$ rpki-client -vvf rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.mft File: 6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.mft (raw, json) Hash identifier: +ikUXEwYwnJeziQ9+rLIDuLPOfhEBNMBmmIxYK6ELMU= Subject key identifier: BE:66:49:4A:7E:88:4C:C3:59:99:84:65:1C:87:9F:7D:63:83:91:6F Authority key identifier: 6D:39:85:2A:3C:6A:B4:CF:15:9D:D7:D1:50:BB:AD:5D:44:E3:D8:7D Certificate issuer: /CN=6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D Certificate serial: 112EC47F4AFCFBA8FB00B29B5239AC9C4E7516F3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.mft Manifest number: 0110 Signing time: Sat 05 Apr 2025 04:10:14 +0000 Manifest this update: Sat 05 Apr 2025 04:05:14 +0000 Manifest next update: Mon 07 Apr 2025 07:55:14 +0000 Files and hashes: 1: 3133382e3138362e3130342e302f32322d3234203d3e20323634333533.roa (hash: K23F+L4wwEbxsmHhrFIe3rsmGc7He1bv03jJ7/GwjCY=) 2: 6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.crl (hash: SZQ0rh0F+Jz0sr6OSRfzf1o3+7pCCvDKCPpPZNIHCp4=) 3: 323830343a316433303a3a2f33322d3334203d3e20323634333533.roa (hash: EAONuMqEV62n3zoYlxGIRe2R4d/28Ckd/to6nIMOljM=) 4: 3133312e3130382e3131362e302f32322d3234203d3e20323634333533.roa (hash: yfqJWaNxWiYL09LOWjT7uY4lVTVVFk6kDYYgpOXIBDc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.crl rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 07:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:2e:c4:7f:4a:fc:fb:a8:fb:00:b2:9b:52:39:ac:9c:4e:75:16:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D Validity Not Before: Apr 5 04:05:14 2025 GMT Not After : Apr 7 07:55:14 2025 GMT Subject: CN=BE66494A7E884CC3599984651C879F7D6383916F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:7a:3b:d8:84:23:06:6c:bf:94:63:15:ed: 8f:b9:3e:d6:62:c9:6c:8c:bf:6f:98:91:17:6f:07: b9:a1:b7:10:99:d7:02:4f:02:46:6d:04:b5:9f:18: 76:ab:f3:81:6b:94:8c:73:d6:f7:d2:00:62:69:5c: 1e:31:cb:42:9d:72:b0:90:54:6a:fd:e4:bc:f9:49: 23:ec:b6:58:9c:ba:67:a1:ed:0d:a0:d9:6b:5e:b9: b2:4b:3c:9c:7b:bb:f9:3f:30:ab:0d:f2:ef:15:a4: 7b:1c:7c:62:ab:2e:0f:4e:ca:f9:04:55:14:1e:c1: c5:9c:c9:71:9d:cb:dd:c2:e0:5e:09:61:1b:70:33: b3:e2:21:07:83:28:f1:36:2b:0c:a4:e0:33:5b:76: aa:4b:f3:d1:b8:30:51:df:20:50:ab:11:a9:d8:33: c1:8b:e8:c7:32:3c:61:b1:1c:e7:fa:e2:0f:c9:a4: 1b:74:10:30:7c:02:77:97:35:e7:80:4c:1a:d3:de: 96:b8:92:13:d7:db:8d:c1:bd:dd:1b:96:fe:90:74: 54:9a:5e:af:5d:49:09:9c:01:b7:d4:47:03:be:60: 3e:0b:2c:85:9c:ee:a3:81:87:50:00:da:32:00:de: e0:87:9b:97:11:b8:e1:81:52:d1:48:a0:52:1a:f8: c3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:66:49:4A:7E:88:4C:C3:59:99:84:65:1C:87:9F:7D:63:83:91:6F X509v3 Authority Key Identifier: keyid:6D:39:85:2A:3C:6A:B4:CF:15:9D:D7:D1:50:BB:AD:5D:44:E3:D8:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/6D39852A3C6AB4CF159DD7D150BBAD5D44E3D87D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a8:62:66:92:47:96:a3:02:24:73:06:1a:9a:ec:b7:73:b9: 15:a4:8c:b4:0f:ac:9e:db:69:15:1a:2c:05:6b:50:b3:88:36: 22:3f:90:44:7f:58:b6:13:4d:39:cb:91:0b:5e:80:3e:d5:6c: d5:0e:f4:16:1d:e6:bb:15:f2:10:24:07:03:0e:3f:37:e8:05: 9e:1a:66:ba:68:2d:41:c2:a8:19:c5:6d:81:f7:71:e1:6c:e1: 78:15:5f:bf:86:bf:04:c3:db:ed:f9:02:17:ab:93:db:d8:53: 26:7b:da:67:9d:b0:4d:72:78:bc:21:96:92:9c:f6:a5:27:0e: 20:4d:7c:2b:cc:7b:98:8d:25:0a:b1:20:9d:4e:c7:0f:81:86: 4e:44:26:8d:38:55:5b:6c:a9:c7:9a:72:97:14:f4:cf:5b:5d: 27:e1:00:49:1d:2e:7e:42:26:b2:f2:8d:8f:c0:81:37:0b:26: 29:cf:a7:9c:79:c8:5f:c1:df:66:2f:f3:07:db:07:e2:20:1a: ca:c1:b9:5e:a4:ae:f7:a9:e6:4c:f0:da:00:02:73:e2:26:9c: 3d:14:bd:93:5d:19:14:c5:56:d2:3f:db:b9:d7:1f:1f:5e:e3: 4f:af:59:c0:e7:1c:1a:05:18:81:c4:61:3f:18:de:23:26:f9: f2:2e:1b:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUES7Ef0r8+6j7ALKbUjmsnE51FvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQzOTg1MkEzQzZBQjRDRjE1OUREN0QxNTBCQkFENUQ0 NEUzRDg3RDAeFw0yNTA0MDUwNDA1MTRaFw0yNTA0MDcwNzU1MTRaMDMxMTAvBgNV BAMTKEJFNjY0OTRBN0U4ODRDQzM1OTk5ODQ2NTFDODc5RjdENjM4MzkxNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaHno72IQjBmy/lGMV7Y+5PtZi yWyMv2+YkRdvB7mhtxCZ1wJPAkZtBLWfGHar84FrlIxz1vfSAGJpXB4xy0KdcrCQ VGr95Lz5SSPstlicumeh7Q2g2WteubJLPJx7u/k/MKsN8u8VpHscfGKrLg9OyvkE VRQewcWcyXGdy93C4F4JYRtwM7PiIQeDKPE2Kwyk4DNbdqpL89G4MFHfIFCrEanY M8GL6McyPGGxHOf64g/JpBt0EDB8AneXNeeATBrT3pa4khPX243Bvd0blv6QdFSa Xq9dSQmcAbfURwO+YD4LLIWc7qOBh1AA2jIA3uCHm5cRuOGBUtFIoFIa+MNRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvmZJSn6ITMNZmYRlHIeffWODkW8wHwYDVR0j BBgwFoAUbTmFKjxqtM8VndfRULutXUTj2H0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkxwVEFlNHY3blNZMnJSWVI4OXlhczRQMWFGY3dZRVQ5aGRwQ2dpbW5R a3UvMC82RDM5ODUyQTNDNkFCNENGMTU5REQ3RDE1MEJCQUQ1RDQ0RTNEODdELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZEMzk4NTJBM0M2QUI0Q0Yx NTlERDdEMTUwQkJBRDVENDRFM0Q4N0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkxwVEFlNHY3blNZMnJSWVI4OXlhczRQMWFGY3dZRVQ5aGRwQ2dpbW5Ra3UvMC82 RDM5ODUyQTNDNkFCNENGMTU5REQ3RDE1MEJCQUQ1RDQ0RTNEODdELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAahiZpJHlqMCJHMGGprst3O5FaSMtA+snttpFRosBWtQs4g2Ij+QRH9YthNN OcuRC16APtVs1Q70Fh3muxXyECQHAw4/N+gFnhpmumgtQcKoGcVtgfdx4WzheBVf v4a/BMPb7fkCF6uT29hTJnvaZ52wTXJ4vCGWkpz2pScOIE18K8x7mI0lCrEgnU7H D4GGTkQmjThVW2ypx5pylxT0z1tdJ+EASR0ufkImsvKNj8CBNwsmKc+nnHnIX8Hf Zi/zB9sH4iAaysG5XqSu96nmTPDaAAJz4iacPRS9k10ZFMVW0j/budcfH17jT69Z wOccGgUYgcRhPxjeIyb58i4buw== -----END CERTIFICATE-----Generated at Sat Apr 5 09:16:57 2025 by rpki-client