$ rpki-client -vvf rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft File: 8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft (raw, json) Hash identifier: xZSpUnErWPtVyJDRuW0NyTzcoFazroJQSUrheAulDis= Subject key identifier: FC:10:E5:CC:D1:09:DB:43:0B:84:A7:1C:E3:28:9A:CC:05:F2:6C:2F Authority key identifier: 83:70:E8:F5:BE:86:E6:36:B7:4F:2E:9A:87:B5:ED:E5:DE:C4:F8:A2 Certificate issuer: /CN=8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2 Certificate serial: 6BA0F6DF66FED95AE97C5E1055320A0F0FB1ABFC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft Manifest number: 1D Signing time: Wed 14 May 2025 01:31:17 +0000 Manifest this update: Wed 14 May 2025 01:26:17 +0000 Manifest next update: Thu 15 May 2025 04:33:17 +0000 Files and hashes: 1: 3138372e3130392e3139322e302f32302d3332203d3e203533313135.roa (hash: 0HcgdqpyYZdO1kT85oLc8qbGHD0Si8hR53JWoDDa1Sg=) 2: 323830343a346434383a3a2f33322d313238203d3e203533313135.roa (hash: NsqfA1cm2Mr4ExKmzOQ0rIy+kX/qCmm9bdGogjKFsHA=) 3: 8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.crl (hash: TkcQe3N6jNbJulQSV2jVk1sEG6G84FyrG3aBhakDkUI=) 4: 3138372e3130392e3139322e302f32302d3332203d3e20313938393439.roa (hash: q5Amp+E/tcUmn90F1ijcwUIXjRA9aziUd/48DxQys4Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.crl rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 May 2025 02:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a0:f6:df:66:fe:d9:5a:e9:7c:5e:10:55:32:0a:0f:0f:b1:ab:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2 Validity Not Before: May 14 01:26:17 2025 GMT Not After : May 15 04:33:17 2025 GMT Subject: CN=FC10E5CCD109DB430B84A71CE3289ACC05F26C2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:65:6c:c1:d9:28:69:80:55:6f:f1:2a:93: 17:39:c5:d2:a1:a5:b0:78:25:32:4a:7b:91:32:2c: 29:38:c4:47:f8:88:0c:30:01:38:ec:49:ac:6e:c4: e2:cc:cf:6a:24:bb:9f:3e:05:b3:24:ab:0a:9a:24: eb:c1:43:30:76:49:7f:aa:83:a7:88:aa:8a:ce:2b: a7:b1:9a:ab:7b:cf:1a:1c:2d:69:b5:a6:e8:b4:e6: bf:c7:bd:32:29:09:d4:65:13:93:45:ae:82:6c:e2: fc:7f:bc:9a:f0:3e:62:71:37:7e:87:9d:3b:5e:4f: 5d:b9:fd:04:30:0c:57:5d:f7:ce:d4:93:56:ef:9e: 67:cd:87:1a:69:11:2b:16:f5:7f:c4:b7:03:b7:89: f3:1b:cb:51:43:37:a4:0f:24:5f:bc:e9:a8:6f:ab: 58:71:4d:b4:e9:ee:9a:ba:cf:33:54:8d:f6:85:eb: ab:1e:b8:2b:90:ee:bc:8f:3d:95:2c:08:e1:1d:2f: 79:25:b0:20:f8:73:e2:0e:f3:fe:39:5b:4d:24:72: 94:e2:6c:48:9d:a9:d2:80:38:71:4b:92:49:1f:c3: 24:d4:3e:98:65:97:9a:42:51:0c:a1:79:b3:1d:b2: e2:ba:ae:e5:d0:d8:9b:c0:74:a3:c1:6e:c4:ce:69: cc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:10:E5:CC:D1:09:DB:43:0B:84:A7:1C:E3:28:9A:CC:05:F2:6C:2F X509v3 Authority Key Identifier: keyid:83:70:E8:F5:BE:86:E6:36:B7:4F:2E:9A:87:B5:ED:E5:DE:C4:F8:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:36:89:e4:2f:5d:a1:d7:13:f1:30:21:5f:6f:8d:6d:a6:3c: 1d:65:f9:95:da:a3:a4:3d:8e:d8:cc:7a:3d:92:98:73:59:2f: 4e:f6:19:29:40:42:bd:ca:24:88:6e:ed:cb:74:2d:3e:bf:c9: a0:ca:a1:f9:a1:0f:28:0a:dc:c7:ac:13:54:94:51:43:0e:ce: 86:0b:c1:a8:07:64:df:8c:03:46:d9:a5:43:74:7d:35:4a:b4: 8d:9d:7a:33:09:55:c6:3c:6d:db:99:00:a9:1b:24:b4:3a:6c: 1f:09:0d:d8:10:9d:02:80:c8:6c:38:cf:2e:48:dc:ab:ab:75: 5f:ef:b2:74:f0:37:ec:8c:68:3f:a6:ba:86:30:92:07:1e:84: 44:50:00:a3:13:30:f8:e4:01:af:71:90:0e:1d:b9:4f:3f:4c: e5:37:f0:14:0b:fa:c7:0b:27:d4:0b:be:9c:d5:55:5b:d0:da: a1:9b:2a:d2:c4:0b:eb:80:aa:1f:ee:c1:3c:dd:dc:50:96:b3: 5a:de:ba:e0:bf:57:9f:b0:49:9c:e9:44:7e:fe:15:74:75:81: f2:30:02:b1:9b:f6:35:62:aa:2a:10:e2:62:1b:1e:77:f3:a0: b7:9e:31:d9:29:e4:34:44:b0:09:15:76:f3:54:58:c3:3b:bb: b4:61:8c:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa6D232b+2VrpfF4QVTIKDw+xq/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODM3MEU4RjVCRTg2RTYzNkI3NEYyRTlBODdCNUVERTVE RUM0RjhBMjAeFw0yNTA1MTQwMTI2MTdaFw0yNTA1MTUwNDMzMTdaMDMxMTAvBgNV BAMTKEZDMTBFNUNDRDEwOURCNDMwQjg0QTcxQ0UzMjg5QUNDMDVGMjZDMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyZWVswdkoaYBVb/Eqkxc5xdKh pbB4JTJKe5EyLCk4xEf4iAwwATjsSaxuxOLMz2oku58+BbMkqwqaJOvBQzB2SX+q g6eIqorOK6exmqt7zxocLWm1pui05r/HvTIpCdRlE5NFroJs4vx/vJrwPmJxN36H nTteT125/QQwDFdd987Uk1bvnmfNhxppESsW9X/EtwO3ifMby1FDN6QPJF+86ahv q1hxTbTp7pq6zzNUjfaF66seuCuQ7ryPPZUsCOEdL3klsCD4c+IO8/45W00kcpTi bEidqdKAOHFLkkkfwyTUPphll5pCUQyhebMdsuK6ruXQ2JvAdKPBbsTOaczVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/BDlzNEJ20MLhKcc4yiazAXybC8wHwYDVR0j BBgwFoAUg3Do9b6G5ja3Ty6ah7Xt5d7E+KIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRVE5U2hZaUZINXlrc2ZRVmVtaXFNOFRFUVVrOHVqdWd2eExOYndDdUN2 RUQvMC84MzcwRThGNUJFODZFNjM2Qjc0RjJFOUE4N0I1RURFNURFQzRGOEEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzNzBFOEY1QkU4NkU2MzZC NzRGMkU5QTg3QjVFREU1REVDNEY4QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RVE5U2hZaUZINXlrc2ZRVmVtaXFNOFRFUVVrOHVqdWd2eExOYndDdUN2RUQvMC84 MzcwRThGNUJFODZFNjM2Qjc0RjJFOUE4N0I1RURFNURFQzRGOEEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfzaJ5C9dodcT8TAhX2+NbaY8HWX5ldqjpD2O2Mx6PZKYc1kvTvYZKUBCvcok iG7ty3QtPr/JoMqh+aEPKArcx6wTVJRRQw7OhgvBqAdk34wDRtmlQ3R9NUq0jZ16 MwlVxjxt25kAqRsktDpsHwkN2BCdAoDIbDjPLkjcq6t1X++ydPA37IxoP6a6hjCS Bx6ERFAAoxMw+OQBr3GQDh25Tz9M5TfwFAv6xwsn1Au+nNVVW9DaoZsq0sQL64Cq H+7BPN3cUJazWt664L9Xn7BJnOlEfv4VdHWB8jACsZv2NWKqKhDiYhsed/Ogt54x 2SnkNESwCRV281RYwzu7tGGMVQ== -----END CERTIFICATE-----Generated at Wed May 14 06:09:17 2025 by rpki-client