$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft File: 43230BA37049255C04E85C87D9F4BDD3B9313605.mft (raw, json) Hash identifier: m22G8zs+FPN8eWnxv9kYOw/FA0jz06W1vkVZtAFact0= Subject key identifier: 72:DA:51:3A:54:10:62:2E:F3:2C:85:8A:D1:8C:CC:16:EB:17:4A:02 Authority key identifier: 43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05 Certificate issuer: /CN=43230BA37049255C04E85C87D9F4BDD3B9313605 Certificate serial: 7569558696F53B9F5A2C0C52E8A011B690B025B5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer Subject info access: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft Manifest number: 0217 Signing time: Sun 11 May 2025 14:26:13 +0000 Manifest this update: Sun 11 May 2025 14:21:13 +0000 Manifest next update: Mon 12 May 2025 16:37:13 +0000 Files and hashes: 1: 43230BA37049255C04E85C87D9F4BDD3B9313605.crl (hash: C0B/0872IIbCYy3OmIRUKRHmj/RgzdpYmeskVgZPqXE=) 2: 3139312e372e3136382e302f32312d3234203d3e20323632383631.roa (hash: 3UlOIp1JXcdTOtyXGjmZSygtLX1mH1cA31Z6zmF/6yE=) 3: 323830343a313435303a3a2f33322d3438203d3e20323632383631.roa (hash: 5Q9tiHGVOVDCj3G898IWOLh8INUElXpH3eiyHIywpQs=) 4: 3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa (hash: yDvjRXifxWYJIZTut8sX9MAq2K/UFlRpCJxUt7efohI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 16:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:69:55:86:96:f5:3b:9f:5a:2c:0c:52:e8:a0:11:b6:90:b0:25:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43230BA37049255C04E85C87D9F4BDD3B9313605 Validity Not Before: May 11 14:21:13 2025 GMT Not After : May 12 16:37:13 2025 GMT Subject: CN=72DA513A5410622EF32C858AD18CCC16EB174A02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:ba:97:4d:e3:66:d9:86:72:d0:db:94:7d: a3:72:60:e4:2d:bf:ee:12:a4:70:3e:f5:70:87:db: 23:9f:31:1a:cf:09:18:e5:2b:80:00:88:a3:2c:c3: 23:01:81:f6:e7:0a:31:51:27:8d:af:7c:03:81:16: 8c:62:18:e5:8d:50:7e:89:ac:d9:d3:a9:da:af:6c: 24:2b:df:64:b6:dc:87:38:98:e8:ec:b6:bd:f9:85: 42:fb:6a:4e:79:f0:e0:2d:56:ef:06:45:cb:a3:c0: 5f:b7:b6:01:e1:a5:9b:3f:78:ac:d9:d6:9a:3c:c9: 93:f2:34:42:22:8e:ab:b1:e4:62:5f:f0:31:f4:85: 7e:1e:6c:22:dc:42:5b:30:11:cb:2c:38:44:a2:ae: 2f:35:b3:db:fa:26:9c:78:77:dc:da:11:f7:87:bf: 43:0d:3f:a0:46:b3:a7:04:fb:77:20:1e:1a:1c:e8: c1:cf:73:64:67:45:03:2d:cf:29:c0:40:29:44:c3: a4:f7:34:13:28:1d:3a:a0:58:98:5e:f1:b3:09:f6: a8:a2:7b:91:83:31:56:1c:96:39:d1:2d:7e:58:27: b4:83:ec:6f:25:95:11:ba:6f:c2:95:97:f7:28:19: d6:a5:94:1e:eb:b2:e7:6e:ff:4b:34:fd:5c:a3:ee: 54:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DA:51:3A:54:10:62:2E:F3:2C:85:8A:D1:8C:CC:16:EB:17:4A:02 X509v3 Authority Key Identifier: keyid:43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:77:07:ee:bf:c1:ef:e9:08:be:3c:94:b6:77:ba:d1:03:10: 55:32:7e:ab:46:63:47:7c:3e:3a:0f:96:28:ce:22:69:a2:da: d2:74:1d:07:d1:a9:e6:38:3f:30:d6:91:76:6a:d1:7b:3e:e0: 54:c4:45:29:53:a9:2a:bf:37:d9:cf:e2:43:86:98:5f:bd:0d: 5f:45:9c:d2:dd:5d:b7:fe:f0:0b:06:46:16:38:cd:fa:09:b4: 34:9d:b3:b8:f3:b0:b9:38:c3:ae:31:13:50:c7:6c:40:7c:5a: a1:04:7c:4a:1e:78:cd:91:04:79:5b:32:c1:41:00:85:b5:06: e9:c7:40:15:0c:8c:46:39:90:a4:93:68:40:84:0c:e2:95:c4: e7:78:19:9e:86:9d:35:15:f7:58:f2:2c:d0:66:79:2f:3f:97: 52:d3:3d:a3:cf:92:50:0f:44:61:d6:2e:37:dd:4b:da:b5:75: 1d:2e:fb:b7:8a:46:ed:fc:08:c8:58:ed:7b:1c:80:32:b7:d7: 64:97:11:18:ed:4a:ac:3f:c8:f0:35:01:1d:48:0e:53:97:e5: 01:71:fb:18:e4:f0:78:d2:22:cb:4c:5a:32:7b:0d:c8:f4:5a: 9f:86:e1:03:d3:cc:2d:48:68:5d:54:a6:4d:23:ac:2d:64:3a: cf:8e:47:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdWlVhpb1O59aLAxS6KARtpCwJbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyMzBCQTM3MDQ5MjU1QzA0RTg1Qzg3RDlGNEJERDNC OTMxMzYwNTAeFw0yNTA1MTExNDIxMTNaFw0yNTA1MTIxNjM3MTNaMDMxMTAvBgNV BAMTKDcyREE1MTNBNTQxMDYyMkVGMzJDODU4QUQxOENDQzE2RUIxNzRBMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd67qXTeNm2YZy0NuUfaNyYOQt v+4SpHA+9XCH2yOfMRrPCRjlK4AAiKMswyMBgfbnCjFRJ42vfAOBFoxiGOWNUH6J rNnTqdqvbCQr32S23Ic4mOjstr35hUL7ak558OAtVu8GRcujwF+3tgHhpZs/eKzZ 1po8yZPyNEIijqux5GJf8DH0hX4ebCLcQlswEcssOESiri81s9v6Jpx4d9zaEfeH v0MNP6BGs6cE+3cgHhoc6MHPc2RnRQMtzynAQClEw6T3NBMoHTqgWJhe8bMJ9qii e5GDMVYcljnRLX5YJ7SD7G8llRG6b8KVl/coGdallB7rsudu/0s0/Vyj7lSvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUctpROlQQYi7zLIWK0YzMFusXSgIwHwYDVR0j BBgwFoAUQyMLo3BJJVwE6FyH2fS907kxNgUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHR3V0Rpa2R2UjFZWWpVTExCemtFMkJCQlFadVdITGdQdHgxTGgyWUpz cWcvMS80MzIzMEJBMzcwNDkyNTVDMDRFODVDODdEOUY0QkREM0I5MzEzNjA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzMjMwQkEzNzA0OTI1NUMw NEU4NUM4N0Q5RjRCREQzQjkzMTM2MDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHR3V0Rpa2R2UjFZWWpVTExCemtFMkJCQlFadVdITGdQdHgxTGgyWUpzcWcvMS80 MzIzMEJBMzcwNDkyNTVDMDRFODVDODdEOUY0QkREM0I5MzEzNjA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW3cH7r/B7+kIvjyUtne60QMQVTJ+q0ZjR3w+Og+WKM4iaaLa0nQdB9Gp5jg/ MNaRdmrRez7gVMRFKVOpKr832c/iQ4aYX70NX0Wc0t1dt/7wCwZGFjjN+gm0NJ2z uPOwuTjDrjETUMdsQHxaoQR8Sh54zZEEeVsywUEAhbUG6cdAFQyMRjmQpJNoQIQM 4pXE53gZnoadNRX3WPIs0GZ5Lz+XUtM9o8+SUA9EYdYuN91L2rV1HS77t4pG7fwI yFjtexyAMrfXZJcRGO1KrD/I8DUBHUgOU5flAXH7GOTweNIiy0xaMnsNyPRan4bh A9PMLUhoXVSmTSOsLWQ6z45HsQ== -----END CERTIFICATE-----Generated at Sun May 11 19:55:19 2025 by rpki-client