$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft File: FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft (raw, json) Hash identifier: ENmDR5FGd9mNCguoGT7W0zQwdngXy2sHbuXm/rSNQRk= Subject key identifier: CC:81:2D:4A:95:83:61:05:EC:67:19:0D:FF:AF:24:73:55:AA:EE:84 Authority key identifier: FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA Certificate issuer: /CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA Certificate serial: 610B5A0812E350E2B5A20AA358CBD8D066F435E2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft Manifest number: 0109 Signing time: Tue 08 Apr 2025 09:32:02 +0000 Manifest this update: Tue 08 Apr 2025 09:27:02 +0000 Manifest next update: Wed 09 Apr 2025 13:17:02 +0000 Files and hashes: 1: 323830343a353331633a3233303a3a2f34352d3435203d3e20323638353634.roa (hash: ul1f4ky2oH9XDlmsg8j4yfF2vAfY9xt2eDDbzd/HFQc=) 2: 323830343a353331633a3233383a3a2f34352d3435203d3e20323638353634.roa (hash: aW9uaehjih4wwoJLQLP0XCZT/2SOubhbVOn/u1JiU2A=) 3: 34352e3136322e3231342e302f32332d3233203d3e20323638353634.roa (hash: 5VeR1GKl23ZFisvTumvPLJTwnuN3vj3euo1Cfr1yHL0=) 4: 34352e3136322e3231352e302f32342d3234203d3e20323638353634.roa (hash: +9XBEjPsIIoxE8uENyyLxxiTfY3NG/2OI2CUiWOC51A=) 5: 34352e3136322e3231322e302f32342d3234203d3e20323638353634.roa (hash: tYOjK0sXHTiSWXNgAQWa+66CiOU1BtW50fMpjtKZyvY=) 6: 34352e3136322e3231342e302f32342d3234203d3e20323638353634.roa (hash: mBBLHsNiDUScfZPZBF00pbGRuH04ZIxsjMo8MGTbJmI=) 7: FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl (hash: SjdLMbRUuXrmJBmjkZjy4hUkJ3gZUFoUANcxyhBlTj8=) 8: 323830343a353331633a3232383a3a2f34352d3435203d3e20323638353634.roa (hash: M/puXfyJzNXJpRhYFbtIItEv17SXy2VTE6vhWjiX8NE=) 9: 34352e3136322e3231332e302f32342d3234203d3e20323638353634.roa (hash: NLblclHoco9pkN9CeEgGgAp/RFhGKNDTxSs45xtltk8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 13:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:0b:5a:08:12:e3:50:e2:b5:a2:0a:a3:58:cb:d8:d0:66:f4:35:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA Validity Not Before: Apr 8 09:27:02 2025 GMT Not After : Apr 9 13:17:02 2025 GMT Subject: CN=CC812D4A95836105EC67190DFFAF247355AAEE84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:c6:c5:9f:34:7c:53:cb:29:8d:1d:df:97: 7c:18:2c:c7:65:0b:85:5b:9d:f8:ed:33:9f:97:97: 9a:53:48:5e:1e:ff:46:5e:91:7b:5a:18:8f:e9:90: c0:9f:e8:3e:29:62:c3:f6:56:99:18:85:06:1d:56: 6c:f1:de:e4:dd:e8:7c:fb:47:0a:e9:ea:88:15:80: 70:e1:de:81:52:97:fe:d7:c2:6d:cf:ae:dd:1c:b1: 2f:74:1f:74:23:57:d0:b3:e2:69:48:cf:1a:e0:95: 28:ed:07:3f:e2:d8:34:cc:ce:d8:1b:67:d8:fc:4e: cc:de:b2:d3:1a:b2:5b:34:f6:3d:07:6f:22:50:60: 2d:f1:a9:0f:7b:3b:11:cb:2c:58:89:8a:65:f6:a2: 97:7f:37:f5:ba:d7:a8:27:ae:91:25:9b:c5:9e:fe: 53:a0:c2:fd:d9:1d:30:0a:f5:69:2d:37:51:ea:5c: 83:49:b9:7d:d8:23:de:53:38:db:96:43:1f:89:0c: 43:74:88:74:61:52:fe:27:95:4d:ed:f5:11:a2:7e: 99:5c:65:a3:db:52:dd:a5:b6:8a:07:b3:d5:91:2a: 5c:b3:fb:84:f9:ce:2b:68:45:71:1f:db:97:f2:f5: ba:22:3b:41:38:6d:9d:c3:77:1c:57:84:2d:d7:04: b1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:81:2D:4A:95:83:61:05:EC:67:19:0D:FF:AF:24:73:55:AA:EE:84 X509v3 Authority Key Identifier: keyid:FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:18:27:bb:30:29:dc:84:81:0b:d9:81:0a:4b:74:ec:3e:0a: eb:4c:77:1a:00:e0:f8:9b:4a:1f:b1:e7:02:8a:06:72:7c:f7: 26:00:5a:cc:14:60:18:8d:b3:38:5c:37:86:20:c6:e9:26:b1: 76:0e:a6:c2:f3:55:9f:20:b3:de:0d:bc:08:85:61:5d:ac:30: 42:d0:56:7a:81:0d:df:f2:6c:e8:c3:e5:bf:54:ba:f8:19:eb: 9a:9b:8b:99:fa:33:df:bf:0f:fb:6e:d3:0d:10:3e:ef:74:14: 28:4f:87:c8:c8:96:fa:b9:79:15:0b:0c:d6:b8:5d:25:41:05: 3e:3c:25:55:9a:0e:41:06:7d:fb:41:74:fe:09:47:e6:59:64: 39:bc:cb:f9:65:29:ad:77:eb:98:f0:65:cd:48:1c:a6:de:1d: b5:b1:84:af:90:aa:61:51:2c:78:a0:da:18:20:d6:b9:b3:ee: 96:26:e6:d0:51:31:73:e6:54:81:e7:59:a5:d3:b6:93:da:7a: 63:f2:66:b7:09:46:53:a8:a1:f6:72:fe:73:bf:46:6e:59:14: 42:31:f6:1b:93:34:7d:51:48:2d:09:44:97:9b:a0:0e:ed:42: 85:e3:3c:be:76:89:87:05:b4:1b:53:00:b1:35:64:64:d4:a3: 20:2a:01:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYQtaCBLjUOK1ogqjWMvY0Gb0NeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzM0MxQ0ZDMTE3QTM3OTE4RDRCRDVCNjRCMjMzQUU5 MTJBNDBCQTAeFw0yNTA0MDgwOTI3MDJaFw0yNTA0MDkxMzE3MDJaMDMxMTAvBgNV BAMTKENDODEyRDRBOTU4MzYxMDVFQzY3MTkwREZGQUYyNDczNTVBQUVFODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDfcbFnzR8U8spjR3fl3wYLMdl C4VbnfjtM5+Xl5pTSF4e/0ZekXtaGI/pkMCf6D4pYsP2VpkYhQYdVmzx3uTd6Hz7 Rwrp6ogVgHDh3oFSl/7Xwm3Prt0csS90H3QjV9Cz4mlIzxrglSjtBz/i2DTMztgb Z9j8TszestMasls09j0HbyJQYC3xqQ97OxHLLFiJimX2opd/N/W616gnrpElm8We /lOgwv3ZHTAK9WktN1HqXINJuX3YI95TONuWQx+JDEN0iHRhUv4nlU3t9RGifplc ZaPbUt2ltooHs9WRKlyz+4T5zitoRXEf25fy9boiO0E4bZ3DdxxXhC3XBLHjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzIEtSpWDYQXsZxkN/68kc1Wq7oQwHwYDVR0j BBgwFoAU/zPBz8EXo3kY1L1bZLIzrpEqQLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDRMWFVjZFlTZDY3aTdvQ3lKcFZUSFUxZnlCNTlKS21odTkyVGpwMWdo YW4vMC9GRjMzQzFDRkMxMTdBMzc5MThENEJENUI2NEIyMzNBRTkxMkE0MEJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMzNDMUNGQzExN0EzNzkx OEQ0QkQ1QjY0QjIzM0FFOTEyQTQwQkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDRMWFVjZFlTZDY3aTdvQ3lKcFZUSFUxZnlCNTlKS21odTkyVGpwMWdoYW4vMC9G RjMzQzFDRkMxMTdBMzc5MThENEJENUI2NEIyMzNBRTkxMkE0MEJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArxgnuzAp3ISBC9mBCkt07D4K60x3GgDg+JtKH7HnAooGcnz3JgBazBRgGI2z OFw3hiDG6Saxdg6mwvNVnyCz3g28CIVhXawwQtBWeoEN3/Js6MPlv1S6+BnrmpuL mfoz378P+27TDRA+73QUKE+HyMiW+rl5FQsM1rhdJUEFPjwlVZoOQQZ9+0F0/glH 5llkObzL+WUprXfrmPBlzUgcpt4dtbGEr5CqYVEseKDaGCDWubPulibm0FExc+ZU gedZpdO2k9p6Y/JmtwlGU6ih9nL+c79GblkUQjH2G5M0fVFILQlEl5ugDu1CheM8 vnaJhwW0G1MAsTVkZNSjICoB8g== -----END CERTIFICATE-----Generated at Wed Apr 9 06:19:05 2025 by rpki-client