$ rpki-client -vvf rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft File: 91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft (raw, json) Hash identifier: LEE2AxZpYZxMoFuI8Novr1ifs1sQ528m1bNP8j6tBxo= Subject key identifier: DE:35:87:24:EE:AA:08:98:44:C0:51:1D:A9:AF:E0:49:20:E0:31:A9 Authority key identifier: 91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 Certificate issuer: /CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Certificate serial: 5328D8F9BF12FA71CE35DC7463502D1F15F6A3DD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft Manifest number: 8E Signing time: Sun 20 Apr 2025 19:13:36 +0000 Manifest this update: Sun 20 Apr 2025 19:08:36 +0000 Manifest next update: Mon 21 Apr 2025 21:24:36 +0000 Files and hashes: 1: 3139302e3132342e3234342e302f32322d3232203d3e20323730383630.roa (hash: GO7w8eqGTa8dskb5vIgzwgtC6sLrRWDcLwvfKurJi/c=) 2: 3139302e3132342e3234362e302f32332d3233203d3e20323730383630.roa (hash: 4z8E5xkgAubJe79uhls2hM7yWHwnaNYYxTpUhSzfajo=) 3: 3139302e3132342e3234342e302f32342d3234203d3e20323730383630.roa (hash: q9Oe28bXTlG+wjfdfY0S2DKhkmcDPIsB3IHCjEfJUgQ=) 4: 3139302e3132342e3234342e302f32332d3233203d3e20323730383630.roa (hash: 0eX90yaw+P6ZAxEPr/PJb8WsvDlA//ZNAwA4O0HitxQ=) 5: 323830343a373238633a3a2f33322d3332203d3e20323730383630.roa (hash: is1ce/85QOT7NztHS8d8OT2MR60xfEDAWq9FgKQpdCU=) 6: 3139302e3132342e3234372e302f32342d3234203d3e20323730383630.roa (hash: CcBSySmTVrGXjBmAZJ2qP+CxFizJEFvF6UAVfbjFZgA=) 7: 3139302e3132342e3234352e302f32342d3234203d3e20323730383630.roa (hash: C3k9FGsSHArcVIZOFQJRWxG6FRMI/42eNpKGM7EODK0=) 8: 3139302e3132342e3234362e302f32342d3234203d3e20323730383630.roa (hash: ouWOBSiTWgfnPLxBeA+7q0eMzrly3oy5U/Yxyh/uQG8=) 9: 91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl (hash: kjr1oKzks1AlL9u2e8uUj9/BllPawI7XwuYrNX4KHho=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Apr 2025 21:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:28:d8:f9:bf:12:fa:71:ce:35:dc:74:63:50:2d:1f:15:f6:a3:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0 Validity Not Before: Apr 20 19:08:36 2025 GMT Not After : Apr 21 21:24:36 2025 GMT Subject: CN=DE358724EEAA089844C0511DA9AFE04920E031A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:5c:d6:5c:f1:71:3d:1c:9f:e5:b7:44:cd: 11:5c:c8:55:11:2f:13:1c:c3:f0:90:fb:0e:d0:7c: 4e:a6:7e:d0:9a:37:72:65:30:0c:7f:7a:c9:ac:51: b5:0c:0a:87:e1:8e:55:f6:cd:d5:a7:34:e5:d2:f3: 39:90:a6:99:28:e3:72:12:20:b0:2b:e9:1c:19:a4: 0b:de:d0:21:3b:f3:dc:e1:2b:fb:d9:3e:b1:b8:ec: 8e:f0:91:2f:4e:55:04:ff:62:88:65:fd:c6:1c:50: 46:01:73:3e:a4:88:25:ea:ce:23:13:51:a3:f5:6d: a1:5c:0e:1b:2e:01:15:f0:5b:c6:10:47:7d:43:85: a3:31:19:8b:55:db:c3:03:73:e3:c0:9a:c7:a8:bb: 75:87:78:b5:af:03:15:be:05:7b:e3:10:c4:df:8f: 37:cc:65:8e:64:20:d7:5b:ee:2f:ca:b3:db:56:1e: 7e:f0:eb:37:2c:88:cb:c7:04:00:13:58:ac:86:14: 09:60:01:55:76:b0:64:89:6a:8e:b8:ca:5c:74:bb: ba:0e:6d:98:d0:29:a3:e7:f2:ab:d8:b9:b8:e3:57: da:8a:92:a6:4f:67:91:a1:0f:48:3f:91:87:5a:b1: 76:cf:4e:f0:12:d8:52:c0:5f:8d:72:e4:57:bb:2f: ee:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:35:87:24:EE:AA:08:98:44:C0:51:1D:A9:AF:E0:49:20:E0:31:A9 X509v3 Authority Key Identifier: keyid:91:CB:0D:46:F3:8A:17:C0:F3:AB:C4:9D:94:96:AF:CB:60:EC:C5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bNJ2KjrPijeatbPwFrQ1yiPeq2RCw6v9TEintWgHNBL/0/91CB0D46F38A17C0F3ABC49D9496AFCB60ECC5C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:63:fe:42:ff:96:ec:fa:4f:41:66:77:2d:c5:03:61:e1:21: f8:fb:87:e3:2d:2d:3e:bc:e2:6a:15:ff:18:e5:28:33:f7:73: 90:ab:78:39:cc:ec:13:7e:76:cb:ac:81:20:42:2f:95:0a:b9: 1f:0f:89:e8:92:12:7c:bd:5a:90:ec:19:e3:26:70:91:e3:b9: b2:54:8b:42:74:66:58:03:ef:9c:67:a9:4c:05:61:d9:5e:76: 7a:e4:72:db:58:49:e7:f2:3e:17:af:81:85:0d:d9:49:39:95: cf:7b:22:90:02:3e:28:42:9c:b6:e7:8a:6f:62:94:49:67:32: c5:3d:64:96:d2:e7:0e:36:e0:f0:49:09:40:0b:f5:9b:19:0d: 3c:9d:39:f0:12:e2:90:36:60:71:0c:a9:65:f7:5a:41:6e:10: 7e:63:a7:ac:2b:62:ed:09:19:db:6d:b5:72:7e:ef:ea:75:a4: 71:cc:a5:7c:67:39:e9:d0:e0:e3:49:ee:29:17:11:c1:b6:61: e8:43:68:7c:4d:ec:c1:c4:83:73:8c:73:af:73:f1:c4:1b:8b: ec:a0:8b:3e:3d:d8:6f:d7:4d:20:2a:e0:07:d6:b1:11:a3:83: e2:7f:7b:14:0f:fd:ea:2a:ab:e0:34:d8:a0:cc:f7:92:e0:70: c1:52:d3:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUyjY+b8S+nHONdx0Y1AtHxX2o90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDQjBENDZGMzhBMTdDMEYzQUJDNDlEOTQ5NkFGQ0I2 MEVDQzVDMDAeFw0yNTA0MjAxOTA4MzZaFw0yNTA0MjEyMTI0MzZaMDMxMTAvBgNV BAMTKERFMzU4NzI0RUVBQTA4OTg0NEMwNTExREE5QUZFMDQ5MjBFMDMxQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjVzWXPFxPRyf5bdEzRFcyFUR LxMcw/CQ+w7QfE6mftCaN3JlMAx/esmsUbUMCofhjlX2zdWnNOXS8zmQppko43IS ILAr6RwZpAve0CE789zhK/vZPrG47I7wkS9OVQT/Yohl/cYcUEYBcz6kiCXqziMT UaP1baFcDhsuARXwW8YQR31DhaMxGYtV28MDc+PAmseou3WHeLWvAxW+BXvjEMTf jzfMZY5kINdb7i/Ks9tWHn7w6zcsiMvHBAATWKyGFAlgAVV2sGSJao64ylx0u7oO bZjQKaPn8qvYubjjV9qKkqZPZ5GhD0g/kYdasXbPTvAS2FLAX41y5Fe7L+7fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3jWHJO6qCJhEwFEdqa/gSSDgMakwHwYDVR0j BBgwFoAUkcsNRvOKF8Dzq8SdlJavy2DsxcAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2JOSjJLanJQaWplYXRiUHdGclExeWlQZXEyUkN3NnY5VEVpbnRXZ0hO QkwvMC85MUNCMEQ0NkYzOEExN0MwRjNBQkM0OUQ5NDk2QUZDQjYwRUNDNUMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQ0IwRDQ2RjM4QTE3QzBG M0FCQzQ5RDk0OTZBRkNCNjBFQ0M1QzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2JOSjJLanJQaWplYXRiUHdGclExeWlQZXEyUkN3NnY5VEVpbnRXZ0hOQkwvMC85 MUNCMEQ0NkYzOEExN0MwRjNBQkM0OUQ5NDk2QUZDQjYwRUNDNUMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMmP+Qv+W7PpPQWZ3LcUDYeEh+PuH4y0tPrziahX/GOUoM/dzkKt4OczsE352 y6yBIEIvlQq5Hw+J6JISfL1akOwZ4yZwkeO5slSLQnRmWAPvnGepTAVh2V52euRy 21hJ5/I+F6+BhQ3ZSTmVz3sikAI+KEKctueKb2KUSWcyxT1kltLnDjbg8EkJQAv1 mxkNPJ058BLikDZgcQypZfdaQW4QfmOnrCti7QkZ2221cn7v6nWkccylfGc56dDg 40nuKRcRwbZh6ENofE3swcSDc4xzr3PxxBuL7KCLPj3Yb9dNICrgB9axEaOD4n97 FA/96iqr4DTYoMz3kuBwwVLT2A== -----END CERTIFICATE-----Generated at Mon Apr 21 06:14:20 2025 by rpki-client