$ rpki-client -vvf rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft File: 1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft (raw, json) Hash identifier: jWwRsX17Gn7uJ5EtReXpRsOHNJJrJJDWPgPiVcGYQgU= Subject key identifier: 94:A3:8B:73:8E:4E:BD:E0:E8:CB:E0:3C:31:6C:C1:BF:B4:4F:AE:47 Authority key identifier: 1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14 Certificate issuer: /CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14 Certificate serial: 45A0B06453FCB181F16F13A6CF7DD99CA8D1CC86 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer Subject info access: rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft Manifest number: 4D Signing time: Tue 10 Jun 2025 03:41:16 +0000 Manifest this update: Tue 10 Jun 2025 03:36:16 +0000 Manifest next update: Wed 11 Jun 2025 06:38:16 +0000 Files and hashes: 1: 1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl (hash: 3sry5BpIKNleBMxIesPxtudOb+gTblbK4RAAeYgzfuQ=) 2: 3137302e38342e3139362e302f32322d3332203d3e20323635303138.roa (hash: GMqVz+pNv4jlVq8AM/MysXTepHhSdbVZyc7Np+Ty+wo=) 3: 3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa (hash: hv7rV0YAjf7OIxTmW4CmSIfCjHYfqZrGrG5y4H2smTY=) 4: 323830343a333137633a3a2f33322d3634203d3e20323635303138.roa (hash: ez+ajbN41gMQLCvCNkwbbF7k57+fkGAT5m28gVygc5E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 06:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a0:b0:64:53:fc:b1:81:f1:6f:13:a6:cf:7d:d9:9c:a8:d1:cc:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14 Validity Not Before: Jun 10 03:36:16 2025 GMT Not After : Jun 11 06:38:16 2025 GMT Subject: CN=94A38B738E4EBDE0E8CBE03C316CC1BFB44FAE47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7b:36:21:19:73:ef:0a:4c:af:52:7a:4b:99: b1:87:f9:da:b1:ba:12:22:58:73:aa:20:9d:7b:9a: 62:c9:d1:7c:c7:7a:b4:bf:dc:77:7f:ee:07:f9:92: 63:1c:95:cc:ff:61:ff:ad:cd:2d:58:b3:53:79:7b: 40:bf:9d:05:12:e3:7f:af:65:9f:61:04:cb:34:0d: 94:7c:f2:e5:2a:5a:9d:6f:02:dd:07:5d:c6:4a:bb: 91:92:7e:12:9a:92:c0:55:20:66:ff:d4:75:16:2f: a2:31:3f:4c:4f:35:4f:f1:23:1f:09:87:8d:f2:d3: 57:f2:32:f5:31:07:7a:02:2c:d4:1a:c2:54:c4:d0: dd:28:a4:8e:50:ca:f8:77:cb:4a:e0:e4:8e:d1:8b: 4e:ae:2d:55:f8:74:c4:f9:1e:3c:7e:08:a3:b9:31: a5:01:09:e5:e5:aa:de:3b:3e:a6:6a:68:da:08:ae: 29:42:34:63:c1:c9:62:e2:97:b3:f0:a6:ee:6d:b4: 99:d4:1d:30:76:7f:51:e7:61:b0:81:2d:84:66:91: 6f:62:1a:77:24:03:d2:3c:cd:0f:87:d0:92:3c:7f: f9:37:e4:8d:a9:b5:c8:5a:d6:7f:6a:97:c6:7c:27: 10:db:9f:52:25:b7:be:0c:31:87:36:bb:8c:61:d2: 50:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A3:8B:73:8E:4E:BD:E0:E8:CB:E0:3C:31:6C:C1:BF:B4:4F:AE:47 X509v3 Authority Key Identifier: keyid:1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:6a:cb:05:7a:4d:c0:a2:e9:35:46:a7:31:24:d2:5d:84:c1: 3d:db:cf:ea:7e:40:9a:99:6e:29:d2:20:b0:c7:b9:86:3f:20: 21:37:53:89:fe:c7:4a:65:c9:d2:c6:ec:7c:54:56:50:13:d5: 6b:e4:b3:b1:06:d4:40:16:53:c5:68:19:27:27:b5:62:64:5a: 84:f9:7f:c8:90:70:fa:91:15:89:97:b7:04:86:4a:37:85:77: 2e:cc:3a:eb:94:8d:0e:13:c6:8e:95:4f:1f:b1:43:7b:b0:47: 53:f4:7b:e6:9c:8d:65:ce:e1:c4:9a:bd:ee:c8:b7:54:9f:5e: 10:5a:92:00:63:cb:73:8d:92:66:70:2a:cb:38:cf:52:3f:0c: 06:84:e4:53:f6:91:c2:eb:11:df:b0:c9:8e:43:64:3f:0e:34: e1:50:83:14:ce:93:bb:a1:90:76:8c:8f:bb:51:00:d8:df:b5: 7d:7f:6d:2a:ad:8f:9d:90:e9:85:64:cc:d6:4b:6b:3a:6f:1c: d5:85:93:90:00:a9:4e:86:e9:d5:aa:2c:5f:38:93:d2:87:fe: ad:53:eb:da:2b:3b:09:78:3b:6c:59:f3:60:03:0e:c6:c5:17: 09:b1:37:c1:14:39:9c:26:b2:16:65:56:89:51:2a:cc:db:58: d8:0b:11:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURaCwZFP8sYHxbxOmz33ZnKjRzIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2MEZBNzY5MDUxOUE5M0RGNjlEQjhFQUNDOUVEQjAz ODBCMkIxNDAeFw0yNTA2MTAwMzM2MTZaFw0yNTA2MTEwNjM4MTZaMDMxMTAvBgNV BAMTKDk0QTM4QjczOEU0RUJERTBFOENCRTAzQzMxNkNDMUJGQjQ0RkFFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsezYhGXPvCkyvUnpLmbGH+dqx uhIiWHOqIJ17mmLJ0XzHerS/3Hd/7gf5kmMclcz/Yf+tzS1Ys1N5e0C/nQUS43+v ZZ9hBMs0DZR88uUqWp1vAt0HXcZKu5GSfhKaksBVIGb/1HUWL6IxP0xPNU/xIx8J h43y01fyMvUxB3oCLNQawlTE0N0opI5Qyvh3y0rg5I7Ri06uLVX4dMT5Hjx+CKO5 MaUBCeXlqt47PqZqaNoIrilCNGPByWLil7Pwpu5ttJnUHTB2f1HnYbCBLYRmkW9i GnckA9I8zQ+H0JI8f/k35I2ptcha1n9ql8Z8JxDbn1Ilt74MMYc2u4xh0lD3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlKOLc45OveDoy+A8MWzBv7RPrkcwHwYDVR0j BBgwFoAUHmD6dpBRmpPfaduOrMntsDgLKxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2p2WUFxOFlNN3JpUnR4bWJ6WVlzNVQ2MzY1aUVnOUFpZUVENmRVQTRH a1ovMC8xRTYwRkE3NjkwNTE5QTkzREY2OURCOEVBQ0M5RURCMDM4MEIyQjE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFNjBGQTc2OTA1MTlBOTNE RjY5REI4RUFDQzlFREIwMzgwQjJCMTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2p2WUFxOFlNN3JpUnR4bWJ6WVlzNVQ2MzY1aUVnOUFpZUVENmRVQTRHa1ovMC8x RTYwRkE3NjkwNTE5QTkzREY2OURCOEVBQ0M5RURCMDM4MEIyQjE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn2rLBXpNwKLpNUanMSTSXYTBPdvP6n5AmpluKdIgsMe5hj8gITdTif7HSmXJ 0sbsfFRWUBPVa+SzsQbUQBZTxWgZJye1YmRahPl/yJBw+pEViZe3BIZKN4V3Lsw6 65SNDhPGjpVPH7FDe7BHU/R75pyNZc7hxJq97si3VJ9eEFqSAGPLc42SZnAqyzjP Uj8MBoTkU/aRwusR37DJjkNkPw404VCDFM6Tu6GQdoyPu1EA2N+1fX9tKq2PnZDp hWTM1ktrOm8c1YWTkACpTobp1aosXziT0of+rVPr2is7CXg7bFnzYAMOxsUXCbE3 wRQ5nCayFmVWiVEqzNtY2AsRfQ== -----END CERTIFICATE-----Generated at Tue Jun 10 22:17:54 2025 by rpki-client