$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft File: 23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft (raw, json) Hash identifier: guTv4peTEjreKBrw08M39dTjasRWjbR9arWGqvb29+M= Subject key identifier: C1:70:6F:D9:96:38:FA:C9:01:4C:FA:DA:FF:24:CD:DE:97:FC:3E:D6 Authority key identifier: 23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6 Certificate issuer: /CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6 Certificate serial: 1897B6BCA781F88FEF9783E162CB7D0A974BFDE0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft Manifest number: 5D Signing time: Mon 12 May 2025 07:33:16 +0000 Manifest this update: Mon 12 May 2025 07:28:16 +0000 Manifest next update: Tue 13 May 2025 11:12:16 +0000 Files and hashes: 1: 23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl (hash: XqwKVw4HnpPNbYylMm7x9UIp1k7yd9yRK6iigileH8M=) 2: 323830343a386166383a633030303a3a2f33342d3334203d3e20323733373034.roa (hash: qAf22STPntaWt88qJT4dHNuQuRpFDP4chhOnFhx0vko=) 3: 323830343a386166383a3a2f33322d3332203d3e20323733373034.roa (hash: 9q+3WZCQelpJ82GHGMPZnl7Km+15Ep1MFsxC6afmR5c=) 4: 323830343a386166383a343030303a3a2f33342d3334203d3e20323733373034.roa (hash: sTMl5oOR+PB27IkCFATLub4H/wVGJc4jQBSRkZbaLIo=) 5: 323830343a386166383a3a2f33342d3334203d3e20323733373034.roa (hash: QXrOFT2cUsRU2r0pxCN+XM3aulT9UCyMbe+iqjUwCNQ=) 6: 323830343a386166383a383030303a3a2f33342d3334203d3e20323733373034.roa (hash: HYoFVQcqZGemQ3ppyPtnBcGaTkZRv9Y586oS+HeRgn0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 11:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:97:b6:bc:a7:81:f8:8f:ef:97:83:e1:62:cb:7d:0a:97:4b:fd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A22E67C9FE9B589275D5C14902FF7C51DADBF6 Validity Not Before: May 12 07:28:16 2025 GMT Not After : May 13 11:12:16 2025 GMT Subject: CN=C1706FD99638FAC9014CFADAFF24CDDE97FC3ED6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b8:c7:f3:97:68:88:3c:77:3e:61:77:56:95: 0f:60:89:e1:cd:fa:c2:6c:a0:f4:70:03:6f:8d:a0: a3:42:22:22:2f:55:25:34:e9:4d:d8:b2:e6:0d:02: 26:06:f4:31:6d:45:4e:88:28:52:65:80:df:52:48: e5:27:33:f1:c6:7c:90:94:43:eb:2a:a1:2f:d3:62: 61:11:e5:72:5f:86:59:4c:da:c7:76:ce:af:63:0a: c4:0f:c3:70:26:ce:3b:cb:53:d6:16:d0:60:9f:83: b0:da:1a:71:33:ad:51:0b:7a:ea:9d:e9:5a:ad:6d: 96:21:56:86:e3:8f:44:87:7e:70:04:dc:31:44:d9: db:da:98:58:d0:1f:b2:59:ea:37:2b:aa:1c:38:b0: 95:2b:4a:5b:31:11:9b:18:8f:5c:9c:d7:4b:9b:33: 2a:71:74:91:e1:80:24:32:4a:99:52:2b:7c:39:34: 36:ee:6e:bb:3b:86:5d:8d:ca:dd:15:28:b0:71:3f: e8:ec:b1:05:b1:ee:26:24:39:69:c5:17:96:18:c4: f3:6d:f7:84:a6:d1:b8:90:5d:f0:05:43:58:61:66: 07:4e:0f:17:60:c4:d3:f4:34:02:b4:c2:11:82:e5: 2e:47:6d:7c:76:9d:92:45:27:b8:76:86:d1:05:ba: 0c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:70:6F:D9:96:38:FA:C9:01:4C:FA:DA:FF:24:CD:DE:97:FC:3E:D6 X509v3 Authority Key Identifier: keyid:23:A2:2E:67:C9:FE:9B:58:92:75:D5:C1:49:02:FF:7C:51:DA:DB:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/23A22E67C9FE9B589275D5C14902FF7C51DADBF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:02:39:03:77:f2:c6:16:92:f3:c9:48:bb:58:9b:8b:32:9d: 26:6a:e7:24:ee:65:98:63:be:a6:a2:e2:57:18:57:be:e6:a6: bc:bc:11:c7:ea:4c:fb:77:1e:b4:9c:7d:1b:f6:20:2e:53:d8: 5b:e5:6d:d2:21:06:38:33:11:64:f8:d0:96:57:66:f9:75:57: 5a:06:b9:7b:f2:1f:28:19:7f:f1:0b:ba:93:57:6c:e3:be:8e: be:be:9e:77:46:8f:9a:90:ca:a9:f1:36:28:e7:f5:ce:e3:0a: 2b:74:85:69:86:6c:7e:f1:3b:49:80:66:a4:0b:60:43:1d:3d: 5e:2a:2d:8e:27:f8:7c:1d:73:44:0e:78:db:da:ec:18:36:7d: 01:0f:4c:63:af:dc:7f:23:fb:52:f9:71:72:b1:d2:9b:dc:f5: 17:e1:93:f3:84:50:c2:66:77:39:b7:5e:2d:42:15:4e:da:64: a3:6d:b6:6f:10:e8:45:8f:a8:b7:2e:98:d2:99:6c:70:d5:c2: 3f:61:68:27:ae:c5:e3:ab:ad:eb:61:74:ee:7e:a8:bf:00:6c: 50:02:66:fe:12:2e:a1:d0:8b:b1:14:bc:6e:34:96:39:9b:b8: 46:08:4a:23:14:c9:ca:2b:58:db:cd:5e:f2:b4:0e:0c:5e:12: 1e:9d:38:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGJe2vKeB+I/vl4PhYst9CpdL/eAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBMjJFNjdDOUZFOUI1ODkyNzVENUMxNDkwMkZGN0M1 MURBREJGNjAeFw0yNTA1MTIwNzI4MTZaFw0yNTA1MTMxMTEyMTZaMDMxMTAvBgNV BAMTKEMxNzA2RkQ5OTYzOEZBQzkwMTRDRkFEQUZGMjRDRERFOTdGQzNFRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGuMfzl2iIPHc+YXdWlQ9gieHN +sJsoPRwA2+NoKNCIiIvVSU06U3YsuYNAiYG9DFtRU6IKFJlgN9SSOUnM/HGfJCU Q+sqoS/TYmER5XJfhllM2sd2zq9jCsQPw3AmzjvLU9YW0GCfg7DaGnEzrVELeuqd 6VqtbZYhVobjj0SHfnAE3DFE2dvamFjQH7JZ6jcrqhw4sJUrSlsxEZsYj1yc10ub MypxdJHhgCQySplSK3w5NDbubrs7hl2Nyt0VKLBxP+jssQWx7iYkOWnFF5YYxPNt 94Sm0biQXfAFQ1hhZgdODxdgxNP0NAK0whGC5S5HbXx2nZJFJ7h2htEFugzhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwXBv2ZY4+skBTPra/yTN3pf8PtYwHwYDVR0j BBgwFoAUI6IuZ8n+m1iSddXBSQL/fFHa2/YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2o5WW5jSkZtb3hqNVBLeEpDMURueHNzS1dKOEFoWUpZM0xaa0VLQkdW WGovMC8yM0EyMkU2N0M5RkU5QjU4OTI3NUQ1QzE0OTAyRkY3QzUxREFEQkY2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQTIyRTY3QzlGRTlCNTg5 Mjc1RDVDMTQ5MDJGRjdDNTFEQURCRjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2o5WW5jSkZtb3hqNVBLeEpDMURueHNzS1dKOEFoWUpZM0xaa0VLQkdWWGovMC8y M0EyMkU2N0M5RkU5QjU4OTI3NUQ1QzE0OTAyRkY3QzUxREFEQkY2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcgI5A3fyxhaS88lIu1ibizKdJmrnJO5lmGO+pqLiVxhXvuamvLwRx+pM+3ce tJx9G/YgLlPYW+Vt0iEGODMRZPjQlldm+XVXWga5e/IfKBl/8Qu6k1ds476Ovr6e d0aPmpDKqfE2KOf1zuMKK3SFaYZsfvE7SYBmpAtgQx09Xiotjif4fB1zRA5429rs GDZ9AQ9MY6/cfyP7UvlxcrHSm9z1F+GT84RQwmZ3ObdeLUIVTtpko222bxDoRY+o ty6Y0plscNXCP2FoJ67F46ut62F07n6ovwBsUAJm/hIuodCLsRS8bjSWOZu4RghK IxTJyitY281e8rQODF4SHp046g== -----END CERTIFICATE-----Generated at Mon May 12 18:57:27 2025 by rpki-client