$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft File: 89F33609E2B118C8ED9A105548D2D01FD6E38729.mft (raw, json) Hash identifier: VBiRN5JzBPcQ/X47IjAFQcyid3AQKIpqH/3isGgslgo= Subject key identifier: 38:FC:1E:D2:B3:0A:7E:42:21:44:1A:D2:E3:F1:A1:80:16:D7:00:16 Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 Certificate issuer: /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Certificate serial: 7E4AC0ECF22F5A105E5417184941E8639D468702 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft Manifest number: 0216 Signing time: Fri 09 May 2025 09:17:28 +0000 Manifest this update: Fri 09 May 2025 09:12:28 +0000 Manifest next update: Sat 10 May 2025 11:30:28 +0000 Files and hashes: 1: 3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa (hash: bMO8E7JDP414YIw6qvyG05VpeLGja7y87JGV9snRtok=) 2: 89F33609E2B118C8ED9A105548D2D01FD6E38729.crl (hash: z1GvfgB3PaVle8WSUICjortuBvBuOaMVQTevb4axycI=) 3: 3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (hash: 91gQ1OFtC7i3YwbFOdgAOt94iN2xUARUXKGh62+Ssos=) 4: 323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (hash: yCRnKe7Cfo4f5weE5YMpi/ZO3/1Psrg+aJlLbswl12Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 May 2025 11:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4a:c0:ec:f2:2f:5a:10:5e:54:17:18:49:41:e8:63:9d:46:87:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Validity Not Before: May 9 09:12:28 2025 GMT Not After : May 10 11:30:28 2025 GMT Subject: CN=38FC1ED2B30A7E4221441AD2E3F1A18016D70016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1c:29:0a:11:c7:9d:3f:19:82:b6:ca:46:1f: 36:69:44:69:9a:fb:b1:64:e3:b0:c9:a9:fa:48:91: 89:d0:f0:f2:1f:e6:03:0c:d3:c1:21:62:4d:c0:78: 6d:a6:01:8d:31:75:67:32:4c:54:2c:8d:1e:d7:38: 2c:f8:94:e5:d4:20:0e:6a:11:9f:93:c8:90:18:a5: 93:c1:a2:6f:70:30:e7:13:30:e3:85:1d:64:99:df: 5c:5a:1f:7b:10:8d:71:00:25:50:46:28:ff:f8:b5: cd:1e:12:3b:1e:bf:e5:af:e2:9d:f8:6a:dc:21:1a: d9:b3:4f:66:ca:b9:fd:a2:50:86:cf:56:67:6b:39: 6d:2a:1a:93:38:e3:64:0b:69:a5:3b:bf:51:45:1f: 02:d2:f9:11:c0:b3:50:9b:86:70:45:bf:de:b5:89: 8d:3a:60:c9:ab:80:12:d4:a0:a8:6c:ac:97:c2:02: 97:d7:19:80:10:c8:47:b8:e9:11:fc:15:c3:72:59: 87:22:28:62:1e:32:ac:ea:81:c0:2f:ac:03:dd:ae: b0:6f:d0:f6:61:df:75:2d:61:30:01:68:37:c6:94: 41:bc:c6:4f:33:55:1d:fa:05:dd:9a:20:99:02:20: 75:0e:0d:ab:3d:55:0b:6c:51:5f:a7:8b:a6:a0:6b: a2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FC:1E:D2:B3:0A:7E:42:21:44:1A:D2:E3:F1:A1:80:16:D7:00:16 X509v3 Authority Key Identifier: keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:10:2b:a7:ec:20:7c:c6:ce:94:ea:1f:eb:7f:a5:7d:f2:f8: b3:8c:b7:45:5f:95:2e:a6:df:52:64:f1:20:85:ff:af:bf:d8: d5:67:e0:b1:de:37:7b:77:00:57:9a:f5:e1:3e:26:92:91:60: 22:f4:88:51:0e:27:7c:7f:08:5c:0e:9b:1b:34:dc:7c:1e:20: 0f:31:ed:b1:2b:ce:06:ac:77:7f:03:d0:91:d0:f9:36:6a:5a: 4a:dc:cf:ba:fb:25:a4:8f:c0:86:9b:b5:a0:05:bd:c7:1a:31: 3c:d7:70:01:fe:77:e2:a2:ca:88:a3:23:b6:a3:f2:1c:5c:4f: 82:d7:e5:f4:6d:e4:a5:22:6b:27:b7:9a:06:1d:d8:1a:6a:8d: 88:3d:2e:3e:f3:d4:ce:8c:26:94:1b:1a:7a:13:e6:bf:10:1a: fa:97:de:19:b0:eb:23:f6:d7:bf:90:b8:08:84:18:1e:f4:28: 58:87:e2:48:25:6f:c7:94:a4:e6:ad:9f:98:83:bb:58:23:a6: e9:85:e2:7a:7d:b8:ba:37:62:f0:60:ab:8b:21:a2:b7:fa:8c: c2:10:31:25:b7:2b:2c:cb:05:71:99:d1:b9:d4:96:ae:63:ca: 93:61:4f:b4:89:04:7d:a8:a2:d8:4b:94:ac:da:9d:24:2e:5f: ed:f5:01:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfkrA7PIvWhBeVBcYSUHoY51GhwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlGMzM2MDlFMkIxMThDOEVEOUExMDU1NDhEMkQwMUZE NkUzODcyOTAeFw0yNTA1MDkwOTEyMjhaFw0yNTA1MTAxMTMwMjhaMDMxMTAvBgNV BAMTKDM4RkMxRUQyQjMwQTdFNDIyMTQ0MUFEMkUzRjFBMTgwMTZENzAwMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvHCkKEcedPxmCtspGHzZpRGma +7Fk47DJqfpIkYnQ8PIf5gMM08EhYk3AeG2mAY0xdWcyTFQsjR7XOCz4lOXUIA5q EZ+TyJAYpZPBom9wMOcTMOOFHWSZ31xaH3sQjXEAJVBGKP/4tc0eEjsev+Wv4p34 atwhGtmzT2bKuf2iUIbPVmdrOW0qGpM442QLaaU7v1FFHwLS+RHAs1CbhnBFv961 iY06YMmrgBLUoKhsrJfCApfXGYAQyEe46RH8FcNyWYciKGIeMqzqgcAvrAPdrrBv 0PZh33UtYTABaDfGlEG8xk8zVR36Bd2aIJkCIHUODas9VQtsUV+ni6aga6KXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOPwe0rMKfkIhRBrS4/GhgBbXABYwHwYDVR0j BBgwFoAUifM2CeKxGMjtmhBVSNLQH9bjhykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4 ekUvMS84OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RjMzNjA5RTJCMTE4QzhF RDlBMTA1NTQ4RDJEMDFGRDZFMzg3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4ekUvMS84 OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfBArp+wgfMbOlOof63+lffL4s4y3RV+VLqbfUmTxIIX/r7/Y1Wfgsd43e3cA V5r14T4mkpFgIvSIUQ4nfH8IXA6bGzTcfB4gDzHtsSvOBqx3fwPQkdD5NmpaStzP uvslpI/Ahpu1oAW9xxoxPNdwAf534qLKiKMjtqPyHFxPgtfl9G3kpSJrJ7eaBh3Y GmqNiD0uPvPUzowmlBsaehPmvxAa+pfeGbDrI/bXv5C4CIQYHvQoWIfiSCVvx5Sk 5q2fmIO7WCOm6YXien24ujdi8GCriyGit/qMwhAxJbcrLMsFcZnRudSWrmPKk2FP tIkEfaii2EuUrNqdJC5f7fUBmg== -----END CERTIFICATE-----Generated at Sat May 10 04:55:39 2025 by rpki-client