$ rpki-client -vvf rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft File: A653D5055FC338B089E2C732382682788F082F11.mft (raw, json) Hash identifier: xFpb22UJGAaHVGgNg1ODF8AUynlC/aSdAqoo9pHwpZc= Subject key identifier: FE:F2:AF:EE:60:2A:29:A2:B7:46:DE:67:29:05:20:77:5F:57:EC:E4 Authority key identifier: A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11 Certificate issuer: /CN=A653D5055FC338B089E2C732382682788F082F11 Certificate serial: 5559D792255F624692651C9345A4445BEC29C414 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer Subject info access: rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft Manifest number: 021B Signing time: Mon 12 May 2025 17:58:02 +0000 Manifest this update: Mon 12 May 2025 17:53:02 +0000 Manifest next update: Tue 13 May 2025 20:04:02 +0000 Files and hashes: 1: A653D5055FC338B089E2C732382682788F082F11.crl (hash: /BGsvXXnp8GqyajSeroS1w5jph1QM2FTXe0IgqvM8XM=) 2: 323830343a333734343a3a2f33322d313238203d3e20323636343030.roa (hash: 40WaVP8Svoxs+qZKP+igdLA9rTsAwD+SLbjFEI4LGxs=) 3: 34352e3232342e3132382e302f32322d3234203d3e20323636343030.roa (hash: uvd4+Ma33hGXSlt80NtGV3afPFZnfl9FFnr+LvjlmzM=) 4: 3137302e38312e34302e302f32322d3234203d3e20323636343030.roa (hash: fnk6G+39Qn8k6OBmu2nwg3cM52nnrkQXQ11Kyh5Qn1o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 20:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:59:d7:92:25:5f:62:46:92:65:1c:93:45:a4:44:5b:ec:29:c4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A653D5055FC338B089E2C732382682788F082F11 Validity Not Before: May 12 17:53:02 2025 GMT Not After : May 13 20:04:02 2025 GMT Subject: CN=FEF2AFEE602A29A2B746DE67290520775F57ECE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e1:63:bb:88:c9:4e:f7:91:42:e5:7a:6f:a2: bb:6e:92:41:ab:b0:92:41:1c:4f:f5:0a:ba:e8:86: 3c:56:ce:cb:57:c4:bf:d2:f8:1e:a1:cc:aa:9f:9c: b3:45:f8:ec:a4:85:56:f3:c8:70:48:6a:53:71:16: cf:86:78:40:49:4a:3f:fa:d9:85:d4:ea:94:1c:df: a6:5d:b8:94:af:2a:ba:0c:ce:50:3a:17:57:ed:a3: b4:44:7e:d5:c1:89:65:8c:f5:45:04:8c:b3:cf:d7: f0:a3:a7:a6:5c:68:e1:51:51:e9:65:23:82:0d:e8: 19:bb:f5:cf:aa:1c:43:b3:4e:0f:54:c5:59:cb:18: b4:de:69:8f:9f:11:93:c3:ab:79:ce:93:6a:4c:48: 4a:ef:7f:b1:3b:0d:81:18:35:7b:ca:3e:bc:45:c9: 3f:20:23:17:eb:64:91:d3:09:0c:d1:14:99:a9:e1: 2e:39:2c:08:da:31:cc:9c:46:8d:eb:b3:5c:17:ef: 8a:32:03:29:be:f3:b9:f9:46:e3:cd:c6:e3:c9:f3: 65:bf:2d:1f:03:8b:20:92:d1:8e:4b:65:1c:dd:5d: e2:c1:1b:de:3c:67:bd:06:18:f8:03:9f:95:31:2e: 43:f2:12:db:91:c5:15:72:27:59:ee:c5:26:f1:b5: 07:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F2:AF:EE:60:2A:29:A2:B7:46:DE:67:29:05:20:77:5F:57:EC:E4 X509v3 Authority Key Identifier: keyid:A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:37:7f:3f:13:8c:9f:a1:31:8b:5d:0e:65:99:13:46:1d:8e: 16:7a:95:b1:69:12:2a:06:9f:f7:3f:3a:13:c9:c5:dc:89:c4: 6f:c5:f0:b1:16:af:cc:0d:21:3d:80:e2:22:4e:12:98:5d:6e: 65:eb:26:a7:92:a6:87:14:d5:46:93:23:2b:13:0e:05:02:91: 1f:01:50:ed:f4:ab:db:60:ce:3b:77:04:0a:b0:19:39:ba:e4: b0:d7:9b:e9:92:15:48:57:ae:72:ef:91:ae:74:6a:2d:fa:70: 08:52:6f:3c:c3:42:48:43:9f:d2:0b:4e:09:df:80:06:53:d0: ba:07:93:39:25:5e:ec:5e:f3:21:36:04:7d:4d:8e:c4:cd:9d: 18:57:87:ba:2d:a7:d1:b0:5d:04:18:88:60:65:e9:91:6d:c8: ce:d6:1f:1d:bf:23:c6:bc:34:b8:01:b7:89:9a:54:25:31:e1: a4:2d:a9:65:9d:97:1e:1d:62:a9:66:62:07:d2:87:cf:a2:ff: 1d:08:54:b5:71:8f:0e:1f:3d:32:e9:e5:f2:8c:5f:89:56:5d: 12:60:f8:b5:e9:0b:9a:91:32:c2:f2:ef:5a:c2:ed:ac:a1:48: 02:9e:68:ca:9b:67:22:f2:d8:41:2d:11:3c:91:61:6f:31:70: 88:2f:50:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVVnXkiVfYkaSZRyTRaREW+wpxBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1M0Q1MDU1RkMzMzhCMDg5RTJDNzMyMzgyNjgyNzg4 RjA4MkYxMTAeFw0yNTA1MTIxNzUzMDJaFw0yNTA1MTMyMDA0MDJaMDMxMTAvBgNV BAMTKEZFRjJBRkVFNjAyQTI5QTJCNzQ2REU2NzI5MDUyMDc3NUY1N0VDRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4WO7iMlO95FC5XpvortukkGr sJJBHE/1CrrohjxWzstXxL/S+B6hzKqfnLNF+OykhVbzyHBIalNxFs+GeEBJSj/6 2YXU6pQc36ZduJSvKroMzlA6F1fto7REftXBiWWM9UUEjLPP1/Cjp6ZcaOFRUell I4IN6Bm79c+qHEOzTg9UxVnLGLTeaY+fEZPDq3nOk2pMSErvf7E7DYEYNXvKPrxF yT8gIxfrZJHTCQzRFJmp4S45LAjaMcycRo3rs1wX74oyAym+87n5RuPNxuPJ82W/ LR8DiyCS0Y5LZRzdXeLBG948Z70GGPgDn5UxLkPyEtuRxRVyJ1nuxSbxtQdpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/vKv7mAqKaK3Rt5nKQUgd19X7OQwHwYDVR0j BBgwFoAUplPVBV/DOLCJ4scyOCaCeI8ILxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0J2QmNLODNqZkttdGVVWmhKS3FnN1B0a2R4N1h0TnFGZ0RqNGI0cmdv aXgvMS9BNjUzRDUwNTVGQzMzOEIwODlFMkM3MzIzODI2ODI3ODhGMDgyRjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2NTNENTA1NUZDMzM4QjA4 OUUyQzczMjM4MjY4Mjc4OEYwODJGMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0J2QmNLODNqZkttdGVVWmhKS3FnN1B0a2R4N1h0TnFGZ0RqNGI0cmdvaXgvMS9B NjUzRDUwNTVGQzMzOEIwODlFMkM3MzIzODI2ODI3ODhGMDgyRjExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAizd/PxOMn6Exi10OZZkTRh2OFnqVsWkSKgaf9z86E8nF3InEb8XwsRavzA0h PYDiIk4SmF1uZesmp5KmhxTVRpMjKxMOBQKRHwFQ7fSr22DOO3cECrAZObrksNeb 6ZIVSFeucu+RrnRqLfpwCFJvPMNCSEOf0gtOCd+ABlPQugeTOSVe7F7zITYEfU2O xM2dGFeHui2n0bBdBBiIYGXpkW3IztYfHb8jxrw0uAG3iZpUJTHhpC2pZZ2XHh1i qWZiB9KHz6L/HQhUtXGPDh89Munl8oxfiVZdEmD4tekLmpEywvLvWsLtrKFIAp5o yptnIvLYQS0RPJFhbzFwiC9Q6w== -----END CERTIFICATE-----Generated at Mon May 12 21:53:17 2025 by rpki-client