$ rpki-client -vvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft File: 89B059C223BA0AD41E99D2508292698CA59D4D51.mft (raw, json) Hash identifier: jJXoZ8ip5c94EqEqdRXuc1FC7kuIgdYCnACHwbqVCFk= Subject key identifier: 60:E2:8F:68:85:CA:7B:E3:90:CC:B2:14:9E:31:3B:8A:AF:6C:1B:DD Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51 Certificate issuer: /CN=89B059C223BA0AD41E99D2508292698CA59D4D51 Certificate serial: 21BC55D9F8C280348ACFE348DF0C2146F7BD0F07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft Manifest number: 021D Signing time: Thu 15 May 2025 00:33:00 +0000 Manifest this update: Thu 15 May 2025 00:28:00 +0000 Manifest next update: Fri 16 May 2025 00:42:00 +0000 Files and hashes: 1: 89B059C223BA0AD41E99D2508292698CA59D4D51.crl (hash: 03XrRrL7533ZTNoYMiw6ut6a53kIafZVob1mkfm9Epo=) 2: 3138362e3139332e302e302f32302d3234203d3e203533313334.roa (hash: /70Xr3zykjbquC5V98sp30trWq/8fdvVv+jPi4H5f5s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 May 2025 00:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bc:55:d9:f8:c2:80:34:8a:cf:e3:48:df:0c:21:46:f7:bd:0f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51 Validity Not Before: May 15 00:28:00 2025 GMT Not After : May 16 00:42:00 2025 GMT Subject: CN=60E28F6885CA7BE390CCB2149E313B8AAF6C1BDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d1:ce:1b:f1:1d:0e:11:7c:31:4c:8b:14:9b: 2b:b3:85:9b:cc:20:b0:40:d2:09:20:91:b6:6d:e1: 98:17:b1:f6:48:05:47:c7:b6:f0:76:ac:b6:23:82: 56:4c:73:db:2b:34:67:a0:f3:57:75:3d:2e:1b:21: 8b:56:2d:7a:2b:d6:0f:90:1b:0e:0f:b3:e4:cc:9c: ad:3f:e8:82:dc:4d:09:0c:f4:cd:54:9a:ed:e3:2b: d7:42:64:9c:9e:bb:c4:6b:de:87:2e:c5:47:db:ae: 7e:74:59:ca:0a:38:3d:97:1d:61:b4:24:fe:1d:6e: 11:08:ae:bd:00:89:28:7e:a1:3d:54:e1:02:60:7e: 7c:f3:02:db:77:4c:cc:de:1d:99:fd:da:14:d2:55: 78:76:14:49:c9:92:d4:b1:12:21:55:87:05:1b:69: e7:fe:0b:a7:78:8a:73:83:60:92:6a:47:b9:cb:6b: 5a:61:97:11:34:ba:ae:ed:2a:35:32:de:63:9e:55: 8a:1d:5b:1a:43:d4:7d:61:07:59:95:96:e4:32:d6: 5a:54:ca:cc:50:88:62:e9:25:01:b2:c5:02:f7:4e: a4:90:e3:b3:52:46:43:53:cc:3c:93:a2:93:82:13: 8b:f8:b1:70:ee:5f:27:58:e9:c3:da:9c:1e:09:2d: 03:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E2:8F:68:85:CA:7B:E3:90:CC:B2:14:9E:31:3B:8A:AF:6C:1B:DD X509v3 Authority Key Identifier: keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b5:05:d6:bf:b6:a2:0d:74:a9:95:1c:0c:20:04:b3:19:7d: 5e:f6:cc:e8:52:50:52:35:fa:6d:0c:df:de:b2:be:da:4f:ec: 0f:18:7a:fb:96:1d:6a:8b:06:21:0f:e7:83:e6:0b:ff:69:67: 32:8e:64:2c:bf:05:7d:00:38:9d:0c:ab:d7:c3:64:40:c2:cd: f9:87:0e:e6:10:f3:90:66:b8:e7:66:09:af:3b:94:b4:5c:9b: 1d:27:38:e4:bd:1b:20:5a:d9:d0:32:94:c6:01:12:b0:74:a7: d0:29:11:3f:42:93:55:5b:ac:87:6d:ef:ef:5b:a7:b5:34:09: 84:60:86:b5:e4:08:80:a3:8b:78:7e:f8:a9:18:08:7a:f9:cc: fc:73:f9:50:e6:ec:67:ca:92:ea:cb:c2:d4:34:7f:16:1a:99: eb:51:a0:f8:85:29:4b:f5:29:76:95:29:66:eb:f1:76:c2:3b: cd:1f:4f:e5:a4:78:1c:a4:e0:4d:2d:21:c5:da:ff:31:b8:94: 5b:ee:74:14:e1:6d:24:86:1c:5e:cd:a7:eb:82:8a:fc:96:4e: a6:5b:aa:30:bd:40:51:e4:2f:7a:9e:d0:7c:c5:8f:26:28:c4: 7e:3c:13:34:f1:8a:8f:cb:44:c8:7a:aa:38:aa:76:d4:fa:7b: 8b:8c:71:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIbxV2fjCgDSKz+NI3wwhRve9DwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCMDU5QzIyM0JBMEFENDFFOTlEMjUwODI5MjY5OENB NTlENEQ1MTAeFw0yNTA1MTUwMDI4MDBaFw0yNTA1MTYwMDQyMDBaMDMxMTAvBgNV BAMTKDYwRTI4RjY4ODVDQTdCRTM5MENDQjIxNDlFMzEzQjhBQUY2QzFCREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn0c4b8R0OEXwxTIsUmyuzhZvM ILBA0gkgkbZt4ZgXsfZIBUfHtvB2rLYjglZMc9srNGeg81d1PS4bIYtWLXor1g+Q Gw4Ps+TMnK0/6ILcTQkM9M1Umu3jK9dCZJyeu8Rr3ocuxUfbrn50WcoKOD2XHWG0 JP4dbhEIrr0AiSh+oT1U4QJgfnzzAtt3TMzeHZn92hTSVXh2FEnJktSxEiFVhwUb aef+C6d4inODYJJqR7nLa1phlxE0uq7tKjUy3mOeVYodWxpD1H1hB1mVluQy1lpU ysxQiGLpJQGyxQL3TqSQ47NSRkNTzDyTopOCE4v4sXDuXydY6cPanB4JLQOdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYOKPaIXKe+OQzLIUnjE7iq9sG90wHwYDVR0j BBgwFoAUibBZwiO6CtQemdJQgpJpjKWdTVEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRn eGUvMS84OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5QjA1OUMyMjNCQTBBRDQx RTk5RDI1MDgyOTI2OThDQTU5RDRENTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRneGUvMS84 OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ7UF1r+2og10qZUcDCAEsxl9XvbM6FJQUjX6bQzf3rK+2k/sDxh6+5YdaosG IQ/ng+YL/2lnMo5kLL8FfQA4nQyr18NkQMLN+YcO5hDzkGa452YJrzuUtFybHSc4 5L0bIFrZ0DKUxgESsHSn0CkRP0KTVVush23v71untTQJhGCGteQIgKOLeH74qRgI evnM/HP5UObsZ8qS6svC1DR/FhqZ61Gg+IUpS/UpdpUpZuvxdsI7zR9P5aR4HKTg TS0hxdr/MbiUW+50FOFtJIYcXs2n64KK/JZOpluqML1AUeQvep7QfMWPJijEfjwT NPGKj8tEyHqqOKp21Pp7i4xx4g== -----END CERTIFICATE-----Generated at Thu May 15 16:54:23 2025 by rpki-client