$ rpki-client -vvf rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.mft File: 45FC107BB0B6654452677B1D69CD570ED537BDB4.mft (raw, json) Hash identifier: 808berVsPamhSmon84aTliTsIGkdAYEC8sAEIQmoYDU= Subject key identifier: 4B:9C:7A:E3:75:BC:33:F9:D3:29:39:01:80:30:42:50:20:9B:CA:97 Authority key identifier: 45:FC:10:7B:B0:B6:65:44:52:67:7B:1D:69:CD:57:0E:D5:37:BD:B4 Certificate issuer: /CN=45FC107BB0B6654452677B1D69CD570ED537BDB4 Certificate serial: 2F9C459314D4497910E8CB38658CD335DF2DC143 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.cer Subject info access: rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.mft Manifest number: 021A Signing time: Thu 15 May 2025 08:26:08 +0000 Manifest this update: Thu 15 May 2025 08:21:08 +0000 Manifest next update: Fri 16 May 2025 12:19:08 +0000 Files and hashes: 1: 3138362e3233332e35362e302f32322d3234203d3e20323633303639.roa (hash: OKK6wIbmP9p6692IkMTXWwnyyXwXH6h/PklgbCBfx9E=) 2: 3136382e302e3132382e302f32322d3234203d3e20323633303639.roa (hash: slK6BDUo+S4KYuMkXgrqWUayruLAmHD7Gf737hqUw5k=) 3: 45FC107BB0B6654452677B1D69CD570ED537BDB4.crl (hash: Mgz9EQnLDWKCqnq/VtZOIDGjNzEAPQMR2lQbLtYHP2k=) 4: 323830343a326364633a3a2f33322d3438203d3e20323633303639.roa (hash: wzIvjbNgLaJk3lbJfyn+JEuHO0/6JaTbJATnDd6oGdw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.crl rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 May 2025 12:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:9c:45:93:14:d4:49:79:10:e8:cb:38:65:8c:d3:35:df:2d:c1:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FC107BB0B6654452677B1D69CD570ED537BDB4 Validity Not Before: May 15 08:21:08 2025 GMT Not After : May 16 12:19:08 2025 GMT Subject: CN=4B9C7AE375BC33F9D329390180304250209BCA97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:59:bb:2f:c3:3e:4d:9c:71:f2:c6:59:68: 0c:e9:00:18:3d:8c:17:8a:55:6b:1c:58:75:3e:75: b7:d8:3a:5a:80:7b:5b:66:ac:24:e5:fd:ad:8b:c3: 2c:57:58:38:f3:81:56:c0:c5:f7:ce:dc:3f:77:f5: c3:7c:04:a2:7e:12:36:17:a9:5c:87:c9:38:03:2b: 39:2c:2b:db:68:a3:28:e3:fa:fa:2e:8e:ad:10:10: e5:01:60:ac:ea:f4:29:04:a6:f4:ad:c1:55:34:6a: b2:f9:19:d2:a1:66:a7:36:bf:a0:d4:47:af:3a:89: 78:20:fd:36:6d:17:17:9d:ce:05:8d:d9:8f:16:56: b1:1c:b3:96:12:db:c6:14:1a:5b:65:27:18:6c:83: 60:b6:60:52:83:51:24:d9:33:7e:52:74:89:e9:aa: 5d:cc:c0:44:91:1b:b8:4b:3c:2d:c4:b7:b7:6e:80: a6:a5:bd:7d:01:b1:d9:94:a0:a3:b2:b5:82:e7:db: 4d:b3:04:5a:d2:4a:5d:f8:1b:cd:9d:39:71:7e:43: 78:fd:6d:e8:95:00:b1:1a:0a:3b:76:29:a3:39:50: 6e:d8:8b:33:dd:f3:af:e1:a9:c9:81:b4:61:7f:5f: 53:24:fa:e6:59:cf:f1:30:6f:84:2c:c2:d9:d9:9a: 9a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9C:7A:E3:75:BC:33:F9:D3:29:39:01:80:30:42:50:20:9B:CA:97 X509v3 Authority Key Identifier: keyid:45:FC:10:7B:B0:B6:65:44:52:67:7B:1D:69:CD:57:0E:D5:37:BD:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/1/45FC107BB0B6654452677B1D69CD570ED537BDB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:61:ac:84:94:08:b7:1d:ae:53:9f:8f:91:10:cd:a1:f8:7c: 0f:f3:2f:8b:d4:c3:8c:a8:a0:7d:46:cf:ae:44:20:1e:0b:36: 7a:d1:e2:5d:b6:ae:37:b7:a5:8a:e2:3b:39:99:17:21:1c:09: 64:3b:c3:82:54:4d:45:35:45:9e:c2:95:a2:03:20:6b:5d:0d: 0c:c8:9a:39:96:91:52:a1:37:60:be:fb:68:40:66:1e:58:f5: a1:12:a6:e3:e9:ba:b4:36:25:07:16:34:ff:82:40:60:48:f7: b3:dd:b2:ae:73:8e:86:a5:0d:aa:fd:0e:df:af:68:55:21:1a: b7:85:32:db:24:9d:c1:f2:5d:4a:c9:1c:67:f0:30:fb:61:3b: da:53:e5:d2:2c:8e:b1:dd:54:d7:c5:15:d5:c4:fa:79:64:8d: af:a5:ac:d8:89:1f:e1:6a:b1:71:b4:18:94:b2:2e:25:ae:c9: 8d:dc:e4:82:2e:90:4e:51:01:72:f9:e8:11:fa:da:77:49:22: f9:13:ed:2b:23:e8:30:35:fc:1b:63:38:06:5d:88:ff:b3:40: 2e:42:70:70:6a:51:78:e4:a3:ea:6e:9c:e1:c0:6a:d3:de:3e: 0d:4f:de:bb:7e:7e:8e:27:ce:a6:f1:d6:66:36:f5:c2:61:cd: af:4a:ab:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL5xFkxTUSXkQ6Ms4ZYzTNd8twUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGQzEwN0JCMEI2NjU0NDUyNjc3QjFENjlDRDU3MEVE NTM3QkRCNDAeFw0yNTA1MTUwODIxMDhaFw0yNTA1MTYxMjE5MDhaMDMxMTAvBgNV BAMTKDRCOUM3QUUzNzVCQzMzRjlEMzI5MzkwMTgwMzA0MjUwMjA5QkNBOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EFm7L8M+TZxx8sZZaAzpABg9 jBeKVWscWHU+dbfYOlqAe1tmrCTl/a2LwyxXWDjzgVbAxffO3D939cN8BKJ+EjYX qVyHyTgDKzksK9tooyjj+voujq0QEOUBYKzq9CkEpvStwVU0arL5GdKhZqc2v6DU R686iXgg/TZtFxedzgWN2Y8WVrEcs5YS28YUGltlJxhsg2C2YFKDUSTZM35SdInp ql3MwESRG7hLPC3Et7dugKalvX0BsdmUoKOytYLn202zBFrSSl34G82dOXF+Q3j9 beiVALEaCjt2KaM5UG7YizPd86/hqcmBtGF/X1Mk+uZZz/Ewb4QswtnZmprVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUS5x643W8M/nTKTkBgDBCUCCbypcwHwYDVR0j BBgwFoAURfwQe7C2ZURSZ3sdac1XDtU3vbQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRldBWWpXMVVNellDNFRwanpONnRXdlMzN0gyYmlwS2Z3VTdLREIzR2da WDEvMS80NUZDMTA3QkIwQjY2NTQ0NTI2NzdCMUQ2OUNENTcwRUQ1MzdCREI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RkMxMDdCQjBCNjY1NDQ1 MjY3N0IxRDY5Q0Q1NzBFRDUzN0JEQjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RldBWWpXMVVNellDNFRwanpONnRXdlMzN0gyYmlwS2Z3VTdLREIzR2daWDEvMS80 NUZDMTA3QkIwQjY2NTQ0NTI2NzdCMUQ2OUNENTcwRUQ1MzdCREI0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWGGshJQItx2uU5+PkRDNofh8D/Mvi9TDjKigfUbPrkQgHgs2etHiXbauN7el iuI7OZkXIRwJZDvDglRNRTVFnsKVogMga10NDMiaOZaRUqE3YL77aEBmHlj1oRKm 4+m6tDYlBxY0/4JAYEj3s92yrnOOhqUNqv0O369oVSEat4Uy2ySdwfJdSskcZ/Aw +2E72lPl0iyOsd1U18UV1cT6eWSNr6Ws2Ikf4WqxcbQYlLIuJa7Jjdzkgi6QTlEB cvnoEfrad0ki+RPtKyPoMDX8G2M4Bl2I/7NALkJwcGpReOSj6m6c4cBq094+DU/e u35+jifOpvHWZjb1wmHNr0qrxw== -----END CERTIFICATE-----Generated at Thu May 15 17:00:37 2025 by rpki-client