$ rpki-client -vvf rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft File: C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft (raw, json) Hash identifier: Ljc2ntbPRFRcO694LjWXzgywpndScim0qxRtKP6fUZw= Subject key identifier: D1:E8:7A:30:5E:09:53:A0:38:1B:5D:98:C7:1C:87:B6:23:75:99:2D Authority key identifier: C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B Certificate issuer: /CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B Certificate serial: 045DF7DBFD8C3B77A3C08CDFFD217EE73F100DCF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft Manifest number: 0189 Signing time: Sun 04 May 2025 19:58:29 +0000 Manifest this update: Sun 04 May 2025 19:53:29 +0000 Manifest next update: Mon 05 May 2025 22:12:29 +0000 Files and hashes: 1: 323830343a373739383a3a2f33322d313238203d3e20323731313838.roa (hash: KvltDHF9AkJ/6ejejjlbXbciRJna/WAhM/t6Aa8/oQ4=) 2: C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl (hash: HDx0ptn34WvpmZOfH7u8ARnm9EZBGhv0KuEEv1a9C0c=) 3: 3230302e362e34382e302f32342d3332203d3e20323731313838.roa (hash: QNEgcojBuDoWPJQCnht4JQzuDQvlSfdDyPK+d3aNr1w=) 4: 323830343a373739383a3a2f33342d313238203d3e20323731313838.roa (hash: BTI/9Nz4f6+369vP9A0TfZCcbQebbG9FTXRD3bjGbag=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 05 May 2025 22:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5d:f7:db:fd:8c:3b:77:a3:c0:8c:df:fd:21:7e:e7:3f:10:0d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B Validity Not Before: May 4 19:53:29 2025 GMT Not After : May 5 22:12:29 2025 GMT Subject: CN=D1E87A305E0953A0381B5D98C71C87B62375992D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:e3:ed:0b:f1:79:3e:f4:10:ce:f1:37:52: b8:1b:ca:db:ee:76:ba:1c:e5:2d:f7:5d:4e:de:56: d2:cd:73:0d:ae:9f:bd:a3:50:99:24:f3:b1:56:53: b3:60:2f:7e:2a:ad:91:48:b0:c0:df:5b:2e:69:aa: 4e:66:a3:5a:84:6b:dd:21:f8:d3:ce:26:48:f9:6e: 2e:11:93:5d:62:46:41:60:bb:31:01:c1:a5:12:c8: 40:30:17:9d:8b:db:f1:2b:04:3c:11:0a:3b:39:27: 0b:22:a1:52:fb:b3:cd:28:ab:36:57:cb:f5:15:09: 8e:5c:e2:68:c5:e3:b8:9e:41:53:ba:96:c3:7f:c8: 57:01:1f:5d:ce:79:b9:e0:9b:a5:01:d1:9f:c5:73: 6a:ac:0b:a7:4f:c0:5a:4e:be:1d:13:e8:d0:1b:c0: db:0f:4c:53:24:bf:6e:0c:30:e6:72:0e:25:c4:ed: e3:86:74:5f:15:67:25:5b:89:0b:f4:42:ad:cb:c0: 7b:53:9c:0d:6a:58:b3:0c:80:58:3c:ae:6d:94:7d: df:c9:51:fd:28:78:56:6c:3d:42:96:3b:cc:03:52: 43:42:22:dd:59:52:77:ac:c2:05:3f:3d:9c:2e:5b: db:ba:70:11:89:9f:b4:91:96:9a:cb:d0:0a:db:13: e5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E8:7A:30:5E:09:53:A0:38:1B:5D:98:C7:1C:87:B6:23:75:99:2D X509v3 Authority Key Identifier: keyid:C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:27:10:0b:ad:2e:cd:6e:39:e2:a6:2c:f0:64:d8:1a:e8:1d: 48:47:b0:67:b7:34:3d:e2:07:06:5d:74:4a:f4:6b:22:e8:3a: 45:30:40:07:09:85:d9:c6:e3:ae:1a:16:8c:31:d8:3e:c6:bf: 5b:2d:00:97:b5:2b:8f:1f:89:90:33:84:c0:fa:8f:e2:b4:bf: ca:d4:78:28:34:22:02:2d:05:18:13:89:f5:9e:8b:17:b5:0f: 24:0e:84:06:e6:0a:90:b1:63:ef:3d:1e:6e:56:23:bf:76:00: 9f:a4:b3:ef:c1:da:71:68:25:63:7f:02:08:a8:07:4b:85:70: ab:97:a5:a7:52:77:6c:cf:74:10:26:cc:89:7d:07:8c:5c:db: f1:5b:dd:b5:3c:e1:36:d6:99:56:10:5e:9c:ac:40:6a:ec:fb: a4:27:c8:93:2b:c3:33:1e:7e:cc:5b:52:7c:95:38:49:70:c1: 93:5b:f5:b1:43:71:14:c0:cc:fa:c1:4c:9f:b5:71:9f:0d:30: d0:79:03:17:b1:0d:98:01:d5:37:ae:6f:8d:5f:66:ed:39:c5: ec:f5:49:5f:f3:19:a9:89:73:88:54:94:f5:35:90:d3:8f:f7: bd:1b:a0:73:35:33:98:9d:71:f6:85:9a:e5:15:58:24:f0:67: 3e:cc:19:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBF332/2MO3ejwIzf/SF+5z8QDc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlEQjhFQTExRjZBNUE0ODVBRUMyOTU1NjE0MzgxNURC MjUwN0EzQjAeFw0yNTA1MDQxOTUzMjlaFw0yNTA1MDUyMjEyMjlaMDMxMTAvBgNV BAMTKEQxRTg3QTMwNUUwOTUzQTAzODFCNUQ5OEM3MUM4N0I2MjM3NTk5MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7cOPtC/F5PvQQzvE3Urgbytvu droc5S33XU7eVtLNcw2un72jUJkk87FWU7NgL34qrZFIsMDfWy5pqk5mo1qEa90h +NPOJkj5bi4Rk11iRkFguzEBwaUSyEAwF52L2/ErBDwRCjs5JwsioVL7s80oqzZX y/UVCY5c4mjF47ieQVO6lsN/yFcBH13Oebngm6UB0Z/Fc2qsC6dPwFpOvh0T6NAb wNsPTFMkv24MMOZyDiXE7eOGdF8VZyVbiQv0Qq3LwHtTnA1qWLMMgFg8rm2Ufd/J Uf0oeFZsPUKWO8wDUkNCIt1ZUneswgU/PZwuW9u6cBGJn7SRlprL0ArbE+WFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0eh6MF4JU6A4G12YxxyHtiN1mS0wHwYDVR0j BBgwFoAUyduOoR9qWkha7ClVYUOBXbJQejswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVRXeFpWUzVMSnpMdlVYdmdrM2RvUjlhRjZoMW9nWEFCMkM1bWtlZ0p2 SzQvMC9DOURCOEVBMTFGNkE1QTQ4NUFFQzI5NTU2MTQzODE1REIyNTA3QTNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5REI4RUExMUY2QTVBNDg1 QUVDMjk1NTYxNDM4MTVEQjI1MDdBM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVRXeFpWUzVMSnpMdlVYdmdrM2RvUjlhRjZoMW9nWEFCMkM1bWtlZ0p2SzQvMC9D OURCOEVBMTFGNkE1QTQ4NUFFQzI5NTU2MTQzODE1REIyNTA3QTNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgycQC60uzW454qYs8GTYGugdSEewZ7c0PeIHBl10SvRrIug6RTBABwmF2cbj rhoWjDHYPsa/Wy0Al7Urjx+JkDOEwPqP4rS/ytR4KDQiAi0FGBOJ9Z6LF7UPJA6E BuYKkLFj7z0eblYjv3YAn6Sz78HacWglY38CCKgHS4Vwq5elp1J3bM90ECbMiX0H jFzb8VvdtTzhNtaZVhBenKxAauz7pCfIkyvDMx5+zFtSfJU4SXDBk1v1sUNxFMDM +sFMn7Vxnw0w0HkDF7ENmAHVN65vjV9m7TnF7PVJX/MZqYlziFSU9TWQ04/3vRug czUzmJ1x9oWa5RVYJPBnPswZig== -----END CERTIFICATE-----Generated at Mon May 5 15:35:08 2025 by rpki-client