$ rpki-client -vvf rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft File: 8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft (raw, json) Hash identifier: 4LILO0cW42/6829IQcV/rjrwLv5U/3FTQfhxUj5zlGM= Subject key identifier: DE:AD:A8:84:4D:53:5A:EA:11:77:06:F6:84:DE:5A:B9:0A:5F:B4:4B Authority key identifier: 8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5 Certificate issuer: /CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5 Certificate serial: 5D51B5A4371BA2A37876F352F2A07A284CB6ECF1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer Subject info access: rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft Manifest number: 021B Signing time: Mon 12 May 2025 06:04:44 +0000 Manifest this update: Mon 12 May 2025 05:59:44 +0000 Manifest next update: Tue 13 May 2025 07:54:44 +0000 Files and hashes: 1: 8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl (hash: 3ZyZysAqSIU0fKxzXJVSFJRl4QNEgwWKWk0eyrwLXaQ=) 2: 3133312e302e34342e302f32322d3234203d3e20323632363231.roa (hash: 0Ek7QSABbX1hxlww4eo8kRpq1DnlPtP++8bb1A/727Y=) 3: 3137372e38362e33322e302f32322d3234203d3e20323632363231.roa (hash: xKLrG/AO8ce4eep3uuETd57cPc6b1MP2a+DWkx2KnwU=) 4: 323830343a3732303a3a2f33322d3438203d3e20323632363231.roa (hash: mltDu46I6weMY5jZx2cVC8KWeJwKWTe757nY2EBwNLU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 07:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:51:b5:a4:37:1b:a2:a3:78:76:f3:52:f2:a0:7a:28:4c:b6:ec:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5 Validity Not Before: May 12 05:59:44 2025 GMT Not After : May 13 07:54:44 2025 GMT Subject: CN=DEADA8844D535AEA117706F684DE5AB90A5FB44B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:54:e3:c6:92:f5:b6:8f:84:92:83:74:ac: 9f:d8:b1:1f:b4:45:94:51:c5:da:c4:8b:4c:a0:7f: 0a:69:38:6f:45:d5:5e:5c:60:95:e0:e3:75:f1:9f: b1:78:a6:f4:ca:a6:8f:ea:9f:0a:e0:a3:1f:c0:55: b4:d4:87:0c:54:01:25:2b:36:d7:d0:1f:fd:3f:c4: a4:ad:7e:cd:d2:10:9a:30:c7:d1:34:91:d9:f6:1e: fa:f8:07:b0:83:ff:92:05:7e:ae:fd:a9:52:a2:13: b8:a4:fd:a7:3a:a6:7d:2c:71:f3:73:fa:27:0d:89: 11:08:46:53:70:40:20:75:1c:14:22:b8:4a:80:8d: 69:55:60:e6:18:25:4c:21:cf:29:92:c5:aa:59:3e: dc:79:72:45:d4:14:a7:ee:7e:62:7a:1f:02:12:12: 21:46:2a:fb:a5:0a:8b:ae:66:38:64:c8:0d:21:62: 91:28:0e:c3:c6:e0:48:ad:0e:96:23:a0:34:f1:1a: 3c:d1:48:06:2c:43:08:34:a2:f4:90:98:68:bf:7c: 8b:3e:8e:69:45:cd:31:34:95:55:ee:3b:24:65:28: 93:f6:d1:64:1c:9a:e7:72:23:33:42:27:da:6b:67: 5b:d9:d5:21:09:d5:15:6d:10:91:e5:81:e5:84:3c: d8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AD:A8:84:4D:53:5A:EA:11:77:06:F6:84:DE:5A:B9:0A:5F:B4:4B X509v3 Authority Key Identifier: keyid:8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ad:e3:18:9a:1c:54:2b:3b:95:a0:3b:b9:5c:68:5f:4a:b9: 01:ad:23:e6:43:3f:e5:b0:e6:48:6b:f6:11:0d:7f:c5:cc:30: 6c:41:14:2c:eb:40:7e:da:0b:05:74:4d:a4:ea:b1:ce:50:25: 96:ac:e1:f1:a7:40:db:0a:66:da:73:52:47:3d:70:18:61:fe: e0:83:86:18:80:17:b6:ba:15:2f:fe:91:d7:15:e8:ca:8a:af: 59:2c:5c:14:d3:a3:3d:8f:9d:64:9e:8e:65:b3:75:96:1e:a5: ed:1a:bb:00:53:bf:96:94:9e:7b:47:f8:79:6b:e4:d0:b7:9b: 71:94:90:19:dc:29:3f:13:3b:97:75:d6:6b:22:25:33:43:80: 93:fd:30:d8:02:0c:8f:97:03:55:2d:b2:63:a4:cf:6a:a2:bb: b0:d3:7d:6e:4a:cb:79:fd:92:2a:00:33:0b:a9:1e:93:54:0b: 9b:0f:82:b6:66:f0:39:a0:b3:1d:1f:5b:82:29:33:7f:b2:0a: 20:3c:c9:29:f6:2b:8e:3a:45:c1:7a:49:38:48:0f:6e:a7:e3: 2b:70:4e:e2:8b:5d:49:b1:41:35:c4:e1:d1:cf:04:55:4e:9e: bc:bf:db:07:fa:ff:7c:0a:ab:a4:26:b6:06:75:15:91:b1:22: fc:73:1b:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXVG1pDcboqN4dvNS8qB6KEy27PEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2RkQ3M0I3RTI0RTcwNzcxMkVDMDA2MDQ3MUQ0NkVE REMxRDBBNTAeFw0yNTA1MTIwNTU5NDRaFw0yNTA1MTMwNzU0NDRaMDMxMTAvBgNV BAMTKERFQURBODg0NEQ1MzVBRUExMTc3MDZGNjg0REU1QUI5MEE1RkI0NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoSVTjxpL1to+EkoN0rJ/YsR+0 RZRRxdrEi0ygfwppOG9F1V5cYJXg43Xxn7F4pvTKpo/qnwrgox/AVbTUhwxUASUr NtfQH/0/xKStfs3SEJowx9E0kdn2Hvr4B7CD/5IFfq79qVKiE7ik/ac6pn0scfNz +icNiREIRlNwQCB1HBQiuEqAjWlVYOYYJUwhzymSxapZPtx5ckXUFKfufmJ6HwIS EiFGKvulCouuZjhkyA0hYpEoDsPG4EitDpYjoDTxGjzRSAYsQwg0ovSQmGi/fIs+ jmlFzTE0lVXuOyRlKJP20WQcmudyIzNCJ9prZ1vZ1SEJ1RVtEJHlgeWEPNifAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3q2ohE1TWuoRdwb2hN5auQpftEswHwYDVR0j BBgwFoAUjG/XO34k5wdxLsAGBHHUbt3B0KUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR1hoaWtpclJFS0xtZlNqamRFZnJ5U2RVb2JoVTJYVHV2c1hqUHI3dmlN OGUvMS84QzZGRDczQjdFMjRFNzA3NzEyRUMwMDYwNDcxRDQ2RUREQzFEMEE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDNkZENzNCN0UyNEU3MDc3 MTJFQzAwNjA0NzFENDZFRERDMUQwQTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R1hoaWtpclJFS0xtZlNqamRFZnJ5U2RVb2JoVTJYVHV2c1hqUHI3dmlNOGUvMS84 QzZGRDczQjdFMjRFNzA3NzEyRUMwMDYwNDcxRDQ2RUREQzFEMEE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfa3jGJocVCs7laA7uVxoX0q5Aa0j5kM/5bDmSGv2EQ1/xcwwbEEULOtAftoL BXRNpOqxzlAllqzh8adA2wpm2nNSRz1wGGH+4IOGGIAXtroVL/6R1xXoyoqvWSxc FNOjPY+dZJ6OZbN1lh6l7Rq7AFO/lpSee0f4eWvk0LebcZSQGdwpPxM7l3XWayIl M0OAk/0w2AIMj5cDVS2yY6TPaqK7sNN9bkrLef2SKgAzC6kek1QLmw+CtmbwOaCz HR9bgikzf7IKIDzJKfYrjjpFwXpJOEgPbqfjK3BO4otdSbFBNcTh0c8EVU6evL/b B/r/fAqrpCa2BnUVkbEi/HMbRQ== -----END CERTIFICATE-----Generated at Mon May 12 13:30:46 2025 by rpki-client