$ rpki-client -vvf rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft File: 71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft (raw, json) Hash identifier: X86NPhGDQe4I68YYt8I+LsmioUtLhYf8gIi04wcYALY= Subject key identifier: 4F:70:60:71:A6:E4:6D:5F:45:B1:94:0A:AA:C8:7D:E5:6C:37:A9:24 Authority key identifier: 71:AC:81:7F:1B:0F:FF:A1:74:AC:AE:38:AC:41:80:AB:ED:E4:55:70 Certificate issuer: /CN=71AC817F1B0FFFA174ACAE38AC4180ABEDE45570 Certificate serial: 3A6E29C5EDFF5C07AC174B4AFEC1112D10A242CC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft Manifest number: 11 Signing time: Sun 27 Apr 2025 09:07:36 +0000 Manifest this update: Sun 27 Apr 2025 09:02:36 +0000 Manifest next update: Mon 28 Apr 2025 09:26:36 +0000 Files and hashes: 1: 323830343a393063303a3a2f33322d3438203d3e203532383535.roa (hash: bFr144qNXiJnjjBqpVx2Hs1FVhxY1dhQgugWIFI/8tA=) 2: 71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl (hash: u2LICKrH92bxY9AS3/PXS6yElwl6/awjvdiShhQs+Fs=) 3: 3137372e3130352e38302e302f32302d3234203d3e203532383535.roa (hash: 9BoeCVg5vcg0/gLeGBtgYnvonPaqfp1IXhF41+TABUc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 09:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6e:29:c5:ed:ff:5c:07:ac:17:4b:4a:fe:c1:11:2d:10:a2:42:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71AC817F1B0FFFA174ACAE38AC4180ABEDE45570 Validity Not Before: Apr 27 09:02:36 2025 GMT Not After : Apr 28 09:26:36 2025 GMT Subject: CN=4F706071A6E46D5F45B1940AAAC87DE56C37A924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:df:7a:f9:f8:6e:3b:a9:b0:71:2c:53:e8: 34:30:3d:0e:b4:6d:68:51:89:41:2f:2d:22:fe:4e: 57:c6:5c:34:c2:f8:22:71:c5:4e:f1:35:45:9f:b1: 62:0e:f9:3f:44:a7:74:9c:48:4b:a8:b9:8f:26:f2: c1:9c:8a:45:96:58:5d:d0:35:63:fb:fd:f2:78:7f: 24:c2:18:25:80:1d:04:8c:59:b6:eb:81:58:f3:8f: 35:c2:e2:33:fd:78:08:5d:f2:79:a8:6e:ed:31:fe: b8:11:8b:d6:8c:ed:46:8d:56:25:83:8d:2e:b3:bb: f4:ee:4c:47:e9:86:a9:0c:94:e3:e5:c5:68:f6:7e: 09:90:bc:e9:b5:5a:c1:6c:ad:b3:04:f7:68:37:a2: 5c:f2:ee:49:3e:5a:88:5a:af:0c:c3:87:6f:e5:17: a2:56:8e:b0:30:84:5d:b4:9d:1f:10:01:a6:a5:65: 66:c2:92:5e:ec:87:ed:53:5c:b2:d6:8c:a2:cf:02: 50:ec:2e:7c:96:96:20:9c:dd:c5:a9:96:68:2d:f6: 1b:92:df:9f:9e:77:87:9f:fe:bf:24:b1:a9:29:49: 29:fa:eb:69:4d:8e:e4:ed:2b:bb:d9:37:47:d4:d9: 91:73:48:ab:98:a5:da:52:f5:9b:2c:af:24:0d:dc: 4c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:70:60:71:A6:E4:6D:5F:45:B1:94:0A:AA:C8:7D:E5:6C:37:A9:24 X509v3 Authority Key Identifier: keyid:71:AC:81:7F:1B:0F:FF:A1:74:AC:AE:38:AC:41:80:AB:ED:E4:55:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:55:cb:3e:26:a7:9e:8f:16:9b:2e:34:55:c3:f8:b0:52:67: 49:4f:f4:0b:05:bc:d1:42:c9:74:39:77:03:e9:c9:d5:bd:c5: 25:7b:c7:d1:c9:65:7b:67:b2:24:76:ca:76:8b:d9:bf:2a:13: e8:e9:db:4e:62:18:a4:f5:5f:ce:f8:b8:e0:1c:01:29:a0:36: d9:a2:57:2a:c8:24:de:be:5d:e3:ca:50:4b:e5:28:80:10:50: 4c:a1:61:07:00:9c:b2:3f:99:80:90:ae:3b:12:43:a3:9f:c0: 2c:b0:f5:86:ba:16:22:1f:a8:e8:27:18:0f:0a:84:53:e1:33: 4f:25:4b:e1:5b:9f:9d:1e:77:28:f1:14:69:f6:a7:39:73:3e: 9d:f9:37:63:49:d6:a2:13:18:ee:34:f6:bf:82:f2:55:89:8c: fd:f1:e2:9d:46:6a:14:36:d2:da:d8:5b:43:8f:b0:31:98:d4: 89:d2:df:f3:03:12:fd:77:48:e1:7b:d0:f9:9f:e0:c9:0b:13: 3b:41:c1:fd:1e:89:55:b3:17:06:eb:5d:53:fd:7d:9d:7c:b7: 36:77:17:dd:f5:33:83:85:f3:18:83:00:96:a6:36:c3:26:cf: 0f:9d:f1:b1:c8:f9:13:84:4d:c9:2a:61:67:ff:ae:44:ae:bb: 3b:68:6a:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOm4pxe3/XAesF0tK/sERLRCiQswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBQzgxN0YxQjBGRkZBMTc0QUNBRTM4QUM0MTgwQUJF REU0NTU3MDAeFw0yNTA0MjcwOTAyMzZaFw0yNTA0MjgwOTI2MzZaMDMxMTAvBgNV BAMTKDRGNzA2MDcxQTZFNDZENUY0NUIxOTQwQUFBQzg3REU1NkMzN0E5MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiYd96+fhuO6mwcSxT6DQwPQ60 bWhRiUEvLSL+TlfGXDTC+CJxxU7xNUWfsWIO+T9Ep3ScSEuouY8m8sGcikWWWF3Q NWP7/fJ4fyTCGCWAHQSMWbbrgVjzjzXC4jP9eAhd8nmobu0x/rgRi9aM7UaNViWD jS6zu/TuTEfphqkMlOPlxWj2fgmQvOm1WsFsrbME92g3olzy7kk+WoharwzDh2/l F6JWjrAwhF20nR8QAaalZWbCkl7sh+1TXLLWjKLPAlDsLnyWliCc3cWplmgt9huS 35+ed4ef/r8ksakpSSn662lNjuTtK7vZN0fU2ZFzSKuYpdpS9ZssryQN3ExrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUT3BgcabkbV9FsZQKqsh95Ww3qSQwHwYDVR0j BBgwFoAUcayBfxsP/6F0rK44rEGAq+3kVXAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZ5aVpoSmpMQkt6d1NwNENUU2k2V2FhaTRLUkREaXFFNEFlblZMY2VC VFAvMC83MUFDODE3RjFCMEZGRkExNzRBQ0FFMzhBQzQxODBBQkVERTQ1NTcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxQUM4MTdGMUIwRkZGQTE3 NEFDQUUzOEFDNDE4MEFCRURFNDU1NzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZ5aVpoSmpMQkt6d1NwNENUU2k2V2FhaTRLUkREaXFFNEFlblZMY2VCVFAvMC83 MUFDODE3RjFCMEZGRkExNzRBQ0FFMzhBQzQxODBBQkVERTQ1NTcwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh1XLPianno8Wmy40VcP4sFJnSU/0CwW80ULJdDl3A+nJ1b3FJXvH0clle2ey JHbKdovZvyoT6OnbTmIYpPVfzvi44BwBKaA22aJXKsgk3r5d48pQS+UogBBQTKFh BwCcsj+ZgJCuOxJDo5/ALLD1hroWIh+o6CcYDwqEU+EzTyVL4VufnR53KPEUafan OXM+nfk3Y0nWohMY7jT2v4LyVYmM/fHinUZqFDbS2thbQ4+wMZjUidLf8wMS/XdI 4XvQ+Z/gyQsTO0HB/R6JVbMXButdU/19nXy3NncX3fUzg4XzGIMAlqY2wybPD53x scj5E4RNySphZ/+uRK67O2hqPQ== -----END CERTIFICATE-----Generated at Sun Apr 27 20:21:05 2025 by rpki-client