$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft File: 573658E4241F21CAB22CB9FC150BF6FB898271EA.mft (raw, json) Hash identifier: xU1nG8OQNaWowQDGZwGHjB4uClx1iGtnX+4N6L0Cdxw= Subject key identifier: 4E:40:C6:E2:EF:29:17:A0:56:35:72:D2:21:F1:13:6D:53:C6:84:A2 Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA Certificate issuer: /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA Certificate serial: 621A284C67AD71DCF74722D8AC723CE272B9D624 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer Subject info access: rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft Manifest number: BA Signing time: Wed 30 Apr 2025 04:39:44 +0000 Manifest this update: Wed 30 Apr 2025 04:34:44 +0000 Manifest next update: Thu 01 May 2025 06:27:44 +0000 Files and hashes: 1: 573658E4241F21CAB22CB9FC150BF6FB898271EA.crl (hash: hwMf/2pPrh1mgRZn9FXUrs/i06sHGDyrk+zp7H9uV1Y=) 2: 3133312e302e3139322e302f32322d3232203d3e203631373139.roa (hash: 5dZsfjdOTFkdmFH4OyyvTTGdmlo5vCRzMFWBh4lWRXE=) 3: 3133312e302e3139322e302f32332d3233203d3e203631373139.roa (hash: w97n07X0zqExDN8gzf3cZjKH+F//QEYk2SLdLpiVsaw=) 4: 3133312e302e3139342e302f32332d3233203d3e203631373139.roa (hash: P0RfTJJBKMCwHlQNY6B4YysuDWbqgRP+uMy8I3GdAMI=) 5: 323830343a316235303a3a2f33322d3332203d3e203631373139.roa (hash: fU1Q8QvvtL0h2YV8u9C9o9TI9d4T2xpRqPo2OnTtEVU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 May 2025 05:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:1a:28:4c:67:ad:71:dc:f7:47:22:d8:ac:72:3c:e2:72:b9:d6:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA Validity Not Before: Apr 30 04:34:44 2025 GMT Not After : May 1 06:27:44 2025 GMT Subject: CN=4E40C6E2EF2917A0563572D221F1136D53C684A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:41:0b:90:cc:06:14:29:8c:6b:36:73:ac:d6: ee:17:8d:c7:c7:e1:f6:26:e8:2f:f3:51:4a:cf:e5: dd:48:c1:c2:ca:3b:48:43:23:31:c0:de:b8:d6:11: 80:5a:11:0e:53:c4:ea:44:1a:e6:1a:e3:1f:d5:6f: fd:fb:46:8d:fe:31:e0:5d:84:fc:72:81:db:4b:34: ec:ab:ca:d6:a0:7f:21:6f:aa:c8:01:74:07:6f:ab: 8d:f0:b6:59:7c:df:a5:ab:d3:83:95:f1:a4:bf:77: e9:f9:b0:b1:85:04:ff:7e:fb:6d:69:40:96:92:c1: b8:da:ce:f9:d2:6d:61:47:e3:ae:0c:6e:00:69:0b: 0b:d9:33:e3:ab:0d:1f:94:1c:64:47:63:cf:c5:92: 23:06:1b:7e:0b:48:96:15:6e:d5:da:d1:5a:30:4d: 4d:40:b7:31:82:16:dd:5c:99:68:84:32:37:21:e4: 5e:91:48:2d:a0:b9:6d:1f:c4:49:e8:05:19:59:1c: 11:04:dc:72:c0:c6:24:fb:dc:d6:f1:51:dc:24:c4: 4e:d1:93:3f:c2:35:7d:d0:bd:5b:e0:d4:20:9d:d9: 1a:24:aa:a7:44:af:15:49:5c:c1:40:6a:f6:0c:32: c5:e3:9c:21:c7:ab:ad:fc:ae:a3:2d:26:ec:14:97: 52:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:40:C6:E2:EF:29:17:A0:56:35:72:D2:21:F1:13:6D:53:C6:84:A2 X509v3 Authority Key Identifier: keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:49:47:a2:6e:a1:44:03:fc:ac:22:c1:19:ce:e9:e1:3e:7d: fc:12:9d:a9:b6:8d:51:0e:57:f2:f1:1f:0f:43:41:41:48:59: 8d:dc:26:9a:64:be:c0:1d:59:37:3c:9a:31:28:8f:8a:83:db: 08:f2:b7:f7:7e:45:39:79:a5:e3:b9:67:db:34:92:76:ee:f3: e1:60:83:64:a6:d3:d7:8a:2f:01:60:61:5b:21:6f:14:33:c3: 62:17:7f:43:4c:32:77:48:27:6f:fc:cd:71:ce:df:9e:f9:4f: 65:ec:64:77:9d:30:58:93:fd:65:74:9f:bd:b5:ed:f0:bf:5d: c9:51:c3:96:b4:50:83:96:e9:05:aa:aa:f7:ae:d1:b3:29:21: 38:92:71:13:47:1b:60:3f:6c:1f:67:fc:4f:91:09:73:4a:95: ad:5e:90:39:3a:2d:9d:43:de:9a:a2:69:de:bb:3e:b6:98:a7: b1:6a:52:b2:2e:f7:0b:bb:b8:49:c5:9e:cd:15:77:a0:71:25: 97:4e:0d:09:39:73:2e:8c:d2:54:52:05:46:20:09:2a:a7:a1: 9f:fa:36:2b:f3:d8:7b:77:e3:26:77:a5:46:dc:7a:0a:e1:c8: 89:52:d3:6f:c3:8a:f4:fe:bb:23:1d:f6:d2:05:54:a4:db:b5: 40:9d:ab:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYhooTGetcdz3RyLYrHI84nK51iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTczNjU4RTQyNDFGMjFDQUIyMkNCOUZDMTUwQkY2RkI4 OTgyNzFFQTAeFw0yNTA0MzAwNDM0NDRaFw0yNTA1MDEwNjI3NDRaMDMxMTAvBgNV BAMTKDRFNDBDNkUyRUYyOTE3QTA1NjM1NzJEMjIxRjExMzZENTNDNjg0QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBQQuQzAYUKYxrNnOs1u4XjcfH 4fYm6C/zUUrP5d1IwcLKO0hDIzHA3rjWEYBaEQ5TxOpEGuYa4x/Vb/37Ro3+MeBd hPxygdtLNOyrytagfyFvqsgBdAdvq43wtll836Wr04OV8aS/d+n5sLGFBP9++21p QJaSwbjazvnSbWFH464MbgBpCwvZM+OrDR+UHGRHY8/FkiMGG34LSJYVbtXa0Vow TU1AtzGCFt1cmWiEMjch5F6RSC2guW0fxEnoBRlZHBEE3HLAxiT73NbxUdwkxE7R kz/CNX3QvVvg1CCd2RokqqdErxVJXMFAavYMMsXjnCHHq638rqMtJuwUl1IDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTkDG4u8pF6BWNXLSIfETbVPGhKIwHwYDVR0j BBgwFoAUVzZY5CQfIcqyLLn8FQv2+4mCceowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDNLRHByUjlDRGlYdTEzajZuekV6aFdjVG5KTmRDRlFOMzJqNGJUNmhK M1MvMC81NzM2NThFNDI0MUYyMUNBQjIyQ0I5RkMxNTBCRjZGQjg5ODI3MUVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MzY1OEU0MjQxRjIxQ0FC MjJDQjlGQzE1MEJGNkZCODk4MjcxRUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDNLRHByUjlDRGlYdTEzajZuekV6aFdjVG5KTmRDRlFOMzJqNGJUNmhKM1MvMC81 NzM2NThFNDI0MUYyMUNBQjIyQ0I5RkMxNTBCRjZGQjg5ODI3MUVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG0lHom6hRAP8rCLBGc7p4T59/BKdqbaNUQ5X8vEfD0NBQUhZjdwmmmS+wB1Z NzyaMSiPioPbCPK3935FOXml47ln2zSSdu7z4WCDZKbT14ovAWBhWyFvFDPDYhd/ Q0wyd0gnb/zNcc7fnvlPZexkd50wWJP9ZXSfvbXt8L9dyVHDlrRQg5bpBaqq967R sykhOJJxE0cbYD9sH2f8T5EJc0qVrV6QOTotnUPemqJp3rs+tpinsWpSsi73C7u4 ScWezRV3oHEll04NCTlzLozSVFIFRiAJKqehn/o2K/PYe3fjJnelRtx6CuHIiVLT b8OK9P67Ix320gVUpNu1QJ2rOA== -----END CERTIFICATE-----Generated at Wed Apr 30 09:39:59 2025 by rpki-client