$ rpki-client -vvf rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.mft File: 51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.mft (raw, json) Hash identifier: BqfX8NgcORskec+nQ2AaROg4Wrn8TSfN3dJMTS2N4JU= Subject key identifier: 3D:FE:2C:49:CA:54:3E:C3:6E:47:EA:FE:73:AE:0E:05:05:65:F4:98 Authority key identifier: 51:D6:DB:A5:73:9A:66:5B:6F:DC:BD:4D:32:66:D3:E7:4D:8D:D8:AB Certificate issuer: /CN=51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB Certificate serial: 2F7FDAE401B6435F006BE58F7DEF505ED6400FF1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.cer Subject info access: rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.mft Manifest number: 021A Signing time: Sun 11 May 2025 07:42:28 +0000 Manifest this update: Sun 11 May 2025 07:37:28 +0000 Manifest next update: Mon 12 May 2025 10:26:28 +0000 Files and hashes: 1: 3230312e3138322e3130302e302f32332d3234203d3e20323637353131.roa (hash: Eorb36ezqK4/dt2ug3qG0PGo9bPnl6gCBfv175GxFRY=) 2: 3230312e3138322e3130322e302f32332d3234203d3e20323637353131.roa (hash: 62mp1wdIuz9/eEoBCT92iM60OSKXgGM7OmAfIPs2ccM=) 3: 51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.crl (hash: AXMsNxtbHA05phuJYQRw0rbynjKKEv6z5oon/AAIvVY=) 4: 323830343a343239383a3430303a3a2f33382d3438203d3e20323637353131.roa (hash: Q61C4vXNAbJfstRUZ5m3XRi8trVc0JIpS4lnKRE+SL0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.crl rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 10:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:7f:da:e4:01:b6:43:5f:00:6b:e5:8f:7d:ef:50:5e:d6:40:0f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB Validity Not Before: May 11 07:37:28 2025 GMT Not After : May 12 10:26:28 2025 GMT Subject: CN=3DFE2C49CA543EC36E47EAFE73AE0E050565F498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:98:e0:87:84:53:a6:a2:dc:1c:4f:6a:df: 77:73:9c:1d:64:76:d1:d7:11:bf:02:9c:df:f0:78: 24:8a:80:92:64:2b:2e:04:b1:03:40:3b:ac:2a:84: 61:c1:a3:3c:02:92:c8:92:9f:f4:04:37:20:07:56: c1:8c:69:e7:13:c5:7e:f4:b8:80:9a:38:07:37:89: d3:99:06:9f:2b:bc:00:dc:d8:46:7b:60:70:6f:04: a3:23:3d:81:4b:41:00:88:c9:1b:3a:83:fa:25:b1: 68:4e:96:4f:33:d6:19:aa:e1:ac:fd:d9:39:78:47: 4e:ac:62:3d:6c:6c:22:4c:7f:4e:13:40:34:24:60: d4:ae:ad:ca:e8:6c:57:3a:09:31:2d:4e:c1:d5:fa: 0b:95:7e:3c:f5:7c:bb:1a:e8:44:d8:d9:07:14:93: 8c:9c:70:09:78:af:c7:e6:71:47:53:fc:21:c3:a6: b0:b6:42:dc:9d:15:db:c5:41:a6:d7:e7:18:ed:19: 6f:f0:bb:1a:78:2f:49:e1:ed:0d:9c:61:4d:75:02: cb:72:0b:9f:0d:9b:b9:5a:5e:8b:2d:3f:26:7d:d0: 2d:58:5e:20:aa:c3:d8:db:59:0b:c9:23:e1:3f:0f: 67:1d:6c:52:4a:03:21:3f:7e:5a:18:1d:33:2d:67: 24:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FE:2C:49:CA:54:3E:C3:6E:47:EA:FE:73:AE:0E:05:05:65:F4:98 X509v3 Authority Key Identifier: keyid:51:D6:DB:A5:73:9A:66:5B:6F:DC:BD:4D:32:66:D3:E7:4D:8D:D8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:17:bf:09:37:5c:fc:14:e5:14:67:fa:66:db:98:55:a3:76: 53:31:29:10:37:48:78:bc:76:dd:63:ea:fc:e7:9f:68:48:3e: 0e:16:6a:ae:7d:6b:e8:ec:a7:e6:3a:57:98:75:c1:6a:89:37: 9e:ff:b3:e9:90:7b:bf:68:c7:2a:f0:2c:fa:10:48:46:92:61: a8:8a:e6:5c:39:11:77:52:db:6e:f6:c5:27:2c:e9:7e:78:a6: 59:f2:62:4a:df:7d:f2:d1:35:35:27:1a:da:af:b3:c0:9b:e1: 89:74:07:3b:1c:62:2a:61:b8:3b:be:5f:66:c5:55:4e:6a:2c: a8:da:1f:40:67:52:9f:54:ec:27:d1:5b:51:1a:b5:1b:55:b4: d4:4a:13:c1:89:fe:1e:45:b6:e1:04:66:db:d0:f2:7c:5d:22: 0b:3e:57:e7:45:88:ae:09:63:f2:03:69:1a:38:9c:06:ab:a9: ca:f3:7f:50:d6:28:0c:31:08:c7:6f:9f:be:e6:42:91:95:eb: 1b:b5:49:b2:54:81:92:28:34:bd:09:01:62:fe:3e:57:d0:c2: d8:69:a2:4b:e3:f8:6d:b1:90:45:d0:ac:e2:2c:ab:d4:42:b3: 6a:83:8b:bd:71:c3:4f:a6:4e:7a:70:85:bf:ce:a9:3b:98:c3: 55:e3:e3:93 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUL3/a5AG2Q18Aa+WPfe9QXtZAD/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTFENkRCQTU3MzlBNjY1QjZGRENCRDREMzI2NkQzRTc0 RDhERDhBQjAeFw0yNTA1MTEwNzM3MjhaFw0yNTA1MTIxMDI2MjhaMDMxMTAvBgNV BAMTKDNERkUyQzQ5Q0E1NDNFQzM2RTQ3RUFGRTczQUUwRTA1MDU2NUY0OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrJjgh4RTpqLcHE9q33dznB1k dtHXEb8CnN/weCSKgJJkKy4EsQNAO6wqhGHBozwCksiSn/QENyAHVsGMaecTxX70 uICaOAc3idOZBp8rvADc2EZ7YHBvBKMjPYFLQQCIyRs6g/olsWhOlk8z1hmq4az9 2Tl4R06sYj1sbCJMf04TQDQkYNSurcrobFc6CTEtTsHV+guVfjz1fLsa6ETY2QcU k4yccAl4r8fmcUdT/CHDprC2QtydFdvFQabX5xjtGW/wuxp4L0nh7Q2cYU11Asty C58Nm7laXostPyZ90C1YXiCqw9jbWQvJI+E/D2cdbFJKAyE/floYHTMtZySRAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUPf4sScpUPsNuR+r+c64OBQVl9JgwHwYDVR0j BBgwFoAUUdbbpXOaZltv3L1NMmbT502N2KswDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9rZFBMMUF1dkZKeEo4WG9Uelh1ekhZcG5mR1djOGdMbTVHTGZ4YUxFNkRH LzEvNTFENkRCQTU3MzlBNjY1QjZGRENCRDREMzI2NkQzRTc0RDhERDhBQi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81MUQ2REJBNTczOUE2NjVCNkZE Q0JENEQzMjY2RDNFNzREOEREOEFCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2tk UEwxQXV2Rkp4SjhYb1R6WHV6SFlwbmZHV2M4Z0xtNUdMZnhhTEU2REcvMS81MUQ2 REJBNTczOUE2NjVCNkZEQ0JENEQzMjY2RDNFNzREOEREOEFCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA MBe/CTdc/BTlFGf6ZtuYVaN2UzEpEDdIeLx23WPq/OefaEg+DhZqrn1r6Oyn5jpX mHXBaok3nv+z6ZB7v2jHKvAs+hBIRpJhqIrmXDkRd1LbbvbFJyzpfnimWfJiSt99 8tE1NSca2q+zwJvhiXQHOxxiKmG4O75fZsVVTmosqNofQGdSn1TsJ9FbURq1G1W0 1EoTwYn+HkW24QRm29DyfF0iCz5X50WIrglj8gNpGjicBqupyvN/UNYoDDEIx2+f vuZCkZXrG7VJslSBkig0vQkBYv4+V9DC2GmiS+P4bbGQRdCs4iyr1EKzaoOLvXHD T6ZOenCFv86pO5jDVePjkw== -----END CERTIFICATE-----Generated at Sun May 11 21:01:24 2025 by rpki-client