$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft File: 694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft (raw, json) Hash identifier: f2+JUDbeJzAu0e+dc9vi5nZ2ygnyzVt2s/ShouVAyng= Subject key identifier: 05:CA:A8:C6:84:21:1E:FD:C0:C1:7A:C4:B3:34:71:C7:9F:8C:43:2C Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53 Certificate issuer: /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053 Certificate serial: 09E97EA5E2DF1471E578556B9D53B82B8B1215FB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer Subject info access: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft Manifest number: 0201 Signing time: Thu 10 Apr 2025 02:38:16 +0000 Manifest this update: Thu 10 Apr 2025 02:33:16 +0000 Manifest next update: Fri 11 Apr 2025 05:46:16 +0000 Files and hashes: 1: 3136382e302e3130382e302f32322d3234203d3e20323632373931.roa (hash: k8HqAus+J5kwU48rjZ1/nzMfEIyIGN1Y/R4QhgWjaa4=) 2: 694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl (hash: u4Qbt7iL3Bg3tKbppaBZsL0DkPcbjgjAc9IwCFYNYrs=) 3: 323830343a3232303a3a2f33322d313238203d3e20323632373931.roa (hash: /tPSWICRQPSUfZn8DNklPz80ApasR9GTjDelvSXwHCc=) 4: 3138362e3233332e3139322e302f32312d3332203d3e20323632373931.roa (hash: 2UpSecyAisRwwZmh8G4q0Q1cQ+fFBv72ScD9WoDX2YI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 11 Apr 2025 05:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e9:7e:a5:e2:df:14:71:e5:78:55:6b:9d:53:b8:2b:8b:12:15:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053 Validity Not Before: Apr 10 02:33:16 2025 GMT Not After : Apr 11 05:46:16 2025 GMT Subject: CN=05CAA8C684211EFDC0C17AC4B33471C79F8C432C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:bb:26:be:77:32:3f:57:9c:66:85:54:33: f6:6a:77:11:7a:55:f8:93:86:0e:d0:8f:5d:90:b7: 53:50:14:ae:d0:f9:0a:7b:b4:dd:42:67:2b:0e:66: 18:db:40:d9:85:d1:b5:98:9b:80:26:df:e2:50:a5: 5f:61:14:51:86:4b:c7:52:d7:96:c8:d8:96:e6:6a: f1:10:00:61:f1:10:fd:dd:10:c5:5b:c0:24:4a:a1: af:1a:b0:e4:4d:6f:3c:77:3f:92:6b:ab:22:00:7d: 85:9a:3e:d3:59:3a:0f:a1:2d:c5:bd:0d:bf:d5:5e: e1:53:7a:0c:a6:4e:95:df:66:c6:0c:8f:bc:23:e5: c4:16:dd:ed:4e:9b:04:dc:88:de:f4:0c:ee:fe:fc: 5f:dd:dc:ee:aa:de:1f:29:28:e5:b7:6f:56:1a:36: d8:d5:00:8d:d4:2c:fd:e5:36:ae:db:a5:27:5e:e7: e1:0c:9b:b9:3e:4d:17:79:fb:04:36:b9:20:c6:04: 57:d7:4e:e5:7d:51:32:69:6f:9c:e1:c8:70:d7:d8: 67:45:10:02:1b:30:70:e1:4b:30:da:0b:1f:08:00: 96:7c:ca:3c:3a:4b:75:1d:7f:50:a5:1d:e5:95:d7: 37:7a:51:d0:9f:88:29:64:cc:ef:4f:17:e5:0d:d8: e0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CA:A8:C6:84:21:1E:FD:C0:C1:7A:C4:B3:34:71:C7:9F:8C:43:2C X509v3 Authority Key Identifier: keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:33:81:98:7b:ce:44:97:ad:0b:4d:0a:51:a4:3a:81:c4:09: 3c:63:6e:b1:53:d0:32:1c:cb:20:e8:4e:77:10:cd:4c:f5:0c: b9:ee:86:ec:97:0a:24:29:13:f6:19:80:79:a8:09:a9:57:cc: fe:ed:ca:ff:d4:8a:be:91:3b:ea:15:66:43:cc:53:92:69:f2: 7c:e4:fb:0f:e4:27:02:97:0d:c7:e4:71:c1:46:84:8a:ee:ce: fe:be:e9:15:e5:54:92:50:1a:f4:f2:69:61:d3:0e:ed:03:6c: c3:b2:e6:f0:f2:7c:c4:e2:44:f3:04:72:09:94:31:b9:ca:27: 2f:1f:51:bd:9e:a3:ea:cf:57:cc:c3:32:95:0f:0f:0d:68:a7: 21:42:13:9f:5b:5e:dc:74:28:e9:72:9d:26:46:04:65:b9:e6: dc:9b:33:13:30:7f:c2:b2:75:12:fc:df:66:3f:89:c0:aa:7f: 17:48:35:4b:22:0d:32:cb:30:60:32:e2:8b:02:1a:ba:53:fe: 73:58:01:f7:d2:42:a3:b9:91:62:fc:f9:83:11:35:8e:e9:fb: 0a:16:45:ff:5e:a6:4a:ab:40:28:a8:ac:0a:02:e3:b2:03:bd: d7:f0:57:c0:0c:46:06:37:01:1b:b2:a6:e6:63:8e:61:2d:c7: 4e:b6:2b:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCel+peLfFHHleFVrnVO4K4sSFfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk0QkU0NTQ3OUIxMEJGQ0E3QkI0MEE0NEMwNkI1MUQx NUYyRDA1MzAeFw0yNTA0MTAwMjMzMTZaFw0yNTA0MTEwNTQ2MTZaMDMxMTAvBgNV BAMTKDA1Q0FBOEM2ODQyMTFFRkRDMEMxN0FDNEIzMzQ3MUM3OUY4QzQzMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJYLsmvncyP1ecZoVUM/ZqdxF6 VfiThg7Qj12Qt1NQFK7Q+Qp7tN1CZysOZhjbQNmF0bWYm4Am3+JQpV9hFFGGS8dS 15bI2JbmavEQAGHxEP3dEMVbwCRKoa8asORNbzx3P5JrqyIAfYWaPtNZOg+hLcW9 Db/VXuFTegymTpXfZsYMj7wj5cQW3e1OmwTciN70DO7+/F/d3O6q3h8pKOW3b1Ya NtjVAI3ULP3lNq7bpSde5+EMm7k+TRd5+wQ2uSDGBFfXTuV9UTJpb5zhyHDX2GdF EAIbMHDhSzDaCx8IAJZ8yjw6S3Udf1ClHeWV1zd6UdCfiClkzO9PF+UN2OAjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBcqoxoQhHv3AwXrEszRxx5+MQywwHwYDVR0j BBgwFoAUaUvkVHmxC/ynu0CkTAa1HRXy0FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM29tREIzenhKVzFlN25NWnRKWlZvZWVrMkpUTUwzNHgxeDJxMXRLbm1n WFEvMC82OTRCRTQ1NDc5QjEwQkZDQTdCQjQwQTQ0QzA2QjUxRDE1RjJEMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NEJFNDU0NzlCMTBCRkNB N0JCNDBBNDRDMDZCNTFEMTVGMkQwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M29tREIzenhKVzFlN25NWnRKWlZvZWVrMkpUTUwzNHgxeDJxMXRLbm1nWFEvMC82 OTRCRTQ1NDc5QjEwQkZDQTdCQjQwQTQ0QzA2QjUxRDE1RjJEMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvTOBmHvORJetC00KUaQ6gcQJPGNusVPQMhzLIOhOdxDNTPUMue6G7JcKJCkT 9hmAeagJqVfM/u3K/9SKvpE76hVmQ8xTkmnyfOT7D+QnApcNx+RxwUaEiu7O/r7p FeVUklAa9PJpYdMO7QNsw7Lm8PJ8xOJE8wRyCZQxuconLx9RvZ6j6s9XzMMylQ8P DWinIUITn1te3HQo6XKdJkYEZbnm3JszEzB/wrJ1EvzfZj+JwKp/F0g1SyINMssw YDLiiwIaulP+c1gB99JCo7mRYvz5gxE1jun7ChZF/16mSqtAKKisCgLjsgO91/BX wAxGBjcBG7Km5mOOYS3HTrYrmA== -----END CERTIFICATE-----Generated at Thu Apr 10 16:13:34 2025 by rpki-client