$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft File: 2431B5DDF8166029A0033562C55895BEC665B28A.mft (raw, json) Hash identifier: Zv4kiw5Mk0O7LCMo7jeI4Xmu4a8SXQ9D7IMpbnnCa7M= Subject key identifier: F2:35:41:FB:8A:C4:AF:BE:19:66:D2:60:C0:5A:EA:09:E3:2F:18:BB Authority key identifier: 24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A Certificate issuer: /CN=2431B5DDF8166029A0033562C55895BEC665B28A Certificate serial: 4DE14835EDD41A94F4E5714AAEF39C129999BE21 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer Subject info access: rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft Manifest number: D8 Signing time: Mon 12 May 2025 14:05:37 +0000 Manifest this update: Mon 12 May 2025 14:00:37 +0000 Manifest next update: Tue 13 May 2025 16:23:37 +0000 Files and hashes: 1: 3138362e3232342e38342e302f32322d3234203d3e20323632393938.roa (hash: jp7m+hi+KoBsfG3clAu9CPNSCYaNR5ai9lgzM1Y89VY=) 2: 3138362e3232342e38302e302f32342d3234203d3e20323632393938.roa (hash: 2kz4LIFLN85yZUgis3ptm+jWa2pLEzTOV44AlKX2mWM=) 3: 323830343a3964633a3a2f33322d3332203d3e20323632393938.roa (hash: 2UBG7d+bHwFW2FQvesDKoYV9SA5Z+hJVwX3I2WUsCkE=) 4: 3138362e3232342e38332e302f32342d3234203d3e20323632393938.roa (hash: mFUm1wFbrB7vKcngHZCRhhCN5g1DTPFQpJqftmtVKgM=) 5: 2431B5DDF8166029A0033562C55895BEC665B28A.crl (hash: 9C5RaSenzhZ6NuiTrwJIcznIzhkGB/jon6L5kd99zR0=) 6: 3138362e3232342e38302e302f32322d3232203d3e20323632393938.roa (hash: 6z3Jvn11u7WpggXzPyX3eztV00Cy6MKkHbiddjUnBHg=) 7: 3138362e3232342e38312e302f32342d3234203d3e20323632393938.roa (hash: nhvgT2W2XZeOE4hWrQx6ZuaEM7BevykoJaZ3mrzlafM=) 8: 3138362e3232342e38302e302f32312d3231203d3e20323632393938.roa (hash: 799mqDcBHmOpNJcFzHH4u8XHP1EAJbMtaVWcjtNUFMk=) 9: 3138362e3232342e38322e302f32342d3234203d3e20323632393938.roa (hash: 3StsKczt/UfxOpNfPOOnS9kOYhYaRu0pzgmOVeKkvAk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 16:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e1:48:35:ed:d4:1a:94:f4:e5:71:4a:ae:f3:9c:12:99:99:be:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2431B5DDF8166029A0033562C55895BEC665B28A Validity Not Before: May 12 14:00:37 2025 GMT Not After : May 13 16:23:37 2025 GMT Subject: CN=F23541FB8AC4AFBE1966D260C05AEA09E32F18BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:cd:44:8f:79:3c:26:53:eb:fb:33:94:eb:e6: ab:a4:eb:9b:85:24:3e:ae:21:e1:d9:ec:a1:1b:d3: 8a:6b:f1:4e:cf:40:7e:64:96:44:d6:4a:3a:b1:b6: 84:11:1b:c1:df:e8:0d:6e:9b:c7:37:84:c7:86:74: 59:93:c0:58:c3:79:a4:95:34:e2:8c:a4:6f:ac:39: b9:20:08:11:9d:32:ee:ca:e6:e8:18:45:ca:fe:08: 49:71:a1:c1:ec:79:6c:4d:fb:98:64:12:4a:3e:4c: 87:92:29:2a:4b:2d:66:bb:91:cf:62:2f:89:0b:c5: b0:34:dd:d2:6a:48:f8:52:8b:28:3c:84:d6:db:da: 4b:e9:05:4c:eb:65:1f:ff:a6:e2:ee:8b:d0:ac:47: 53:d1:00:08:97:6f:92:98:14:26:3e:a3:83:aa:32: e4:a6:59:c6:93:1e:8c:73:4a:4e:d1:5e:1e:43:45: 51:f5:68:ac:8a:9c:23:0e:75:1b:89:6c:30:10:22: 78:bb:f1:a6:f7:92:20:c5:d6:74:19:46:81:cf:4a: f3:9b:af:cf:32:4e:26:6c:98:4d:ca:c9:46:5b:dc: 3a:40:b2:51:8c:96:8d:0d:47:66:12:2b:50:ef:2d: f1:6a:9f:72:7e:9c:89:e1:f7:ed:9c:37:8f:c3:29: 2e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:35:41:FB:8A:C4:AF:BE:19:66:D2:60:C0:5A:EA:09:E3:2F:18:BB X509v3 Authority Key Identifier: keyid:24:31:B5:DD:F8:16:60:29:A0:03:35:62:C5:58:95:BE:C6:65:B2:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B5DDF8166029A0033562C55895BEC665B28A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/2431B5DDF8166029A0033562C55895BEC665B28A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:23:2f:fd:7b:39:a8:c6:1d:16:6a:c8:0f:2d:b2:15:65:20: 3d:b9:ba:93:92:5f:26:9f:0d:bb:c4:96:e5:17:0d:a4:8f:53: f4:f0:ee:1c:9a:6b:14:33:8b:97:b2:fc:4d:2f:4c:73:23:e7: 97:da:d1:e8:85:31:87:ba:ba:3b:a5:d1:47:5e:30:93:e0:26: fc:29:9f:16:1b:89:f3:42:f5:d2:4e:a7:0f:8e:8e:d8:a4:46: 21:4c:82:8f:8f:3e:9c:a2:97:fb:ab:78:e2:ce:5e:5a:29:9c: 7f:4b:00:22:45:27:12:d3:36:15:4d:cc:aa:ba:4a:78:b5:b8: 00:82:11:dd:3a:bc:f7:7a:59:93:8e:7d:d2:47:e1:3a:be:2b: be:7b:7f:88:8e:01:d1:5e:04:8a:59:22:ee:01:e3:9a:78:a9: b7:e1:76:02:e3:91:2e:cd:03:f7:16:d3:55:22:a7:bc:9a:95: d1:2e:48:03:8b:8f:da:2f:c8:b1:a6:8e:a6:34:22:e8:78:71: d9:81:e3:17:94:14:79:76:98:66:9d:dd:43:d2:e0:96:28:1b: d0:36:6f:81:3c:c8:2e:9e:9f:f8:38:5c:46:f8:f2:40:32:50: d7:8c:65:ca:b7:9b:b4:0f:a4:03:8f:21:9c:a6:fb:d7:7a:1b: 67:1d:72:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTeFINe3UGpT05XFKrvOcEpmZviEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMUI1RERGODE2NjAyOUEwMDMzNTYyQzU1ODk1QkVD NjY1QjI4QTAeFw0yNTA1MTIxNDAwMzdaFw0yNTA1MTMxNjIzMzdaMDMxMTAvBgNV BAMTKEYyMzU0MUZCOEFDNEFGQkUxOTY2RDI2MEMwNUFFQTA5RTMyRjE4QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4zUSPeTwmU+v7M5Tr5quk65uF JD6uIeHZ7KEb04pr8U7PQH5klkTWSjqxtoQRG8Hf6A1um8c3hMeGdFmTwFjDeaSV NOKMpG+sObkgCBGdMu7K5ugYRcr+CElxocHseWxN+5hkEko+TIeSKSpLLWa7kc9i L4kLxbA03dJqSPhSiyg8hNbb2kvpBUzrZR//puLui9CsR1PRAAiXb5KYFCY+o4Oq MuSmWcaTHoxzSk7RXh5DRVH1aKyKnCMOdRuJbDAQIni78ab3kiDF1nQZRoHPSvOb r88yTiZsmE3KyUZb3DpAslGMlo0NR2YSK1DvLfFqn3J+nInh9+2cN4/DKS6JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8jVB+4rEr74ZZtJgwFrqCeMvGLswHwYDVR0j BBgwFoAUJDG13fgWYCmgAzVixViVvsZlsoowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3hnSGJYcXZ2U3I4Q0FKZWNEdDZhN0c3dFNqVzRKYlVmeEZDaXg1amtw UlUvMC8yNDMxQjVEREY4MTY2MDI5QTAwMzM1NjJDNTU4OTVCRUM2NjVCMjhBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0MzFCNURERjgxNjYwMjlB MDAzMzU2MkM1NTg5NUJFQzY2NUIyOEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3hnSGJYcXZ2U3I4Q0FKZWNEdDZhN0c3dFNqVzRKYlVmeEZDaXg1amtwUlUvMC8y NDMxQjVEREY4MTY2MDI5QTAwMzM1NjJDNTU4OTVCRUM2NjVCMjhBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZSMv/Xs5qMYdFmrIDy2yFWUgPbm6k5JfJp8Nu8SW5RcNpI9T9PDuHJprFDOL l7L8TS9McyPnl9rR6IUxh7q6O6XRR14wk+Am/CmfFhuJ80L10k6nD46O2KRGIUyC j48+nKKX+6t44s5eWimcf0sAIkUnEtM2FU3MqrpKeLW4AIIR3Tq893pZk4590kfh Or4rvnt/iI4B0V4Eilki7gHjmnipt+F2AuORLs0D9xbTVSKnvJqV0S5IA4uP2i/I saaOpjQi6Hhx2YHjF5QUeXaYZp3dQ9Lgligb0DZvgTzILp6f+DhcRvjyQDJQ14xl yrebtA+kA48hnKb713obZx1ySg== -----END CERTIFICATE-----Generated at Mon May 12 21:50:29 2025 by rpki-client