$ rpki-client -vvf rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft File: 71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft (raw, json) Hash identifier: HMxiIjb3lNtku2RG5fAChwW+ZMPuBVgMtl2xvmJOZfA= Subject key identifier: B5:15:4D:01:C3:9E:4D:F2:16:76:BF:B0:8F:17:2A:57:BB:44:25:5B Authority key identifier: 71:AC:81:7F:1B:0F:FF:A1:74:AC:AE:38:AC:41:80:AB:ED:E4:55:70 Certificate issuer: /CN=71AC817F1B0FFFA174ACAE38AC4180ABEDE45570 Certificate serial: 5448DEC9CA48D4577337528BD0D4F7A57EE462AE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft Manifest number: 54 Signing time: Mon 16 Jun 2025 16:52:21 +0000 Manifest this update: Mon 16 Jun 2025 16:47:21 +0000 Manifest next update: Tue 17 Jun 2025 19:25:21 +0000 Files and hashes: 1: 3137372e3130352e38302e302f32302d3234203d3e203532383535.roa (hash: 9BoeCVg5vcg0/gLeGBtgYnvonPaqfp1IXhF41+TABUc=) 2: 323830343a393063303a3a2f33322d3438203d3e203532383535.roa (hash: bFr144qNXiJnjjBqpVx2Hs1FVhxY1dhQgugWIFI/8tA=) 3: 71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl (hash: JnR9o4+RnTqYEWVFw2Wq222Gr0iKvKjiOziD3fxLCzA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 19:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:48:de:c9:ca:48:d4:57:73:37:52:8b:d0:d4:f7:a5:7e:e4:62:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71AC817F1B0FFFA174ACAE38AC4180ABEDE45570 Validity Not Before: Jun 16 16:47:21 2025 GMT Not After : Jun 17 19:25:21 2025 GMT Subject: CN=B5154D01C39E4DF21676BFB08F172A57BB44255B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:5a:74:5f:63:97:b9:da:34:00:cf:52:31: 4f:91:e4:c9:09:cf:31:7e:3e:78:78:fa:fa:cc:a8: e0:cb:ce:b8:4e:16:f7:d4:9f:4c:7e:82:7a:d5:b4: 33:98:ad:b2:ad:8f:c5:50:5a:a8:3f:f4:9e:00:23: c9:95:35:a6:3e:3f:10:21:70:1c:7a:c9:fb:25:f8: f1:1e:22:36:b1:ac:35:78:2e:e7:33:48:a3:8d:aa: 88:38:9c:be:8d:99:8e:d0:02:bb:e6:5d:d8:78:36: 1e:4d:51:97:92:2f:b6:ee:5c:9a:af:4c:16:99:18: 0a:89:b0:42:34:05:90:90:16:5a:2f:4d:f4:13:3d: c7:50:41:ff:17:ee:a3:46:47:52:f0:da:f9:79:f4: a5:31:ee:b5:d3:1b:6d:ff:43:ff:e9:57:cb:8f:92: a1:60:1f:b6:25:04:92:13:5b:91:99:61:d3:41:cc: 35:d3:0f:b3:33:44:df:c7:45:e2:a0:8d:17:23:66: 11:8f:fa:0f:99:b5:8e:ed:f3:5b:dd:81:ae:3c:fd: c3:56:6a:1e:4c:ed:3e:91:b7:c4:4c:2a:20:1f:49: 66:37:aa:0f:6f:e6:0a:b9:18:67:b3:d7:aa:02:71: 27:51:da:92:72:bd:0b:14:67:e9:09:54:48:5c:8e: 89:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:15:4D:01:C3:9E:4D:F2:16:76:BF:B0:8F:17:2A:57:BB:44:25:5B X509v3 Authority Key Identifier: keyid:71:AC:81:7F:1B:0F:FF:A1:74:AC:AE:38:AC:41:80:AB:ED:E4:55:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:28:5f:ac:49:2f:4b:35:3d:1d:17:00:3f:37:b0:4c:f1:1d: 16:6b:68:e5:a1:45:ad:b6:b2:72:34:5f:91:52:87:10:63:c3: f8:70:3a:6c:ac:bf:e0:85:e8:54:a7:41:e0:ad:b1:57:07:8b: 43:de:b5:b6:5e:5d:e6:5c:ec:05:5d:5a:bc:e4:88:c0:d5:e0: a9:0e:2a:bc:27:38:7f:c6:f7:72:16:2d:7c:87:88:24:93:6e: 95:84:0f:fb:72:a9:de:35:1b:de:2e:07:01:50:80:c1:94:6b: b7:85:f8:90:94:de:16:e1:d9:08:d4:ba:d8:8f:87:74:35:2c: ef:45:08:40:91:54:3e:0f:8b:8a:7f:30:b3:7f:12:66:c8:11: d2:24:74:b1:c0:04:d2:c6:fd:47:77:f5:29:57:d3:28:6e:6a: 87:53:cb:50:12:bb:e9:ab:7a:71:3d:b6:ec:3d:b0:77:6b:2f: df:d7:b2:c9:81:f3:50:c9:95:f3:ec:ed:d3:d8:ec:77:2f:85: 19:a7:9b:3a:19:ad:21:b3:5d:8c:6d:6b:0e:39:f8:2f:03:15: 92:00:88:c9:3c:e5:55:6c:5f:0c:ba:6b:99:b0:52:7d:1e:4b: 69:24:67:98:5d:32:39:99:42:2a:1c:16:4b:7a:4c:a7:db:d0: f9:50:ea:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVEjeycpI1FdzN1KL0NT3pX7kYq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBQzgxN0YxQjBGRkZBMTc0QUNBRTM4QUM0MTgwQUJF REU0NTU3MDAeFw0yNTA2MTYxNjQ3MjFaFw0yNTA2MTcxOTI1MjFaMDMxMTAvBgNV BAMTKEI1MTU0RDAxQzM5RTRERjIxNjc2QkZCMDhGMTcyQTU3QkI0NDI1NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5Fp0X2OXudo0AM9SMU+R5MkJ zzF+Pnh4+vrMqODLzrhOFvfUn0x+gnrVtDOYrbKtj8VQWqg/9J4AI8mVNaY+PxAh cBx6yfsl+PEeIjaxrDV4LuczSKONqog4nL6NmY7QArvmXdh4Nh5NUZeSL7buXJqv TBaZGAqJsEI0BZCQFlovTfQTPcdQQf8X7qNGR1Lw2vl59KUx7rXTG23/Q//pV8uP kqFgH7YlBJITW5GZYdNBzDXTD7MzRN/HReKgjRcjZhGP+g+ZtY7t81vdga48/cNW ah5M7T6Rt8RMKiAfSWY3qg9v5gq5GGez16oCcSdR2pJyvQsUZ+kJVEhcjol5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtRVNAcOeTfIWdr+wjxcqV7tEJVswHwYDVR0j BBgwFoAUcayBfxsP/6F0rK44rEGAq+3kVXAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZ5aVpoSmpMQkt6d1NwNENUU2k2V2FhaTRLUkREaXFFNEFlblZMY2VC VFAvMC83MUFDODE3RjFCMEZGRkExNzRBQ0FFMzhBQzQxODBBQkVERTQ1NTcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxQUM4MTdGMUIwRkZGQTE3 NEFDQUUzOEFDNDE4MEFCRURFNDU1NzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZ5aVpoSmpMQkt6d1NwNENUU2k2V2FhaTRLUkREaXFFNEFlblZMY2VCVFAvMC83 MUFDODE3RjFCMEZGRkExNzRBQ0FFMzhBQzQxODBBQkVERTQ1NTcwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABShfrEkvSzU9HRcAPzewTPEdFmto5aFFrbaycjRfkVKHEGPD+HA6bKy/4IXo VKdB4K2xVweLQ961tl5d5lzsBV1avOSIwNXgqQ4qvCc4f8b3chYtfIeIJJNulYQP +3Kp3jUb3i4HAVCAwZRrt4X4kJTeFuHZCNS62I+HdDUs70UIQJFUPg+Lin8ws38S ZsgR0iR0scAE0sb9R3f1KVfTKG5qh1PLUBK76at6cT227D2wd2sv39eyyYHzUMmV 8+zt09jsdy+FGaebOhmtIbNdjG1rDjn4LwMVkgCIyTzlVWxfDLprmbBSfR5LaSRn mF0yOZlCKhwWS3pMp9vQ+VDqKw== -----END CERTIFICATE-----Generated at Mon Jun 16 21:43:35 2025 by rpki-client