$ rpki-client -vvf rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/1/23A710552D56A7337CB18A7C931774ED1B1B6467.mft File: 23A710552D56A7337CB18A7C931774ED1B1B6467.mft (raw, json) Hash identifier: t3kg44POtupR2+x9WywRgUoVKj8/X35Vf+CmBE1IOYc= Subject key identifier: D2:5C:79:C9:77:8D:02:A8:94:CD:3F:5C:D7:11:4B:5E:4C:B7:2E:89 Authority key identifier: 23:A7:10:55:2D:56:A7:33:7C:B1:8A:7C:93:17:74:ED:1B:1B:64:67 Certificate issuer: /CN=23A710552D56A7337CB18A7C931774ED1B1B6467 Certificate serial: 41B487928D173DE6A958DDC7686D708EFAC668C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A710552D56A7337CB18A7C931774ED1B1B6467.cer Subject info access: rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/1/23A710552D56A7337CB18A7C931774ED1B1B6467.mft Manifest number: 0235 Signing time: Wed 04 Jun 2025 04:46:03 +0000 Manifest this update: Wed 04 Jun 2025 04:41:03 +0000 Manifest next update: Thu 05 Jun 2025 07:41:03 +0000 Files and hashes: 1: 23A710552D56A7337CB18A7C931774ED1B1B6467.crl (hash: NYoEv89Nn+/jhPnMQL/Vw9nDBMQMIvHd9InWCy3e3gg=) 2: 34352e352e3134302e302f32322d3234203d3e20323639363333.roa (hash: 2cC/YxKpa5WWk6d7ou04Ap7pZQ0ddMCWt1Zp5+Bkf9I=) 3: 323830343a363738343a3a2f33322d3438203d3e20323639363333.roa (hash: OhW57lnpoSo7910ORUxnJ/enjD+PnYq2Rb6cmIDg4/c=) 4: 34352e3139302e34302e302f32322d3234203d3e20323639363333.roa (hash: jJtZx0b1W9gkzCbb4rN2BXxvSPq8A+dKKfw7p9jdZhA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/1/23A710552D56A7337CB18A7C931774ED1B1B6467.crl rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/1/23A710552D56A7337CB18A7C931774ED1B1B6467.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A710552D56A7337CB18A7C931774ED1B1B6467.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Jun 2025 07:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b4:87:92:8d:17:3d:e6:a9:58:dd:c7:68:6d:70:8e:fa:c6:68:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A710552D56A7337CB18A7C931774ED1B1B6467 Validity Not Before: Jun 4 04:41:03 2025 GMT Not After : Jun 5 07:41:03 2025 GMT Subject: CN=D25C79C9778D02A894CD3F5CD7114B5E4CB72E89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:90:d2:c7:a7:30:52:4a:89:b3:b5:49:8b:f1: be:99:e1:92:3a:61:6b:19:25:3e:f6:f2:9e:15:e0: 27:08:71:9a:a5:94:6e:9c:87:ac:d9:19:b1:c9:ac: 84:5d:50:3f:aa:17:cc:39:75:b6:0d:1f:c1:81:19: 78:d0:ab:01:2b:66:34:ec:fe:b9:7c:f9:17:22:0c: d7:65:25:c8:e3:63:97:e0:cf:0f:1e:d9:8e:e1:bc: bf:cf:6e:dd:c6:1b:d7:04:bf:34:4c:8a:6f:6a:ea: 5d:0c:fd:b1:e5:a8:51:00:5c:86:47:0d:9b:71:11: a2:2c:ff:d2:29:18:98:21:47:c8:30:fa:a6:a3:6b: 34:0c:14:7c:42:20:a4:d0:c7:e1:09:1f:51:45:8c: a2:41:20:5b:5a:0a:8c:8f:48:4a:96:ee:44:82:fc: 2b:e4:9d:6b:a9:aa:cd:35:89:83:b0:26:36:75:8b: 7a:f4:a0:23:80:d8:c8:07:8d:b6:1d:51:1f:93:2a: 19:bb:88:a5:ec:07:45:4b:d3:b1:66:8e:a1:21:9e: ac:9f:59:71:19:ca:8f:63:3f:00:f4:35:8d:11:1e: 78:4a:da:c6:7f:cd:68:53:9c:24:d0:2c:04:d1:4a: b5:55:8b:2d:69:09:a6:4d:a3:34:95:72:3c:02:9f: 8b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5C:79:C9:77:8D:02:A8:94:CD:3F:5C:D7:11:4B:5E:4C:B7:2E:89 X509v3 Authority Key Identifier: keyid:23:A7:10:55:2D:56:A7:33:7C:B1:8A:7C:93:17:74:ED:1B:1B:64:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/1/23A710552D56A7337CB18A7C931774ED1B1B6467.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A710552D56A7337CB18A7C931774ED1B1B6467.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/1/23A710552D56A7337CB18A7C931774ED1B1B6467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:74:31:6d:4b:23:ca:b4:90:df:5d:ac:9c:35:c2:db:f1:59: 28:1d:b5:5c:e8:dc:b6:49:cb:e8:6a:0d:9f:58:1b:6e:a0:78: 9b:7d:28:b3:57:93:43:bd:f2:fc:95:7a:fd:2f:2b:09:ff:24: 42:b0:c8:a4:2e:22:7f:07:33:40:ff:19:a4:9d:7f:12:27:0f: 8a:51:81:6f:a9:96:8f:92:0b:84:d9:d8:e2:12:9e:bb:88:2b: 0d:1a:6d:c4:e7:fc:c8:55:26:81:1a:43:93:db:ed:57:36:70: 89:3d:27:3c:98:b1:5b:b4:98:38:7b:f7:5b:7f:88:2d:3a:0a: a9:df:1c:af:e9:aa:f1:a3:3a:cb:b8:55:0b:0b:0e:65:c2:51: 79:cf:58:26:0f:f3:6f:71:c3:08:ce:88:b3:8c:7e:25:49:4b: ba:77:03:66:7f:00:67:7c:ce:24:6a:01:37:a5:68:cf:27:32: 97:e6:34:ab:c2:6d:ed:26:2f:b1:ae:89:19:8c:2f:f2:f8:52: 27:1f:96:f3:55:32:52:52:8b:e6:40:19:de:14:8b:aa:3b:41: cb:53:e1:26:95:b7:70:41:33:26:bf:9c:8e:a8:52:61:dd:b7: bf:2b:2d:77:3c:23:ed:10:81:3f:38:d5:d0:d4:c2:7b:61:ab: 01:19:83:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQbSHko0XPeapWN3HaG1wjvrGaMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBNzEwNTUyRDU2QTczMzdDQjE4QTdDOTMxNzc0RUQx QjFCNjQ2NzAeFw0yNTA2MDQwNDQxMDNaFw0yNTA2MDUwNzQxMDNaMDMxMTAvBgNV BAMTKEQyNUM3OUM5Nzc4RDAyQTg5NENEM0Y1Q0Q3MTE0QjVFNENCNzJFODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSkNLHpzBSSomztUmL8b6Z4ZI6 YWsZJT728p4V4CcIcZqllG6ch6zZGbHJrIRdUD+qF8w5dbYNH8GBGXjQqwErZjTs /rl8+RciDNdlJcjjY5fgzw8e2Y7hvL/Pbt3GG9cEvzRMim9q6l0M/bHlqFEAXIZH DZtxEaIs/9IpGJghR8gw+qajazQMFHxCIKTQx+EJH1FFjKJBIFtaCoyPSEqW7kSC /CvknWupqs01iYOwJjZ1i3r0oCOA2MgHjbYdUR+TKhm7iKXsB0VL07FmjqEhnqyf WXEZyo9jPwD0NY0RHnhK2sZ/zWhTnCTQLATRSrVViy1pCaZNozSVcjwCn4sFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0lx5yXeNAqiUzT9c1xFLXky3LokwHwYDVR0j BBgwFoAUI6cQVS1WpzN8sYp8kxd07RsbZGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDczRlRFb1BDUXFzcjR1MTdlOGJSTjRjQTVwdUwxWE1IeVF6VEpnTnFm MTgvMS8yM0E3MTA1NTJENTZBNzMzN0NCMThBN0M5MzE3NzRFRDFCMUI2NDY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQTcxMDU1MkQ1NkE3MzM3 Q0IxOEE3QzkzMTc3NEVEMUIxQjY0NjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDczRlRFb1BDUXFzcjR1MTdlOGJSTjRjQTVwdUwxWE1IeVF6VEpnTnFmMTgvMS8y M0E3MTA1NTJENTZBNzMzN0NCMThBN0M5MzE3NzRFRDFCMUI2NDY3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO3QxbUsjyrSQ312snDXC2/FZKB21XOjctknL6GoNn1gbbqB4m30os1eTQ73y /JV6/S8rCf8kQrDIpC4ifwczQP8ZpJ1/EicPilGBb6mWj5ILhNnY4hKeu4grDRpt xOf8yFUmgRpDk9vtVzZwiT0nPJixW7SYOHv3W3+ILToKqd8cr+mq8aM6y7hVCwsO ZcJRec9YJg/zb3HDCM6Is4x+JUlLuncDZn8AZ3zOJGoBN6Vozycyl+Y0q8Jt7SYv sa6JGYwv8vhSJx+W81UyUlKL5kAZ3hSLqjtBy1PhJpW3cEEzJr+cjqhSYd23vyst dzwj7RCBPzjV0NTCe2GrARmDLQ== -----END CERTIFICATE-----Generated at Wed Jun 4 12:24:20 2025 by rpki-client