$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft File: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft (raw, json) Hash identifier: HBr8YH6xpbXWKqqkwGB4wk3rytYNgtoLEdqsmIVo6nI= Subject key identifier: AE:E2:D0:E9:74:7A:5C:BF:FE:F8:94:5A:52:CD:99:C3:05:35:D7:CC Authority key identifier: 4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E Certificate issuer: /CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Certificate serial: 5E48A1D3F5DB59F37D20AE914ACA0666CC428A49 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject info access: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft Manifest number: 01DF Signing time: Sun 11 May 2025 07:15:01 +0000 Manifest this update: Sun 11 May 2025 07:10:01 +0000 Manifest next update: Mon 12 May 2025 09:46:01 +0000 Files and hashes: 1: 3137372e39312e3136342e302f32322d3234203d3e20323633343435.roa (hash: 2T0ObRxo5BMGuagiajA9IIMVotrKZHgUC8Y0CTXt9eU=) 2: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl (hash: n9bSOYMsFnDtE/VtqiAXkPVSyh7Z4S5+hpt0TnDgIKQ=) 3: 323830343a313165303a3a2f33322d3335203d3e20323633343435.roa (hash: l52S43eaKfvUZ2t/kqDe9o3Cqn1Y9zJ+3VEnL0T6tag=) 4: 323830343a313165303a343230313a3a2f34382d3438203d3e20323633343435.roa (hash: T+zhAAYd5vuAwlu8lxtEbL3qZyJYr9GqRyZTr/PPqRg=) 5: 323830343a313165303a343230303a3a2f33392d3339203d3e20323633343435.roa (hash: 6tg5sOgRuiUxwwUq/7zsZLx+hQOy6cWz5ENkeccHj0I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 02:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:48:a1:d3:f5:db:59:f3:7d:20:ae:91:4a:ca:06:66:cc:42:8a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Validity Not Before: May 11 07:10:01 2025 GMT Not After : May 12 09:46:01 2025 GMT Subject: CN=AEE2D0E9747A5CBFFEF8945A52CD99C30535D7CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3a:d4:88:97:0a:c6:19:f7:e5:de:14:a1:17: b5:dc:4d:3e:cf:e0:9d:5d:63:e8:0b:3a:70:19:b5: 80:04:4d:2c:2f:0f:c4:ff:65:8c:ac:6c:0c:c7:65: d2:8c:c6:a3:0b:63:a4:42:5c:43:b3:95:5f:9f:40: 4d:93:13:42:0c:f9:c2:af:1e:00:95:c6:3e:4a:51: a8:d7:dd:a3:79:e8:fe:7e:6e:14:04:f8:2c:da:fd: 72:89:75:5f:f8:f9:cc:42:22:37:fa:e1:a8:2b:8f: d6:c3:dd:fd:77:7d:c7:1a:e1:1c:cb:64:c0:6d:66: 46:a3:78:e5:01:c9:10:89:a1:b2:03:fd:e7:8f:90: d9:d1:a8:0e:83:67:a9:33:c3:77:d4:6d:16:35:f4: 7c:4e:2d:d0:54:27:73:01:a8:14:01:82:88:9a:7e: 3d:73:2e:15:f0:b9:ef:de:d6:7e:d6:aa:22:f6:d0: b6:f1:ae:18:b5:ab:28:e8:3e:a7:33:d9:dc:c1:7b: b3:20:73:7a:24:78:7c:9d:1b:4c:9b:fb:c7:ee:69: df:0c:ee:f3:a8:d2:5a:95:f9:96:de:41:d3:4d:57: 48:f1:6f:84:56:98:3c:11:b5:e1:27:c0:bc:24:b2: 31:c9:ad:0c:7a:1c:45:1b:db:41:30:e6:20:d6:3e: 45:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E2:D0:E9:74:7A:5C:BF:FE:F8:94:5A:52:CD:99:C3:05:35:D7:CC X509v3 Authority Key Identifier: keyid:4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ee:b1:c9:b0:af:a3:92:d6:bf:cc:3a:6e:cd:e9:91:89:eb: 9d:28:66:7e:9a:d8:16:bc:60:56:44:a8:5d:92:29:d5:96:c9: b5:f3:80:9d:eb:40:2e:76:f0:31:0e:59:e2:a9:10:d7:c6:55: 7f:94:0f:a4:ad:0f:3b:78:94:41:0e:e1:ec:ac:29:0f:e3:53: 75:b6:ea:2b:26:58:33:22:67:48:fe:b4:57:61:49:b1:86:e4: b6:39:a4:71:f8:0e:d7:f5:96:59:3a:e0:6e:e0:16:a1:f6:a5: c0:ef:84:91:09:f6:06:dd:f8:cf:e4:af:bd:bd:79:4a:a3:ac: 79:8f:af:25:05:25:4b:50:ee:5e:79:cb:a1:67:13:ff:a5:38: 42:f9:86:7f:6a:9c:03:97:64:61:e5:d7:93:f6:ca:08:1e:5c: e5:8a:24:e9:bc:cd:2e:55:00:c4:4d:14:d4:7c:d6:ae:88:8d: 4d:7e:c2:b3:78:a7:1b:7c:86:bf:7d:5d:c6:2b:df:64:a7:cf: c8:12:d3:d5:03:5d:85:29:78:34:38:02:6b:85:de:6a:68:3a: f2:dc:80:dd:03:43:b4:86:24:24:89:28:a1:4c:d6:1e:67:29: 66:20:43:5c:e3:c3:ba:e7:fc:a8:db:82:4d:63:e0:fa:6b:db: 2a:72:09:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXkih0/XbWfN9IK6RSsoGZsxCikkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzRTlDRDA5RTNGNEE2OUI0MEI0NEM4QzgxNjFFMUYw MEJFMEY1RTAeFw0yNTA1MTEwNzEwMDFaFw0yNTA1MTIwOTQ2MDFaMDMxMTAvBgNV BAMTKEFFRTJEMEU5NzQ3QTVDQkZGRUY4OTQ1QTUyQ0Q5OUMzMDUzNUQ3Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/OtSIlwrGGffl3hShF7XcTT7P 4J1dY+gLOnAZtYAETSwvD8T/ZYysbAzHZdKMxqMLY6RCXEOzlV+fQE2TE0IM+cKv HgCVxj5KUajX3aN56P5+bhQE+Cza/XKJdV/4+cxCIjf64agrj9bD3f13fcca4RzL ZMBtZkajeOUByRCJobID/eePkNnRqA6DZ6kzw3fUbRY19HxOLdBUJ3MBqBQBgoia fj1zLhXwue/e1n7WqiL20Lbxrhi1qyjoPqcz2dzBe7Mgc3okeHydG0yb+8fuad8M 7vOo0lqV+ZbeQdNNV0jxb4RWmDwRteEnwLwksjHJrQx6HEUb20Ew5iDWPkVJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUruLQ6XR6XL/++JRaUs2ZwwU118wwHwYDVR0j BBgwFoAUSz6c0J4/Smm0C0TIyBYeHwC+D14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZE bXgvMC80QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCM0U5Q0QwOUUzRjRBNjlC NDBCNDRDOEM4MTYxRTFGMDBCRTBGNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Sjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZEbXgvMC80 QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVO6xybCvo5LWv8w6bs3pkYnrnShmfprYFrxgVkSoXZIp1ZbJtfOAnetALnbw MQ5Z4qkQ18ZVf5QPpK0PO3iUQQ7h7KwpD+NTdbbqKyZYMyJnSP60V2FJsYbktjmk cfgO1/WWWTrgbuAWofalwO+EkQn2Bt34z+Svvb15SqOseY+vJQUlS1DuXnnLoWcT /6U4QvmGf2qcA5dkYeXXk/bKCB5c5Yok6bzNLlUAxE0U1HzWroiNTX7Cs3inG3yG v31dxivfZKfPyBLT1QNdhSl4NDgCa4Xeamg68tyA3QNDtIYkJIkooUzWHmcpZiBD XOPDuuf8qNuCTWPg+mvbKnIJ/A== -----END CERTIFICATE-----Generated at Sun May 11 15:56:59 2025 by rpki-client