$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft File: 89F33609E2B118C8ED9A105548D2D01FD6E38729.mft (raw, json) Hash identifier: ankkrMCIzrr6sMK8x33hrIcNos+6cofXVE83XYcNYFA= Subject key identifier: A4:E2:5D:59:6F:D1:A6:4E:ED:B3:3F:02:23:2D:FD:3E:A3:13:7B:41 Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 Certificate issuer: /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Certificate serial: 092B32CE7428EAB939245226AF165514784B0B3B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft Manifest number: 01E9 Signing time: Sat 05 Apr 2025 18:24:36 +0000 Manifest this update: Sat 05 Apr 2025 18:19:36 +0000 Manifest next update: Sun 06 Apr 2025 20:12:36 +0000 Files and hashes: 1: 89F33609E2B118C8ED9A105548D2D01FD6E38729.crl (hash: XZqw9rjsEALt5giiYhj9Z1KAS7lUa1RCEGWl/TIhM40=) 2: 323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (hash: yCRnKe7Cfo4f5weE5YMpi/ZO3/1Psrg+aJlLbswl12Y=) 3: 3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa (hash: bMO8E7JDP414YIw6qvyG05VpeLGja7y87JGV9snRtok=) 4: 3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (hash: 91gQ1OFtC7i3YwbFOdgAOt94iN2xUARUXKGh62+Ssos=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 20:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:2b:32:ce:74:28:ea:b9:39:24:52:26:af:16:55:14:78:4b:0b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Validity Not Before: Apr 5 18:19:36 2025 GMT Not After : Apr 6 20:12:36 2025 GMT Subject: CN=A4E25D596FD1A64EEDB33F02232DFD3EA3137B41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b6:49:52:bc:f6:e2:ae:72:b6:1e:2e:79:0d: 54:b7:5c:a1:76:f7:a8:8d:ad:07:44:30:77:a0:fe: 1e:c7:5e:33:3e:ff:ef:ef:fb:ac:87:7a:cd:91:98: 38:4c:46:49:0e:d0:82:ab:03:af:50:32:e1:d9:8e: d2:96:42:b5:c1:c5:39:d9:9b:fc:e6:61:ba:39:0c: 10:79:9b:27:60:eb:5e:20:96:80:52:d2:4a:6b:46: 00:52:3b:3f:99:d5:bd:ee:30:f3:d1:13:f2:d5:51: a4:24:41:52:9c:bd:ad:89:93:7f:4a:f4:73:ff:f4: 6a:8a:04:fa:f5:c7:77:01:88:f1:96:dd:58:63:a8: 34:88:7c:e6:b2:6d:10:1b:95:05:fb:17:a1:28:9c: be:4d:87:cc:23:7e:33:5c:8a:e4:41:09:d9:1d:f5: 41:43:9b:21:c8:63:76:ac:37:9e:4a:22:da:1c:dd: 4a:cb:a2:ae:da:bd:98:62:62:42:72:48:42:e1:8f: 68:17:5a:b3:9c:68:95:0c:bd:f6:d8:2b:4a:fe:72: 4f:1c:ea:c1:c4:49:bd:3a:4f:1d:b7:f5:51:40:ae: 2e:f1:0a:75:ee:42:27:8c:0e:8f:56:5b:f0:74:86: 2f:43:73:d2:f4:0e:28:88:e7:e6:fc:fd:af:29:4e: d9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E2:5D:59:6F:D1:A6:4E:ED:B3:3F:02:23:2D:FD:3E:A3:13:7B:41 X509v3 Authority Key Identifier: keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9e:77:76:f3:bf:ce:84:5a:3d:47:5d:13:0d:93:23:6f:55: f0:40:7f:be:83:ff:62:8c:ce:cb:60:48:85:44:95:9f:3f:0d: a3:dd:77:c8:e0:30:a7:2e:74:86:3a:d4:72:8a:47:da:50:e0: 4b:ff:26:3e:e8:b2:d4:66:76:d4:a5:d7:b0:9b:ef:40:dc:b0: b7:5a:91:3a:94:ad:8c:b2:9b:33:40:f0:71:3c:9c:18:d3:5c: 80:a6:88:c4:89:2f:84:06:6c:22:0e:1c:b7:31:89:a3:11:31: fe:9a:7b:32:c2:a7:44:40:c8:fe:cc:ff:6a:e6:d8:73:c2:38: 36:7c:ca:04:a6:c3:a1:38:39:66:b5:34:17:b9:96:94:c7:f5: bb:f5:cc:bf:5d:53:70:b8:f8:cc:eb:e3:cc:3f:8d:2a:80:4e: 8b:f6:fe:30:74:9d:bc:a8:d3:20:cd:ef:ac:68:32:b0:6a:ce: 49:cc:df:af:cf:66:1f:05:4f:33:a6:de:95:93:31:60:fa:f6: d0:63:7e:32:bc:57:1e:1e:48:95:92:18:c5:41:f8:23:38:ae: 9e:dd:92:7c:9b:6a:69:19:1d:b5:f1:ec:94:4c:dd:6a:1d:51: cc:27:74:e4:b9:85:9d:7a:bc:f6:fd:e3:c3:e6:2d:16:18:82: fe:5b:09:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCSsyznQo6rk5JFImrxZVFHhLCzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlGMzM2MDlFMkIxMThDOEVEOUExMDU1NDhEMkQwMUZE NkUzODcyOTAeFw0yNTA0MDUxODE5MzZaFw0yNTA0MDYyMDEyMzZaMDMxMTAvBgNV BAMTKEE0RTI1RDU5NkZEMUE2NEVFREIzM0YwMjIzMkRGRDNFQTMxMzdCNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQtklSvPbirnK2Hi55DVS3XKF2 96iNrQdEMHeg/h7HXjM+/+/v+6yHes2RmDhMRkkO0IKrA69QMuHZjtKWQrXBxTnZ m/zmYbo5DBB5mydg614gloBS0kprRgBSOz+Z1b3uMPPRE/LVUaQkQVKcva2Jk39K 9HP/9GqKBPr1x3cBiPGW3VhjqDSIfOaybRAblQX7F6EonL5Nh8wjfjNciuRBCdkd 9UFDmyHIY3asN55KItoc3UrLoq7avZhiYkJySELhj2gXWrOcaJUMvfbYK0r+ck8c 6sHESb06Tx239VFAri7xCnXuQieMDo9WW/B0hi9Dc9L0DiiI5+b8/a8pTtmRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpOJdWW/Rpk7tsz8CIy39PqMTe0EwHwYDVR0j BBgwFoAUifM2CeKxGMjtmhBVSNLQH9bjhykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4 ekUvMS84OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RjMzNjA5RTJCMTE4QzhF RDlBMTA1NTQ4RDJEMDFGRDZFMzg3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4ekUvMS84 OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb553dvO/zoRaPUddEw2TI29V8EB/voP/YozOy2BIhUSVnz8No913yOAwpy50 hjrUcopH2lDgS/8mPuiy1GZ21KXXsJvvQNywt1qROpStjLKbM0DwcTycGNNcgKaI xIkvhAZsIg4ctzGJoxEx/pp7MsKnREDI/sz/aubYc8I4NnzKBKbDoTg5ZrU0F7mW lMf1u/XMv11TcLj4zOvjzD+NKoBOi/b+MHSdvKjTIM3vrGgysGrOSczfr89mHwVP M6belZMxYPr20GN+MrxXHh5IlZIYxUH4Iziunt2SfJtqaRkdtfHslEzdah1RzCd0 5LmFnXq89v3jw+YtFhiC/lsJfA== -----END CERTIFICATE-----Generated at Sun Apr 6 10:58:00 2025 by rpki-client