$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft File: 7CD32787AF54793C40E640D59B41C4E38532BB54.mft (raw, json) Hash identifier: Qta3H3p0UxYXJI2tZP+Y94WA2ncMZaK4LzLDMDgUyLA= Subject key identifier: 61:CC:F1:A8:16:67:B7:EA:C0:86:6F:6C:93:1B:D7:BA:F3:69:91:AB Authority key identifier: 7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54 Certificate issuer: /CN=7CD32787AF54793C40E640D59B41C4E38532BB54 Certificate serial: 0E521AD928A6AEF8CF6169115C2F46571C1A6A2D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer Subject info access: rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft Manifest number: 0221 Signing time: Fri 09 May 2025 12:21:24 +0000 Manifest this update: Fri 09 May 2025 12:16:24 +0000 Manifest next update: Sat 10 May 2025 13:50:24 +0000 Files and hashes: 1: 34352e3136362e35322e302f32322d3234203d3e20323637393336.roa (hash: j08b7Lyi0M6rP5QjxhHX5NPPT3Q8tdqjjK0kojb2T3k=) 2: 323830343a353537343a3a2f33322d3332203d3e20323637393336.roa (hash: 8XSYoB39Y0V21Py1PqOLt26uTm3zHTz0l1jSAcCeCjU=) 3: 7CD32787AF54793C40E640D59B41C4E38532BB54.crl (hash: 2wVy4NirhgMpObkgYs9ZQxCn94BpiEehPwXSa5jlnoE=) 4: 323830343a353537343a3a2f33362d3336203d3e20323637393336.roa (hash: w7wZe96H7YSaw3Skwe0LCCn+CzVc+AM8C58c7xts6EI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 May 2025 13:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:52:1a:d9:28:a6:ae:f8:cf:61:69:11:5c:2f:46:57:1c:1a:6a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD32787AF54793C40E640D59B41C4E38532BB54 Validity Not Before: May 9 12:16:24 2025 GMT Not After : May 10 13:50:24 2025 GMT Subject: CN=61CCF1A81667B7EAC0866F6C931BD7BAF36991AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:f3:2e:a8:ef:3b:64:2c:44:1c:12:2f:02: b1:fe:fd:49:30:f3:c8:b6:a9:df:c6:e2:55:8c:2c: e1:de:ee:25:44:35:db:00:9d:6c:59:df:c7:e8:7d: f3:34:05:00:64:e8:b8:e9:f5:b5:2f:e8:00:e8:1a: 4e:9e:65:a0:07:20:54:3c:56:c8:b8:d6:6d:ed:34: 36:aa:ca:b1:5d:47:ac:85:c8:85:b0:ae:6f:af:44: d6:e4:65:d3:30:1b:02:8b:14:0a:0d:ee:ea:51:91: 2a:c0:0e:6d:cc:88:e3:85:23:02:82:eb:f2:3a:36: 90:69:76:07:0a:ef:05:b3:fd:0b:01:56:fb:83:6b: 68:43:28:49:49:a5:45:05:0a:0a:0c:2a:9b:6b:e3: b7:10:4b:c9:8c:99:af:d4:c5:36:8a:0d:5c:d6:f9: 49:c9:62:65:ad:d0:e4:05:e9:40:ab:47:88:df:3a: 25:5a:89:16:fb:93:c6:a3:a2:5e:17:24:28:bf:b4: c2:8b:48:d2:fa:d0:9e:ca:23:d7:fa:26:8c:9c:48: 9d:85:52:80:e2:fc:0a:34:d3:4a:6d:12:98:36:cb: b2:40:0e:bc:da:46:79:18:ca:88:30:06:3c:21:7f: dd:b0:13:5a:ac:dc:95:2c:41:96:e6:73:a7:fa:4d: 1c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CC:F1:A8:16:67:B7:EA:C0:86:6F:6C:93:1B:D7:BA:F3:69:91:AB X509v3 Authority Key Identifier: keyid:7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:63:9b:2d:49:26:42:fa:69:44:16:9c:d6:7d:12:2c:98:45: 58:05:11:f2:0c:8f:44:89:55:f1:c6:ed:af:0e:78:1a:44:a5: 87:9a:7b:ba:e6:55:11:a9:7e:eb:9c:c6:24:d7:67:d0:17:83: 9a:c7:63:09:07:d4:2d:e2:47:ae:cf:55:50:2f:7c:a8:34:6a: 16:92:0c:d2:7b:16:3f:cf:24:6d:aa:4c:e7:d0:7f:c3:d0:f7: a2:d9:e4:5a:27:b4:fb:8d:b1:0e:a8:9a:7d:e2:68:4a:18:56: 9a:5a:ad:ae:f1:e6:4b:32:ce:80:4b:d6:db:ea:d0:05:02:da: 6d:26:00:98:bc:92:ff:7b:d1:4a:9e:3e:90:5f:04:dd:8d:fc: fe:46:bd:dc:8b:a0:19:18:e3:b8:bc:95:c6:22:39:7d:50:75: b9:67:c8:85:88:ed:ba:03:74:9c:4d:40:0b:14:aa:b9:08:27: a7:e8:b7:e7:cf:0f:21:3a:a8:21:e2:38:35:de:aa:7e:56:72: bb:39:d2:d3:68:6a:81:64:ed:f8:e9:80:ce:de:3c:cf:ee:43: a9:e7:27:96:1f:89:dd:cd:0e:40:91:f5:66:56:e6:8f:d0:e1: cb:0d:4d:96:bc:90:47:fe:c7:bf:79:0a:52:ac:a1:60:64:c8: 30:95:dc:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDlIa2SimrvjPYWkRXC9GVxwaai0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NEMzI3ODdBRjU0NzkzQzQwRTY0MEQ1OUI0MUM0RTM4 NTMyQkI1NDAeFw0yNTA1MDkxMjE2MjRaFw0yNTA1MTAxMzUwMjRaMDMxMTAvBgNV BAMTKDYxQ0NGMUE4MTY2N0I3RUFDMDg2NkY2QzkzMUJEN0JBRjM2OTkxQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7J/MuqO87ZCxEHBIvArH+/Ukw 88i2qd/G4lWMLOHe7iVENdsAnWxZ38foffM0BQBk6Ljp9bUv6ADoGk6eZaAHIFQ8 Vsi41m3tNDaqyrFdR6yFyIWwrm+vRNbkZdMwGwKLFAoN7upRkSrADm3MiOOFIwKC 6/I6NpBpdgcK7wWz/QsBVvuDa2hDKElJpUUFCgoMKptr47cQS8mMma/UxTaKDVzW +UnJYmWt0OQF6UCrR4jfOiVaiRb7k8ajol4XJCi/tMKLSNL60J7KI9f6JoycSJ2F UoDi/Ao000ptEpg2y7JADrzaRnkYyogwBjwhf92wE1qs3JUsQZbmc6f6TRxVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYczxqBZnt+rAhm9skxvXuvNpkaswHwYDVR0j BBgwFoAUfNMnh69UeTxA5kDVm0HE44Uyu1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2tXTkIyTHVOb3hDZXhpMlVZclc2anprQzJVVUdEWm5XUDV4MTkxeW9X Y00vMS83Q0QzMjc4N0FGNTQ3OTNDNDBFNjQwRDU5QjQxQzRFMzg1MzJCQjU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDRDMyNzg3QUY1NDc5M0M0 MEU2NDBENTlCNDFDNEUzODUzMkJCNTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2tXTkIyTHVOb3hDZXhpMlVZclc2anprQzJVVUdEWm5XUDV4MTkxeW9XY00vMS83 Q0QzMjc4N0FGNTQ3OTNDNDBFNjQwRDU5QjQxQzRFMzg1MzJCQjU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL2ObLUkmQvppRBac1n0SLJhFWAUR8gyPRIlV8cbtrw54GkSlh5p7uuZVEal+ 65zGJNdn0BeDmsdjCQfULeJHrs9VUC98qDRqFpIM0nsWP88kbapM59B/w9D3otnk Wie0+42xDqiafeJoShhWmlqtrvHmSzLOgEvW2+rQBQLabSYAmLyS/3vRSp4+kF8E 3Y38/ka93IugGRjjuLyVxiI5fVB1uWfIhYjtugN0nE1ACxSquQgnp+i3588PITqo IeI4Nd6qflZyuznS02hqgWTt+OmAzt48z+5Dqecnlh+J3c0OQJH1Zlbmj9Dhyw1N lryQR/7Hv3kKUqyhYGTIMJXcYA== -----END CERTIFICATE-----Generated at Sat May 10 06:28:31 2025 by rpki-client