$ rpki-client -vvf rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft File: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft (raw, json) Hash identifier: zjRS1s5okmncxcKnIr4ID5cgTfOaqIaKafNbj+XJQXM= Subject key identifier: 34:7C:54:E3:3E:BC:A1:8A:17:8D:32:3C:B6:69:C6:60:91:60:09:A5 Authority key identifier: CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7 Certificate issuer: /CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7 Certificate serial: 63572330AE981F53B4B8441218AC605A83D12921 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer Subject info access: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft Manifest number: 021C Signing time: Thu 15 May 2025 13:34:45 +0000 Manifest this update: Thu 15 May 2025 13:29:45 +0000 Manifest next update: Fri 16 May 2025 16:06:45 +0000 Files and hashes: 1: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl (hash: DAWC3Sp0Hw8CnqV7ON+X7KtAK7qRws/Ayq5sAfU6ms8=) 2: 323830343a333736383a3a2f33322d313238203d3e20323636343130.roa (hash: VBCnHU5TBlO8GQbvm38yaXyrz4vjADhjKHV3unpcPFM=) 3: 3137302e38302e38302e302f32322d3332203d3e20323636343130.roa (hash: mc7zyxlcDWTpf8MHBgckQ6SrkcbI0QSEbJyTbgaFwFE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 May 2025 16:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:57:23:30:ae:98:1f:53:b4:b8:44:12:18:ac:60:5a:83:d1:29:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7 Validity Not Before: May 15 13:29:45 2025 GMT Not After : May 16 16:06:45 2025 GMT Subject: CN=347C54E33EBCA18A178D323CB669C660916009A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:43:72:c1:3e:8e:ef:8a:3d:66:20:aa:e1:4b: 5a:e5:4e:d3:3e:a6:72:63:1e:48:b9:c2:23:fc:8a: 45:52:50:8f:96:8b:2b:f5:b6:a8:cf:60:81:88:e6: 93:34:7f:b5:97:c5:cc:00:5f:6c:16:e9:c8:3c:39: 16:2a:32:d0:bd:ac:d3:ac:cf:9b:89:61:0c:b8:f9: d3:d6:73:38:84:da:78:80:ae:0f:4b:e7:f4:00:8d: d8:44:0c:ce:9f:0f:55:47:c0:e1:c3:a0:da:a8:f0: 1d:36:e9:2e:53:3e:78:cc:ec:94:48:b7:0f:b3:5f: ea:27:87:a7:74:80:79:71:43:60:e5:ea:2f:8e:ed: f9:aa:00:c2:66:24:13:fd:11:12:05:5f:ba:1a:25: d7:bf:11:c3:8e:ba:b8:2d:a6:f3:27:4b:a1:c8:ab: 2f:b5:ef:69:6c:01:06:76:54:35:84:6a:0f:04:4b: b5:c0:03:a5:fe:b0:48:f4:81:a6:d5:17:1a:7f:21: a7:2d:48:f6:f8:1e:f6:ae:c9:4f:51:66:b0:88:67: 5a:37:b6:7b:7d:d0:63:cb:db:e8:bf:d5:60:2c:ae: fd:36:5b:d9:90:27:19:fd:47:f6:ff:f7:89:d6:eb: 66:55:e8:8e:4b:26:37:4b:94:0f:48:3d:c4:8b:d0: d6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7C:54:E3:3E:BC:A1:8A:17:8D:32:3C:B6:69:C6:60:91:60:09:A5 X509v3 Authority Key Identifier: keyid:CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:5e:e4:2c:e1:30:4f:b9:ca:31:71:14:96:5d:54:6f:a0:59: 3f:53:9d:ea:45:a9:85:1b:bd:2d:ee:68:61:5e:39:b1:20:c6: dd:59:aa:1a:b5:de:d7:00:17:4f:fd:75:5c:e2:f1:57:40:ed: 55:5e:57:cc:b9:c3:20:1b:d1:fd:b7:7c:47:bc:a2:5b:fb:1c: 96:4c:49:c7:ab:9f:a5:09:62:9d:3a:21:fc:11:14:f5:f5:15: 3c:6f:fa:9c:d4:fa:c1:46:a9:ce:70:d2:a8:51:78:e1:8d:54: 82:67:f1:97:65:a8:ac:28:88:cf:5a:38:9a:8f:b4:9e:2f:fb: 94:68:37:e5:ec:bf:22:b9:2d:8f:23:5a:4c:97:7e:06:5f:13: 58:8b:88:ce:aa:09:4a:7e:18:9d:a8:0f:02:87:da:fd:81:61: 8d:61:a7:49:2c:e7:6e:1e:03:74:0d:96:77:6a:a2:46:44:e5: 08:f2:f9:32:21:27:01:20:e5:06:08:24:b6:6e:e2:6c:b3:08: e5:7e:f0:c2:f2:cd:bf:70:bf:e0:f8:86:a2:7b:1e:26:46:ed: 5b:cd:c1:50:1b:76:90:a6:bb:61:83:af:1f:19:e2:79:dc:5b: 86:86:12:ea:b6:65:68:d0:5f:ab:39:eb:28:c9:ef:95:0e:e7: 43:2b:c2:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY1cjMK6YH1O0uEQSGKxgWoPRKSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JGRTkzNzY5RERCRkNBNzA0RjgzNjA0MDdGNTVCMEQ4 RkE4NkNDNzAeFw0yNTA1MTUxMzI5NDVaFw0yNTA1MTYxNjA2NDVaMDMxMTAvBgNV BAMTKDM0N0M1NEUzM0VCQ0ExOEExNzhEMzIzQ0I2NjlDNjYwOTE2MDA5QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQ3LBPo7vij1mIKrhS1rlTtM+ pnJjHki5wiP8ikVSUI+Wiyv1tqjPYIGI5pM0f7WXxcwAX2wW6cg8ORYqMtC9rNOs z5uJYQy4+dPWcziE2niArg9L5/QAjdhEDM6fD1VHwOHDoNqo8B026S5TPnjM7JRI tw+zX+onh6d0gHlxQ2Dl6i+O7fmqAMJmJBP9ERIFX7oaJde/EcOOurgtpvMnS6HI qy+172lsAQZ2VDWEag8ES7XAA6X+sEj0gabVFxp/IactSPb4HvauyU9RZrCIZ1o3 tnt90GPL2+i/1WAsrv02W9mQJxn9R/b/94nW62ZV6I5LJjdLlA9IPcSL0NZjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNHxU4z68oYoXjTI8tmnGYJFgCaUwHwYDVR0j BBgwFoAUy/6Tdp3b/KcE+DYEB/VbDY+obMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzNSc0JOc2NLNVZqNkVHMmlueDRqTGl2a1FHcDg3ZVFoM0s5dEhlZ3pW bmUvMS9DQkZFOTM3NjlEREJGQ0E3MDRGODM2MDQwN0Y1NUIwRDhGQTg2Q0M3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRkU5Mzc2OUREQkZDQTcw NEY4MzYwNDA3RjU1QjBEOEZBODZDQzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzNSc0JOc2NLNVZqNkVHMmlueDRqTGl2a1FHcDg3ZVFoM0s5dEhlZ3pWbmUvMS9D QkZFOTM3NjlEREJGQ0E3MDRGODM2MDQwN0Y1NUIwRDhGQTg2Q0M3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh17kLOEwT7nKMXEUll1Ub6BZP1Od6kWphRu9Le5oYV45sSDG3VmqGrXe1wAX T/11XOLxV0DtVV5XzLnDIBvR/bd8R7yiW/sclkxJx6ufpQlinToh/BEU9fUVPG/6 nNT6wUapznDSqFF44Y1Ugmfxl2WorCiIz1o4mo+0ni/7lGg35ey/IrktjyNaTJd+ Bl8TWIuIzqoJSn4YnagPAofa/YFhjWGnSSznbh4DdA2Wd2qiRkTlCPL5MiEnASDl Bggktm7ibLMI5X7wwvLNv3C/4PiGonseJkbtW83BUBt2kKa7YYOvHxniedxbhoYS 6rZlaNBfqznrKMnvlQ7nQyvCvw== -----END CERTIFICATE-----Generated at Thu May 15 20:43:48 2025 by rpki-client