$ rpki-client -vvf rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft File: 99143CBAF11D170944D719FD796009BC38F9F201.mft (raw, json) Hash identifier: yowUdKrhnAlU73RhD/z1Mdv3AA+pFxAY6RxB3L0j7ck= Subject key identifier: 23:B3:F3:FF:2A:F4:F4:B2:3C:33:30:72:2C:88:55:BB:CA:38:8A:EF Authority key identifier: 99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01 Certificate issuer: /CN=99143CBAF11D170944D719FD796009BC38F9F201 Certificate serial: 60A88B7CCD2901886E14774599C44EF2CB3EEA37 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft Manifest number: 5B Signing time: Tue 29 Apr 2025 08:22:03 +0000 Manifest this update: Tue 29 Apr 2025 08:17:03 +0000 Manifest next update: Wed 30 Apr 2025 08:58:03 +0000 Files and hashes: 1: 3136382e3139362e3138382e302f32322d3232203d3e203532383438.roa (hash: wGmW5HddS84Jo/UI8qqwdMdyTdX5hWciOmvr9JPT1Hk=) 2: 99143CBAF11D170944D719FD796009BC38F9F201.crl (hash: GC7MVEPsGmx1DCuCojhx6bMFQcjdoZA2MLWlJfzf19M=) 3: 323830343a3666383a3a2f34382d3438203d3e203532383438.roa (hash: 8xtcR24IPJaMX/rjvHeT8tMqZCtqzrZlmnUr2V0pZho=) 4: 3137372e38352e3230392e302f32342d3234203d3e203532383438.roa (hash: +e4JE9WbQSTeKpKZM4B9htThLOM6QwAAvUGG04RlxEg=) 5: 3137372e38352e3231362e302f32312d3231203d3e203532383438.roa (hash: dT3drk2apCMlmTaJ587FJLVDRKf659GM5r5ocqzqC5s=) 6: 3137372e38352e3230382e302f32312d3231203d3e203532383438.roa (hash: RRqoJBiXii3TgpvUYwzTzwuOv7ddzpllt21x0hxGtNA=) 7: 3137372e38352e3231322e302f32342d3234203d3e203532383438.roa (hash: MK46EOQmbC35WhEWUmA1L+F9AWzxso9iv0FyQJWVVEg=) 8: 323830343a3666383a3a2f33322d3332203d3e203532383438.roa (hash: ArZW0IEPQT9qmNg5J+/twX+29UWHR8soH8MuXLBopaw=) 9: 323830343a3666383a633365383a3a2f34382d3438203d3e203532383438.roa (hash: g+kDGTXDx32jeHWBRz886fdCkrH4EgBpA9ppSeKKh58=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 08:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a8:8b:7c:cd:29:01:88:6e:14:77:45:99:c4:4e:f2:cb:3e:ea:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99143CBAF11D170944D719FD796009BC38F9F201 Validity Not Before: Apr 29 08:17:03 2025 GMT Not After : Apr 30 08:58:03 2025 GMT Subject: CN=23B3F3FF2AF4F4B23C3330722C8855BBCA388AEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c0:d5:d0:94:3c:d7:66:2a:15:66:63:a0:ad: 5f:47:11:f4:e3:17:2e:12:cd:0e:89:fa:a0:c3:98: 91:a0:bd:9a:08:81:2d:58:22:2f:a4:67:43:cc:76: f3:b0:74:1c:93:7f:01:05:61:1d:1c:e0:05:30:d1: b9:88:90:3b:b9:52:50:59:fe:ac:2f:a6:db:eb:c9: 4d:61:c3:12:aa:09:e0:e7:b7:40:99:63:77:5d:c6: 0a:7e:27:89:d7:26:63:50:7c:e9:9c:60:9d:a2:14: c9:e3:4b:62:ea:fa:1e:47:64:9b:ed:83:ef:d0:d2: 21:07:99:4f:a6:6c:68:40:a7:6d:10:e2:92:14:05: 0e:90:08:14:a2:e4:dd:2a:33:37:ac:97:d2:4a:20: a6:e7:58:c2:74:eb:92:ba:84:ee:c1:b3:fa:f5:f6: af:70:5e:9e:2c:c1:aa:1f:5e:94:f4:46:5c:2f:bd: 1f:cd:cd:71:0b:2e:29:59:a7:d9:0f:c8:b4:9e:e4: 92:5c:95:00:04:5f:78:5a:b7:55:f8:55:92:67:c7: 85:48:59:1f:22:97:93:fd:0f:fd:07:2d:2c:d9:9d: a6:7c:6e:4d:e2:cf:dd:ba:1c:17:a7:0d:7a:ab:4a: 81:fe:77:66:a8:68:9d:e4:3d:bc:c9:4d:65:c0:e3: 10:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B3:F3:FF:2A:F4:F4:B2:3C:33:30:72:2C:88:55:BB:CA:38:8A:EF X509v3 Authority Key Identifier: keyid:99:14:3C:BA:F1:1D:17:09:44:D7:19:FD:79:60:09:BC:38:F9:F2:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99143CBAF11D170944D719FD796009BC38F9F201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Cxxd8DBNNtDavLj4anFvCe7iL34thAZh9AAvawhTSDd/0/99143CBAF11D170944D719FD796009BC38F9F201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e3:a2:fe:98:e6:d1:f7:66:a9:a1:8c:a7:97:d1:fa:c9:e0: 8d:b9:7c:be:50:ff:38:87:ee:4e:25:dd:aa:70:e1:17:77:2c: 83:59:17:32:75:26:ad:19:ca:ea:f9:27:67:8b:63:95:91:cc: c4:68:7b:ec:e2:cf:de:8b:3b:9e:c6:90:d7:43:e2:72:1c:af: 33:40:1f:cd:e9:64:fb:29:4c:76:4d:4d:a1:43:7e:a9:d6:fa: 75:c5:8b:30:28:69:13:fa:ab:3a:85:91:3d:26:3f:f9:d7:14: a2:25:00:b2:7a:d1:83:1a:54:46:90:d8:df:16:bf:72:95:0c: 01:42:e6:75:27:7a:80:11:14:fa:a7:bc:7f:f1:03:60:75:08: 82:a1:cf:67:10:b0:20:97:4d:3e:3f:7c:dc:e6:1f:e2:5b:d1: 31:6b:52:82:8d:03:bf:29:61:86:dc:63:ae:dc:d1:e9:09:11: 7f:57:6c:3d:d1:17:13:42:9c:f9:bf:4e:e1:ee:3f:39:6b:c7: 43:e6:bb:e8:38:66:e1:81:52:75:a1:76:e2:73:63:87:ba:e0: 23:78:8b:94:0f:d0:d6:38:1a:1b:93:c4:ef:fa:d5:f5:82:d3: b3:55:1c:b7:73:61:b1:33:08:61:d3:13:db:2c:87:f8:80:24: 59:13:e1:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYKiLfM0pAYhuFHdFmcRO8ss+6jcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTkxNDNDQkFGMTFEMTcwOTQ0RDcxOUZENzk2MDA5QkMz OEY5RjIwMTAeFw0yNTA0MjkwODE3MDNaFw0yNTA0MzAwODU4MDNaMDMxMTAvBgNV BAMTKDIzQjNGM0ZGMkFGNEY0QjIzQzMzMzA3MjJDODg1NUJCQ0EzODhBRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1wNXQlDzXZioVZmOgrV9HEfTj Fy4SzQ6J+qDDmJGgvZoIgS1YIi+kZ0PMdvOwdByTfwEFYR0c4AUw0bmIkDu5UlBZ /qwvptvryU1hwxKqCeDnt0CZY3ddxgp+J4nXJmNQfOmcYJ2iFMnjS2Lq+h5HZJvt g+/Q0iEHmU+mbGhAp20Q4pIUBQ6QCBSi5N0qMzesl9JKIKbnWMJ065K6hO7Bs/r1 9q9wXp4swaofXpT0RlwvvR/NzXELLilZp9kPyLSe5JJclQAEX3hat1X4VZJnx4VI WR8il5P9D/0HLSzZnaZ8bk3iz926HBenDXqrSoH+d2aoaJ3kPbzJTWXA4xB5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUI7Pz/yr09LI8MzByLIhVu8o4iu8wHwYDVR0j BBgwFoAUmRQ8uvEdFwlE1xn9eWAJvDj58gEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0N4eGQ4REJOTnREYXZMajRhbkZ2Q2U3aUwzNHRoQVpoOUFBdmF3aFRT RGQvMC85OTE0M0NCQUYxMUQxNzA5NDRENzE5RkQ3OTYwMDlCQzM4RjlGMjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5MTQzQ0JBRjExRDE3MDk0 NEQ3MTlGRDc5NjAwOUJDMzhGOUYyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0N4eGQ4REJOTnREYXZMajRhbkZ2Q2U3aUwzNHRoQVpoOUFBdmF3aFRTRGQvMC85 OTE0M0NCQUYxMUQxNzA5NDRENzE5RkQ3OTYwMDlCQzM4RjlGMjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPeOi/pjm0fdmqaGMp5fR+sngjbl8vlD/OIfuTiXdqnDhF3csg1kXMnUmrRnK 6vknZ4tjlZHMxGh77OLP3os7nsaQ10PichyvM0Afzelk+ylMdk1NoUN+qdb6dcWL MChpE/qrOoWRPSY/+dcUoiUAsnrRgxpURpDY3xa/cpUMAULmdSd6gBEU+qe8f/ED YHUIgqHPZxCwIJdNPj983OYf4lvRMWtSgo0DvylhhtxjrtzR6QkRf1dsPdEXE0Kc +b9O4e4/OWvHQ+a76Dhm4YFSdaF24nNjh7rgI3iLlA/Q1jgaG5PE7/rV9YLTs1Uc t3NhsTMIYdMT2yyH+IAkWRPhNg== -----END CERTIFICATE-----Generated at Tue Apr 29 18:41:12 2025 by rpki-client