$ rpki-client -vvf rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/1/23A710552D56A7337CB18A7C931774ED1B1B6467.mft File: 23A710552D56A7337CB18A7C931774ED1B1B6467.mft (raw, json) Hash identifier: uOyXo4SHrFr0h/eBOy6cSSm5TYcEbZLgEYN07u2H28U= Subject key identifier: 5D:DD:B3:D7:59:E3:F3:E5:02:BF:18:C4:6A:E0:F7:7C:AF:24:CB:64 Authority key identifier: 23:A7:10:55:2D:56:A7:33:7C:B1:8A:7C:93:17:74:ED:1B:1B:64:67 Certificate issuer: /CN=23A710552D56A7337CB18A7C931774ED1B1B6467 Certificate serial: 1408A8C6CC04AED9ACBFA8068F71E99924DF4408 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A710552D56A7337CB18A7C931774ED1B1B6467.cer Subject info access: rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/1/23A710552D56A7337CB18A7C931774ED1B1B6467.mft Manifest number: 021A Signing time: Wed 14 May 2025 15:29:47 +0000 Manifest this update: Wed 14 May 2025 15:24:47 +0000 Manifest next update: Thu 15 May 2025 19:02:47 +0000 Files and hashes: 1: 34352e352e3134302e302f32322d3234203d3e20323639363333.roa (hash: 2cC/YxKpa5WWk6d7ou04Ap7pZQ0ddMCWt1Zp5+Bkf9I=) 2: 23A710552D56A7337CB18A7C931774ED1B1B6467.crl (hash: fqa02rYSkQNSALDAK+R3o+K2CvCgF+WqVQlFJVznbh4=) 3: 323830343a363738343a3a2f33322d3438203d3e20323639363333.roa (hash: OhW57lnpoSo7910ORUxnJ/enjD+PnYq2Rb6cmIDg4/c=) 4: 34352e3139302e34302e302f32322d3234203d3e20323639363333.roa (hash: jJtZx0b1W9gkzCbb4rN2BXxvSPq8A+dKKfw7p9jdZhA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/1/23A710552D56A7337CB18A7C931774ED1B1B6467.crl rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/1/23A710552D56A7337CB18A7C931774ED1B1B6467.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A710552D56A7337CB18A7C931774ED1B1B6467.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 May 2025 19:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:08:a8:c6:cc:04:ae:d9:ac:bf:a8:06:8f:71:e9:99:24:df:44:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A710552D56A7337CB18A7C931774ED1B1B6467 Validity Not Before: May 14 15:24:47 2025 GMT Not After : May 15 19:02:47 2025 GMT Subject: CN=5DDDB3D759E3F3E502BF18C46AE0F77CAF24CB64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:65:e3:6e:36:13:ed:76:52:fd:a6:e6:e7: 09:bc:96:b5:60:30:7f:05:3c:01:3d:61:39:35:72: 1d:5b:02:cc:c9:31:ad:f1:c6:2d:92:f1:06:c8:f5: df:f9:d1:36:a6:1e:cb:ab:50:2e:17:1c:8e:4e:77: 2b:7f:44:75:e0:f6:a1:98:8e:1e:90:3d:3f:ae:0b: 15:e9:7e:66:73:bd:ef:7e:e6:43:32:e2:1b:98:1e: c6:93:9e:ee:59:27:cd:ab:40:3b:4f:ed:7a:06:ae: bf:b2:27:e7:5c:0e:3f:6d:45:24:08:50:34:d9:53: da:1d:66:03:af:55:fc:62:c3:aa:aa:38:74:a0:ce: 45:68:e7:e2:57:8a:3c:4e:e4:40:ee:f3:3e:07:43: 13:13:c5:ec:a4:7b:80:00:37:ad:18:04:c8:65:d0: 64:49:90:88:05:dd:5b:00:b2:9c:e1:d3:0b:7e:fb: 81:e1:91:cc:84:e9:72:8b:43:0d:a3:cf:09:13:d0: 0c:a8:35:b6:46:d7:e8:f0:b2:67:f8:51:42:8d:36: 09:11:dd:8e:23:4a:fd:95:ba:31:e3:a2:5b:c9:a6: e5:01:d5:c3:0d:ae:b3:53:ce:e8:31:17:6d:09:49: 39:24:9f:7f:0b:81:aa:b1:09:71:4c:e3:30:c0:9f: cd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DD:B3:D7:59:E3:F3:E5:02:BF:18:C4:6A:E0:F7:7C:AF:24:CB:64 X509v3 Authority Key Identifier: keyid:23:A7:10:55:2D:56:A7:33:7C:B1:8A:7C:93:17:74:ED:1B:1B:64:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/1/23A710552D56A7337CB18A7C931774ED1B1B6467.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A710552D56A7337CB18A7C931774ED1B1B6467.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/1/23A710552D56A7337CB18A7C931774ED1B1B6467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:06:b7:a7:6b:6b:9f:47:d5:34:13:b3:fb:9e:f4:83:dc:f7: 32:9b:7f:b8:b4:9d:89:c6:3b:39:64:d0:49:40:34:47:4c:a8: 8d:ce:b5:b7:61:d6:f5:b9:dc:48:f1:11:ce:90:85:06:d8:e4: 99:46:78:d3:74:95:ed:99:51:64:4f:d2:cf:b8:7a:32:b7:68: 36:3d:9d:f5:63:5f:0a:15:24:53:4b:f6:9d:09:94:f8:52:d5: a4:29:94:b8:a4:03:5b:33:15:a0:7c:c7:21:0c:ce:ac:06:cd: ea:22:de:75:03:fe:fb:04:a9:60:c4:35:67:8d:2e:24:05:f1: 50:69:49:e5:0b:3f:45:00:03:7c:8f:83:d0:0b:df:73:8f:04: b6:a1:a6:cb:f6:90:a6:c1:45:99:79:78:33:d6:bc:40:9f:d9: 3a:11:cb:e4:de:ac:06:9b:bb:0a:38:20:ba:a6:60:ac:c1:f9: a4:78:7c:4a:78:10:b8:69:83:94:b9:7d:30:05:6d:e8:81:9f: 7f:de:76:13:24:67:17:63:5c:71:95:be:23:17:f1:0c:2a:05: b5:28:c6:50:89:3c:5e:8f:4a:21:59:e1:3e:a0:23:11:05:63: d1:53:38:7e:11:07:a6:c1:e4:3d:86:ef:55:cf:65:02:b1:10: d3:7d:f7:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFAioxswErtmsv6gGj3HpmSTfRAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBNzEwNTUyRDU2QTczMzdDQjE4QTdDOTMxNzc0RUQx QjFCNjQ2NzAeFw0yNTA1MTQxNTI0NDdaFw0yNTA1MTUxOTAyNDdaMDMxMTAvBgNV BAMTKDVERERCM0Q3NTlFM0YzRTUwMkJGMThDNDZBRTBGNzdDQUYyNENCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg92XjbjYT7XZS/abm5wm8lrVg MH8FPAE9YTk1ch1bAszJMa3xxi2S8QbI9d/50TamHsurUC4XHI5Odyt/RHXg9qGY jh6QPT+uCxXpfmZzve9+5kMy4huYHsaTnu5ZJ82rQDtP7XoGrr+yJ+dcDj9tRSQI UDTZU9odZgOvVfxiw6qqOHSgzkVo5+JXijxO5EDu8z4HQxMTxeyke4AAN60YBMhl 0GRJkIgF3VsAspzh0wt++4HhkcyE6XKLQw2jzwkT0AyoNbZG1+jwsmf4UUKNNgkR 3Y4jSv2VujHjolvJpuUB1cMNrrNTzugxF20JSTkkn38LgaqxCXFM4zDAn801AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXd2z11nj8+UCvxjEauD3fK8ky2QwHwYDVR0j BBgwFoAUI6cQVS1WpzN8sYp8kxd07RsbZGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDczRlRFb1BDUXFzcjR1MTdlOGJSTjRjQTVwdUwxWE1IeVF6VEpnTnFm MTgvMS8yM0E3MTA1NTJENTZBNzMzN0NCMThBN0M5MzE3NzRFRDFCMUI2NDY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQTcxMDU1MkQ1NkE3MzM3 Q0IxOEE3QzkzMTc3NEVEMUIxQjY0NjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDczRlRFb1BDUXFzcjR1MTdlOGJSTjRjQTVwdUwxWE1IeVF6VEpnTnFmMTgvMS8y M0E3MTA1NTJENTZBNzMzN0NCMThBN0M5MzE3NzRFRDFCMUI2NDY3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnga3p2trn0fVNBOz+570g9z3Mpt/uLSdicY7OWTQSUA0R0yojc61t2HW9bnc SPERzpCFBtjkmUZ403SV7ZlRZE/Sz7h6MrdoNj2d9WNfChUkU0v2nQmU+FLVpCmU uKQDWzMVoHzHIQzOrAbN6iLedQP++wSpYMQ1Z40uJAXxUGlJ5Qs/RQADfI+D0Avf c48EtqGmy/aQpsFFmXl4M9a8QJ/ZOhHL5N6sBpu7CjgguqZgrMH5pHh8SngQuGmD lLl9MAVt6IGff952EyRnF2NccZW+IxfxDCoFtSjGUIk8Xo9KIVnhPqAjEQVj0VM4 fhEHpsHkPYbvVc9lArEQ0333JQ== -----END CERTIFICATE-----Generated at Thu May 15 07:01:46 2025 by rpki-client