$ rpki-client -vvf rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.mft File: 645AC0C948A5FF6189D9DCFEFA1388685485BEB1.mft (raw, json) Hash identifier: KKbLP5Gtf+4AadxDMsL6xKsBkcMRPKF7Iy0qk9lM9yc= Subject key identifier: F8:8D:B4:4E:98:33:B6:32:60:AC:7D:75:19:C2:C8:58:19:14:99:56 Authority key identifier: 64:5A:C0:C9:48:A5:FF:61:89:D9:DC:FE:FA:13:88:68:54:85:BE:B1 Certificate issuer: /CN=645AC0C948A5FF6189D9DCFEFA1388685485BEB1 Certificate serial: 3B69E6AC8B94580F97A0CA15505C29C7B3216092 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer Subject info access: rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.mft Manifest number: 01D1 Signing time: Sun 11 May 2025 20:42:42 +0000 Manifest this update: Sun 11 May 2025 20:37:42 +0000 Manifest next update: Tue 13 May 2025 00:34:42 +0000 Files and hashes: 1: 323830343a64303a3a2f33322d313238203d3e203238313435.roa (hash: EXTxpgO0AK9Lfd/XC4C/TNA2mIke0Gbv14BN62ZjeEM=) 2: 3138372e34392e3132382e302f32302d3332203d3e203238313435.roa (hash: B5P0Yd/yA7nCcul2kq2Tm+ugfqo9xG13dNqYFnAXqXQ=) 3: 3138362e3139322e3232342e302f32302d3332203d3e203238313435.roa (hash: g5HtrSB8+ATbytA7CXnSAFYe2BcXTkwIxwLrGj3aZm4=) 4: 645AC0C948A5FF6189D9DCFEFA1388685485BEB1.crl (hash: MW+Xsw5Q0NmHglt4sJ84K5F1aXTYtbAADvTQVVdkZGk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.crl rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 00:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:69:e6:ac:8b:94:58:0f:97:a0:ca:15:50:5c:29:c7:b3:21:60:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=645AC0C948A5FF6189D9DCFEFA1388685485BEB1 Validity Not Before: May 11 20:37:42 2025 GMT Not After : May 13 00:34:42 2025 GMT Subject: CN=F88DB44E9833B63260AC7D7519C2C85819149956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:0b:45:53:84:a0:c7:66:c7:43:45:78:93: 4e:c5:58:11:84:e3:13:29:cb:4c:b3:00:74:7c:9c: 62:13:0b:d4:a1:43:b8:38:a2:20:5d:69:9d:43:68: 90:c4:5f:bd:03:18:a4:c9:f4:b3:9f:c3:20:00:b4: a1:d2:f5:f1:c7:41:78:39:89:b8:7e:8f:52:29:6a: aa:01:e3:41:2f:56:ad:ff:2e:00:02:d5:bf:df:5b: 6b:c3:17:d6:ff:7c:86:e3:34:5f:13:73:4b:4e:f8: 77:c7:99:17:2f:dd:88:27:1d:4d:ae:6e:56:06:8a: 0a:de:35:cc:12:0f:70:8b:dd:ca:7c:ac:ec:90:42: 13:b4:56:42:22:d9:c5:65:d2:ee:ae:6c:60:29:8e: 90:f2:c4:db:21:12:6f:fe:ab:cb:bc:6e:df:29:1e: 2b:d7:84:7c:2b:2e:2f:9e:4e:84:45:bf:74:ee:49: 11:79:35:e3:b2:ef:34:79:aa:1c:32:cf:28:c4:f8: 6f:5a:55:9f:ed:8e:c0:46:35:5a:5b:1c:6c:9e:17: e5:51:1e:6d:70:f9:96:00:56:93:e8:c4:09:05:46: a9:e5:35:1d:9e:b5:c6:b8:38:ac:c3:b2:e3:2b:27: 8e:1b:af:47:2a:f0:c9:c3:79:58:58:cb:ba:b2:96: cd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8D:B4:4E:98:33:B6:32:60:AC:7D:75:19:C2:C8:58:19:14:99:56 X509v3 Authority Key Identifier: keyid:64:5A:C0:C9:48:A5:FF:61:89:D9:DC:FE:FA:13:88:68:54:85:BE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:39:d4:36:d1:80:33:55:af:bf:24:45:97:db:99:7c:5e:9c: 66:d2:8d:0e:a2:61:0e:ca:66:ca:18:60:e9:2d:0d:5a:9a:33: 5a:b6:05:e6:4b:6b:bf:37:e1:8a:ef:d3:b8:2f:c4:38:29:d4: c0:af:9e:c1:b9:4d:73:62:65:fb:9a:f3:14:d9:08:90:06:52: 20:85:fb:5c:18:63:1a:5d:ce:f6:f8:17:0f:fe:57:94:1d:8c: 3f:2b:ac:f8:84:80:73:22:bd:99:c7:c6:b7:ed:a3:12:20:df: 17:c5:0b:97:77:d6:20:89:94:d5:e6:83:6b:c4:5a:2f:5b:94: 25:23:bc:1c:b5:53:06:7d:da:d0:6d:d5:56:52:b8:50:be:97: f5:3e:b3:6a:03:d2:8e:9c:a8:a3:75:00:09:e3:f4:94:de:94: 7a:ce:a0:11:a2:f0:c9:ab:a5:4a:11:38:5a:dd:d0:3b:1a:07: 29:91:1f:65:b2:d3:38:f3:a6:1d:82:c5:b3:7b:7c:9b:9e:a2: 20:d0:e1:9c:da:23:a1:19:06:a9:64:76:4a:9e:57:a1:78:83: 46:ef:f0:af:a2:d7:e7:50:8e:02:c0:d4:f5:f4:82:46:0f:4d: 88:85:d6:08:cb:1d:87:7e:d4:31:23:c8:a5:96:15:01:e1:cf: ba:37:b6:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO2nmrIuUWA+XoMoVUFwpx7MhYJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ1QUMwQzk0OEE1RkY2MTg5RDlEQ0ZFRkExMzg4Njg1 NDg1QkVCMTAeFw0yNTA1MTEyMDM3NDJaFw0yNTA1MTMwMDM0NDJaMDMxMTAvBgNV BAMTKEY4OERCNDRFOTgzM0I2MzI2MEFDN0Q3NTE5QzJDODU4MTkxNDk5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfBwtFU4Sgx2bHQ0V4k07FWBGE 4xMpy0yzAHR8nGITC9ShQ7g4oiBdaZ1DaJDEX70DGKTJ9LOfwyAAtKHS9fHHQXg5 ibh+j1IpaqoB40EvVq3/LgAC1b/fW2vDF9b/fIbjNF8Tc0tO+HfHmRcv3YgnHU2u blYGigreNcwSD3CL3cp8rOyQQhO0VkIi2cVl0u6ubGApjpDyxNshEm/+q8u8bt8p HivXhHwrLi+eToRFv3TuSRF5NeOy7zR5qhwyzyjE+G9aVZ/tjsBGNVpbHGyeF+VR Hm1w+ZYAVpPoxAkFRqnlNR2etca4OKzDsuMrJ44br0cq8MnDeVhYy7qyls0HAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+I20TpgztjJgrH11GcLIWBkUmVYwHwYDVR0j BBgwFoAUZFrAyUil/2GJ2dz++hOIaFSFvrEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR1dGaG03aE1panV6M0Raa1EyUnQ0NWZtZW5DWDQyNGJqOW5OUFoyd0wx RVUvMC82NDVBQzBDOTQ4QTVGRjYxODlEOURDRkVGQTEzODg2ODU0ODVCRUIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0NUFDMEM5NDhBNUZGNjE4 OUQ5RENGRUZBMTM4ODY4NTQ4NUJFQjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R1dGaG03aE1panV6M0Raa1EyUnQ0NWZtZW5DWDQyNGJqOW5OUFoyd0wxRVUvMC82 NDVBQzBDOTQ4QTVGRjYxODlEOURDRkVGQTEzODg2ODU0ODVCRUIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOTnUNtGAM1WvvyRFl9uZfF6cZtKNDqJhDspmyhhg6S0NWpozWrYF5ktrvzfh iu/TuC/EOCnUwK+ewblNc2Jl+5rzFNkIkAZSIIX7XBhjGl3O9vgXD/5XlB2MPyus +ISAcyK9mcfGt+2jEiDfF8ULl3fWIImU1eaDa8RaL1uUJSO8HLVTBn3a0G3VVlK4 UL6X9T6zagPSjpyoo3UACeP0lN6Ues6gEaLwyaulShE4Wt3QOxoHKZEfZbLTOPOm HYLFs3t8m56iINDhnNojoRkGqWR2Sp5XoXiDRu/wr6LX51COAsDU9fSCRg9NiIXW CMsdh37UMSPIpZYVAeHPuje28A== -----END CERTIFICATE-----Generated at Mon May 12 12:52:24 2025 by rpki-client