$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft File: 4B238277BD4501DC3B75403E74D8B541B7643097.mft (raw, json) Hash identifier: jmNANkvhQWQHnSVR7eLPibWnMEiqMoNYVGiESAjM9cw= Subject key identifier: 6C:7B:CD:13:1B:9F:4C:6A:E1:41:B6:97:1B:BA:72:8A:15:84:B5:9B Authority key identifier: 4B:23:82:77:BD:45:01:DC:3B:75:40:3E:74:D8:B5:41:B7:64:30:97 Certificate issuer: /CN=4B238277BD4501DC3B75403E74D8B541B7643097 Certificate serial: 20D585D8CFA253CA6AF6238020E0AA7B69CAE750 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer Subject info access: rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft Manifest number: 22 Signing time: Sun 11 May 2025 15:53:22 +0000 Manifest this update: Sun 11 May 2025 15:48:22 +0000 Manifest next update: Mon 12 May 2025 18:51:22 +0000 Files and hashes: 1: 4B238277BD4501DC3B75403E74D8B541B7643097.crl (hash: /saahYbtsrC9GXIBMUY+xTeHiag0H6MPEiRoFSed+zY=) 2: 3138312e3138392e38302e302f32322d3332203d3e20323731363236.roa (hash: 2xtykdlv2HZAR6UC1CtCNk3nexbhm2O6sDYzQQilQhs=) 3: 323830343a376537383a3a2f33322d313238203d3e20323731363236.roa (hash: YxjgGXwxk/DJwwWBvr8NXqtozbxcPEarptqHkvquf/s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.crl rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 18:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d5:85:d8:cf:a2:53:ca:6a:f6:23:80:20:e0:aa:7b:69:ca:e7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B238277BD4501DC3B75403E74D8B541B7643097 Validity Not Before: May 11 15:48:22 2025 GMT Not After : May 12 18:51:22 2025 GMT Subject: CN=6C7BCD131B9F4C6AE141B6971BBA728A1584B59B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:35:8a:fe:ae:57:85:b4:e9:71:fe:98:b0:0d: 6a:a9:41:f0:76:14:63:7d:ee:ee:b8:2f:7c:d7:80: 1e:ea:ad:f1:3e:b2:86:af:ee:41:77:eb:e4:65:61: ea:3d:2d:fc:7d:95:77:c2:e5:e4:97:b1:8c:ea:08: e0:8a:20:22:dc:79:14:17:13:35:91:03:0d:79:08: fe:53:45:3c:cc:d9:d7:db:ed:b2:0d:59:14:4f:a6: 1f:79:37:d6:73:ce:b5:98:c9:ae:0f:29:66:4c:60: 6e:70:b0:97:02:44:4f:70:eb:5c:8e:21:ec:10:be: 9e:4b:38:26:15:52:73:17:fc:a3:70:9c:d2:35:1d: 8f:ce:6f:d9:bf:81:82:0c:6f:2b:69:21:65:c9:00: f5:52:be:40:1e:dd:10:7b:9a:b5:52:c7:cc:cb:21: 59:17:7a:49:bc:ff:68:2d:79:24:c4:e1:2a:36:78: a8:c3:14:99:1a:21:5d:5d:1d:0a:2b:58:16:44:83: 6f:a3:85:32:e5:00:21:ae:14:86:f1:8b:da:ef:bf: 79:59:64:a0:de:26:08:ba:64:74:22:ed:b1:d8:9a: 97:8a:12:d7:2f:33:d2:e3:6b:8b:0b:c3:48:58:e5: 51:81:6d:08:58:ff:7d:30:54:10:7e:b4:3a:e4:a9: e9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7B:CD:13:1B:9F:4C:6A:E1:41:B6:97:1B:BA:72:8A:15:84:B5:9B X509v3 Authority Key Identifier: keyid:4B:23:82:77:BD:45:01:DC:3B:75:40:3E:74:D8:B5:41:B7:64:30:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6d:ff:8b:af:f3:43:89:78:f8:0e:67:d8:7c:70:dc:4f:5e: b7:73:b5:c3:92:12:4c:dd:a3:83:97:a2:80:db:6c:15:d8:7c: 84:0e:49:a3:31:c1:33:32:b1:d2:5f:1f:b4:ec:15:62:74:df: 43:ed:75:12:35:b7:c4:fd:62:9c:1e:9d:0e:59:3f:f8:e6:9b: 4d:f8:10:5a:72:b8:a3:96:16:ed:da:48:06:55:ec:38:44:eb: 4d:3c:f4:bf:e7:83:ff:23:36:81:44:4d:2f:da:a7:35:f5:8d: 04:4d:45:eb:fd:2c:82:45:34:86:da:7e:75:30:8f:5c:94:a3: a7:63:3c:78:47:0e:fb:3b:ce:67:ce:c8:a0:24:88:85:d9:99: f6:9f:46:af:b6:8b:06:0a:d1:cf:52:bc:5a:e3:b8:a5:4a:93: 3c:0c:4d:0f:30:ce:be:3f:72:2a:07:d6:47:44:51:69:fd:09: 53:64:ad:33:e2:46:c2:b1:26:40:36:ce:67:ea:e8:38:b9:98: a5:ef:fa:d2:28:95:fc:33:fb:e8:45:fa:b3:1d:05:96:b5:28: ce:cc:7d:b0:3f:55:4e:bf:df:fe:f6:3d:ee:e6:c1:85:20:38: d2:2c:de:37:7c:47:95:21:dc:16:ef:8c:b5:13:0d:25:e8:b9: a2:4a:25:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUINWF2M+iU8pq9iOAIOCqe2nK51AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyMzgyNzdCRDQ1MDFEQzNCNzU0MDNFNzREOEI1NDFC NzY0MzA5NzAeFw0yNTA1MTExNTQ4MjJaFw0yNTA1MTIxODUxMjJaMDMxMTAvBgNV BAMTKDZDN0JDRDEzMUI5RjRDNkFFMTQxQjY5NzFCQkE3MjhBMTU4NEI1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVNYr+rleFtOlx/piwDWqpQfB2 FGN97u64L3zXgB7qrfE+soav7kF36+RlYeo9Lfx9lXfC5eSXsYzqCOCKICLceRQX EzWRAw15CP5TRTzM2dfb7bINWRRPph95N9ZzzrWYya4PKWZMYG5wsJcCRE9w61yO IewQvp5LOCYVUnMX/KNwnNI1HY/Ob9m/gYIMbytpIWXJAPVSvkAe3RB7mrVSx8zL IVkXekm8/2gteSTE4So2eKjDFJkaIV1dHQorWBZEg2+jhTLlACGuFIbxi9rvv3lZ ZKDeJgi6ZHQi7bHYmpeKEtcvM9Lja4sLw0hY5VGBbQhY/30wVBB+tDrkqenhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUbHvNExufTGrhQbaXG7pyihWEtZswHwYDVR0j BBgwFoAUSyOCd71FAdw7dUA+dNi1QbdkMJcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVhQWlFVN3BqV3pUd2I0N2E1TXpHdTJNdFNQTkh5RXZrbm9halVnRFBT bmgvMC80QjIzODI3N0JENDUwMURDM0I3NTQwM0U3NEQ4QjU0MUI3NjQzMDk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCMjM4Mjc3QkQ0NTAxREMz Qjc1NDAzRTc0RDhCNTQxQjc2NDMwOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVhQWlFVN3BqV3pUd2I0N2E1TXpHdTJNdFNQTkh5RXZrbm9halVnRFBTbmgvMC80 QjIzODI3N0JENDUwMURDM0I3NTQwM0U3NEQ4QjU0MUI3NjQzMDk3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi23/i6/zQ4l4+A5n2Hxw3E9et3O1w5ISTN2jg5eigNtsFdh8hA5JozHBMzKx 0l8ftOwVYnTfQ+11EjW3xP1inB6dDlk/+OabTfgQWnK4o5YW7dpIBlXsOETrTTz0 v+eD/yM2gURNL9qnNfWNBE1F6/0sgkU0htp+dTCPXJSjp2M8eEcO+zvOZ87IoCSI hdmZ9p9Gr7aLBgrRz1K8WuO4pUqTPAxNDzDOvj9yKgfWR0RRaf0JU2StM+JGwrEm QDbOZ+roOLmYpe/60iiV/DP76EX6sx0FlrUozsx9sD9VTr/f/vY97ubBhSA40ize N3xHlSHcFu+MtRMNJei5okolNA== -----END CERTIFICATE-----Generated at Sun May 11 22:46:56 2025 by rpki-client