$ rpki-client -vvf rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft File: 6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft (raw, json) Hash identifier: 4I3LjypMNID4qO+zdNBjOBq4e+B6190nHU2Vk/KoTSc= Subject key identifier: DA:68:51:E6:C6:20:75:31:AB:01:39:54:CE:39:04:B2:42:39:1E:65 Authority key identifier: 6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1 Certificate issuer: /CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1 Certificate serial: 3D89805BC379F39333A20D694948EF78B798242A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer Subject info access: rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft Manifest number: 01EB Signing time: Thu 10 Apr 2025 16:56:23 +0000 Manifest this update: Thu 10 Apr 2025 16:51:23 +0000 Manifest next update: Fri 11 Apr 2025 20:52:23 +0000 Files and hashes: 1: 3230302e392e3132332e302f32342d3234203d3e20323633353136.roa (hash: DKN2JGdX7cSetzoeLCTIR74I/hbswzmppmSPlP4c0pE=) 2: 3137372e38342e36302e302f32322d3234203d3e20323633353136.roa (hash: 3aQlpVz1BWbgEZVwNQP+yOlhzxrLmq7PFqy4POInAyo=) 3: 323830343a313331633a3a2f33322d3438203d3e20323633353136.roa (hash: Txzy0D6VyLSsV0Yx//pRf6nImoKlaLweLeqk9lvWkoo=) 4: 6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl (hash: fMDP3Y+CFQlhnWR0mdJRjCtOUhAnNY0g1vT4Wm9DJO8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 11 Apr 2025 20:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:89:80:5b:c3:79:f3:93:33:a2:0d:69:49:48:ef:78:b7:98:24:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1 Validity Not Before: Apr 10 16:51:23 2025 GMT Not After : Apr 11 20:52:23 2025 GMT Subject: CN=DA6851E6C6207531AB013954CE3904B242391E65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:24:cf:0d:01:a4:70:3c:3b:2e:04:52:5b:b8: 62:fd:8d:e3:e2:e1:09:c6:0a:ce:39:76:1c:7d:4c: dc:ca:7f:34:8f:ab:5c:ef:e7:97:ae:e2:31:29:3f: 47:c9:d9:85:47:3f:fc:9e:bb:a3:c1:28:fe:f5:bf: 0c:bd:e9:22:c9:92:a6:be:45:46:35:3a:a0:0a:c8: 5e:79:d7:82:6c:17:60:a9:5e:d5:0d:d7:53:65:49: 6d:86:c9:f1:23:10:6d:6b:a0:f3:78:79:59:6d:62: bb:1d:17:8b:45:cc:65:f9:f8:a0:cb:cc:c4:83:e2: cd:2f:64:3d:0b:02:32:11:ea:0e:da:25:ab:54:ba: 3d:9e:bb:be:fc:91:aa:bb:d2:ba:57:82:00:46:f7: 33:f0:ea:c8:24:e8:03:56:9a:ab:a2:1d:14:9a:38: 71:d9:61:03:73:50:5d:91:32:60:be:6a:89:dc:82: fc:85:43:3f:21:16:cd:42:67:44:b0:5d:f1:86:fb: 91:9e:5b:58:d3:4c:b3:28:f1:cb:aa:83:c5:f4:a1: bb:28:a0:39:3a:25:4c:b8:6d:e8:71:b4:d0:38:2f: df:8a:63:b8:42:64:1a:90:17:f8:ed:30:52:57:4e: d5:02:8a:8d:b3:ac:ac:ae:42:be:29:0b:43:79:f8: 77:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:68:51:E6:C6:20:75:31:AB:01:39:54:CE:39:04:B2:42:39:1E:65 X509v3 Authority Key Identifier: keyid:6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:14:b3:b8:53:53:fb:34:73:f5:1e:1c:a2:58:58:c2:4c:bb: d0:22:d4:e1:33:67:7f:66:57:80:59:bb:b1:62:d1:4d:21:16: 60:2a:39:6c:c4:80:fa:fe:47:7f:8d:00:3e:3d:01:b2:d3:a7: 5c:8a:91:c3:71:90:46:02:b3:14:11:29:a7:46:8e:1f:a0:a5: 75:f6:07:f6:aa:f4:b0:d7:bd:d1:6e:f2:17:d3:02:6b:35:bb: a0:1d:47:4d:87:42:0a:8b:ff:4c:fb:48:9f:22:8c:73:82:22: c6:8a:88:0c:09:d8:74:20:40:c4:d7:20:6a:ac:fa:26:ae:1d: 12:bc:09:bf:59:a3:65:cf:dc:95:be:6d:8f:5f:59:a9:65:98: ba:cd:20:02:b2:d9:a9:e2:3a:49:49:d6:31:31:78:de:76:ea: ec:e5:7a:31:be:62:87:e0:00:d2:3d:bf:70:97:71:dd:ff:00: f9:e6:7b:29:d2:c4:69:55:66:92:13:ac:41:1e:fd:9e:df:13: 9e:5e:54:9a:8d:34:d8:9b:bd:43:63:62:2c:8e:20:f9:1e:4c: 62:0d:8e:c5:29:ff:19:d1:9f:98:fd:cb:a2:78:fc:33:70:72: f6:4e:e4:c6:42:f0:d7:84:98:1c:77:b9:3e:4e:d4:d2:cd:ed: b8:6e:b4:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPYmAW8N585Mzog1pSUjveLeYJCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwRjgxQ0Q0QkREQUE1M0MxQjA5MzFFNTFFOEIxNTlF MDJBNUNEMTAeFw0yNTA0MTAxNjUxMjNaFw0yNTA0MTEyMDUyMjNaMDMxMTAvBgNV BAMTKERBNjg1MUU2QzYyMDc1MzFBQjAxMzk1NENFMzkwNEIyNDIzOTFFNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgJM8NAaRwPDsuBFJbuGL9jePi 4QnGCs45dhx9TNzKfzSPq1zv55eu4jEpP0fJ2YVHP/yeu6PBKP71vwy96SLJkqa+ RUY1OqAKyF5514JsF2CpXtUN11NlSW2GyfEjEG1roPN4eVltYrsdF4tFzGX5+KDL zMSD4s0vZD0LAjIR6g7aJatUuj2eu778kaq70rpXggBG9zPw6sgk6ANWmquiHRSa OHHZYQNzUF2RMmC+aoncgvyFQz8hFs1CZ0SwXfGG+5GeW1jTTLMo8cuqg8X0obso oDk6JUy4behxtNA4L9+KY7hCZBqQF/jtMFJXTtUCio2zrKyuQr4pC0N5+HddAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2mhR5sYgdTGrATlUzjkEskI5HmUwHwYDVR0j BBgwFoAUag+BzUvdqlPBsJMeUeixWeAqXNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM202OW5qS1BtRFZ6b3FXTkpzZTFYTW11YXFjRk04RjV4cU1HUjhCWnI0 Zm8vMS82QTBGODFDRDRCRERBQTUzQzFCMDkzMUU1MUU4QjE1OUUwMkE1Q0QxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBMEY4MUNENEJEREFBNTND MUIwOTMxRTUxRThCMTU5RTAyQTVDRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M202OW5qS1BtRFZ6b3FXTkpzZTFYTW11YXFjRk04RjV4cU1HUjhCWnI0Zm8vMS82 QTBGODFDRDRCRERBQTUzQzFCMDkzMUU1MUU4QjE1OUUwMkE1Q0QxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlBSzuFNT+zRz9R4colhYwky70CLU4TNnf2ZXgFm7sWLRTSEWYCo5bMSA+v5H f40APj0BstOnXIqRw3GQRgKzFBEpp0aOH6CldfYH9qr0sNe90W7yF9MCazW7oB1H TYdCCov/TPtInyKMc4IixoqIDAnYdCBAxNcgaqz6Jq4dErwJv1mjZc/clb5tj19Z qWWYus0gArLZqeI6SUnWMTF43nbq7OV6Mb5ih+AA0j2/cJdx3f8A+eZ7KdLEaVVm khOsQR79nt8Tnl5Umo002Ju9Q2NiLI4g+R5MYg2OxSn/GdGfmP3Lonj8M3By9k7k xkLw14SYHHe5Pk7U0s3tuG60Gw== -----END CERTIFICATE-----Generated at Thu Apr 10 20:46:39 2025 by rpki-client