$ rpki-client -vvf rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft File: 53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft (raw, json) Hash identifier: jfBLhek2iz8xp8gME914gdESyePSqAd3YQHFjJHJvvM= Subject key identifier: 9B:99:50:61:71:0D:8A:4E:AA:FD:B7:9F:4F:A2:EE:65:D2:AC:7A:1A Authority key identifier: 53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA Certificate issuer: /CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA Certificate serial: 76EAC2E1DCDEC5C971AC049B73A1DBBB2EBF8618 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft Manifest number: 01E8 Signing time: Tue 29 Apr 2025 03:28:07 +0000 Manifest this update: Tue 29 Apr 2025 03:23:07 +0000 Manifest next update: Wed 30 Apr 2025 06:00:07 +0000 Files and hashes: 1: 53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl (hash: Dr4SUdLd6ZWLn98zXefney5Ng5Lf2Qdow0w9FM/f6WA=) 2: 3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa (hash: jSsiPpdfMJb1jXwIKkDoLy57dvL+Hy33DK8ZFCdBE1w=) 3: 323830343a333535303a3a2f33322d3336203d3e20323636323830.roa (hash: +nL7ybLpICw7PZ+2W5pi76/oLneSgE73RRDZtIzKVsE=) 4: 323830343a333535303a653030303a3a2f33362d3438203d3e20323636323830.roa (hash: //hWMDP3j37ixCtTNQwyZlAnS8v4oi3ZFATjNGsEs2w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 06:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ea:c2:e1:dc:de:c5:c9:71:ac:04:9b:73:a1:db:bb:2e:bf:86:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA Validity Not Before: Apr 29 03:23:07 2025 GMT Not After : Apr 30 06:00:07 2025 GMT Subject: CN=9B995061710D8A4EAAFDB79F4FA2EE65D2AC7A1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:90:ec:ee:15:79:f9:05:e6:e8:65:7a:a7: 9e:a4:00:50:4f:b9:ac:b6:c1:28:a6:ae:80:da:6b: 44:76:00:f3:b4:cb:5a:69:e9:0a:94:e7:38:fd:fb: 5b:ee:89:81:eb:3c:38:e4:55:87:8f:b6:e8:d1:28: 41:e9:6f:ed:dd:5d:de:3e:c9:3e:ed:48:cd:0e:06: 84:9f:9f:70:47:39:49:2b:e8:71:ee:db:84:ee:e9: 43:61:86:25:fa:c4:c1:57:4c:f4:e8:91:65:5e:bb: 7a:9c:5d:85:87:6d:b4:67:d5:8b:0e:2a:76:f4:a5: dc:94:f3:cd:7c:6a:f4:c4:ed:3f:25:88:a2:af:e4: cf:77:f7:90:cb:2c:5e:2a:22:52:58:dc:6b:2d:f0: af:ca:b4:57:d6:3c:0d:57:cf:0b:a0:97:fc:fa:47: 69:d4:a9:fb:ab:8e:c7:77:4b:9e:c3:29:d6:0a:c3: b8:b4:01:3e:53:aa:de:b8:c9:01:28:e1:67:cb:50: 53:06:3d:78:a7:5a:4d:85:92:bb:db:94:60:5a:c5: 20:cb:0b:7e:70:12:eb:d9:83:aa:6f:64:be:48:bb: 83:24:e7:0c:c8:d1:65:61:f1:26:e6:f2:ca:ba:78: 15:d1:59:9e:3b:94:f7:40:8b:93:e6:70:6f:6f:b7: 96:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:99:50:61:71:0D:8A:4E:AA:FD:B7:9F:4F:A2:EE:65:D2:AC:7A:1A X509v3 Authority Key Identifier: keyid:53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:30:3d:0b:68:13:8b:78:75:18:fb:20:58:8f:3c:dc:51:41: ed:dc:00:2e:8e:2e:67:f4:78:48:ec:3c:10:1b:ef:ff:b8:3c: 26:bc:57:c6:1a:a0:c5:88:90:d1:b0:fd:56:c0:a0:3d:af:5b: 4d:2c:e3:80:42:31:2a:e5:e3:81:13:6f:a2:d5:2e:57:a8:e3: 23:95:ac:4a:9e:c4:cd:7d:df:79:41:bb:ce:b1:77:fd:86:86: 07:4f:b5:a7:22:f1:cf:20:6e:f4:40:88:81:2c:da:c4:95:ce: 66:7b:cc:de:20:85:40:f3:13:cb:84:1a:39:1f:b8:7e:9e:e3: 28:28:62:8d:b4:40:05:06:6a:97:b5:bb:8c:89:8d:71:03:5f: 4a:ba:c7:86:d1:51:35:73:8e:3e:b8:91:26:2d:4f:a7:e3:ca: 39:68:0f:ff:f2:45:77:b2:ce:d2:98:ec:82:2d:0c:0e:7c:be: 35:7a:38:49:3f:92:ff:64:44:f2:45:dd:af:a0:ad:d3:de:f9: fd:d5:45:d9:68:3c:b9:d9:46:36:65:3a:49:85:cc:06:2b:8c: 8a:64:6f:11:99:28:9f:1e:d4:04:e1:34:6e:ea:5e:da:7f:17: 49:ab:40:85:f3:8d:76:a6:34:0f:76:f6:ce:11:83:7c:50:65: a4:6a:31:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdurC4dzexclxrASbc6Hbuy6/hhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNFQ0Q0RDFEMjkzNjAzQ0VDNDNDMEZCOENENzhERjlD RjI0MTFBQTAeFw0yNTA0MjkwMzIzMDdaFw0yNTA0MzAwNjAwMDdaMDMxMTAvBgNV BAMTKDlCOTk1MDYxNzEwRDhBNEVBQUZEQjc5RjRGQTJFRTY1RDJBQzdBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YZDs7hV5+QXm6GV6p56kAFBP uay2wSimroDaa0R2APO0y1pp6QqU5zj9+1vuiYHrPDjkVYePtujRKEHpb+3dXd4+ yT7tSM0OBoSfn3BHOUkr6HHu24Tu6UNhhiX6xMFXTPTokWVeu3qcXYWHbbRn1YsO Knb0pdyU8818avTE7T8liKKv5M9395DLLF4qIlJY3Gst8K/KtFfWPA1Xzwugl/z6 R2nUqfurjsd3S57DKdYKw7i0AT5Tqt64yQEo4WfLUFMGPXinWk2FkrvblGBaxSDL C35wEuvZg6pvZL5Iu4Mk5wzI0WVh8Sbm8sq6eBXRWZ47lPdAi5PmcG9vt5bPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUm5lQYXENik6q/befT6LuZdKsehowHwYDVR0j BBgwFoAUU+zU0dKTYDzsQ8D7jNeN+c8kEaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVZCSDZHWWdLRlM3a0RoRUhGN2FZc29GV3VQTmpqNG1SR0FSOHBEa2l3 NDIvMC81M0VDRDREMUQyOTM2MDNDRUM0M0MwRkI4Q0Q3OERGOUNGMjQxMUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzRUNENEQxRDI5MzYwM0NF QzQzQzBGQjhDRDc4REY5Q0YyNDExQUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVZCSDZHWWdLRlM3a0RoRUhGN2FZc29GV3VQTmpqNG1SR0FSOHBEa2l3NDIvMC81 M0VDRDREMUQyOTM2MDNDRUM0M0MwRkI4Q0Q3OERGOUNGMjQxMUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOjA9C2gTi3h1GPsgWI883FFB7dwALo4uZ/R4SOw8EBvv/7g8JrxXxhqgxYiQ 0bD9VsCgPa9bTSzjgEIxKuXjgRNvotUuV6jjI5WsSp7EzX3feUG7zrF3/YaGB0+1 pyLxzyBu9ECIgSzaxJXOZnvM3iCFQPMTy4QaOR+4fp7jKChijbRABQZql7W7jImN cQNfSrrHhtFRNXOOPriRJi1Pp+PKOWgP//JFd7LO0pjsgi0MDny+NXo4ST+S/2RE 8kXdr6Ct0975/dVF2Wg8udlGNmU6SYXMBiuMimRvEZkonx7UBOE0bupe2n8XSatA hfONdqY0D3b2zhGDfFBlpGoxFw== -----END CERTIFICATE-----Generated at Tue Apr 29 17:16:26 2025 by rpki-client