$ rpki-client -vvf rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9.mft File: 02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9.mft (raw, json) Hash identifier: k2UQFOz/TKKTKwe7mxA0cJ/CJXPKAC8dSftTx0p5RjA= Subject key identifier: F9:8C:CD:64:4F:BF:C2:EF:56:30:A9:0F:68:40:C9:D6:1F:48:93:3F Authority key identifier: 02:B7:FA:C2:7E:D8:E4:63:4E:61:DF:A8:90:D8:6B:CF:AE:8F:9B:A9 Certificate issuer: /CN=02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9 Certificate serial: 696DD4A6C422D3AF6689D721CE3A56047ED674CC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9.cer Subject info access: rsync://rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9.mft Manifest number: A4 Signing time: Wed 14 May 2025 11:51:00 +0000 Manifest this update: Wed 14 May 2025 11:46:00 +0000 Manifest next update: Thu 15 May 2025 15:40:00 +0000 Files and hashes: 1: 323830343a6364633a3a2f33322d3438203d3e203532353635.roa (hash: RZb+Bxk6BAyM64SNfqbiB3j2lJXhQ1axUQDtE3Rcw7w=) 2: 02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9.crl (hash: F9yyv4nJhlYCoKAmS8/eMaF4F2pO9p9NN3aUZ1pOM1g=) 3: 3137302e3135302e3234382e302f32322d3234203d3e203532353635.roa (hash: kMFDU+hroSb3DCLt4twj69yFu0n8G2EDQt8HJaFspfM=) 4: 3137392e3139312e31362e302f32302d3234203d3e203532353635.roa (hash: ie0dgMa8cXfEpVKo1c/PVd1i37Q4ZjsuNEzq15dEGeA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9.crl rsync://rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 May 2025 15:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:6d:d4:a6:c4:22:d3:af:66:89:d7:21:ce:3a:56:04:7e:d6:74:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9 Validity Not Before: May 14 11:46:00 2025 GMT Not After : May 15 15:40:00 2025 GMT Subject: CN=F98CCD644FBFC2EF5630A90F6840C9D61F48933F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:f8:0b:47:bc:94:1b:60:1e:12:b1:ea:86:ef: 3f:47:2b:cd:e9:7c:2b:f4:61:87:4d:c1:9f:0f:e1: e1:9e:c7:7d:21:b2:ad:d0:d8:39:69:b8:8a:ac:2c: cc:3c:b3:ad:da:56:ea:8f:b1:94:e6:0b:3b:63:1e: e0:28:0d:56:c7:11:9a:5f:f5:5d:62:0b:be:1d:c3: df:98:be:d2:b6:03:8c:1f:d1:2d:87:9e:2d:13:9c: de:19:5a:a9:60:8f:24:cd:e6:2e:b6:a1:bc:59:b1: 01:f5:b0:de:58:fa:d0:7d:3e:fb:f7:6f:d7:46:54: 80:d3:65:10:f1:d8:98:ec:15:6c:74:c7:4d:21:58: 49:bf:dc:92:61:bb:d9:10:11:05:06:30:c5:df:23: 43:be:7b:98:70:55:18:35:d6:03:cd:2a:aa:30:8a: b8:c2:ba:ac:af:5d:a8:d8:28:04:c1:94:69:7e:95: 1f:cd:90:18:d1:05:30:76:1e:43:1e:ec:d5:49:39: e2:c4:e8:61:43:aa:03:3c:34:bc:72:39:56:a1:84: 44:ce:a7:ab:95:e7:f3:d3:5b:1c:c1:c5:ca:25:50: dd:da:84:5c:6d:5b:7a:f0:50:3a:ae:2f:72:92:0a: 35:8a:cb:98:41:d3:8b:67:f2:dd:21:98:01:49:97: c5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8C:CD:64:4F:BF:C2:EF:56:30:A9:0F:68:40:C9:D6:1F:48:93:3F X509v3 Authority Key Identifier: keyid:02:B7:FA:C2:7E:D8:E4:63:4E:61:DF:A8:90:D8:6B:CF:AE:8F:9B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f8:63:56:e3:cd:a8:ef:73:59:d1:06:a0:55:d6:9d:86:df: 54:af:67:a7:91:43:ea:b6:1a:07:5f:42:08:75:a0:d8:3f:50: 3d:8d:fa:9f:7b:ca:39:63:96:70:93:f4:db:64:61:0b:ea:18: 14:93:df:d4:5b:0e:92:08:03:49:af:86:cb:1e:78:ee:a5:1c: 9f:45:87:c5:b1:7c:e8:12:46:be:81:b0:f8:25:99:b0:0b:1e: df:f8:b0:fe:af:a5:aa:7f:83:30:1b:c7:c5:fc:44:9a:0e:b6: 3c:c5:d3:40:65:ad:b2:da:21:cb:1a:13:35:a7:23:0b:60:55: ff:fb:09:01:b0:e6:dd:74:65:36:d0:43:83:0d:33:c0:8c:c1: 2c:16:f8:de:b9:1c:c5:28:fc:f9:04:ca:2e:4b:83:b0:e7:52: da:dc:08:73:d1:2b:a4:ef:41:28:46:9d:ee:bb:1e:1c:46:6a: 96:08:86:22:31:78:f6:9b:51:b6:86:33:70:9e:ad:3c:3f:a8: 35:a5:8d:18:bb:a1:a8:11:95:47:a0:b8:7f:89:99:68:a3:0a: cb:e3:04:f8:dd:81:14:5e:a1:29:af:9b:38:c5:07:70:0a:92: 80:cc:b8:61:13:b9:f0:5f:d1:05:e4:34:7e:69:65:c6:0e:ff: e7:ac:cd:21 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUaW3UpsQi069midchzjpWBH7WdMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJCN0ZBQzI3RUQ4RTQ2MzRFNjFERkE4OTBEODZCQ0ZB RThGOUJBOTAeFw0yNTA1MTQxMTQ2MDBaFw0yNTA1MTUxNTQwMDBaMDMxMTAvBgNV BAMTKEY5OENDRDY0NEZCRkMyRUY1NjMwQTkwRjY4NDBDOUQ2MUY0ODkzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6+AtHvJQbYB4SseqG7z9HK83p fCv0YYdNwZ8P4eGex30hsq3Q2DlpuIqsLMw8s63aVuqPsZTmCztjHuAoDVbHEZpf 9V1iC74dw9+YvtK2A4wf0S2Hni0TnN4ZWqlgjyTN5i62obxZsQH1sN5Y+tB9Pvv3 b9dGVIDTZRDx2JjsFWx0x00hWEm/3JJhu9kQEQUGMMXfI0O+e5hwVRg11gPNKqow irjCuqyvXajYKATBlGl+lR/NkBjRBTB2HkMe7NVJOeLE6GFDqgM8NLxyOVahhETO p6uV5/PTWxzBxcolUN3ahFxtW3rwUDquL3KSCjWKy5hB04tn8t0hmAFJl8VpAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU+YzNZE+/wu9WMKkPaEDJ1h9Ikz8wHwYDVR0j BBgwFoAUArf6wn7Y5GNOYd+okNhrz66Pm6kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9xV0ZTV3ZDZTZWaHNpN3BGUmFENkpnNHc4VERYVWRnNFpiWUpNWk5CeTJi LzAvMDJCN0ZBQzI3RUQ4RTQ2MzRFNjFERkE4OTBEODZCQ0ZBRThGOUJBOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wMkI3RkFDMjdFRDhFNDYzNEU2 MURGQTg5MEQ4NkJDRkFFOEY5QkE5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3FX RlNXdkNlNlZoc2k3cEZSYUQ2Smc0dzhURFhVZGc0WmJZSk1aTkJ5MmIvMC8wMkI3 RkFDMjdFRDhFNDYzNEU2MURGQTg5MEQ4NkJDRkFFOEY5QkE5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA SvhjVuPNqO9zWdEGoFXWnYbfVK9np5FD6rYaB19CCHWg2D9QPY36n3vKOWOWcJP0 22RhC+oYFJPf1FsOkggDSa+Gyx547qUcn0WHxbF86BJGvoGw+CWZsAse3/iw/q+l qn+DMBvHxfxEmg62PMXTQGWtstohyxoTNacjC2BV//sJAbDm3XRlNtBDgw0zwIzB LBb43rkcxSj8+QTKLkuDsOdS2twIc9ErpO9BKEad7rseHEZqlgiGIjF49ptRtoYz cJ6tPD+oNaWNGLuhqBGVR6C4f4mZaKMKy+ME+N2BFF6hKa+bOMUHcAqSgMy4YRO5 8F/RBeQ0fmllxg7/56zNIQ== -----END CERTIFICATE-----Generated at Wed May 14 19:34:54 2025 by rpki-client