$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft File: DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft (raw, json) Hash identifier: PdfNQsttJuckXVCzvvLJalGU6H1WJn6TMfrCqwl9M3U= Subject key identifier: 46:4E:73:DB:1D:A4:1B:9B:0A:B6:2A:92:9A:5D:A8:BD:5A:54:66:D4 Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 53D7FA8CF4BF6C6FFAAECFC5C13E23CB1A52B4BF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft Manifest number: CD Signing time: Sun 06 Apr 2025 17:35:34 +0000 Manifest this update: Sun 06 Apr 2025 17:30:34 +0000 Manifest next update: Mon 07 Apr 2025 20:42:34 +0000 Files and hashes: 1: AS262509.roa (hash: z3WtH/Sygr90lElh4BrL1IcwiuvTDrgPHmvGfu++SqQ=) 2: AS26506.roa (hash: tFkD2PMWofwimoG981bob/PjPPKK2IynxaWoUB+x+bY=) 3: DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl (hash: 6C9J0SBgRlU+0W6tcbkds5j2y+Ul+9TpxsQg3XTCag0=) 4: AS262992.roa (hash: LOrGt5rTWX38I9DqRFkfOvwpOY0hC94ElGsl+njChjw=) 5: AS28220.roa (hash: /k4WhXtLmMsmSSDLm4Qm6DToZAFFxQ+vSAeNJbCxqK0=) 6: AS271724.roa (hash: l5gmeL2yHvrD9TVL4KZFQizJAvhAXD1DWO8q3z+rTGI=) 7: AS28270.roa (hash: uGHkRPishqbsJJ54+ugErw9R72HvNLzUbFhVrAbllrQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 20:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d7:fa:8c:f4:bf:6c:6f:fa:ae:cf:c5:c1:3e:23:cb:1a:52:b4:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Apr 6 17:30:34 2025 GMT Not After : Apr 7 20:42:34 2025 GMT Subject: CN=464E73DB1DA41B9B0AB62A929A5DA8BD5A5466D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:80:17:45:e6:ba:5f:f3:7e:6f:3d:7a:d7:17: fd:42:0e:fa:a1:33:3d:1a:e5:ac:61:86:b8:20:ae: c9:c6:70:d2:e0:52:af:b8:f5:c9:6e:2b:a2:68:d4: fe:d8:5f:5e:a8:35:a1:4b:90:53:c7:52:16:e0:36: 6f:92:79:20:6b:47:7a:c9:3d:bc:a1:37:8e:60:fb: f0:60:42:87:bf:c6:a3:08:3b:7c:55:2c:98:9d:fd: dc:b7:39:0d:13:97:57:6a:54:0e:0e:0c:a0:1a:d2: ff:44:12:16:12:6c:b8:5f:4e:bc:0a:4f:c0:f9:fe: 63:f2:c1:ee:c4:81:bf:de:d4:2b:97:83:9b:2f:a6: 73:78:45:c4:d6:69:0d:16:ed:38:e0:f0:fd:40:00: f2:86:55:c1:01:61:63:4d:67:87:86:75:81:b3:c3: 34:6f:ff:8f:26:4a:d3:ad:a5:57:fd:91:8c:93:16: 3c:d6:3d:fd:4d:72:a6:fc:54:c8:eb:11:95:12:8c: 39:d2:69:62:5f:68:2e:df:c6:2e:b3:9d:26:21:82: 44:79:04:3b:67:44:06:d7:64:84:84:82:0a:81:4d: 1f:d7:37:81:5d:83:83:ef:44:ab:de:19:ae:48:49: 24:99:ad:a4:21:26:fb:15:9a:8c:9e:4c:f9:82:41: 4b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4E:73:DB:1D:A4:1B:9B:0A:B6:2A:92:9A:5D:A8:BD:5A:54:66:D4 X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:9f:e4:9e:67:08:86:72:cc:b2:9b:c0:d9:22:94:6a:74:14: 28:00:f3:ab:db:42:4a:41:83:6d:cb:fe:ca:bf:8c:41:dd:29: 68:77:b9:bc:9f:f5:1a:b3:8e:b4:03:82:e8:28:a1:98:11:dd: ea:7b:58:98:60:41:84:46:a5:91:99:97:a9:1c:c3:44:ad:6a: 5d:04:3b:00:61:ac:51:c4:61:e3:0f:34:fd:9c:8d:96:66:2e: 7b:85:3c:9d:ef:52:71:14:7e:79:c4:e6:ca:9b:99:4b:8a:f1: a6:33:91:51:41:4e:ee:9c:26:be:34:c7:fe:87:30:4b:37:29: a0:7e:a8:c7:86:6e:5a:45:47:7a:db:74:08:df:6b:90:e7:93: 1e:a7:73:d5:1a:5b:bc:82:77:83:bf:d1:5d:91:9d:d9:00:e7: 5b:75:45:00:63:f1:af:ae:e4:cb:ad:62:e4:23:16:7c:1f:72: 43:a3:66:33:41:d1:71:45:a4:88:98:cf:2e:9a:78:33:55:20: 5b:14:e5:55:c2:35:ac:5b:a4:56:7c:b5:a0:50:9f:88:21:02: 9f:58:16:65:9a:1b:34:50:ea:42:03:df:d4:b8:d4:4b:52:65: d8:6c:d1:90:d8:84:a7:3e:4b:49:00:a7:28:46:0e:5a:d6:e1: eb:6b:e0:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUU9f6jPS/bG/6rs/FwT4jyxpStL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTA0MDYxNzMwMzRaFw0yNTA0MDcyMDQyMzRaMDMxMTAvBgNV BAMTKDQ2NEU3M0RCMURBNDFCOUIwQUI2MkE5MjlBNURBOEJENUE1NDY2RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrgBdF5rpf835vPXrXF/1CDvqh Mz0a5axhhrggrsnGcNLgUq+49cluK6Jo1P7YX16oNaFLkFPHUhbgNm+SeSBrR3rJ PbyhN45g+/BgQoe/xqMIO3xVLJid/dy3OQ0Tl1dqVA4ODKAa0v9EEhYSbLhfTrwK T8D5/mPywe7Egb/e1CuXg5svpnN4RcTWaQ0W7Tjg8P1AAPKGVcEBYWNNZ4eGdYGz wzRv/48mStOtpVf9kYyTFjzWPf1Ncqb8VMjrEZUSjDnSaWJfaC7fxi6znSYhgkR5 BDtnRAbXZISEggqBTR/XN4Fdg4PvRKveGa5ISSSZraQhJvsVmoyeTPmCQUvnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURk5z2x2kG5sKtiqSml2ovVpUZtQwHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3REYvMC9E RTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIZ/knmcIhnLMspvA2SKUanQUKADzq9tCSkGDbcv+yr+MQd0paHe5vJ/1GrOO tAOC6CihmBHd6ntYmGBBhEalkZmXqRzDRK1qXQQ7AGGsUcRh4w80/ZyNlmYue4U8 ne9ScRR+ecTmypuZS4rxpjORUUFO7pwmvjTH/ocwSzcpoH6ox4ZuWkVHett0CN9r kOeTHqdz1RpbvIJ3g7/RXZGd2QDnW3VFAGPxr67ky61i5CMWfB9yQ6NmM0HRcUWk iJjPLpp4M1UgWxTlVcI1rFukVny1oFCfiCECn1gWZZobNFDqQgPf1LjUS1Jl2GzR kNiEpz5LSQCnKEYOWtbh62vgjw== -----END CERTIFICATE-----Generated at Mon Apr 7 07:51:58 2025 by rpki-client