$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft File: B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft (raw, json) Hash identifier: p9e4clTaWkaXlxnn+piF3AJehv6BpbYAyPYPtxYCgSc= Subject key identifier: 22:A8:CD:AF:44:3B:FB:5D:76:CE:3D:96:0C:5C:75:8E:6E:94:17:69 Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D Certificate issuer: /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D Certificate serial: 4A6A6604D98F17319BF94F2573DB258FA21085B2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft Manifest number: F1 Signing time: Mon 12 May 2025 16:31:45 +0000 Manifest this update: Mon 12 May 2025 16:26:45 +0000 Manifest next update: Tue 13 May 2025 17:38:45 +0000 Files and hashes: 1: 3137302e38322e32302e302f32332d3332203d3e20323636343430.roa (hash: +nAxPRtHcxrgkfrh1mtsvE/NhFZA9Y3xvxEZni9mbCY=) 2: 3137302e38322e32322e302f32342d3332203d3e20323636343430.roa (hash: DJne4kBD+xNmWBwcSI8pOxz3/iDzRXKwxTctYsGvKzY=) 3: 3137302e38322e32312e302f32342d3332203d3e20323636343430.roa (hash: beeX4B6MyKuGmrciweMX6QiNJiZS0b30i2PbXxCMlEg=) 4: 3137302e38322e32332e302f32342d3332203d3e20323636343430.roa (hash: 6PedwyVVFqTEjw2hbT1Tz2heBUwIRq91w7SbTmPftoM=) 5: 3137302e38322e32302e302f32322d3332203d3e20323636343430.roa (hash: oSQRk40W0JY8sSyVmz7gA7J13dK7vc4st2hm/+lgUdA=) 6: 3137302e38322e32302e302f32342d3332203d3e20323636343430.roa (hash: 6NEYOLRI6MRrTzbOfEps6WpFR9L/MZ1xNz0hgxoPQ+g=) 7: 323830343a333764633a3a2f33322d313238203d3e20323636343430.roa (hash: qNAnNxMLf23lX/Toa0RnHfzZ1GHt/QjrCvGeOjqM+AY=) 8: 3137302e38322e32322e302f32332d3332203d3e20323636343430.roa (hash: VhhP8rnZ6UCnRJRiCucXMy4ncmyKDFOTf8Wxmj/hPMI=) 9: B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl (hash: 468tG5+KzVcW0ULoAd1vqkS0Y2gGBEHhLKtDu1n0VrM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 17:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:6a:66:04:d9:8f:17:31:9b:f9:4f:25:73:db:25:8f:a2:10:85:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D Validity Not Before: May 12 16:26:45 2025 GMT Not After : May 13 17:38:45 2025 GMT Subject: CN=22A8CDAF443BFB5D76CE3D960C5C758E6E941769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:e0:23:eb:f5:01:98:80:fa:8f:bd:4d:c9: 2c:1c:22:d9:a5:5c:d4:80:86:d0:b4:99:2f:ad:99: 35:f9:aa:ff:51:03:7d:7c:1b:fb:f1:05:86:9c:de: 05:8d:b7:78:ee:0d:7d:d0:4b:9f:14:7c:40:20:94: f0:0e:8c:99:d1:24:6d:d5:02:36:2e:55:8f:db:c6: fe:d1:8c:bd:4e:37:b5:90:54:7d:cc:08:1a:fc:bc: a7:ff:33:c0:c3:72:e4:36:d4:a8:a1:41:7e:e9:3c: 93:96:3a:0d:08:e4:da:a0:10:b6:22:d0:f4:d0:c3: 40:fb:49:56:49:e0:cf:25:ba:bf:e5:9b:68:99:fc: 39:6d:d2:b6:46:f5:fc:8f:bc:fe:e6:e2:50:f5:a9: d4:2f:d4:5a:2f:6f:1e:60:a4:87:a7:e1:0e:b5:17: 78:ba:87:e8:c4:74:99:12:c4:26:02:4d:cf:a0:d1: 64:4e:d8:3f:15:e6:a3:a6:2a:a0:18:68:4a:de:5c: f5:50:8c:c9:9d:3a:a3:41:bc:5e:57:09:e8:cf:52: 2e:1a:f5:6b:e4:43:e6:68:52:c2:fb:76:87:4e:48: cc:f9:a7:c1:8b:49:b7:af:eb:32:f7:82:57:98:83: 5b:f4:9e:3b:94:85:12:8b:6a:34:92:71:2e:2b:59: d5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A8:CD:AF:44:3B:FB:5D:76:CE:3D:96:0C:5C:75:8E:6E:94:17:69 X509v3 Authority Key Identifier: keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8c:2f:4b:5d:45:a3:6a:e9:bf:20:7d:b0:6e:15:96:ff:c7: 92:db:58:d5:25:ea:1f:3d:e6:ba:dc:9a:48:29:a0:f1:70:14: f5:ea:be:c6:23:a7:cf:d2:a8:42:79:d1:24:a2:a2:4d:4a:65: 28:d2:b7:f4:17:06:71:2e:19:e8:bc:4a:d7:bb:19:5e:fa:1f: fb:56:a9:70:ee:76:6a:33:fe:9e:ce:db:30:01:1f:8d:3e:7f: 76:f3:12:b6:4e:a9:59:05:36:70:39:b5:03:b2:0a:80:ba:87: b6:db:87:74:6e:25:17:b4:6a:fa:89:10:05:1b:20:ae:c2:f1: 52:b2:6d:71:53:e9:c7:c5:c0:c2:8b:47:df:5d:99:ba:f0:3f: ae:9b:c8:12:9c:c8:0f:b1:ce:8e:7e:1c:54:d7:38:a5:55:01: 50:8a:ad:39:9f:9d:2b:d5:a6:ec:12:7e:f2:a0:f9:87:82:94: a5:3c:88:09:7c:b9:7f:12:c9:69:e0:1a:83:e5:67:4b:94:a9: d2:c3:97:f8:bc:d5:ef:d6:49:0e:6f:0a:ab:ca:0a:45:11:37: 8c:3f:ed:0e:cb:77:de:73:75:89:04:8a:0b:6f:3e:52:4c:aa: 13:70:90:b9:83:30:bb:f3:99:53:5e:e9:78:13:1e:97:6b:b3: e0:af:4b:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSmpmBNmPFzGb+U8lc9slj6IQhbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBEMEYxQ0UzMEEyQkMwRjNBREI2NkZEODI0Mjc1MDI1 ODk3NUUxRDAeFw0yNTA1MTIxNjI2NDVaFw0yNTA1MTMxNzM4NDVaMDMxMTAvBgNV BAMTKDIyQThDREFGNDQzQkZCNUQ3NkNFM0Q5NjBDNUM3NThFNkU5NDE3NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9OAj6/UBmID6j71NySwcItml XNSAhtC0mS+tmTX5qv9RA318G/vxBYac3gWNt3juDX3QS58UfEAglPAOjJnRJG3V AjYuVY/bxv7RjL1ON7WQVH3MCBr8vKf/M8DDcuQ21KihQX7pPJOWOg0I5NqgELYi 0PTQw0D7SVZJ4M8lur/lm2iZ/Dlt0rZG9fyPvP7m4lD1qdQv1Fovbx5gpIen4Q61 F3i6h+jEdJkSxCYCTc+g0WRO2D8V5qOmKqAYaEreXPVQjMmdOqNBvF5XCejPUi4a 9WvkQ+ZoUsL7dodOSMz5p8GLSbev6zL3gleYg1v0njuUhRKLajSScS4rWdVJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIqjNr0Q7+112zj2WDFx1jm6UF2kwHwYDVR0j BBgwFoAUsNDxzjCivA8622b9gkJ1AliXXh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG9XVGJVR1BYS1hzN1FQQ2FEY1ZYQ1hYcGhzdlRmc1pDbXBSaXVxWk1r WTQvMC9CMEQwRjFDRTMwQTJCQzBGM0FEQjY2RkQ4MjQyNzUwMjU4OTc1RTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwRDBGMUNFMzBBMkJDMEYz QURCNjZGRDgyNDI3NTAyNTg5NzVFMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SG9XVGJVR1BYS1hzN1FQQ2FEY1ZYQ1hYcGhzdlRmc1pDbXBSaXVxWk1rWTQvMC9C MEQwRjFDRTMwQTJCQzBGM0FEQjY2RkQ4MjQyNzUwMjU4OTc1RTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG4wvS11Fo2rpvyB9sG4Vlv/HkttY1SXqHz3mutyaSCmg8XAU9eq+xiOnz9Ko QnnRJKKiTUplKNK39BcGcS4Z6LxK17sZXvof+1apcO52ajP+ns7bMAEfjT5/dvMS tk6pWQU2cDm1A7IKgLqHttuHdG4lF7Rq+okQBRsgrsLxUrJtcVPpx8XAwotH312Z uvA/rpvIEpzID7HOjn4cVNc4pVUBUIqtOZ+dK9Wm7BJ+8qD5h4KUpTyICXy5fxLJ aeAag+VnS5Sp0sOX+LzV79ZJDm8Kq8oKRRE3jD/tDst33nN1iQSKC28+UkyqE3CQ uYMwu/OZU17peBMel2uz4K9LdQ== -----END CERTIFICATE-----Generated at Mon May 12 22:49:00 2025 by rpki-client