$ rpki-client -vvf rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft File: 22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft (raw, json) Hash identifier: cfALuD0IIbNJL+pxUUhrCbW1QTYitR+DbITAexm3HlY= Subject key identifier: 53:87:76:84:93:57:1A:74:85:88:9A:D8:CD:AE:DC:72:B6:90:56:7F Authority key identifier: 22:DE:B3:D2:A1:4F:98:97:27:53:CA:F8:B7:BC:5C:5E:20:27:F7:FB Certificate issuer: /CN=22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB Certificate serial: 6E5E094B597ACCF13955438F73AA0ADA18C19E87 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft Manifest number: 01D1 Signing time: Sun 11 May 2025 06:35:03 +0000 Manifest this update: Sun 11 May 2025 06:30:03 +0000 Manifest next update: Mon 12 May 2025 10:18:03 +0000 Files and hashes: 1: 22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl (hash: 4LgI1xWM/+RaydCzIdsswH/rwZx77N2I7Wco5frgkEM=) 2: 3133382e35392e3230382e302f32322d3234203d3e20323634313136.roa (hash: FT60wN+mTJCyFpoM4iPOVIQrtCrDtPcGjx8aPEN7+Gg=) 3: 323830343a323262303a3a2f33322d3438203d3e20323634313136.roa (hash: qqoGi+kiZZrqmP9rBhvJ1LfaPlz846VGu8vmez2bVQs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 10:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:5e:09:4b:59:7a:cc:f1:39:55:43:8f:73:aa:0a:da:18:c1:9e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB Validity Not Before: May 11 06:30:03 2025 GMT Not After : May 12 10:18:03 2025 GMT Subject: CN=5387768493571A7485889AD8CDAEDC72B690567F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:6c:f7:0d:8c:a3:6a:d0:5a:ad:d0:a0:5c: 82:c0:97:fa:3d:bf:6f:9a:01:e4:c7:4d:cd:2c:46: 1b:58:36:3b:ac:ab:1c:e3:01:76:34:cf:82:db:1d: a7:e1:b6:ba:79:23:ac:5a:aa:19:e2:ef:ee:6d:5c: 31:b7:e5:26:b6:61:30:81:a9:8d:c4:c8:8c:12:be: 2d:22:29:93:04:30:c2:d2:49:82:e4:08:13:7a:eb: 0b:55:e0:34:8d:81:27:67:38:ae:52:53:9a:16:4f: 1d:8a:a5:fa:09:06:1f:0e:7f:ec:98:5c:53:2c:99: ce:35:35:83:0e:f6:bb:3c:c7:4b:d0:f7:d0:bd:f6: 50:31:16:f4:73:cb:65:5d:45:e7:9b:b7:92:bc:a4: b2:d9:a2:85:ad:e9:d5:05:e9:66:35:49:82:c4:de: 32:b8:51:a4:f1:cc:9b:38:79:eb:1b:c8:f5:d3:f8: 96:5e:60:a2:f9:cf:02:6b:69:c5:a5:f1:5b:ab:c3: 10:56:e4:16:2c:45:c2:56:47:cb:a0:a4:ee:2c:44: 30:f9:16:fd:95:82:d9:c3:27:08:0f:6b:f3:cb:52: 55:bf:8a:38:05:87:f8:6f:60:6b:3f:ce:34:77:2a: 24:ab:43:f0:b3:08:29:01:d4:f5:eb:a4:05:62:fc: 15:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:87:76:84:93:57:1A:74:85:88:9A:D8:CD:AE:DC:72:B6:90:56:7F X509v3 Authority Key Identifier: keyid:22:DE:B3:D2:A1:4F:98:97:27:53:CA:F8:B7:BC:5C:5E:20:27:F7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:66:81:cc:db:1b:4d:32:a5:20:91:d7:60:a1:c9:47:ce:44: a0:6d:b7:33:c6:39:a5:ff:f4:f0:b5:51:6d:aa:75:d2:c5:07: aa:3f:f6:a7:b3:c2:b2:02:de:0a:47:a7:d8:f0:a9:93:6f:0b: a1:21:48:ef:48:7f:46:c4:03:c4:89:36:e6:91:fd:5d:ed:72: 10:8b:a4:f6:9f:5c:e4:ec:55:48:10:9b:a2:46:d7:c4:8a:f9: 6c:52:ff:c6:76:9a:6a:69:b7:fd:fa:fc:83:6c:fe:92:3e:ee: c4:99:2b:77:1b:1f:4f:fa:c5:7f:98:09:e4:6a:51:70:f8:b0: 60:6f:39:34:21:06:0f:10:67:da:3c:c7:66:90:24:2d:12:01: 8b:6f:87:bf:8d:0b:c9:18:ef:20:7a:53:4a:8c:a9:64:23:70: 22:61:ba:41:c5:f0:29:30:29:3d:20:24:d3:92:d5:d2:c1:99: b9:26:3d:b3:01:b3:a7:6c:c2:59:76:dc:3a:32:c4:6b:1d:36: ef:68:50:d5:3f:a8:2f:be:9b:dc:16:0e:e0:fc:bc:5d:d4:38: 3b:2c:c3:12:c5:43:4a:0b:d8:35:fa:01:14:e2:cd:3f:ac:40: f0:ce:e2:30:0d:ab:6c:8c:0c:17:d0:a6:80:e4:98:55:1f:fc: e4:0e:d6:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbl4JS1l6zPE5VUOPc6oK2hjBnocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJERUIzRDJBMTRGOTg5NzI3NTNDQUY4QjdCQzVDNUUy MDI3RjdGQjAeFw0yNTA1MTEwNjMwMDNaFw0yNTA1MTIxMDE4MDNaMDMxMTAvBgNV BAMTKDUzODc3Njg0OTM1NzFBNzQ4NTg4OUFEOENEQUVEQzcyQjY5MDU2N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYs2z3DYyjatBardCgXILAl/o9 v2+aAeTHTc0sRhtYNjusqxzjAXY0z4LbHafhtrp5I6xaqhni7+5tXDG35Sa2YTCB qY3EyIwSvi0iKZMEMMLSSYLkCBN66wtV4DSNgSdnOK5SU5oWTx2KpfoJBh8Of+yY XFMsmc41NYMO9rs8x0vQ99C99lAxFvRzy2VdReebt5K8pLLZooWt6dUF6WY1SYLE 3jK4UaTxzJs4eesbyPXT+JZeYKL5zwJracWl8VurwxBW5BYsRcJWR8ugpO4sRDD5 Fv2VgtnDJwgPa/PLUlW/ijgFh/hvYGs/zjR3KiSrQ/CzCCkB1PXrpAVi/BWFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUU4d2hJNXGnSFiJrYza7ccraQVn8wHwYDVR0j BBgwFoAUIt6z0qFPmJcnU8r4t7xcXiAn9/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHVYUjVBcHVYcFRheEZ6ekc1R1RVcEJCczRUdVVTVTl2RVAzemZWdFpY NGQvMC8yMkRFQjNEMkExNEY5ODk3Mjc1M0NBRjhCN0JDNUM1RTIwMjdGN0ZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyREVCM0QyQTE0Rjk4OTcy NzUzQ0FGOEI3QkM1QzVFMjAyN0Y3RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHVYUjVBcHVYcFRheEZ6ekc1R1RVcEJCczRUdVVTVTl2RVAzemZWdFpYNGQvMC8y MkRFQjNEMkExNEY5ODk3Mjc1M0NBRjhCN0JDNUM1RTIwMjdGN0ZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMmaBzNsbTTKlIJHXYKHJR85EoG23M8Y5pf/08LVRbap10sUHqj/2p7PCsgLe Cken2PCpk28LoSFI70h/RsQDxIk25pH9Xe1yEIuk9p9c5OxVSBCbokbXxIr5bFL/ xnaaamm3/fr8g2z+kj7uxJkrdxsfT/rFf5gJ5GpRcPiwYG85NCEGDxBn2jzHZpAk LRIBi2+Hv40LyRjvIHpTSoypZCNwImG6QcXwKTApPSAk05LV0sGZuSY9swGzp2zC WXbcOjLEax0272hQ1T+oL76b3BYO4Py8XdQ4OyzDEsVDSgvYNfoBFOLNP6xA8M7i MA2rbIwMF9CmgOSYVR/85A7WIg== -----END CERTIFICATE-----Generated at Sun May 11 22:57:45 2025 by rpki-client