$ rpki-client -vvf rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73.mft File: D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73.mft (raw, json) Hash identifier: zYvzOyiEqb8FaS98E6OFV31C7P2pJ3+fP/o8ySZw8V8= Subject key identifier: 27:4E:07:1D:17:95:F0:58:92:08:13:A2:4E:47:AD:46:79:01:2C:4F Authority key identifier: D6:AE:F6:5B:FA:D5:7D:5A:BD:97:3A:D0:7D:0B:AC:7D:94:9F:BC:73 Certificate issuer: /CN=D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73 Certificate serial: 52E8556AB44E5D43ECDAD664B653337C98EC6629 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73.cer Subject info access: rsync://rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73.mft Manifest number: 11 Signing time: Sun 11 May 2025 16:13:00 +0000 Manifest this update: Sun 11 May 2025 16:08:00 +0000 Manifest next update: Mon 12 May 2025 19:40:00 +0000 Files and hashes: 1: 323830343a383932633a3a2f33332d3333203d3e20323733353836.roa (hash: WvbFbNJwpSyF1PFxmgoSyiUmt4Z228Ag+bm8+UIRNmw=) 2: D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73.crl (hash: uZQEoFpgp5hTCeEKn5h0IwxiIONRLH3HdNpzNdyIYz8=) 3: 323830343a383932633a3a2f33322d3332203d3e20323733353836.roa (hash: 7bu3fIW9y40UXydsjVEpOvNaSja+baaxMjylmonjsqU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73.crl rsync://rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 19:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e8:55:6a:b4:4e:5d:43:ec:da:d6:64:b6:53:33:7c:98:ec:66:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73 Validity Not Before: May 11 16:08:00 2025 GMT Not After : May 12 19:40:00 2025 GMT Subject: CN=274E071D1795F058920813A24E47AD4679012C4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e6:9f:ff:80:b8:bf:81:b3:7e:fa:a5:dd:ed: df:40:6d:fd:41:06:b7:92:f8:70:90:76:b1:65:c2: fd:a9:76:9a:64:ce:f5:f8:42:d2:bf:f1:e5:83:80: 8b:5b:20:a0:c1:82:96:6f:15:c0:d1:dc:40:85:ad: cf:a7:a7:de:41:8f:47:30:b8:fd:a8:40:8f:bb:c2: 8d:42:3a:74:88:a8:64:ea:20:67:4c:99:61:52:5f: 33:13:5e:50:6d:51:a5:c6:b3:f1:dc:08:09:9b:2b: 85:5e:a6:38:fc:df:ff:15:ef:e8:44:09:90:f9:90: 46:28:a2:2a:f1:90:2a:4d:51:19:4e:83:1e:af:71: ea:e4:44:79:6d:cc:a8:69:8c:d0:f0:75:af:f1:00: 78:b3:4a:e0:b8:88:60:c6:93:fe:5f:54:1b:aa:f8: d4:a7:8f:cb:ac:0d:b7:0c:8b:9d:8e:56:74:25:92: 36:b8:ed:9c:22:39:ec:75:83:32:6a:8a:11:4c:7d: 19:22:b6:a4:f4:01:8c:6a:83:cf:a2:56:35:f7:37: ce:36:cc:a4:34:38:c8:cc:13:59:3d:51:a5:0b:ed: 4c:e7:7a:b5:0e:fd:aa:db:d4:5e:9d:c8:64:81:53: b1:f4:e4:47:89:90:ca:7e:53:7d:96:45:ba:7f:a7: 00:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4E:07:1D:17:95:F0:58:92:08:13:A2:4E:47:AD:46:79:01:2C:4F X509v3 Authority Key Identifier: keyid:D6:AE:F6:5B:FA:D5:7D:5A:BD:97:3A:D0:7D:0B:AC:7D:94:9F:BC:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:71:38:ea:a8:14:c0:f0:c2:f4:33:d5:a3:06:31:09:65:62: 55:c8:cf:c5:5a:a3:21:c1:7e:77:11:c7:52:d0:6c:ac:b5:f2: 46:67:e2:a7:e1:70:7c:ee:28:15:a2:16:a6:1a:0f:42:b2:b6: d7:39:c2:e6:86:b7:a4:04:c2:f1:19:eb:be:0a:c7:35:c3:76: 29:93:4d:f8:25:03:ca:5e:20:4a:61:11:5b:4b:56:eb:c9:08: ce:a0:ed:f9:91:24:bc:83:b1:c4:ae:4d:8b:e9:de:df:8a:19: ca:e4:36:ac:8f:c2:14:8d:47:b9:a7:4f:c8:52:70:30:42:f8: 16:97:ff:25:b0:0d:21:4a:28:ff:fe:31:d0:95:1a:b7:6d:c1: 00:e5:5f:b9:a0:79:a9:31:c9:c2:b0:27:d4:7d:10:a3:f6:d5: 0f:e8:47:45:ff:3e:18:7c:ac:bf:dd:95:0f:56:b3:12:bd:dd: 74:88:3a:4b:c0:79:06:6a:73:87:96:cc:32:28:3a:a1:42:27: 8a:a1:95:5b:75:61:03:71:35:f2:ff:b9:c3:68:f3:ef:c4:c0: 1d:7f:27:71:9a:58:0a:32:7f:66:42:c8:ac:9e:a8:61:14:95: 44:ab:65:d0:66:fc:a4:41:f0:30:f1:dd:c9:ac:e7:fc:22:89: be:58:82:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUuhVarROXUPs2tZktlMzfJjsZikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZBRUY2NUJGQUQ1N0Q1QUJEOTczQUQwN0QwQkFDN0Q5 NDlGQkM3MzAeFw0yNTA1MTExNjA4MDBaFw0yNTA1MTIxOTQwMDBaMDMxMTAvBgNV BAMTKDI3NEUwNzFEMTc5NUYwNTg5MjA4MTNBMjRFNDdBRDQ2NzkwMTJDNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw5p//gLi/gbN++qXd7d9Abf1B BreS+HCQdrFlwv2pdppkzvX4QtK/8eWDgItbIKDBgpZvFcDR3ECFrc+np95Bj0cw uP2oQI+7wo1COnSIqGTqIGdMmWFSXzMTXlBtUaXGs/HcCAmbK4Vepjj83/8V7+hE CZD5kEYooirxkCpNURlOgx6vcerkRHltzKhpjNDwda/xAHizSuC4iGDGk/5fVBuq +NSnj8usDbcMi52OVnQlkja47ZwiOex1gzJqihFMfRkitqT0AYxqg8+iVjX3N842 zKQ0OMjME1k9UaUL7UznerUO/arb1F6dyGSBU7H05EeJkMp+U32WRbp/pwDvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJ04HHReV8FiSCBOiTketRnkBLE8wHwYDVR0j BBgwFoAU1q72W/rVfVq9lzrQfQusfZSfvHMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDRBNFVDTUtuWVMyYmVZWE5zemFTWFZlMkZqVWJOY2l6UmtxZnlzaFlI NlEvMC9ENkFFRjY1QkZBRDU3RDVBQkQ5NzNBRDA3RDBCQUM3RDk0OUZCQzczLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2QUVGNjVCRkFENTdENUFC RDk3M0FEMDdEMEJBQzdEOTQ5RkJDNzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NDRBNFVDTUtuWVMyYmVZWE5zemFTWFZlMkZqVWJOY2l6UmtxZnlzaFlINlEvMC9E NkFFRjY1QkZBRDU3RDVBQkQ5NzNBRDA3RDBCQUM3RDk0OUZCQzczLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMXE46qgUwPDC9DPVowYxCWViVcjPxVqjIcF+dxHHUtBsrLXyRmfip+FwfO4o FaIWphoPQrK21znC5oa3pATC8RnrvgrHNcN2KZNN+CUDyl4gSmERW0tW68kIzqDt +ZEkvIOxxK5Ni+ne34oZyuQ2rI/CFI1HuadPyFJwMEL4Fpf/JbANIUoo//4x0JUa t23BAOVfuaB5qTHJwrAn1H0Qo/bVD+hHRf8+GHysv92VD1azEr3ddIg6S8B5Bmpz h5bMMig6oUIniqGVW3VhA3E18v+5w2jz78TAHX8ncZpYCjJ/ZkLIrJ6oYRSVRKtl 0Gb8pEHwMPHdyazn/CKJvliCvw== -----END CERTIFICATE-----Generated at Sun May 11 22:45:58 2025 by rpki-client