$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft File: 89F33609E2B118C8ED9A105548D2D01FD6E38729.mft (raw, json) Hash identifier: aFmUj0uw3irTB8vkL7kwAqjAJZfXw1oSyxHu2dL1f6I= Subject key identifier: 96:28:1C:87:46:01:FF:2A:AF:A4:BC:E3:E4:21:5A:17:AB:10:CC:DE Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 Certificate issuer: /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Certificate serial: 5C6AB7D6E5B4348B58DBF6C2BDDB727E639128E9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft Manifest number: 0217 Signing time: Sat 10 May 2025 03:32:28 +0000 Manifest this update: Sat 10 May 2025 03:27:28 +0000 Manifest next update: Sun 11 May 2025 05:06:28 +0000 Files and hashes: 1: 3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (hash: 91gQ1OFtC7i3YwbFOdgAOt94iN2xUARUXKGh62+Ssos=) 2: 3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa (hash: bMO8E7JDP414YIw6qvyG05VpeLGja7y87JGV9snRtok=) 3: 323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (hash: yCRnKe7Cfo4f5weE5YMpi/ZO3/1Psrg+aJlLbswl12Y=) 4: 89F33609E2B118C8ED9A105548D2D01FD6E38729.crl (hash: fRsByW6B97h4w3sPNTr4XZi80vIXse/ciiAj2K+BgAc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 01:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:6a:b7:d6:e5:b4:34:8b:58:db:f6:c2:bd:db:72:7e:63:91:28:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Validity Not Before: May 10 03:27:28 2025 GMT Not After : May 11 05:06:28 2025 GMT Subject: CN=96281C874601FF2AAFA4BCE3E4215A17AB10CCDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:04:1b:0f:ad:08:cf:6e:db:21:d1:02:b3:b2: 80:cf:80:1b:38:3f:a3:2e:66:82:e5:27:48:e2:68: 7b:23:6f:3f:e0:4a:de:b1:93:5d:f4:7d:2a:b3:3e: ce:d6:e6:cc:92:5e:18:df:4b:2c:50:3a:0b:31:d9: 50:7e:a4:9d:21:1b:a9:30:6a:9c:97:cb:95:46:98: a3:24:86:fa:72:47:2c:5a:20:74:6d:dd:60:36:0e: 8d:5f:5b:db:46:58:15:b8:52:74:7d:48:8e:90:f1: 2e:03:b1:8d:c4:73:f1:1a:49:8a:4f:99:1c:c9:24: b7:d9:f3:15:06:05:2f:d2:6b:64:d3:00:0d:69:af: 8e:86:f3:55:04:99:0f:03:7f:63:b8:61:41:a5:5d: 70:a1:1c:d9:ef:9f:25:e0:12:00:ed:8c:b4:10:f4: 8f:7a:96:8f:93:9e:17:88:ed:33:47:f6:34:7b:2c: 8c:d7:18:27:96:c1:1b:5b:d4:5b:0c:f9:0a:c4:93: 77:50:37:1c:a6:42:cf:5c:b5:38:19:84:bb:55:b7: c7:28:40:ca:96:65:71:b1:43:d7:91:85:61:f8:30: 8c:73:e1:82:c9:0f:4c:2f:a8:bc:d2:bc:c5:c3:b0: 08:9e:a2:9a:30:07:4f:93:60:63:f7:cb:62:09:9f: ee:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:28:1C:87:46:01:FF:2A:AF:A4:BC:E3:E4:21:5A:17:AB:10:CC:DE X509v3 Authority Key Identifier: keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:65:60:da:89:4a:d0:25:e0:14:95:18:68:a4:c1:b9:2a:44: f1:bb:21:ab:fe:05:40:54:9a:2e:50:c1:c6:e1:91:62:a1:bc: fb:c4:09:b9:a3:17:e0:87:c7:80:1f:35:e3:5a:b2:f1:3b:11: 84:d7:d8:b0:4d:e1:9f:24:09:6a:a4:60:2b:22:5b:cd:d0:c9: 4d:96:c3:3c:ce:8b:48:fa:c3:0a:8a:30:e4:9c:85:df:41:59: 7b:33:02:6e:17:d3:d3:cf:49:16:c3:f7:74:15:49:24:8b:65: 5f:0e:f2:e4:3e:0e:a5:8c:e3:9d:3b:d4:89:19:55:d1:63:da: 14:3d:9d:5f:a9:14:a9:a9:f5:da:79:3c:8e:d4:e0:da:b3:8e: c3:27:98:0f:a6:47:82:c5:e4:37:27:61:af:3c:a6:76:93:0c: e8:11:15:a2:28:0c:fd:4e:68:3c:ef:a5:a0:7b:24:96:df:aa: 41:97:35:dd:8e:86:c2:25:90:aa:cb:1f:c2:05:42:98:cd:8f: cf:66:78:30:70:ed:d5:8a:14:ff:a3:07:b8:a4:5e:f5:70:a8: 16:d5:cd:e8:23:96:6d:96:46:7a:c7:74:d3:f1:34:d1:ac:8b: 2f:68:93:fd:de:59:79:3b:fe:bb:8e:99:66:56:34:7b:50:61: c1:f3:ac:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXGq31uW0NItY2/bCvdtyfmORKOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlGMzM2MDlFMkIxMThDOEVEOUExMDU1NDhEMkQwMUZE NkUzODcyOTAeFw0yNTA1MTAwMzI3MjhaFw0yNTA1MTEwNTA2MjhaMDMxMTAvBgNV BAMTKDk2MjgxQzg3NDYwMUZGMkFBRkE0QkNFM0U0MjE1QTE3QUIxMENDREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcBBsPrQjPbtsh0QKzsoDPgBs4 P6MuZoLlJ0jiaHsjbz/gSt6xk130fSqzPs7W5sySXhjfSyxQOgsx2VB+pJ0hG6kw apyXy5VGmKMkhvpyRyxaIHRt3WA2Do1fW9tGWBW4UnR9SI6Q8S4DsY3Ec/EaSYpP mRzJJLfZ8xUGBS/Sa2TTAA1pr46G81UEmQ8Df2O4YUGlXXChHNnvnyXgEgDtjLQQ 9I96lo+TnheI7TNH9jR7LIzXGCeWwRtb1FsM+QrEk3dQNxymQs9ctTgZhLtVt8co QMqWZXGxQ9eRhWH4MIxz4YLJD0wvqLzSvMXDsAieopowB0+TYGP3y2IJn+7bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUligch0YB/yqvpLzj5CFaF6sQzN4wHwYDVR0j BBgwFoAUifM2CeKxGMjtmhBVSNLQH9bjhykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4 ekUvMS84OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RjMzNjA5RTJCMTE4QzhF RDlBMTA1NTQ4RDJEMDFGRDZFMzg3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4ekUvMS84 OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaGVg2olK0CXgFJUYaKTBuSpE8bshq/4FQFSaLlDBxuGRYqG8+8QJuaMX4IfH gB8141qy8TsRhNfYsE3hnyQJaqRgKyJbzdDJTZbDPM6LSPrDCoow5JyF30FZezMC bhfT089JFsP3dBVJJItlXw7y5D4OpYzjnTvUiRlV0WPaFD2dX6kUqan12nk8jtTg 2rOOwyeYD6ZHgsXkNydhrzymdpMM6BEVoigM/U5oPO+loHsklt+qQZc13Y6GwiWQ qssfwgVCmM2Pz2Z4MHDt1YoU/6MHuKRe9XCoFtXN6COWbZZGesd00/E00ayLL2iT /d5ZeTv+u46ZZlY0e1BhwfOsFQ== -----END CERTIFICATE-----Generated at Sat May 10 05:00:19 2025 by rpki-client