$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft File: 91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft (raw, json) Hash identifier: lBp/yRB8evMN3WOhIMIXN9Pi4VnN+REt1HKbsssweHc= Subject key identifier: FD:F3:2D:4F:1E:8B:E5:51:BF:0A:72:BC:29:6B:82:F9:6A:2E:22:C8 Authority key identifier: 91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 Certificate issuer: /CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Certificate serial: 7C329A33E30795AA9BA2F0CC0C645268E305CFBD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft Manifest number: A9 Signing time: Sun 11 May 2025 17:13:53 +0000 Manifest this update: Sun 11 May 2025 17:08:53 +0000 Manifest next update: Mon 12 May 2025 18:36:53 +0000 Files and hashes: 1: 3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa (hash: GO7w8eqGTa8dskb5vIgzwgtC6sLrRWDcLwvfKurJi/c=) 2: 3139302e3132342e3234362e302f32342d3234203d3e20323730383630.roa (hash: ouWOBSiTWgfnPLxBeA+7q0eMzrly3oy5U/Yxyh/uQG8=) 3: 3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa (hash: q9Oe28bXTlG+wjfdfY0S2DKhkmcDPIsB3IHCjEfJUgQ=) 4: 3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa (hash: 0eX90yaw+P6ZAxEPr/PJb8WsvDlA//ZNAwA4O0HitxQ=) 5: 3139302e3132342e3234362e302f32332d3233203d3e20323730383630.roa (hash: 4z8E5xkgAubJe79uhls2hM7yWHwnaNYYxTpUhSzfajo=) 6: 3139302e3132342e3234372e302f32342d3234203d3e20323730383630.roa (hash: CcBSySmTVrGXjBmAZJ2qP+CxFizJEFvF6UAVfbjFZgA=) 7: 91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl (hash: HEObOJbOOXw5L7OP5vueMsSynN6V7Og/2a7Gq0Fwwdg=) 8: 323830343a373238633a3a2f33322d3332203d3e20323730383630.roa (hash: is1ce/85QOT7NztHS8d8OT2MR60xfEDAWq9FgKQpdCU=) 9: 3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa (hash: C3k9FGsSHArcVIZOFQJRWxG6FRMI/42eNpKGM7EODK0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 18:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:32:9a:33:e3:07:95:aa:9b:a2:f0:cc:0c:64:52:68:e3:05:cf:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Validity Not Before: May 11 17:08:53 2025 GMT Not After : May 12 18:36:53 2025 GMT Subject: CN=FDF32D4F1E8BE551BF0A72BC296B82F96A2E22C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:42:bd:b9:23:cf:19:e9:43:5b:25:7c:f9: 41:36:41:a1:68:7a:57:f8:55:1c:8b:4a:da:21:b8: 2f:ad:eb:32:77:e9:2e:12:77:ee:7c:ca:38:70:3d: 8a:a4:dd:1b:6a:40:95:51:94:fd:12:90:87:3d:ba: 0a:c1:2e:5e:1e:0c:10:7c:07:ec:bc:78:e8:45:12: d2:88:84:11:59:c4:b7:a3:42:52:62:db:8b:d5:72: a1:02:3a:3e:c9:5f:57:74:7a:ff:05:ec:31:53:35: 02:f6:fc:0c:a2:80:81:e7:d5:ed:69:52:c0:92:f7: 8c:74:7c:18:3d:68:de:8d:b3:91:93:50:0c:fc:b8: b2:0a:52:7e:f9:2c:1e:c2:6a:0e:46:b2:fb:7d:ed: 8f:be:1f:dc:dd:af:3e:65:3f:7a:7a:72:04:f9:5c: a5:07:3e:06:7f:53:d3:73:60:2a:61:a7:07:e9:8b: 6c:ad:74:71:e2:8e:2a:dd:65:2d:78:dc:a6:d6:84: e9:e3:85:f6:a1:75:6b:7d:a6:09:69:76:1f:28:dc: 78:b7:bd:ef:fd:de:e7:30:90:c9:f0:f6:67:74:8d: a7:81:43:d4:a7:50:c4:de:02:bb:cc:2a:8a:4c:f3: 5f:9e:77:90:b6:f6:21:9d:50:eb:bc:d8:ed:37:c2: c7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F3:2D:4F:1E:8B:E5:51:BF:0A:72:BC:29:6B:82:F9:6A:2E:22:C8 X509v3 Authority Key Identifier: keyid:91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c9:4e:28:e3:80:43:ed:d0:66:be:cc:a3:7a:91:46:46:84: ef:7a:8b:8d:a9:0e:2c:f2:53:05:34:0f:b2:92:96:dc:4c:9f: dc:0a:cf:53:e7:19:29:36:d9:36:38:07:22:94:04:18:f4:5b: b7:17:24:38:de:47:d3:7a:1a:cd:6c:fa:86:0c:29:3e:89:58: 44:36:9a:2f:09:35:16:fb:e5:40:0d:db:9d:8a:e3:1d:ba:15: 3f:e6:da:e2:18:8c:61:02:1f:82:e3:b0:04:0a:c8:29:fc:a1: a6:0e:1f:23:88:51:0c:a5:c7:a4:88:bf:39:6c:08:33:97:75: 6a:28:bc:4f:23:68:f6:b7:19:34:7d:db:e5:9e:ee:4a:cd:b2: dd:08:30:ea:b9:a4:dc:92:89:03:78:5b:cc:1c:53:0e:54:16: 8f:20:d0:ca:96:8d:69:0c:d4:e4:91:94:ef:53:24:9b:40:34: 9b:49:54:96:18:1d:9d:dc:a8:5c:59:48:58:bc:40:dd:52:19: 3b:65:09:07:81:0f:c6:7a:84:f9:77:29:d3:6f:28:b8:56:28: 0e:0e:c9:7e:0d:fa:00:9e:a3:42:6a:32:98:c3:9a:21:9b:1f: 6e:6f:fd:6c:76:a5:8e:05:26:01:96:2a:ba:c4:e4:5e:e6:14: ec:60:e1:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfDKaM+MHlaqbovDMDGRSaOMFz70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDQjBENDZGMzhBMTdDMEYzQUJDNDlEOTQ5NkFGQ0I2 MEVDQzVDMDAeFw0yNTA1MTExNzA4NTNaFw0yNTA1MTIxODM2NTNaMDMxMTAvBgNV BAMTKEZERjMyRDRGMUU4QkU1NTFCRjBBNzJCQzI5NkI4MkY5NkEyRTIyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2c0K9uSPPGelDWyV8+UE2QaFo elf4VRyLStohuC+t6zJ36S4Sd+58yjhwPYqk3RtqQJVRlP0SkIc9ugrBLl4eDBB8 B+y8eOhFEtKIhBFZxLejQlJi24vVcqECOj7JX1d0ev8F7DFTNQL2/AyigIHn1e1p UsCS94x0fBg9aN6Ns5GTUAz8uLIKUn75LB7Cag5Gsvt97Y++H9zdrz5lP3p6cgT5 XKUHPgZ/U9NzYCphpwfpi2ytdHHijirdZS143KbWhOnjhfahdWt9pglpdh8o3Hi3 ve/93ucwkMnw9md0jaeBQ9SnUMTeArvMKopM81+ed5C29iGdUOu82O03wscXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/fMtTx6L5VG/CnK8KWuC+WouIsgwHwYDVR0j BBgwFoAUkcsNRvOKF8Dzq8SdlJavy2DsxcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2JOSjJLanJQaWplYXRiUHdGclExeWlQZXEyUkN3NnY5VEVpbnRXZ0hO QkwvMC85MUNCMEQ0NkYzOEExN0MwRjNBQkM0OUQ5NDk2QUZDQjYwRUNDNUMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQ0IwRDQ2RjM4QTE3QzBG M0FCQzQ5RDk0OTZBRkNCNjBFQ0M1QzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2JOSjJLanJQaWplYXRiUHdGclExeWlQZXEyUkN3NnY5VEVpbnRXZ0hOQkwvMC85 MUNCMEQ0NkYzOEExN0MwRjNBQkM0OUQ5NDk2QUZDQjYwRUNDNUMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmMlOKOOAQ+3QZr7Mo3qRRkaE73qLjakOLPJTBTQPspKW3Eyf3ArPU+cZKTbZ NjgHIpQEGPRbtxckON5H03oazWz6hgwpPolYRDaaLwk1FvvlQA3bnYrjHboVP+ba 4hiMYQIfguOwBArIKfyhpg4fI4hRDKXHpIi/OWwIM5d1aii8TyNo9rcZNH3b5Z7u Ss2y3Qgw6rmk3JKJA3hbzBxTDlQWjyDQypaNaQzU5JGU71Mkm0A0m0lUlhgdndyo XFlIWLxA3VIZO2UJB4EPxnqE+Xcp028ouFYoDg7Jfg36AJ6jQmoymMOaIZsfbm/9 bHaljgUmAZYqusTkXuYU7GDheg== -----END CERTIFICATE-----Generated at Sun May 11 22:12:53 2025 by rpki-client