$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft File: CDB34CF4AFC01721153990AE1A10D922F7507546.mft (raw, json) Hash identifier: vHUyJ0dyCHaRFbBTUFFUHqC9XOnkLS1YCfl4DMtBlaY= Subject key identifier: EF:14:CE:20:C3:B9:28:E2:ED:BB:5B:FE:F3:D3:C6:03:1A:46:7B:80 Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 Certificate issuer: /CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Certificate serial: 2A33854941174B0AC140635C1A502D40E518AF90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject info access: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft Manifest number: 01FE Signing time: Fri 18 Apr 2025 23:58:27 +0000 Manifest this update: Fri 18 Apr 2025 23:53:27 +0000 Manifest next update: Sun 20 Apr 2025 03:56:27 +0000 Files and hashes: 1: 3136382e3232382e382e302f32322d3332203d3e20323634393030.roa (hash: y3lZCCq0IOFmfmrjbdteQ0GspT2lhf61PyVMBbr1S80=) 2: 3137302e38302e3233362e302f32322d3332203d3e20323634393030.roa (hash: fCiKWIGD8EL/QIyZTksmVx9NSqYYweXi5WC6tEAvyuA=) 3: CDB34CF4AFC01721153990AE1A10D922F7507546.crl (hash: jF6iDjtG/CVeKujkRntTGtl2mG6H2KCtDMPtjxxJFTs=) 4: 323830343a326639343a3a2f33322d3438203d3e20323634393030.roa (hash: IvYrnZ80rmvnk+f/ifQla6cK5O6B38hzT1CwtOxjX7M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 20 Apr 2025 03:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:33:85:49:41:17:4b:0a:c1:40:63:5c:1a:50:2d:40:e5:18:af:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Validity Not Before: Apr 18 23:53:27 2025 GMT Not After : Apr 20 03:56:27 2025 GMT Subject: CN=EF14CE20C3B928E2EDBB5BFEF3D3C6031A467B80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c5:29:ad:9f:f9:bc:f5:45:52:bb:80:2d:a3: 6c:82:4a:16:d7:b7:1b:3f:e5:5f:a1:47:98:08:92: c1:23:27:f4:31:bf:37:8e:f5:a3:9d:37:fc:7a:54: b5:d1:ae:ea:7e:24:22:d6:74:a5:c1:79:79:88:15: d7:2d:e7:c2:f8:07:75:6a:d2:d3:2f:95:a1:8f:33: 9d:89:bf:83:4e:d5:5f:2f:22:d1:4b:04:e2:78:90: ef:fb:80:8e:83:c6:f9:f0:5f:a9:6a:6d:d9:81:62: d1:75:a7:50:ae:70:4a:83:8d:59:76:f4:3b:f6:51: eb:50:53:a7:72:10:6c:6e:a2:6e:78:4b:2c:9b:20: 6d:cc:6e:6d:de:59:cd:a7:06:6d:fb:5f:6b:c1:67: dc:a0:d0:c9:c5:13:b6:01:72:79:83:a1:7c:9e:df: 47:fb:ee:47:4c:93:a9:a4:5c:d0:33:72:73:70:65: 03:53:d5:63:8e:0d:f4:99:26:d1:ce:3f:de:91:88: 05:0c:70:a5:24:c3:bf:1c:4c:4a:0f:e4:c3:32:1e: 42:c8:a2:e1:bd:d6:a5:03:c7:89:d9:0a:9c:69:96: ec:ab:14:ec:f4:50:b1:e9:2c:4d:9c:33:29:d2:38: 37:4a:d1:b8:d5:68:84:15:7d:71:ad:68:f5:79:ee: ec:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:14:CE:20:C3:B9:28:E2:ED:BB:5B:FE:F3:D3:C6:03:1A:46:7B:80 X509v3 Authority Key Identifier: keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:9c:51:0d:d9:8d:26:d8:7e:4a:b0:9e:1b:02:b6:85:d6:2b: 61:e4:24:28:91:ea:f5:73:4e:c6:03:ac:88:9a:87:fe:d8:f2: f3:97:30:1f:fc:a2:e5:69:bf:ff:16:6e:4d:6d:5d:ea:c6:52: 2d:3b:c8:9b:ff:6b:f7:e8:2b:7d:7f:9d:81:e8:db:56:f2:8e: 02:e1:92:b4:fb:ad:b6:2d:25:6a:d4:9c:d6:eb:d5:6c:63:33: 10:dc:78:14:8a:b2:f4:23:d7:7f:c0:2e:4c:f6:93:6d:d4:61: 33:08:68:6e:68:36:88:c9:84:80:60:7f:9c:d3:00:ff:3c:16: 41:e5:11:d3:8d:8c:c7:7d:df:3e:44:87:8d:b9:6f:ef:e0:91: e0:01:09:85:13:b8:67:ce:4f:ec:26:8a:f2:a3:91:61:9a:1a: f7:4e:f1:e1:5e:6e:6d:c0:4a:2d:42:09:21:3e:ba:00:27:26: 21:ff:b2:91:47:8b:6c:e7:a1:8e:48:09:6f:60:8e:5d:c1:cf: 3b:4b:4a:42:57:64:fe:d0:01:50:63:99:af:a4:b8:8a:cf:f2: 0e:ae:55:9f:00:63:79:35:a8:8a:6c:ed:6c:21:f7:c0:19:d1: 68:e2:93:7c:aa:51:22:15:92:51:1d:b7:38:d7:21:21:7a:80: ab:72:3e:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKjOFSUEXSwrBQGNcGlAtQOUYr5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCMzRDRjRBRkMwMTcyMTE1Mzk5MEFFMUExMEQ5MjJG NzUwNzU0NjAeFw0yNTA0MTgyMzUzMjdaFw0yNTA0MjAwMzU2MjdaMDMxMTAvBgNV BAMTKEVGMTRDRTIwQzNCOTI4RTJFREJCNUJGRUYzRDNDNjAzMUE0NjdCODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZxSmtn/m89UVSu4Ato2yCShbX txs/5V+hR5gIksEjJ/QxvzeO9aOdN/x6VLXRrup+JCLWdKXBeXmIFdct58L4B3Vq 0tMvlaGPM52Jv4NO1V8vItFLBOJ4kO/7gI6DxvnwX6lqbdmBYtF1p1CucEqDjVl2 9Dv2UetQU6dyEGxuom54SyybIG3Mbm3eWc2nBm37X2vBZ9yg0MnFE7YBcnmDoXye 30f77kdMk6mkXNAzcnNwZQNT1WOODfSZJtHOP96RiAUMcKUkw78cTEoP5MMyHkLI ouG91qUDx4nZCpxpluyrFOz0ULHpLE2cMynSODdK0bjVaIQVfXGtaPV57uzxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7xTOIMO5KOLtu1v+89PGAxpGe4AwHwYDVR0j BBgwFoAUzbNM9K/AFyEVOZCuGhDZIvdQdUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhU RnEvMC9DREIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQjM0Q0Y0QUZDMDE3MjEx NTM5OTBBRTFBMTBEOTIyRjc1MDc1NDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhURnEvMC9D REIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqZxRDdmNJth+SrCeGwK2hdYrYeQkKJHq9XNOxgOsiJqH/tjy85cwH/yi5Wm/ /xZuTW1d6sZSLTvIm/9r9+grfX+dgejbVvKOAuGStPutti0latSc1uvVbGMzENx4 FIqy9CPXf8AuTPaTbdRhMwhobmg2iMmEgGB/nNMA/zwWQeUR042Mx33fPkSHjblv 7+CR4AEJhRO4Z85P7CaK8qORYZoa907x4V5ubcBKLUIJIT66ACcmIf+ykUeLbOeh jkgJb2COXcHPO0tKQldk/tABUGOZr6S4is/yDq5VnwBjeTWoimztbCH3wBnRaOKT fKpRIhWSUR23ONchIXqAq3I+rg== -----END CERTIFICATE-----Generated at Sat Apr 19 12:26:28 2025 by rpki-client