$ rpki-client -vvf rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/17C00B445C93E393C8337EE28B631DC91D3E7C96.mft File: 17C00B445C93E393C8337EE28B631DC91D3E7C96.mft (raw, json) Hash identifier: 9Sa+18Ph728bCCkIRIh5g9VMUlrklLDGW0My21Y1Vxs= Subject key identifier: B4:18:BB:F6:48:DF:0B:37:97:20:8F:B0:2C:41:D4:49:F4:64:51:A1 Authority key identifier: 17:C0:0B:44:5C:93:E3:93:C8:33:7E:E2:8B:63:1D:C9:1D:3E:7C:96 Certificate issuer: /CN=17C00B445C93E393C8337EE28B631DC91D3E7C96 Certificate serial: 395E5EBCEC1B03E4C15431B5E1244073DC4753F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C00B445C93E393C8337EE28B631DC91D3E7C96.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/17C00B445C93E393C8337EE28B631DC91D3E7C96.mft Manifest number: 7D Signing time: Fri 02 May 2025 10:13:07 +0000 Manifest this update: Fri 02 May 2025 10:08:07 +0000 Manifest next update: Sat 03 May 2025 10:54:07 +0000 Files and hashes: 1: 323830343a386232303a3a2f33332d3333203d3e20323733373133.roa (hash: ZG9VbVcZFac45U3ltzcVMrzly1dao6FUMBjsCnEeSJc=) 2: 323830343a386232303a383030303a3a2f33332d3333203d3e20323733373133.roa (hash: NDOVum8LedsVLvc/WICDe9ryq5eC3jbg3qAPX4VVjTs=) 3: 323830343a386232303a3a2f33322d3332203d3e20323733373133.roa (hash: pQOnfbDyMkYbjegBRXPNs0/vkTwxc3YQUhvCMCjVjnk=) 4: 17C00B445C93E393C8337EE28B631DC91D3E7C96.crl (hash: lgWLMGZvsm28lUvJPurds5HIn0MoYkKwHcd6Wgy9Ppc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/17C00B445C93E393C8337EE28B631DC91D3E7C96.crl rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/17C00B445C93E393C8337EE28B631DC91D3E7C96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C00B445C93E393C8337EE28B631DC91D3E7C96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 May 2025 10:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5e:5e:bc:ec:1b:03:e4:c1:54:31:b5:e1:24:40:73:dc:47:53:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17C00B445C93E393C8337EE28B631DC91D3E7C96 Validity Not Before: May 2 10:08:07 2025 GMT Not After : May 3 10:54:07 2025 GMT Subject: CN=B418BBF648DF0B3797208FB02C41D449F46451A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a8:e9:84:91:0e:f0:e6:cc:dd:ce:ea:75:c1: 9a:55:5b:3b:35:82:51:85:8f:79:1d:cf:56:d9:26: 47:1c:07:2a:37:c5:f2:27:61:c3:98:67:34:95:2b: 13:8f:83:4b:9d:e1:d3:5f:a8:b5:3b:0f:77:e1:2b: 0a:67:52:45:5f:9b:de:54:3a:7d:79:9e:c8:1e:27: a3:e0:3d:8e:fe:24:45:d3:34:a3:93:f7:cf:6a:95: ca:bd:d7:6d:22:7e:5a:b1:cb:a2:f9:c3:20:1e:35: b8:ee:f4:5b:e0:c3:b9:da:f8:0e:64:f8:73:2e:8a: b5:c7:41:3d:b2:cb:21:f4:0e:cd:8c:e2:4c:b2:74: d3:5b:57:d7:40:c6:28:e3:2e:a6:1c:ad:a2:24:7e: ba:3c:4c:c0:1d:c6:99:14:47:d7:b2:aa:09:b0:af: 08:97:7f:5a:ed:dd:ad:8a:f0:3e:ce:d9:48:4b:e2: 23:b4:fa:6c:35:89:8d:cd:0d:a0:9f:c9:07:fb:e6: 53:ba:e7:fe:26:b8:ef:a0:76:2f:f0:cc:0d:bc:e5: 8f:e7:f7:1e:25:c8:09:11:50:f0:6a:c8:02:e3:43: 28:7d:1a:a5:39:0b:b0:88:eb:28:91:c8:66:98:c6: 89:b1:0a:f0:64:b4:c5:50:1b:78:e3:64:00:5a:7f: 61:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:18:BB:F6:48:DF:0B:37:97:20:8F:B0:2C:41:D4:49:F4:64:51:A1 X509v3 Authority Key Identifier: keyid:17:C0:0B:44:5C:93:E3:93:C8:33:7E:E2:8B:63:1D:C9:1D:3E:7C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/17C00B445C93E393C8337EE28B631DC91D3E7C96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C00B445C93E393C8337EE28B631DC91D3E7C96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/17C00B445C93E393C8337EE28B631DC91D3E7C96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6b:e9:6b:c9:3b:f9:72:5e:ee:69:7d:3c:24:bb:f9:81:e5: 14:3a:cf:67:b7:c5:7c:5a:4d:89:2d:2d:f4:45:4a:3b:8c:e1: 8f:a8:4e:f5:f7:b3:b5:02:c8:9b:58:2b:85:e0:1c:e1:f4:73: e1:c9:f0:61:95:47:50:30:1f:d6:90:5e:06:80:3b:50:aa:81: 21:70:49:b3:a0:72:3d:8a:95:84:27:e6:d8:5f:91:1c:01:7b: 65:e1:62:9a:a1:6f:49:aa:bd:0d:6c:bd:a0:b2:bb:58:b9:6e: cb:4c:91:21:6b:07:7b:be:1a:74:5b:b9:fd:30:f4:42:7a:11: 1d:c3:b8:fa:93:3c:b3:1b:46:0c:e1:d6:77:d9:6d:d3:b1:46: 0f:2b:70:5d:58:cc:db:3a:65:48:9a:b6:99:69:d4:eb:f6:5e: 15:b5:85:ca:7e:d6:d6:c3:c6:fa:dd:d1:7e:7b:fd:91:9c:f7: 7a:28:c0:47:2d:06:7e:98:86:89:17:a4:4f:59:88:10:be:e7: eb:82:e7:8f:31:2d:aa:09:1f:78:c5:48:de:36:8d:7a:d8:8c: 42:fe:05:2c:5d:73:07:f1:b0:08:9a:20:c3:d5:12:d2:71:2c: d7:f1:e9:30:83:a3:59:44:15:8b:a1:9d:42:7b:97:0f:c6:8b: 4a:a9:c2:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOV5evOwbA+TBVDG14SRAc9xHU/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdDMDBCNDQ1QzkzRTM5M0M4MzM3RUUyOEI2MzFEQzkx RDNFN0M5NjAeFw0yNTA1MDIxMDA4MDdaFw0yNTA1MDMxMDU0MDdaMDMxMTAvBgNV BAMTKEI0MThCQkY2NDhERjBCMzc5NzIwOEZCMDJDNDFENDQ5RjQ2NDUxQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbqOmEkQ7w5szdzup1wZpVWzs1 glGFj3kdz1bZJkccByo3xfInYcOYZzSVKxOPg0ud4dNfqLU7D3fhKwpnUkVfm95U On15nsgeJ6PgPY7+JEXTNKOT989qlcq9120iflqxy6L5wyAeNbju9Fvgw7na+A5k +HMuirXHQT2yyyH0Ds2M4kyydNNbV9dAxijjLqYcraIkfro8TMAdxpkUR9eyqgmw rwiXf1rt3a2K8D7O2UhL4iO0+mw1iY3NDaCfyQf75lO65/4muO+gdi/wzA285Y/n 9x4lyAkRUPBqyALjQyh9GqU5C7CI6yiRyGaYxomxCvBktMVQG3jjZABaf2HTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtBi79kjfCzeXII+wLEHUSfRkUaEwHwYDVR0j BBgwFoAUF8ALRFyT45PIM37ii2MdyR0+fJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNtVFMxSGN1WVJCY2R2aUpieDdZYURyRHFEQThVQVBGandQSzVGdVV1 NlovMC8xN0MwMEI0NDVDOTNFMzkzQzgzMzdFRTI4QjYzMURDOTFEM0U3Qzk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3QzAwQjQ0NUM5M0UzOTND ODMzN0VFMjhCNjMxREM5MUQzRTdDOTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNtVFMxSGN1WVJCY2R2aUpieDdZYURyRHFEQThVQVBGandQSzVGdVV1NlovMC8x N0MwMEI0NDVDOTNFMzkzQzgzMzdFRTI4QjYzMURDOTFEM0U3Qzk2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT2vpa8k7+XJe7ml9PCS7+YHlFDrPZ7fFfFpNiS0t9EVKO4zhj6hO9feztQLI m1grheAc4fRz4cnwYZVHUDAf1pBeBoA7UKqBIXBJs6ByPYqVhCfm2F+RHAF7ZeFi mqFvSaq9DWy9oLK7WLluy0yRIWsHe74adFu5/TD0QnoRHcO4+pM8sxtGDOHWd9lt 07FGDytwXVjM2zplSJq2mWnU6/ZeFbWFyn7W1sPG+t3Rfnv9kZz3eijARy0GfpiG iRekT1mIEL7n64LnjzEtqgkfeMVI3jaNetiMQv4FLF1zB/GwCJogw9US0nEs1/Hp MIOjWUQVi6GdQnuXD8aLSqnC8g== -----END CERTIFICATE-----Generated at Fri May 2 13:13:41 2025 by rpki-client