$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.mft File: F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.mft (raw, json) Hash identifier: KngaiM3tHlzsiCDsVxQobeLNVCr51vlUxt7PrKl0rKA= Subject key identifier: DF:45:2C:83:14:BF:FD:2D:27:B0:FA:7F:7E:D2:9D:30:17:91:D4:06 Authority key identifier: F4:32:E0:ED:B6:9B:D6:E2:53:EE:20:F4:C1:58:9A:46:26:7A:A2:B9 Certificate issuer: /CN=F432E0EDB69BD6E253EE20F4C1589A46267AA2B9 Certificate serial: 21E48B10CD40F8EC50F1A5DE1169B8A9F094F1B5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer Subject info access: rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.mft Manifest number: 58 Signing time: Thu 17 Apr 2025 15:03:44 +0000 Manifest this update: Thu 17 Apr 2025 14:58:44 +0000 Manifest next update: Fri 18 Apr 2025 18:39:44 +0000 Files and hashes: 1: 3137372e35322e3231392e302f32342d3234203d3e20323632343532.roa (hash: U6ePlF8ZHE9j7yHkCGHckMRtw0CsBNDA0mdBOt0YUMM=) 2: 3137372e35322e3231372e302f32342d3234203d3e20323632343532.roa (hash: JARym3U9Ji/gyiEtiQ/KeLC5lVOiCRZ0gLZ/AI2TeCw=) 3: 323830343a336639343a383030303a3a2f33332d3333203d3e20323632343532.roa (hash: qKJVwpuxX4mJGc/O5QOh4hLSmxhBQYLWHO4H1O8cij8=) 4: 323830343a336639343a3a2f33332d3333203d3e20323632343532.roa (hash: JUFruknuPH5l5bjJoH5P9kKZ3TW2frOmFKKrSin9OfA=) 5: 3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa (hash: NfymXOCJyT2Z90Amb45ybAgXHskg4tz2XyAwoLmtAdg=) 6: 3137372e35322e3231382e302f32342d3234203d3e20323632343532.roa (hash: s0LXWjVwKnHYL1yWCVWrNuov5ugdNnGro2iWaGYhqvc=) 7: 3137372e35322e3231362e302f32342d3234203d3e20323632343532.roa (hash: PuoUtZ/EjH+CH0TrjjIITQbO3AC2EfAHvz57FuScHBw=) 8: F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.crl (hash: B/BkUzCLsv8F/fPpoYyk9p96bsRKj5Igi7PglxW+OvE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.crl rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 15:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e4:8b:10:cd:40:f8:ec:50:f1:a5:de:11:69:b8:a9:f0:94:f1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F432E0EDB69BD6E253EE20F4C1589A46267AA2B9 Validity Not Before: Apr 17 14:58:44 2025 GMT Not After : Apr 18 18:39:44 2025 GMT Subject: CN=DF452C8314BFFD2D27B0FA7F7ED29D301791D406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1b:e4:5d:51:96:22:a0:c2:c2:bc:a1:25:0a: 8f:be:3e:b4:85:2a:a9:f8:e4:8a:c3:ee:fa:2d:e4: 13:5d:3c:97:7f:47:82:e5:a2:68:47:5b:a2:a0:b4: 58:35:ff:b5:e6:b6:fd:b0:ca:09:24:8e:b1:69:c4: 3e:f6:0e:46:f7:cb:1d:05:33:93:0e:35:da:29:9b: 27:d9:4b:51:78:a8:49:cc:67:73:41:95:05:99:ee: d3:61:72:32:44:14:f0:53:b4:1f:7e:5b:52:bb:c7: ae:da:d3:3c:79:b9:51:17:27:54:8e:e3:35:95:70: 76:ce:8d:fb:0a:8e:f8:17:1e:1f:dc:3c:0b:af:bb: cd:f5:62:aa:a3:0d:43:4c:16:04:d0:e7:a8:e1:53: 0a:91:d3:2d:6d:68:c9:2f:50:d8:8f:b4:cd:10:14: 5f:a2:95:5f:76:29:a6:ad:49:33:c8:d1:70:85:09: 86:92:c0:43:aa:da:a0:9b:86:fe:a7:65:79:64:e6: 75:2c:14:66:38:18:ef:0f:49:1a:40:e1:a8:93:46: 2a:4f:f4:62:0f:bf:3b:93:0d:4c:3e:67:3f:79:ca: 43:83:35:68:2e:e3:c4:a4:b1:f2:a4:51:2d:70:c0: 3c:29:ba:5a:30:01:8b:28:c5:89:ce:ce:25:29:96: 75:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:45:2C:83:14:BF:FD:2D:27:B0:FA:7F:7E:D2:9D:30:17:91:D4:06 X509v3 Authority Key Identifier: keyid:F4:32:E0:ED:B6:9B:D6:E2:53:EE:20:F4:C1:58:9A:46:26:7A:A2:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/0/F432E0EDB69BD6E253EE20F4C1589A46267AA2B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:83:ba:6b:4b:fc:96:de:1b:90:6f:71:dc:0e:22:b6:b1:7c: 36:31:05:16:8b:14:51:9f:08:49:0b:f4:bc:14:dd:15:38:36: 41:c1:d9:2b:2d:05:f9:4a:d7:f3:35:db:58:a0:1f:83:32:de: fe:97:0b:c4:41:23:4a:57:ba:cc:86:0b:65:c9:7f:e8:f6:60: b3:63:6b:69:4b:f3:0e:64:6a:79:28:30:79:44:77:e1:0d:db: fe:51:44:5d:70:6b:f5:37:08:6a:4e:50:75:87:5d:42:4a:ff: dd:d9:2c:35:40:ec:96:46:93:6d:e7:1e:92:23:aa:43:3f:8d: af:92:f7:a5:d1:1d:1d:c4:c2:3d:df:b2:31:d9:82:70:d7:c7: 82:27:59:88:55:e3:39:dd:48:47:c9:70:58:71:02:c9:02:f0: 27:9c:2c:27:df:db:0c:7b:1d:f8:41:72:30:96:e4:4c:9c:c7: 35:b0:b0:a0:6c:af:8e:2c:3e:36:20:47:1d:2d:11:42:00:53: 19:59:39:73:c6:f4:04:46:6e:6d:a6:db:cf:9c:49:a8:c3:39: b4:96:96:01:cf:60:2c:3f:6d:78:02:1a:d3:0d:c8:17:29:36: 11:e9:8a:57:fc:ff:0f:b4:15:d8:7d:bf:f4:f0:3c:a6:b0:c8: 48:26:be:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIeSLEM1A+OxQ8aXeEWm4qfCU8bUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQzMkUwRURCNjlCRDZFMjUzRUUyMEY0QzE1ODlBNDYy NjdBQTJCOTAeFw0yNTA0MTcxNDU4NDRaFw0yNTA0MTgxODM5NDRaMDMxMTAvBgNV BAMTKERGNDUyQzgzMTRCRkZEMkQyN0IwRkE3RjdFRDI5RDMwMTc5MUQ0MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsG+RdUZYioMLCvKElCo++PrSF Kqn45IrD7vot5BNdPJd/R4LlomhHW6KgtFg1/7Xmtv2wygkkjrFpxD72Dkb3yx0F M5MONdopmyfZS1F4qEnMZ3NBlQWZ7tNhcjJEFPBTtB9+W1K7x67a0zx5uVEXJ1SO 4zWVcHbOjfsKjvgXHh/cPAuvu831YqqjDUNMFgTQ56jhUwqR0y1taMkvUNiPtM0Q FF+ilV92KaatSTPI0XCFCYaSwEOq2qCbhv6nZXlk5nUsFGY4GO8PSRpA4aiTRipP 9GIPvzuTDUw+Zz95ykODNWgu48SksfKkUS1wwDwpulowAYsoxYnOziUplnV3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU30UsgxS//S0nsPp/ftKdMBeR1AYwHwYDVR0j BBgwFoAU9DLg7bab1uJT7iD0wViaRiZ6orkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWtGN3VHc2VnR0UxMzJ2VmlhNzRIVDVaYUVCUVFpWnNZd2hmdzJOZmNt bWYvMC9GNDMyRTBFREI2OUJENkUyNTNFRTIwRjRDMTU4OUE0NjI2N0FBMkI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MzJFMEVEQjY5QkQ2RTI1 M0VFMjBGNEMxNTg5QTQ2MjY3QUEyQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWtGN3VHc2VnR0UxMzJ2VmlhNzRIVDVaYUVCUVFpWnNZd2hmdzJOZmNtbWYvMC9G NDMyRTBFREI2OUJENkUyNTNFRTIwRjRDMTU4OUE0NjI2N0FBMkI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYYO6a0v8lt4bkG9x3A4itrF8NjEFFosUUZ8ISQv0vBTdFTg2QcHZKy0F+UrX 8zXbWKAfgzLe/pcLxEEjSle6zIYLZcl/6PZgs2NraUvzDmRqeSgweUR34Q3b/lFE XXBr9TcIak5QdYddQkr/3dksNUDslkaTbecekiOqQz+Nr5L3pdEdHcTCPd+yMdmC cNfHgidZiFXjOd1IR8lwWHECyQLwJ5wsJ9/bDHsd+EFyMJbkTJzHNbCwoGyvjiw+ NiBHHS0RQgBTGVk5c8b0BEZubabbz5xJqMM5tJaWAc9gLD9teAIa0w3IFyk2EemK V/z/D7QV2H2/9PA8prDISCa+ww== -----END CERTIFICATE-----Generated at Thu Apr 17 17:10:36 2025 by rpki-client