$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft File: 573658E4241F21CAB22CB9FC150BF6FB898271EA.mft (raw, json) Hash identifier: pLq2tQSLesfFT1bBV/nvAjpF1KeEcnS6YQcNHbqrniY= Subject key identifier: 87:72:8D:4C:F4:47:32:6B:E8:9F:C5:B4:49:C2:30:35:EC:5E:2B:F4 Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA Certificate issuer: /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA Certificate serial: 61531F474C3F2BE312562873CA8942859EBA0A4D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer Subject info access: rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft Manifest number: 9B Signing time: Sun 06 Apr 2025 20:38:20 +0000 Manifest this update: Sun 06 Apr 2025 20:33:20 +0000 Manifest next update: Mon 07 Apr 2025 23:24:20 +0000 Files and hashes: 1: 3133312e302e3139342e302f32332d3233203d3e203631373139.roa (hash: P0RfTJJBKMCwHlQNY6B4YysuDWbqgRP+uMy8I3GdAMI=) 2: 323830343a316235303a3a2f33322d3332203d3e203631373139.roa (hash: fU1Q8QvvtL0h2YV8u9C9o9TI9d4T2xpRqPo2OnTtEVU=) 3: 3133312e302e3139322e302f32332d3233203d3e203631373139.roa (hash: w97n07X0zqExDN8gzf3cZjKH+F//QEYk2SLdLpiVsaw=) 4: 573658E4241F21CAB22CB9FC150BF6FB898271EA.crl (hash: gnl1foR56IalgqAkpIXXdTeCUWMZe71twgtARABRqjk=) 5: 3133312e302e3139322e302f32322d3232203d3e203631373139.roa (hash: 5dZsfjdOTFkdmFH4OyyvTTGdmlo5vCRzMFWBh4lWRXE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 23:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:53:1f:47:4c:3f:2b:e3:12:56:28:73:ca:89:42:85:9e:ba:0a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA Validity Not Before: Apr 6 20:33:20 2025 GMT Not After : Apr 7 23:24:20 2025 GMT Subject: CN=87728D4CF447326BE89FC5B449C23035EC5E2BF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:02:c7:84:7f:a9:af:82:c5:e1:12:ea:01:f8: 43:02:b3:82:e9:d8:1a:8c:d5:1c:f9:0a:e9:49:62: d7:e5:f6:8d:dd:8b:66:67:70:2f:94:df:7a:66:67: 2e:d3:88:9c:9c:ab:2a:54:39:34:04:08:ec:93:66: c2:07:b8:0f:4f:e7:49:88:61:6c:0d:db:05:02:85: 5b:c4:06:2b:16:3a:eb:2a:9c:c3:3a:2a:72:71:e4: 4f:75:a7:d9:86:e9:9c:f0:ba:6e:39:5a:12:e1:ab: 16:4e:14:35:fe:cb:4d:79:7e:26:03:db:bb:f1:18: af:54:3c:5e:6d:8a:94:59:86:7b:03:ef:2e:12:e7: 2e:78:33:2f:f1:5f:a5:52:0a:00:29:91:6f:6d:40: 21:87:a8:b5:1e:26:4b:c9:aa:0f:98:e7:41:b1:d3: 2c:f4:7b:3b:fd:8f:58:23:e0:1e:1f:25:cd:25:08: 85:2e:96:c3:28:31:9d:6f:75:07:07:51:3a:4c:65: dd:76:67:ae:6a:e8:2c:fd:5c:95:ad:05:91:9d:e7: e4:2b:8b:20:88:dd:2a:75:e7:8e:fd:39:78:16:72: fe:29:e7:f0:65:63:7a:28:ed:02:13:c5:2c:7a:e1: 76:00:cf:7f:c4:5f:19:81:a5:63:7b:03:9e:11:5f: 95:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:72:8D:4C:F4:47:32:6B:E8:9F:C5:B4:49:C2:30:35:EC:5E:2B:F4 X509v3 Authority Key Identifier: keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b2:12:bc:77:96:ce:e1:43:8d:fb:29:78:78:d9:50:d9:5b: 33:b7:f1:bb:f6:9e:d3:3b:fe:13:28:2c:89:e6:22:6e:51:04: 96:49:35:18:cc:d9:45:d1:0e:0e:d1:b3:ee:9d:dd:48:f6:ad: e4:cd:0b:ab:6e:58:2d:78:3e:0a:75:a5:6c:30:e5:8f:d4:97: fb:12:84:6a:37:1a:60:4d:9c:16:5a:5c:d9:75:87:3f:30:b5: dd:b8:64:74:c1:a3:aa:6b:75:a4:c0:e8:50:68:78:74:89:ba: 95:00:5e:5d:30:bc:1a:a4:f0:dd:1b:ed:d3:84:aa:37:15:b7: 9e:ca:13:31:1d:39:12:67:38:5c:4d:5f:7a:05:2c:c7:d1:66: c7:9a:4c:d2:54:89:12:7e:14:dd:44:d9:04:98:4d:30:75:e1: c4:08:dd:65:45:ee:ca:e5:4e:14:13:34:6e:58:00:11:93:91: 8a:fb:ea:ff:43:d1:09:21:c6:34:2a:6f:49:ce:ba:cc:aa:cd: b6:83:06:05:a1:bb:fd:f0:33:be:57:e0:18:9a:b2:27:0d:1a: f4:2d:a2:25:24:ce:55:c4:e9:9d:d2:42:79:4e:88:13:7b:3c: 2d:55:21:4d:ab:8e:df:5e:61:a6:e5:6a:d1:58:fa:5b:6f:a4: b7:96:b5:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYVMfR0w/K+MSVihzyolChZ66Ck0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTczNjU4RTQyNDFGMjFDQUIyMkNCOUZDMTUwQkY2RkI4 OTgyNzFFQTAeFw0yNTA0MDYyMDMzMjBaFw0yNTA0MDcyMzI0MjBaMDMxMTAvBgNV BAMTKDg3NzI4RDRDRjQ0NzMyNkJFODlGQzVCNDQ5QzIzMDM1RUM1RTJCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvAseEf6mvgsXhEuoB+EMCs4Lp 2BqM1Rz5CulJYtfl9o3di2ZncC+U33pmZy7TiJycqypUOTQECOyTZsIHuA9P50mI YWwN2wUChVvEBisWOusqnMM6KnJx5E91p9mG6Zzwum45WhLhqxZOFDX+y015fiYD 27vxGK9UPF5tipRZhnsD7y4S5y54My/xX6VSCgApkW9tQCGHqLUeJkvJqg+Y50Gx 0yz0ezv9j1gj4B4fJc0lCIUulsMoMZ1vdQcHUTpMZd12Z65q6Cz9XJWtBZGd5+Qr iyCI3Sp15479OXgWcv4p5/BlY3oo7QITxSx64XYAz3/EXxmBpWN7A54RX5VnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUh3KNTPRHMmvon8W0ScIwNexeK/QwHwYDVR0j BBgwFoAUVzZY5CQfIcqyLLn8FQv2+4mCceowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDNLRHByUjlDRGlYdTEzajZuekV6aFdjVG5KTmRDRlFOMzJqNGJUNmhK M1MvMC81NzM2NThFNDI0MUYyMUNBQjIyQ0I5RkMxNTBCRjZGQjg5ODI3MUVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MzY1OEU0MjQxRjIxQ0FC MjJDQjlGQzE1MEJGNkZCODk4MjcxRUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDNLRHByUjlDRGlYdTEzajZuekV6aFdjVG5KTmRDRlFOMzJqNGJUNmhKM1MvMC81 NzM2NThFNDI0MUYyMUNBQjIyQ0I5RkMxNTBCRjZGQjg5ODI3MUVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOLISvHeWzuFDjfspeHjZUNlbM7fxu/ae0zv+EygsieYiblEElkk1GMzZRdEO DtGz7p3dSPat5M0Lq25YLXg+CnWlbDDlj9SX+xKEajcaYE2cFlpc2XWHPzC13bhk dMGjqmt1pMDoUGh4dIm6lQBeXTC8GqTw3Rvt04SqNxW3nsoTMR05Emc4XE1fegUs x9Fmx5pM0lSJEn4U3UTZBJhNMHXhxAjdZUXuyuVOFBM0blgAEZORivvq/0PRCSHG NCpvSc66zKrNtoMGBaG7/fAzvlfgGJqyJw0a9C2iJSTOVcTpndJCeU6IE3s8LVUh TauO315hpuVq0Vj6W2+kt5a1fg== -----END CERTIFICATE-----Generated at Mon Apr 7 12:08:49 2025 by rpki-client