$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.mft File: 973FD823CD817717DD26100AA8B8CB95E8DA0F75.mft (raw, json) Hash identifier: f+UojoD0qe/zJ0za+O2Zp93awY1mHvLUcMvbuzZpACM= Subject key identifier: CD:20:CA:10:41:51:7B:F7:A3:19:AF:E2:14:10:8C:4B:E1:DF:F0:CE Authority key identifier: 97:3F:D8:23:CD:81:77:17:DD:26:10:0A:A8:B8:CB:95:E8:DA:0F:75 Certificate issuer: /CN=973FD823CD817717DD26100AA8B8CB95E8DA0F75 Certificate serial: 304A56671ED886E0C589ED6C9C2647C0732108E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer Subject info access: rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.mft Manifest number: 0A Signing time: Sun 13 Apr 2025 23:35:53 +0000 Manifest this update: Sun 13 Apr 2025 23:30:53 +0000 Manifest next update: Tue 15 Apr 2025 02:12:53 +0000 Files and hashes: 1: 3137372e37312e38382e302f32332d3233203d3e20323633363034.roa (hash: LXE6VCSI9OS9QaL8SAeAl2HzPuLSOq1ovtfwZRhZCSs=) 2: 3137372e37312e39302e302f32332d3233203d3e20323633363034.roa (hash: CLVVHsIZqBkZiDioH9hmdHREqOjXWkavrc1EqIjeG+4=) 3: 3134332e3230322e3131322e302f32332d3233203d3e20323633363034.roa (hash: dF6WDysxEI98SH/UuEftlnHFni3+CgfCa3L4lnAv9sw=) 4: 973FD823CD817717DD26100AA8B8CB95E8DA0F75.crl (hash: ozB/LFZaAq3KA8DIYO8ThazUFFQCN+5cCgqufmLYKiU=) 5: 3137372e37312e38382e302f32322d3232203d3e20323633363034.roa (hash: AudcQzPkwG7uDfbZQwd4CR/94lIwID2SLcM+8Rf4VP8=) 6: 3134332e3230322e3131322e302f32322d3232203d3e20323633363034.roa (hash: XhZB6r3F/lPefNznAaeU8dDACZb68IQxSiO8p3bFbGw=) 7: 3134332e3230322e3131342e302f32332d3233203d3e20323633363034.roa (hash: A2vCUQAE/3G225QVGKeDQml/I1bH+8ij0Sl2zGRXVcA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.crl rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 15 Apr 2025 02:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:4a:56:67:1e:d8:86:e0:c5:89:ed:6c:9c:26:47:c0:73:21:08:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=973FD823CD817717DD26100AA8B8CB95E8DA0F75 Validity Not Before: Apr 13 23:30:53 2025 GMT Not After : Apr 15 02:12:53 2025 GMT Subject: CN=CD20CA1041517BF7A319AFE214108C4BE1DFF0CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8d:3c:8e:35:be:8f:d4:75:5c:f2:e9:92:1e: 15:d1:ab:ae:3f:02:ba:f6:ea:b9:94:25:34:5c:fd: 25:3c:3c:a8:c7:11:33:b8:6b:4e:d8:83:b0:e7:89: 81:7f:bd:24:2e:ad:93:31:d6:d6:62:ee:92:89:9d: 8d:37:a7:61:c7:cc:b5:d3:34:65:ed:ff:27:77:e0: a2:0c:67:08:72:11:d5:75:de:54:f5:df:4c:02:aa: a0:cc:44:2e:5c:e8:2e:dc:aa:f6:1b:3d:a1:de:89: bb:13:a0:42:71:bc:e8:4f:12:07:eb:e1:2a:2f:73: 36:1f:6a:30:7f:b1:a8:73:94:65:9d:c4:fb:0d:21: 9e:71:8d:2b:11:42:bd:3c:99:23:ba:bd:7e:78:c1: 10:b3:6f:bb:13:3f:60:f6:61:b6:cb:ba:dc:ec:3b: 52:54:7e:2c:41:dc:51:f7:ec:a4:33:73:7e:51:37: b8:f7:3a:0e:cf:40:21:92:6b:bd:d2:69:fa:e5:02: d3:9a:cd:a5:c1:60:f5:9b:44:9e:10:b4:b2:0b:9e: 00:24:17:94:62:29:88:6a:b5:50:6a:f5:37:95:53: f3:d4:eb:8b:4c:d6:86:8d:d7:ba:9f:c4:81:36:99: ae:68:d7:d2:ae:4b:35:bf:50:be:5a:4d:21:d4:11: 1d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:20:CA:10:41:51:7B:F7:A3:19:AF:E2:14:10:8C:4B:E1:DF:F0:CE X509v3 Authority Key Identifier: keyid:97:3F:D8:23:CD:81:77:17:DD:26:10:0A:A8:B8:CB:95:E8:DA:0F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:26:be:fb:fc:96:39:02:f2:ae:ab:b9:67:f6:32:9a:90:8a: df:02:6a:cb:de:4d:62:ab:2a:be:84:dc:0f:bf:5a:94:b0:42: 8e:62:d7:4c:63:49:08:1e:54:46:ff:8a:e5:5f:2a:00:ec:c9: 46:7a:49:48:fb:b4:c0:09:b9:f6:fa:17:98:c7:f0:0e:d7:48: 98:30:91:36:b6:5a:9f:f0:b4:6e:5f:c8:86:f8:5b:b4:be:e1: 74:cb:aa:14:fb:a9:a7:05:f4:91:8b:6c:ed:88:ff:73:e8:f1: 9e:5a:27:db:fd:e3:f4:e2:d2:ed:58:09:1e:85:e9:4f:e2:f1: 2e:c1:61:de:ea:c0:ad:f4:27:4d:91:94:a0:cd:6a:e9:e8:69: 02:32:c8:b3:6c:3f:17:61:33:6a:1d:03:dd:d6:af:d1:55:01: 49:30:6b:be:eb:4f:cb:7e:25:c9:d2:a3:5c:69:a1:1a:9c:2d: 28:d3:4e:e2:31:92:a8:be:c3:72:9c:47:b6:de:2a:54:d2:b5: e5:c3:f1:e2:1d:1a:ce:3c:d8:84:57:58:76:2e:57:df:a0:b1: bc:37:8a:79:31:ca:fd:ed:8f:d3:4c:e0:e6:c0:8a:d6:5d:c9: 43:86:d4:4d:09:78:37:85:46:0c:33:c9:35:b0:7d:f0:34:9f: ef:b1:5e:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMEpWZx7YhuDFie1snCZHwHMhCOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTczRkQ4MjNDRDgxNzcxN0REMjYxMDBBQThCOENCOTVF OERBMEY3NTAeFw0yNTA0MTMyMzMwNTNaFw0yNTA0MTUwMjEyNTNaMDMxMTAvBgNV BAMTKENEMjBDQTEwNDE1MTdCRjdBMzE5QUZFMjE0MTA4QzRCRTFERkYwQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jTyONb6P1HVc8umSHhXRq64/ Arr26rmUJTRc/SU8PKjHETO4a07Yg7DniYF/vSQurZMx1tZi7pKJnY03p2HHzLXT NGXt/yd34KIMZwhyEdV13lT130wCqqDMRC5c6C7cqvYbPaHeibsToEJxvOhPEgfr 4SovczYfajB/sahzlGWdxPsNIZ5xjSsRQr08mSO6vX54wRCzb7sTP2D2YbbLutzs O1JUfixB3FH37KQzc35RN7j3Og7PQCGSa73SafrlAtOazaXBYPWbRJ4QtLILngAk F5RiKYhqtVBq9TeVU/PU64tM1oaN17qfxIE2ma5o19KuSzW/UL5aTSHUER3DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzSDKEEFRe/ejGa/iFBCMS+Hf8M4wHwYDVR0j BBgwFoAUlz/YI82BdxfdJhAKqLjLlejaD3UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUxyZWpTNWpCdWF2YkY1ckVXem8yUmFNRnVhNThYU2lWdWVlcm5OVThx Z28vMC85NzNGRDgyM0NEODE3NzE3REQyNjEwMEFBOEI4Q0I5NUU4REEwRjc1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3M0ZEODIzQ0Q4MTc3MTdE RDI2MTAwQUE4QjhDQjk1RThEQTBGNzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUxyZWpTNWpCdWF2YkY1ckVXem8yUmFNRnVhNThYU2lWdWVlcm5OVThxZ28vMC85 NzNGRDgyM0NEODE3NzE3REQyNjEwMEFBOEI4Q0I5NUU4REEwRjc1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXSa++/yWOQLyrqu5Z/YympCK3wJqy95NYqsqvoTcD79alLBCjmLXTGNJCB5U Rv+K5V8qAOzJRnpJSPu0wAm59voXmMfwDtdImDCRNrZan/C0bl/IhvhbtL7hdMuq FPuppwX0kYts7Yj/c+jxnlon2/3j9OLS7VgJHoXpT+LxLsFh3urArfQnTZGUoM1q 6ehpAjLIs2w/F2Ezah0D3dav0VUBSTBrvutPy34lydKjXGmhGpwtKNNO4jGSqL7D cpxHtt4qVNK15cPx4h0azjzYhFdYdi5X36CxvDeKeTHK/e2P00zg5sCK1l3JQ4bU TQl4N4VGDDPJNbB98DSf77FelA== -----END CERTIFICATE-----Generated at Mon Apr 14 03:48:53 2025 by rpki-client