$ rpki-client -vvf rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft File: 71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft (raw, json) Hash identifier: xj5AbO60vzD8hFZSo2bVG7QT8CmeJ4Qk30JI/CGpCfk= Subject key identifier: A1:D3:E9:B1:69:94:D3:CC:DB:EF:4A:36:1C:BA:F7:32:FD:1B:6D:50 Authority key identifier: 71:AC:81:7F:1B:0F:FF:A1:74:AC:AE:38:AC:41:80:AB:ED:E4:55:70 Certificate issuer: /CN=71AC817F1B0FFFA174ACAE38AC4180ABEDE45570 Certificate serial: 120E254DB810842DE5BA4BB9E1075FF696FDBBC6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft Manifest number: 22 Signing time: Sat 10 May 2025 06:09:32 +0000 Manifest this update: Sat 10 May 2025 06:04:32 +0000 Manifest next update: Sun 11 May 2025 07:33:32 +0000 Files and hashes: 1: 323830343a393063303a3a2f33322d3438203d3e203532383535.roa (hash: bFr144qNXiJnjjBqpVx2Hs1FVhxY1dhQgugWIFI/8tA=) 2: 71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl (hash: Glr4a2IKKqAYl27bKuh9799hxEq6O079+hhCaAtSzPo=) 3: 3137372e3130352e38302e302f32302d3234203d3e203532383535.roa (hash: 9BoeCVg5vcg0/gLeGBtgYnvonPaqfp1IXhF41+TABUc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 06:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:0e:25:4d:b8:10:84:2d:e5:ba:4b:b9:e1:07:5f:f6:96:fd:bb:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71AC817F1B0FFFA174ACAE38AC4180ABEDE45570 Validity Not Before: May 10 06:04:32 2025 GMT Not After : May 11 07:33:32 2025 GMT Subject: CN=A1D3E9B16994D3CCDBEF4A361CBAF732FD1B6D50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2b:ad:fd:3f:9a:77:23:a8:a2:6e:5c:2c:24: 18:ae:de:f4:88:34:06:01:bd:42:7e:96:37:cd:6c: 90:5c:ac:cd:12:79:08:82:63:4e:78:fb:39:c8:eb: 33:9c:4d:92:92:68:64:de:a0:c4:d7:eb:f6:67:df: ba:82:03:3c:1d:77:26:82:db:9a:48:19:c2:d0:b4: 2f:77:7a:ed:6d:66:26:f4:c4:a7:84:cc:a9:19:a1: bc:03:9f:6f:29:9c:e1:0e:a4:1b:02:5e:3e:60:c0: 1b:3f:06:c1:fe:b6:6c:90:55:99:75:9b:8b:fd:7b: 13:32:47:62:fe:8c:fd:f9:83:df:1e:54:c6:28:85: e6:47:88:40:5c:62:9c:46:0e:a3:a9:83:c1:22:9c: b4:d5:e2:8d:4d:01:c5:38:3e:8f:e4:79:8d:ff:91: 7b:9b:00:7f:a8:1a:30:91:ab:88:b4:e7:0b:96:05: 5b:83:b6:ee:71:1f:36:c9:bd:ed:4a:e8:f7:ca:49: 06:31:6c:37:99:23:80:93:6b:bd:50:b7:08:30:d8: 40:4f:6f:49:ff:9a:e1:84:29:40:28:4f:bc:e3:48: 55:58:9d:7e:58:e7:5f:78:06:4b:93:0b:63:85:50: 54:94:79:32:f3:92:98:8a:9c:68:6c:ca:97:15:b7: 0e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D3:E9:B1:69:94:D3:CC:DB:EF:4A:36:1C:BA:F7:32:FD:1B:6D:50 X509v3 Authority Key Identifier: keyid:71:AC:81:7F:1B:0F:FF:A1:74:AC:AE:38:AC:41:80:AB:ED:E4:55:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:42:17:36:23:5c:0b:35:d6:4a:11:f8:ed:e2:05:e8:96:52: 56:3b:fd:34:13:85:7e:a7:78:4b:8d:ba:96:33:2b:52:dc:7d: ab:8b:f5:8e:11:10:b7:87:2e:dd:2b:26:74:ec:67:3e:da:51: 8f:5d:42:c9:4c:35:28:47:b3:98:34:21:42:cc:56:c9:19:65: 7e:0e:81:50:9a:74:95:ae:d3:93:a2:bd:6e:07:5c:68:14:95: b9:d2:da:66:55:db:80:38:f1:b7:32:1a:75:86:58:e4:72:34: 64:9e:35:b0:46:7d:48:de:c4:2b:9c:ba:15:00:ca:64:00:ec: f8:f1:75:ec:41:b3:1e:36:ee:40:47:62:6f:f1:24:18:c7:86: 34:35:9c:e8:64:5b:ee:a8:85:33:b4:2d:81:41:ad:7d:e3:23: d1:cc:60:48:7e:b9:32:d4:9b:dc:e5:16:34:94:2b:75:83:52: 6e:43:aa:a0:c8:19:36:30:f1:cd:2a:f6:d1:b9:0d:38:b1:0c: e1:6c:8f:7d:f3:25:d6:7f:aa:68:c5:4b:3f:60:44:98:5e:5a: ac:2b:81:7b:43:e0:39:eb:6e:f8:99:6b:26:f5:1e:60:a3:5d: 8b:96:86:33:59:06:4d:b7:d5:ff:37:a7:1a:e2:5c:86:2f:be: a9:cb:08:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEg4lTbgQhC3luku54Qdf9pb9u8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBQzgxN0YxQjBGRkZBMTc0QUNBRTM4QUM0MTgwQUJF REU0NTU3MDAeFw0yNTA1MTAwNjA0MzJaFw0yNTA1MTEwNzMzMzJaMDMxMTAvBgNV BAMTKEExRDNFOUIxNjk5NEQzQ0NEQkVGNEEzNjFDQkFGNzMyRkQxQjZENTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEK639P5p3I6iiblwsJBiu3vSI NAYBvUJ+ljfNbJBcrM0SeQiCY054+znI6zOcTZKSaGTeoMTX6/Zn37qCAzwddyaC 25pIGcLQtC93eu1tZib0xKeEzKkZobwDn28pnOEOpBsCXj5gwBs/BsH+tmyQVZl1 m4v9exMyR2L+jP35g98eVMYoheZHiEBcYpxGDqOpg8EinLTV4o1NAcU4Po/keY3/ kXubAH+oGjCRq4i05wuWBVuDtu5xHzbJve1K6PfKSQYxbDeZI4CTa71Qtwgw2EBP b0n/muGEKUAoT7zjSFVYnX5Y5194BkuTC2OFUFSUeTLzkpiKnGhsypcVtw6JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUodPpsWmU08zb70o2HLr3Mv0bbVAwHwYDVR0j BBgwFoAUcayBfxsP/6F0rK44rEGAq+3kVXAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZ5aVpoSmpMQkt6d1NwNENUU2k2V2FhaTRLUkREaXFFNEFlblZMY2VC VFAvMC83MUFDODE3RjFCMEZGRkExNzRBQ0FFMzhBQzQxODBBQkVERTQ1NTcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxQUM4MTdGMUIwRkZGQTE3 NEFDQUUzOEFDNDE4MEFCRURFNDU1NzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZ5aVpoSmpMQkt6d1NwNENUU2k2V2FhaTRLUkREaXFFNEFlblZMY2VCVFAvMC83 MUFDODE3RjFCMEZGRkExNzRBQ0FFMzhBQzQxODBBQkVERTQ1NTcwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT0IXNiNcCzXWShH47eIF6JZSVjv9NBOFfqd4S426ljMrUtx9q4v1jhEQt4cu 3SsmdOxnPtpRj11CyUw1KEezmDQhQsxWyRllfg6BUJp0la7Tk6K9bgdcaBSVudLa ZlXbgDjxtzIadYZY5HI0ZJ41sEZ9SN7EK5y6FQDKZADs+PF17EGzHjbuQEdib/Ek GMeGNDWc6GRb7qiFM7QtgUGtfeMj0cxgSH65MtSb3OUWNJQrdYNSbkOqoMgZNjDx zSr20bkNOLEM4WyPffMl1n+qaMVLP2BEmF5arCuBe0PgOetu+JlrJvUeYKNdi5aG M1kGTbfV/zenGuJchi++qcsI7Q== -----END CERTIFICATE-----Generated at Sat May 10 13:18:40 2025 by rpki-client