$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: CI7EzJMx8s439RPfMxxMzfhou62fbk5nhaTmGDKLZ4c= Subject key identifier: 1D:CD:FC:8A:B1:17:C7:AB:12:6A:9B:33:0D:25:55:39:1A:9F:4F:F4 Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 577BD99828A7B910B0E0259BB39428152FF1395C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: F5 Signing time: Thu 15 May 2025 21:43:25 +0000 Manifest this update: Thu 15 May 2025 21:38:25 +0000 Manifest next update: Fri 16 May 2025 22:05:25 +0000 Files and hashes: 1: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: KTNEcC6Y2VHqLL+qb3kt3ywe3wmftinMc6r4trZIlnw=) 2: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: vZ11sIH1TFGdklC8gxhq4i4rdOQcjEOoAPtd0P1PfnE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 May 2025 22:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7b:d9:98:28:a7:b9:10:b0:e0:25:9b:b3:94:28:15:2f:f1:39:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: May 15 21:38:25 2025 GMT Not After : May 16 22:05:25 2025 GMT Subject: CN=1DCDFC8AB117C7AB126A9B330D2555391A9F4FF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b9:5c:19:26:64:71:49:f8:01:ae:fc:b9:f5: b3:ba:d0:5b:45:6e:af:60:db:0e:d5:79:f3:5a:e6: e4:c8:21:71:19:18:6c:d7:22:50:1f:f7:9f:5a:aa: 92:58:50:00:8b:51:19:01:4c:e5:8d:9f:1e:61:b2: be:4e:cb:7c:53:7d:8c:29:f9:95:eb:dd:71:c0:96: f3:6d:fd:fb:55:00:a1:fe:fc:9a:fe:5d:3e:0f:6f: 4d:43:30:9a:62:a8:be:46:c9:c6:88:43:76:61:0f: 44:56:83:b4:a5:64:be:3f:39:b3:f3:16:cc:6a:32: 22:d6:ef:44:41:9f:11:16:a0:6f:8c:33:88:36:92: 85:dd:40:70:ba:fc:90:94:96:4d:75:70:fb:6c:97: 1b:f3:28:38:81:ae:25:ef:01:c6:9d:c3:c2:a0:b6: c2:7b:52:89:90:a1:7b:8d:a3:3e:a9:31:b3:59:25: 17:70:d8:7b:29:ea:98:1f:a2:72:85:b3:2c:45:7d: 36:8a:8d:3f:05:8b:74:8d:73:ca:cc:2f:ff:84:d6: fa:e7:47:df:3f:f4:db:ac:8d:b5:f4:88:b8:37:f8: 0c:d5:86:ed:70:2f:3c:70:84:f3:db:0c:a3:c3:bf: 14:77:09:14:0b:5a:1b:d0:fb:72:c7:7f:a7:cc:d6: f8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CD:FC:8A:B1:17:C7:AB:12:6A:9B:33:0D:25:55:39:1A:9F:4F:F4 X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:40:da:8d:46:ed:66:bc:02:22:1a:25:79:ce:c3:3b:15:22: 4a:6d:16:ba:d3:42:e4:5b:e7:a5:90:4f:8d:d1:b2:9a:e6:d2: 24:b3:d3:be:1b:ad:d2:72:cf:5e:8e:13:38:29:8e:a0:e9:0b: b8:30:37:1c:22:25:88:70:65:52:94:d1:28:ee:ac:89:fc:5a: 23:8f:a5:78:6c:f1:1f:ba:7d:a1:98:e3:22:47:1e:5f:fc:08: ed:ca:8c:d0:ed:e3:48:85:a4:93:bf:e4:d0:26:40:7b:42:79: f1:42:d3:5f:45:f7:7c:de:59:30:fc:31:11:03:99:b2:3d:f1: 6e:14:fd:59:87:c7:ae:cb:50:98:b6:27:a2:cb:64:ee:1c:61: c8:7c:16:04:16:31:e5:fb:12:8e:df:38:84:cd:c3:4d:bc:89: 16:65:cf:7f:1a:42:19:6e:0d:a7:48:e4:7d:9e:f4:57:49:3c: ee:64:07:a7:08:7e:67:cf:be:ef:7d:b1:d9:2c:0f:b2:a9:00: bf:87:ce:45:47:4f:54:7e:f1:0e:6f:68:2e:16:d8:1e:be:48: cd:ae:76:fd:6f:a7:b8:05:1f:10:75:2a:7e:3f:33:ff:02:f1: 03:d7:73:2c:f1:27:5d:00:d0:b1:2b:4e:db:52:6f:db:bb:cd: f7:75:98:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUV3vZmCinuRCw4CWbs5QoFS/xOVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNTA1MTUyMTM4MjVaFw0yNTA1MTYyMjA1MjVaMDMxMTAvBgNV BAMTKDFEQ0RGQzhBQjExN0M3QUIxMjZBOUIzMzBEMjU1NTM5MUE5RjRGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNuVwZJmRxSfgBrvy59bO60FtF bq9g2w7VefNa5uTIIXEZGGzXIlAf959aqpJYUACLURkBTOWNnx5hsr5Oy3xTfYwp +ZXr3XHAlvNt/ftVAKH+/Jr+XT4Pb01DMJpiqL5GycaIQ3ZhD0RWg7SlZL4/ObPz FsxqMiLW70RBnxEWoG+MM4g2koXdQHC6/JCUlk11cPtslxvzKDiBriXvAcadw8Kg tsJ7UomQoXuNoz6pMbNZJRdw2Hsp6pgfonKFsyxFfTaKjT8Fi3SNc8rML/+E1vrn R98/9NusjbX0iLg3+AzVhu1wLzxwhPPbDKPDvxR3CRQLWhvQ+3LHf6fM1vhpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHc38irEXx6sSapszDSVVORqfT/QwHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk0DajUbtZrwCIholec7DOxUiSm0WutNC5FvnpZBPjdGymubSJLPTvhut0nLP Xo4TOCmOoOkLuDA3HCIliHBlUpTRKO6sifxaI4+leGzxH7p9oZjjIkceX/wI7cqM 0O3jSIWkk7/k0CZAe0J58ULTX0X3fN5ZMPwxEQOZsj3xbhT9WYfHrstQmLYnostk 7hxhyHwWBBYx5fsSjt84hM3DTbyJFmXPfxpCGW4Np0jkfZ70V0k87mQHpwh+Z8++ 732x2SwPsqkAv4fORUdPVH7xDm9oLhbYHr5Iza52/W+nuAUfEHUqfj8z/wLxA9dz LPEnXQDQsStO21Jv27vN93WYBg== -----END CERTIFICATE-----Generated at Fri May 16 09:54:06 2025 by rpki-client