$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft File: 11CAB655737FE08C031052B869B67F7F82CCE9CC.mft (raw, json) Hash identifier: HzXe1RyzJ84Qq62gQKoqPHE0Wpqb8w/mPSQsYYSfjAU= Subject key identifier: 36:42:A0:B9:71:FE:A9:BF:3E:D6:F8:57:20:E1:BE:0D:1D:39:6F:58 Authority key identifier: 11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC Certificate issuer: /CN=11CAB655737FE08C031052B869B67F7F82CCE9CC Certificate serial: 5E512442CD29884181B2A637BEFDB54384249E0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft Manifest number: 9A Signing time: Wed 14 May 2025 06:30:31 +0000 Manifest this update: Wed 14 May 2025 06:25:31 +0000 Manifest next update: Thu 15 May 2025 09:18:31 +0000 Files and hashes: 1: 34352e342e38302e302f32322d3332203d3e20323635393333.roa (hash: Hjx5RjpzokA4knJgq0k249DxnjzKzpITikPCcGMUtr8=) 2: 323830343a343031343a3a2f33322d313238203d3e20323635393333.roa (hash: s5G6Z9jrVoevflU84bZ+yzQEF2Gyexpuwo5a+N4Yd7w=) 3: 3136342e3136332e302e302f32322d3332203d3e20323635393333.roa (hash: GHvq9r74x2Xc9pO/newiw9yIkLQrbVGTcJbcBnLLpsk=) 4: 11CAB655737FE08C031052B869B67F7F82CCE9CC.crl (hash: sdn+RnYDnk5XHo/Hq47vDfikMkZ9WvEHJEJAt4d5Jr8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.crl rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 May 2025 09:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:51:24:42:cd:29:88:41:81:b2:a6:37:be:fd:b5:43:84:24:9e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11CAB655737FE08C031052B869B67F7F82CCE9CC Validity Not Before: May 14 06:25:31 2025 GMT Not After : May 15 09:18:31 2025 GMT Subject: CN=3642A0B971FEA9BF3ED6F85720E1BE0D1D396F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:c6:05:2b:15:39:9b:4d:7a:ef:4d:47:ec: a1:01:c3:4e:1c:14:9e:3c:f3:7e:f5:8b:12:9e:3a: 6d:35:d7:05:b0:4f:29:b9:0c:a9:0b:4a:76:f7:81: 9a:ce:83:a8:59:d2:6b:55:db:7d:b2:cd:29:26:7d: ac:26:20:49:63:8a:da:f5:39:11:f4:e9:4d:fb:62: 42:10:7f:2d:38:fd:67:13:03:cc:da:26:26:5a:bc: 7b:2c:87:ec:24:19:fc:4c:a1:f9:e3:6a:9b:32:bf: 64:07:97:08:3b:13:98:91:8b:7d:3f:58:bb:47:9f: fd:2b:64:69:eb:81:30:e2:fa:aa:be:ce:8a:1c:26: 32:2c:7c:90:62:c3:96:02:de:ad:1c:c5:a5:b7:0a: e2:1c:47:a3:22:0c:86:e0:ac:0b:e6:01:8f:f4:be: 19:e9:01:60:33:16:6f:15:cd:ea:1f:ff:be:68:6b: a9:b0:0e:77:19:0b:d2:3e:6d:b8:61:00:4e:47:d2: e2:3a:31:26:ae:a8:49:c6:8b:c0:e7:6e:e1:05:c7: c5:07:21:c3:cb:ad:83:7f:6f:46:d6:f0:7a:2b:2e: 46:67:4b:43:45:45:7e:6a:ef:62:f8:89:42:f2:5b: 76:e4:ee:95:13:21:bd:99:2a:d5:0d:65:dd:10:36: 18:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:42:A0:B9:71:FE:A9:BF:3E:D6:F8:57:20:E1:BE:0D:1D:39:6F:58 X509v3 Authority Key Identifier: keyid:11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:43:27:14:b9:04:95:54:46:28:96:54:96:eb:4d:b2:67:89: 65:a3:8c:68:93:35:e1:9e:63:02:3a:0b:e8:bf:11:6f:5d:9b: 94:2c:34:fb:a1:1c:ed:55:dc:ed:2e:12:d9:f7:bd:28:83:c4: fc:82:2e:7b:99:ce:e0:47:a1:f8:67:9a:7a:7c:99:b3:00:02: 9b:cc:dd:fd:dd:e6:9f:65:b2:46:0c:b8:86:db:c5:08:ad:6b: 65:b9:6b:45:45:81:4f:d4:50:a6:a9:79:cd:fc:13:d5:ed:b2: 11:9a:dc:ff:fe:39:d8:e5:0d:44:1c:b7:5f:6b:db:67:26:fb: 42:41:11:05:2e:f8:be:84:d0:39:57:7a:80:22:7f:64:25:bf: bd:7b:e8:c3:74:cb:7f:f6:f6:af:36:5f:d0:f1:40:35:7a:86: fa:18:87:1b:04:a5:85:bd:d3:89:f8:36:bc:54:2a:5a:74:bf: d3:b3:0c:e2:c5:5b:5d:68:b8:ae:4c:cc:6e:e4:80:e4:07:99: 1f:40:08:ca:28:21:3b:68:a4:fd:9a:50:6c:2c:f8:42:5a:16: eb:21:b6:e7:54:0f:71:98:78:b1:9d:17:0f:2b:17:9c:d8:d9: fd:3f:c3:09:e4:61:78:83:43:1d:cb:e2:aa:09:75:2f:6c:66: 95:a0:fe:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXlEkQs0piEGBsqY3vv21Q4QkngswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDQUI2NTU3MzdGRTA4QzAzMTA1MkI4NjlCNjdGN0Y4 MkNDRTlDQzAeFw0yNTA1MTQwNjI1MzFaFw0yNTA1MTUwOTE4MzFaMDMxMTAvBgNV BAMTKDM2NDJBMEI5NzFGRUE5QkYzRUQ2Rjg1NzIwRTFCRTBEMUQzOTZGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/CcYFKxU5m016701H7KEBw04c FJ488371ixKeOm011wWwTym5DKkLSnb3gZrOg6hZ0mtV232yzSkmfawmIEljitr1 ORH06U37YkIQfy04/WcTA8zaJiZavHssh+wkGfxMofnjapsyv2QHlwg7E5iRi30/ WLtHn/0rZGnrgTDi+qq+zoocJjIsfJBiw5YC3q0cxaW3CuIcR6MiDIbgrAvmAY/0 vhnpAWAzFm8Vzeof/75oa6mwDncZC9I+bbhhAE5H0uI6MSauqEnGi8DnbuEFx8UH IcPLrYN/b0bW8HorLkZnS0NFRX5q72L4iULyW3bk7pUTIb2ZKtUNZd0QNhhJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNkKguXH+qb8+1vhXIOG+DR05b1gwHwYDVR0j BBgwFoAUEcq2VXN/4IwDEFK4abZ/f4LM6cwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFlOblF1QTVNR1lqMUpXcEVQeFVUS0hZOWZHaWl2ZHQ3WWJDeWFCaW50 RHEvMC8xMUNBQjY1NTczN0ZFMDhDMDMxMDUyQjg2OUI2N0Y3RjgyQ0NFOUNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQ0FCNjU1NzM3RkUwOEMw MzEwNTJCODY5QjY3RjdGODJDQ0U5Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFlOblF1QTVNR1lqMUpXcEVQeFVUS0hZOWZHaWl2ZHQ3WWJDeWFCaW50RHEvMC8x MUNBQjY1NTczN0ZFMDhDMDMxMDUyQjg2OUI2N0Y3RjgyQ0NFOUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApEMnFLkElVRGKJZUlutNsmeJZaOMaJM14Z5jAjoL6L8Rb12blCw0+6Ec7VXc 7S4S2fe9KIPE/IIue5nO4Eeh+GeaenyZswACm8zd/d3mn2WyRgy4htvFCK1rZblr RUWBT9RQpql5zfwT1e2yEZrc//452OUNRBy3X2vbZyb7QkERBS74voTQOVd6gCJ/ ZCW/vXvow3TLf/b2rzZf0PFANXqG+hiHGwSlhb3Tifg2vFQqWnS/07MM4sVbXWi4 rkzMbuSA5AeZH0AIyighO2ik/ZpQbCz4QloW6yG251QPcZh4sZ0XDysXnNjZ/T/D CeRheINDHcviqgl1L2xmlaD+VA== -----END CERTIFICATE-----Generated at Thu May 15 02:12:30 2025 by rpki-client