU=) 2: 0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl (hash: K12oJBfdRsDKD6AqZeDUyGyVfRPjYvUzeEh55lPuaWg=) 3: 34352e3137362e31322e302f32322d3234203d3e20323638393238.roa (hash: 6BQGyRfWPoyBSQCgM4C6Jq/eSUg3l4bDaxyZgDl3HcQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 17 May 2025 23:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4a:6a:f8:0c:fc:d8:7f:74:c8:bf:f8:47:37:0c:18:7c:94:34:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08 Validity Not Before: May 16 19:59:32 2025 GMT Not After : May 17 23:38:32 2025 GMT Subject: CN=B6574D7E66E40A8E72DC14EA5EEAA6C83431790A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b6:ea:c9:ec:04:cb:e8:ec:d6:59:c0:77:e8: fa:3a:f8:38:a5:9b:64:18:64:7f:43:6b:2e:28:2c: 80:05:e1:95:20:ec:02:d0:e0:90:eb:4a:24:21:87: 0c:64:cd:9c:f9:de:e5:e0:a2:fc:ee:dc:09:16:83: 2d:d1:e0:41:ba:17:cb:cb:ed:52:78:39:c6:36:b3: ad:4b:55:21:66:e6:87:4d:b1:07:33:c3:82:d9:45: 07:31:c8:a5:67:20:ef:e0:98:57:3f:4f:26:93:6c: f1:17:2b:6b:79:63:f7:a7:60:f3:54:64:92:fb:9e: 59:8d:5c:bc:91:bd:02:6a:dd:28:8b:1f:d6:78:43: eb:c5:72:ee:a4:1b:43:f7:5c:ec:81:5a:98:b8:34: 8f:b8:bc:6d:0e:9c:4a:1f:3b:d9:e8:d0:ca:6c:cb: b6:9e:c2:ec:a4:00:56:c1:d5:7d:22:66:4a:0c:3c: 1c:5e:aa:c8:b4:85:df:3d:be:a2:f0:a0:2f:ad:3e: fc:f9:2c:04:ab:54:a5:eb:64:9b:aa:6a:ea:02:8b: 7b:f2:05:52:98:60:7b:76:ac:5e:8f:bf:a8:26:98: aa:24:39:cd:f1:89:6e:ac:20:3b:cb:08:0c:84:6e: 49:f5:6d:86:5c:47:66:0b:9a:f5:cf:01:b5:db:ab: be:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:57:4D:7E:66:E4:0A:8E:72:DC:14:EA:5E:EA:A6:C8:34:31:79:0A X509v3 Authority Key Identifier: keyid:0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:84:3d:c1:52:33:52:3b:5b:5e:f7:ca:d7:39:5e:e5:3a:e9: 67:32:f1:68:0a:c9:e5:8e:d5:68:c3:98:c6:57:af:e2:4a:f3: f6:f3:12:55:28:44:dd:ca:42:c0:b2:52:9d:73:40:1e:55:45: d8:64:ff:29:58:e9:51:3f:2d:bd:a2:9d:d5:4c:f8:6c:95:33: 1e:ec:ab:41:a4:fd:41:de:fd:62:32:31:b1:97:1e:6c:47:2a: 39:5b:11:d8:50:3f:44:f5:62:4a:3c:2a:8f:b6:56:c1:3f:a9: de:ab:c5:0d:a9:ba:a8:15:e1:d1:3d:f5:f1:a1:2f:71:3f:48: e1:af:32:fd:09:d8:86:3e:04:64:f0:05:f7:94:f9:87:93:81: ab:46:cc:27:41:b5:3a:3b:6b:ba:20:94:33:ac:ff:19:b9:bc: cb:e0:69:51:e4:e5:13:60:cf:57:a7:96:32:69:c7:54:d7:62: da:cb:85:b6:66:f8:d0:99:f1:2f:64:17:fa:87:1d:41:b6:86: 04:ac:63:cc:23:f6:4e:3e:c2:53:dd:7f:3f:41:8d:8b:2f:66: 7b:50:ad:a8:50:db:4b:a1:0f:62:29:3d:a5:48:3b:29:0f:b9: 6b:cd:48:ed:c5:39:35:ff:41:bf:d7:24:0c:4f:df:da:f6:c2: 23:ac:20:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXUpq+Az82H90yL/4RzcMGHyUNFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzRUIwMEUwMUZEREVDREQwRDIwQUM3QTEzODlFOUUx MzUwREUwODAeFw0yNTA1MTYxOTU5MzJaFw0yNTA1MTcyMzM4MzJaMDMxMTAvBgNV BAMTKEI2NTc0RDdFNjZFNDBBOEU3MkRDMTRFQTVFRUFBNkM4MzQzMTc5MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKturJ7ATL6OzWWcB36Po6+Dil m2QYZH9Day4oLIAF4ZUg7ALQ4JDrSiQhhwxkzZz53uXgovzu3AkWgy3R4EG6F8vL 7VJ4OcY2s61LVSFm5odNsQczw4LZRQcxyKVnIO/gmFc/TyaTbPEXK2t5Y/enYPNU ZJL7nlmNXLyRvQJq3SiLH9Z4Q+vFcu6kG0P3XOyBWpi4NI+4vG0OnEofO9no0Mps y7aewuykAFbB1X0iZkoMPBxeqsi0hd89vqLwoC+tPvz5LASrVKXrZJuqauoCi3vy BVKYYHt2rF6Pv6gmmKokOc3xiW6sIDvLCAyEbkn1bYZcR2YLmvXPAbXbq741AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtldNfmbkCo5y3BTqXuqmyDQxeQowHwYDVR0j BBgwFoAUDz6wDgH93s3Q0grHoTienhNQ3ggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREtyVEtqU0FMeDh2N0Zwb0YzdldhNVhIZ2t3TTdiVUZKemVxclFqcnJ6 UmsvMS8wRjNFQjAwRTAxRkRERUNERDBEMjBBQzdBMTM4OUU5RTEzNTBERTA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGM0VCMDBFMDFGRERFQ0RE MEQyMEFDN0ExMzg5RTlFMTM1MERFMDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REtyVEtqU0FMeDh2N0Zwb0YzdldhNVhIZ2t3TTdiVUZKemVxclFqcnJ6UmsvMS8w RjNFQjAwRTAxRkRERUNERDBEMjBBQzdBMTM4OUU5RTEzNTBERTA4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcYQ9wVIzUjtbXvfK1zle5TrpZzLxaArJ5Y7VaMOYxlev4krz9vMSVShE3cpC wLJSnXNAHlVF2GT/KVjpUT8tvaKd1Uz4bJUzHuyrQaT9Qd79YjIxsZcebEcqOVsR 2FA/RPViSjwqj7ZWwT+p3qvFDam6qBXh0T318aEvcT9I4a8y/QnYhj4EZPAF95T5 h5OBq0bMJ0G1OjtruiCUM6z/Gbm8y+BpUeTlE2DPV6eWMmnHVNdi2suFtmb40Jnx L2QX+ocdQbaGBKxjzCP2Tj7CU91/P0GNiy9me1CtqFDbS6EPYik9pUg7KQ+5a81I 7cU5Nf9Bv9ckDE/f2vbCI6wgQg== -----END CERTIFICATE-----Generated at Sat May 17 03:03:55 2025 by rpki-client