$ rpki-client -vvf rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft File: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft (raw, json) Hash identifier: MXuQ7PhTSID8FVZ9iJABV+45rhAyfRcSUYB2SwRhXC4= Subject key identifier: FB:FC:54:19:55:64:D3:D8:44:64:29:9B:40:FF:50:FB:A5:7C:AD:6D Authority key identifier: 40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE Certificate issuer: /CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Certificate serial: 363045D07649556962AB663C001496E73AC281A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft Manifest number: 24 Signing time: Sun 11 May 2025 21:55:07 +0000 Manifest this update: Sun 11 May 2025 21:50:07 +0000 Manifest next update: Mon 12 May 2025 21:58:07 +0000 Files and hashes: 1: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl (hash: gRV7fjhXDoqRJy556NeH3H5krXIERzS9hhqB8iAxT54=) 2: 34352e3138392e33342e302f32342d3234203d3e20323734373633.roa (hash: +8SomA8CorpblFccJ5hAIRLE8zYsycHTpbXTAfqfp8w=) 3: 34352e3138392e33352e302f32342d3234203d3e20323734373633.roa (hash: 1p2OZ2GU51vARCDd2EzB05jBSXBxDQiaqictJ71WwZg=) 4: 34352e3138392e33322e302f32342d3234203d3e20323734373633.roa (hash: f9h0xJPe6EC4HPN8Q4Vq2DpTHhojeqACv3nqBQ14BsY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 21:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:30:45:d0:76:49:55:69:62:ab:66:3c:00:14:96:e7:3a:c2:81:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Validity Not Before: May 11 21:50:07 2025 GMT Not After : May 12 21:58:07 2025 GMT Subject: CN=FBFC54195564D3D84464299B40FF50FBA57CAD6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:76:e3:0d:27:ef:0c:87:ea:69:fa:45:e7: 13:da:d4:91:72:ac:34:f6:74:ac:35:ec:fd:b1:f6: 05:db:ec:d1:f9:a0:07:2c:b9:7e:01:82:ef:68:30: 26:d2:ad:eb:6d:d9:ed:e8:be:21:f7:7f:12:37:a5: 0b:53:6e:cf:9d:8b:d3:d0:7f:da:97:a1:4f:be:c9: c7:0a:84:9c:a7:d9:71:10:93:5a:a2:53:da:dd:7d: b0:6f:c0:22:12:0c:b4:46:8a:96:e7:bd:c1:f2:93: 56:8a:a8:90:d8:c5:b1:f8:64:54:b5:05:43:ef:17: d9:0a:33:e4:0a:7b:8a:75:05:7c:bd:2c:77:a5:1a: 28:78:40:90:37:95:31:5f:0e:e0:6b:9e:2d:55:5a: 53:a1:1e:68:82:29:a0:57:6e:af:82:9a:0d:ad:a7: 55:7c:f9:19:e2:fb:6f:e2:7f:bb:ae:ae:64:57:14: 87:61:d1:b7:4c:99:f3:b3:44:9d:05:c0:a1:c9:02: 32:8a:f1:d3:a6:72:12:a7:a5:80:90:75:57:56:f7: 5f:33:1c:83:63:58:bf:72:db:e1:ff:b4:b0:bb:55: cf:32:a6:e4:dc:fd:08:0e:09:a3:ab:84:c4:15:36: 7d:78:91:8a:ea:ef:82:f9:a7:ed:d9:2e:26:e2:b2: 02:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FC:54:19:55:64:D3:D8:44:64:29:9B:40:FF:50:FB:A5:7C:AD:6D X509v3 Authority Key Identifier: keyid:40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d1:c2:29:7d:73:69:05:2d:86:31:4a:ae:ac:02:73:ac:89: a0:95:c5:ff:ad:a9:74:31:de:c4:ac:01:ba:80:ab:e9:56:99: 8b:54:16:af:e2:a1:fe:26:f1:55:98:e2:ec:da:56:bb:9b:a9: f2:d7:5b:d1:94:60:3a:02:86:8b:67:69:d7:ff:48:81:cd:22: f8:04:f9:66:8f:40:19:ee:d5:38:52:9c:be:4a:97:c3:7d:c7: 9c:0c:bc:76:23:5c:0d:65:f8:f1:15:37:3f:64:fb:95:2d:46: 71:fd:e5:82:05:5c:63:42:ca:2d:99:8a:71:5d:f5:9c:0e:0d: 43:ba:2a:3a:78:de:f4:6a:9e:c2:8c:c1:59:71:c4:0d:0f:3a: e4:f9:a1:f5:3f:17:e9:10:17:e4:09:cd:eb:83:ca:a5:4b:df: 64:e6:28:b8:a2:ee:8f:75:65:50:f9:39:54:3e:73:76:fd:5d: 66:67:cc:c0:9b:54:9e:92:d5:f3:dc:44:eb:0b:0b:3f:78:b8: 33:64:69:6e:af:1e:77:3f:fc:fa:f1:cb:0c:de:f7:92:b3:a8: 0d:fe:09:42:ae:fa:28:64:98:a6:15:69:56:35:3e:c2:0a:2c: 2d:85:8e:73:80:d5:59:51:5a:c1:5a:74:1b:8e:0b:ef:a6:86: 45:9e:c2:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNjBF0HZJVWliq2Y8ABSW5zrCgaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCQjE0QTJGRDhCODExMDMwNDJCRjMyRkFDOUIyRDkw QUNGOEFGRTAeFw0yNTA1MTEyMTUwMDdaFw0yNTA1MTIyMTU4MDdaMDMxMTAvBgNV BAMTKEZCRkM1NDE5NTU2NEQzRDg0NDY0Mjk5QjQwRkY1MEZCQTU3Q0FENkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnRHbjDSfvDIfqafpF5xPa1JFy rDT2dKw17P2x9gXb7NH5oAcsuX4Bgu9oMCbSrett2e3oviH3fxI3pQtTbs+di9PQ f9qXoU++yccKhJyn2XEQk1qiU9rdfbBvwCISDLRGipbnvcHyk1aKqJDYxbH4ZFS1 BUPvF9kKM+QKe4p1BXy9LHelGih4QJA3lTFfDuBrni1VWlOhHmiCKaBXbq+Cmg2t p1V8+Rni+2/if7uurmRXFIdh0bdMmfOzRJ0FwKHJAjKK8dOmchKnpYCQdVdW918z HINjWL9y2+H/tLC7Vc8ypuTc/QgOCaOrhMQVNn14kYrq74L5p+3ZLibisgIBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+/xUGVVk09hEZCmbQP9Q+6V8rW0wHwYDVR0j BBgwFoAUQLsUov2LgRAwQr8y+smy2QrPiv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2 NjIvMC80MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQkIxNEEyRkQ4QjgxMTAz MDQyQkYzMkZBQzlCMkQ5MEFDRjhBRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2NjIvMC80 MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP9HCKX1zaQUthjFKrqwCc6yJoJXF/62pdDHexKwBuoCr6VaZi1QWr+Kh/ibx VZji7NpWu5up8tdb0ZRgOgKGi2dp1/9Igc0i+AT5Zo9AGe7VOFKcvkqXw33HnAy8 diNcDWX48RU3P2T7lS1Gcf3lggVcY0LKLZmKcV31nA4NQ7oqOnje9GqewozBWXHE DQ865Pmh9T8X6RAX5AnN64PKpUvfZOYouKLuj3VlUPk5VD5zdv1dZmfMwJtUnpLV 89xE6wsLP3i4M2Rpbq8edz/8+vHLDN73krOoDf4JQq76KGSYphVpVjU+wgosLYWO c4DVWVFawVp0G44L76aGRZ7CDg== -----END CERTIFICATE-----Generated at Mon May 12 06:37:53 2025 by rpki-client