$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft File: AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft (raw, json) Hash identifier: NY8Io/QeAYfwf1GFmMOdhOTmAK+rPeO5Zl5b3AVlk+Y= Subject key identifier: 8A:C2:DF:4F:38:C6:83:9B:03:AD:02:41:5D:19:70:FB:67:30:95:C7 Authority key identifier: AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 Certificate issuer: /CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Certificate serial: 4D801A56D43016029DCACB82A54AC8ADB9F371B2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject info access: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft Manifest number: 82 Signing time: Thu 15 May 2025 13:01:55 +0000 Manifest this update: Thu 15 May 2025 12:56:55 +0000 Manifest next update: Fri 16 May 2025 16:15:55 +0000 Files and hashes: 1: 3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa (hash: L4iJGteHF6GdbZUpYdPsmSF6aU2WwIJnyrqJCiuS0u4=) 2: AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl (hash: +6JOGW+jfcIMwGlZw/y1+7C7vmFT/3WndFS+u73EaAM=) 3: 323830343a343863303a3a2f33322d3438203d3e20323637313432.roa (hash: wf3PSbxaQoz04LuH+DpJ300lgKtkTir3v4uSeMTRXRA=) 4: 34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa (hash: hmyhqfarobJ23Jlj20PKq7o0hSXC88s466WrKIYsZEQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 May 2025 16:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:80:1a:56:d4:30:16:02:9d:ca:cb:82:a5:4a:c8:ad:b9:f3:71:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Validity Not Before: May 15 12:56:55 2025 GMT Not After : May 16 16:15:55 2025 GMT Subject: CN=8AC2DF4F38C6839B03AD02415D1970FB673095C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:21:f7:a2:a7:d9:27:8f:29:38:e2:7b:92:df: 4b:54:1f:38:f1:4e:77:c6:86:db:d1:46:59:ab:08: 99:f2:25:bc:18:32:56:0a:03:67:85:a5:a4:52:a2: f0:24:71:df:08:23:40:66:e7:76:ca:f2:7d:a3:74: 7f:43:b7:24:0f:47:ef:e9:81:37:c1:60:3c:28:64: 8a:30:65:6b:cd:d9:79:8d:3f:b4:06:2d:b4:77:83: ff:1c:45:76:5f:ae:c6:94:18:93:d6:a6:8d:26:36: 4c:73:5f:39:87:9a:91:e1:8e:48:4d:8a:03:90:b8: b5:e3:56:f2:43:b5:7b:0f:c4:05:f1:60:d9:f7:71: 05:ae:a2:e6:22:4c:21:3b:ac:80:da:44:0c:86:60: 62:9b:13:2d:d0:49:15:36:72:7c:a9:d2:f3:59:d8: cc:ff:52:c6:8d:53:40:52:b1:b8:36:25:4a:49:ef: 91:4e:ab:80:9a:53:cb:9b:0f:02:e7:fa:60:9b:57: 9c:55:c1:2e:c9:fe:f9:30:9f:f3:db:97:69:94:4e: 67:42:dc:41:0d:1f:2f:38:66:aa:1e:4e:f9:36:a7: 7d:f2:d1:ab:f4:90:87:6a:12:f3:dc:9e:44:b7:86: a2:5e:17:20:6e:a4:c5:2b:ae:82:4a:27:ff:40:52: 90:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C2:DF:4F:38:C6:83:9B:03:AD:02:41:5D:19:70:FB:67:30:95:C7 X509v3 Authority Key Identifier: keyid:AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:54:e7:4b:54:b0:cb:89:16:21:59:75:1a:8a:c2:8b:84:75: 7e:3a:91:a0:26:6b:ad:71:e1:dd:84:b1:53:cb:f2:15:69:cb: 75:fc:de:85:96:2c:dd:31:5e:50:6b:61:f6:64:ce:d2:09:c1: 1c:22:06:bf:e2:59:d9:06:d1:b0:ac:9d:1a:7f:84:e0:14:f6: 88:e5:38:71:94:23:20:18:da:69:01:06:01:13:00:ce:5d:c6: fc:73:f2:00:a6:98:45:80:62:c1:00:d3:90:c3:b0:74:7b:ce: a5:64:8b:e1:b8:a5:6d:0a:24:a4:b6:b0:ef:7d:13:08:9b:cf: 3a:23:aa:61:cc:a4:55:a9:d3:2a:74:f7:0b:d9:e4:0f:1c:a1: a9:1f:d7:0b:89:a5:65:05:c8:a2:fa:b7:31:5c:e0:b4:e4:98: 14:3d:b1:b4:3c:3a:9e:31:d7:fe:d5:90:af:14:92:18:7e:03: 62:45:36:0b:79:3b:85:72:c1:b4:5a:93:20:5e:b5:9f:d5:40: cd:95:6b:db:4d:35:b8:eb:49:49:47:fa:ed:2c:0a:b5:c3:78: 5d:cb:34:ce:e1:ff:39:a4:da:df:29:59:84:35:14:f5:c6:81: cc:ef:64:5c:83:5e:23:52:63:b8:18:02:ea:18:65:cd:9e:e4: 5c:70:b6:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTYAaVtQwFgKdysuCpUrIrbnzcbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQUYzMjBFNjA1MzFGQjk1QzZDNjg1ODQyQjU2RDFC REZDRUQ0NTAeFw0yNTA1MTUxMjU2NTVaFw0yNTA1MTYxNjE1NTVaMDMxMTAvBgNV BAMTKDhBQzJERjRGMzhDNjgzOUIwM0FEMDI0MTVEMTk3MEZCNjczMDk1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgIfeip9knjyk44nuS30tUHzjx TnfGhtvRRlmrCJnyJbwYMlYKA2eFpaRSovAkcd8II0Bm53bK8n2jdH9DtyQPR+/p gTfBYDwoZIowZWvN2XmNP7QGLbR3g/8cRXZfrsaUGJPWpo0mNkxzXzmHmpHhjkhN igOQuLXjVvJDtXsPxAXxYNn3cQWuouYiTCE7rIDaRAyGYGKbEy3QSRU2cnyp0vNZ 2Mz/UsaNU0BSsbg2JUpJ75FOq4CaU8ubDwLn+mCbV5xVwS7J/vkwn/Pbl2mUTmdC 3EENHy84ZqoeTvk2p33y0av0kIdqEvPcnkS3hqJeFyBupMUrroJKJ/9AUpAhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUisLfTzjGg5sDrQJBXRlw+2cwlccwHwYDVR0j BBgwFoAUr/rzIOYFMfuVxsaFhCtW0b387UUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0 QlUvMC9BRkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkFGMzIwRTYwNTMxRkI5 NUM2QzY4NTg0MkI1NkQxQkRGQ0VENDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0QlUvMC9B RkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfFTnS1Swy4kWIVl1GorCi4R1fjqRoCZrrXHh3YSxU8vyFWnLdfzehZYs3TFe UGth9mTO0gnBHCIGv+JZ2QbRsKydGn+E4BT2iOU4cZQjIBjaaQEGARMAzl3G/HPy AKaYRYBiwQDTkMOwdHvOpWSL4bilbQokpLaw730TCJvPOiOqYcykVanTKnT3C9nk DxyhqR/XC4mlZQXIovq3MVzgtOSYFD2xtDw6njHX/tWQrxSSGH4DYkU2C3k7hXLB tFqTIF61n9VAzZVr2001uOtJSUf67SwKtcN4Xcs0zuH/OaTa3ylZhDUU9caBzO9k XINeI1JjuBgC6hhlzZ7kXHC21Q== -----END CERTIFICATE-----Generated at Thu May 15 18:56:44 2025 by rpki-client