$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft File: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft (raw, json) Hash identifier: WOtrc7tyOWl21yLIJLbJn05RvywIvvcU67RUl3KRLzk= Subject key identifier: 71:64:7D:93:37:EF:6C:DE:86:77:8E:3D:20:49:FE:3E:70:43:04:EC Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 Certificate issuer: /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Certificate serial: 17791A3F05F1F7E9F286A4CEF30F35F32598BEC5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft Manifest number: 01DB Signing time: Tue 06 May 2025 05:57:13 +0000 Manifest this update: Tue 06 May 2025 05:52:13 +0000 Manifest next update: Wed 07 May 2025 06:23:13 +0000 Files and hashes: 1: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl (hash: m0ybarxSRCi2p2Qdh0dNq4u2Igj+NuM5A7z9CfDn5MQ=) 2: 3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (hash: Bv6Lyj5+VhdPqvZ/TGH9M1sdk0ISaNwfb7BbI7c/FPE=) 3: 3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (hash: WqEYa1LHKO/TdU02rXFXLwns464zC4VFuzHF7wOxsfA=) 4: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (hash: 0xs1tTdh2Qke0fip6d1TEfj28igzF6NdDvyXj3IPtmI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 07 May 2025 02:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:79:1a:3f:05:f1:f7:e9:f2:86:a4:ce:f3:0f:35:f3:25:98:be:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Validity Not Before: May 6 05:52:13 2025 GMT Not After : May 7 06:23:13 2025 GMT Subject: CN=71647D9337EF6CDE86778E3D2049FE3E704304EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8c:33:fe:68:f7:ea:0a:89:b4:48:1b:30:65: dc:8a:95:43:27:b6:21:b5:e2:39:d5:68:ff:a6:2e: 0c:b4:7d:81:d6:44:b8:bd:ff:a0:b9:a7:28:f1:bd: 5c:62:dd:63:46:74:89:d8:92:a3:70:86:df:e5:11: a6:59:58:88:1a:7d:e8:f5:5a:62:12:aa:59:59:d4: 22:80:25:bc:ea:32:04:64:4a:0a:0e:f2:98:61:21: 40:90:da:02:71:68:1e:10:aa:08:52:3f:93:6f:40: bb:5b:88:12:06:87:d6:a6:4f:09:09:9e:b4:00:8a: e6:75:9d:e4:3f:0c:e6:c2:89:0b:83:e3:26:17:68: 48:b3:aa:1f:c0:5c:86:a1:45:38:1e:03:d5:4b:8c: 65:80:6a:82:81:60:41:82:84:6f:82:67:64:e8:9b: 98:4d:15:61:e1:85:00:65:80:9b:48:8b:a3:17:35: 0b:31:db:5c:09:ca:64:4e:ee:f2:13:92:d4:97:c5: e8:c4:36:97:6c:81:c5:f6:83:08:22:b7:36:bb:dd: 67:e6:cb:6f:ff:43:07:a5:d3:d1:49:13:8b:4f:17: b7:f6:39:58:4c:fd:7d:49:b3:ae:ed:16:fd:c0:11: 51:a0:1f:cb:55:42:f3:24:64:fc:be:f6:59:19:e2: e7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:64:7D:93:37:EF:6C:DE:86:77:8E:3D:20:49:FE:3E:70:43:04:EC X509v3 Authority Key Identifier: keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:31:99:97:ac:c2:bf:87:f3:2e:43:58:25:c4:16:19:98:2a: e3:d9:62:0a:87:03:f1:5f:dd:a2:be:9c:d1:db:c2:a8:c3:f9: 31:e4:5f:e7:7c:cb:01:b5:ee:a7:28:13:e4:8c:b8:46:4e:5e: 86:92:f9:9d:1e:93:78:d3:ea:5b:0d:e3:ae:7b:29:88:5e:8f: 69:a5:b5:50:a8:c5:61:b4:d7:e1:96:15:33:93:d0:fc:9a:cf: da:2f:e4:cb:94:e7:2c:f6:20:b2:a8:e8:7a:ac:fd:9e:55:e0: 50:29:1e:e2:9a:54:a5:41:79:ad:32:2f:49:fc:f2:5f:c9:bb: 80:cf:b9:e0:4a:1c:ed:e1:8a:67:41:40:e4:62:f3:f4:9a:8f: ea:50:4c:0e:72:a7:72:66:38:8f:8d:eb:ed:15:7f:50:3a:1d: 0e:10:88:d4:80:87:fc:9f:2c:ac:a5:8f:74:49:0f:dc:c9:3c: 1c:68:11:25:ee:15:c3:39:fd:f0:21:35:10:57:30:75:8f:30: ec:aa:c9:00:4a:34:c9:ba:3c:70:f7:0f:8a:53:1a:45:23:c5: fe:15:d7:be:c4:b7:fc:56:36:9b:4c:bb:fe:84:45:f2:52:2a: 6c:c0:02:34:55:1b:14:8f:5a:fb:29:b9:0b:e0:04:13:af:7b: 2b:15:c0:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF3kaPwXx9+nyhqTO8w818yWYvsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF MDZBMjdFMjAeFw0yNTA1MDYwNTUyMTNaFw0yNTA1MDcwNjIzMTNaMDMxMTAvBgNV BAMTKDcxNjQ3RDkzMzdFRjZDREU4Njc3OEUzRDIwNDlGRTNFNzA0MzA0RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPjDP+aPfqCom0SBswZdyKlUMn tiG14jnVaP+mLgy0fYHWRLi9/6C5pyjxvVxi3WNGdInYkqNwht/lEaZZWIgafej1 WmISqllZ1CKAJbzqMgRkSgoO8phhIUCQ2gJxaB4QqghSP5NvQLtbiBIGh9amTwkJ nrQAiuZ1neQ/DObCiQuD4yYXaEizqh/AXIahRTgeA9VLjGWAaoKBYEGChG+CZ2To m5hNFWHhhQBlgJtIi6MXNQsx21wJymRO7vITktSXxejENpdsgcX2gwgitza73Wfm y2//Qwel09FJE4tPF7f2OVhM/X1Js67tFv3AEVGgH8tVQvMkZPy+9lkZ4ufpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcWR9kzfvbN6Gd449IEn+PnBDBOwwHwYDVR0j BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0 NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC82 NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqzGZl6zCv4fzLkNYJcQWGZgq49liCocD8V/dor6c0dvCqMP5MeRf53zLAbXu pygT5Iy4Rk5ehpL5nR6TeNPqWw3jrnspiF6PaaW1UKjFYbTX4ZYVM5PQ/JrP2i/k y5TnLPYgsqjoeqz9nlXgUCke4ppUpUF5rTIvSfzyX8m7gM+54Eoc7eGKZ0FA5GLz 9JqP6lBMDnKncmY4j43r7RV/UDodDhCI1ICH/J8srKWPdEkP3Mk8HGgRJe4Vwzn9 8CE1EFcwdY8w7KrJAEo0ybo8cPcPilMaRSPF/hXXvsS3/FY2m0y7/oRF8lIqbMAC NFUbFI9a+ym5C+AEE697KxXAkA== -----END CERTIFICATE-----Generated at Tue May 6 12:23:25 2025 by rpki-client