$ rpki-client -vvf rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.mft File: E7700F13658CA0FAD21A568C7195309EAC2021BA.mft (raw, json) Hash identifier: VrmtcM9LahTEGowVZH2xnxbT3riJEJT5HpCtOncD8EU= Subject key identifier: E9:5C:E7:C1:9E:3D:A7:57:F5:86:E4:F4:FD:E8:7C:16:E9:2A:85:06 Authority key identifier: E7:70:0F:13:65:8C:A0:FA:D2:1A:56:8C:71:95:30:9E:AC:20:21:BA Certificate issuer: /CN=E7700F13658CA0FAD21A568C7195309EAC2021BA Certificate serial: 10CE4254AB342ED9CE3B3FBFA51123E3D166E1E9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7700F13658CA0FAD21A568C7195309EAC2021BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.mft Manifest number: D3 Signing time: Sat 05 Apr 2025 11:43:38 +0000 Manifest this update: Sat 05 Apr 2025 11:38:38 +0000 Manifest next update: Sun 06 Apr 2025 12:47:38 +0000 Files and hashes: 1: 3230302e3232392e3136302e302f32302d3234203d3e203236363136.roa (hash: xsq0sBZ9XZxEswegZTls3ea6tCFBjXAWlbWPAVh/8ek=) 2: 3230302e3135322e34382e302f32302d3234203d3e203236363136.roa (hash: 4eIrOXnHmxgtVddAAsrEsNplKViAJFl2f7busbVeZKQ=) 3: E7700F13658CA0FAD21A568C7195309EAC2021BA.crl (hash: qP8l456pt7qPbzu1YSdqnm9ydZzuRIXxnrmqbxpSWBs=) 4: 323830343a336665343a3a2f33322d3438203d3e203236363136.roa (hash: zJRM1VTKgS/M5aIYQomD6bGA9TFajzQuxWKgXDs5v3E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.crl rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7700F13658CA0FAD21A568C7195309EAC2021BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 12:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ce:42:54:ab:34:2e:d9:ce:3b:3f:bf:a5:11:23:e3:d1:66:e1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7700F13658CA0FAD21A568C7195309EAC2021BA Validity Not Before: Apr 5 11:38:38 2025 GMT Not After : Apr 6 12:47:38 2025 GMT Subject: CN=E95CE7C19E3DA757F586E4F4FDE87C16E92A8506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:58:9d:03:1c:ba:e6:0f:81:84:2e:eb:81:ad: 37:c7:be:99:7e:49:75:3d:b3:32:ea:42:ed:4e:22: fe:4e:91:e3:84:da:63:f3:aa:ae:d6:50:08:c8:66: 5a:92:43:62:fc:3d:bb:0f:69:a0:a6:ff:1a:2e:72: 60:dd:18:03:7b:7a:d0:62:69:29:55:b5:b4:d1:ee: 02:4a:e9:06:06:83:81:3c:e3:87:f3:1b:c0:05:aa: fb:1c:22:08:df:34:f2:93:4e:3b:0c:70:bc:e0:8c: 60:15:a6:37:5b:c3:ac:7f:b6:88:54:ce:c4:17:25: f4:b6:ef:4a:b1:cc:e3:ed:8b:a7:99:67:9c:4a:8c: aa:f6:cc:57:31:19:fa:ec:f9:80:45:15:26:31:ec: 4b:6a:e9:27:e3:c7:dc:6e:cf:5d:a1:25:e3:28:43: 79:31:16:94:64:36:66:64:5c:19:28:91:4f:9b:53: 6d:fa:fa:aa:2e:3f:c3:a1:f7:03:be:18:51:69:d1: e6:96:c6:9d:ee:39:3f:01:88:fb:a2:2d:8e:28:be: db:37:3a:d8:a2:56:80:07:f2:13:bc:77:10:d4:74: a8:c0:de:9d:d3:b6:b1:d3:e7:d4:3f:e7:21:d7:f0: 91:65:e7:f6:66:92:c2:83:16:92:bb:8e:4f:91:47: e4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5C:E7:C1:9E:3D:A7:57:F5:86:E4:F4:FD:E8:7C:16:E9:2A:85:06 X509v3 Authority Key Identifier: keyid:E7:70:0F:13:65:8C:A0:FA:D2:1A:56:8C:71:95:30:9E:AC:20:21:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7700F13658CA0FAD21A568C7195309EAC2021BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:58:67:98:02:28:80:79:12:4b:f3:6e:57:0f:af:be:a8:a5: ad:83:b2:a5:77:72:9d:c0:ca:14:b6:e1:1d:16:37:67:b3:65: c3:c1:e4:df:a5:7c:77:bd:18:49:7c:06:71:46:cd:d7:f7:d6: 09:e8:59:2b:4d:48:65:0b:9b:05:2e:ec:8f:47:c6:19:d6:e0: 45:a3:1e:c9:14:31:45:47:1d:8c:42:a2:7e:b7:65:a8:ce:1b: cf:e2:a2:b6:8d:81:86:c1:13:db:e4:86:30:29:33:60:c3:41: da:ed:12:f7:2d:4d:a7:87:a7:4b:4e:fc:3b:07:d0:02:ce:fc: 3e:cc:64:d5:69:b6:13:81:56:e0:f3:9d:49:0d:2f:4f:65:99: 7f:5f:75:e6:37:2d:dd:53:29:e0:fc:e6:49:a8:37:6a:9c:23: 37:05:bf:81:48:39:67:ee:23:01:b6:23:b9:c0:cc:b4:d0:65: a1:ab:d9:c1:b8:44:5b:ad:24:93:69:8c:50:2a:6e:cd:9c:1f: 0d:57:68:1c:df:a0:a6:63:6e:95:b0:85:4e:8b:b3:cf:7a:82: 91:34:02:b3:b6:c3:08:45:b5:31:de:15:6f:6d:b3:16:c1:32: 95:94:37:2c:a4:7a:c4:f5:83:02:0b:e1:8e:c3:b1:25:c2:0f: 36:4d:35:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEM5CVKs0LtnOOz+/pREj49Fm4ekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc3MDBGMTM2NThDQTBGQUQyMUE1NjhDNzE5NTMwOUVB QzIwMjFCQTAeFw0yNTA0MDUxMTM4MzhaFw0yNTA0MDYxMjQ3MzhaMDMxMTAvBgNV BAMTKEU5NUNFN0MxOUUzREE3NTdGNTg2RTRGNEZERTg3QzE2RTkyQTg1MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSWJ0DHLrmD4GELuuBrTfHvpl+ SXU9szLqQu1OIv5OkeOE2mPzqq7WUAjIZlqSQ2L8PbsPaaCm/xoucmDdGAN7etBi aSlVtbTR7gJK6QYGg4E844fzG8AFqvscIgjfNPKTTjsMcLzgjGAVpjdbw6x/tohU zsQXJfS270qxzOPti6eZZ5xKjKr2zFcxGfrs+YBFFSYx7Etq6Sfjx9xuz12hJeMo Q3kxFpRkNmZkXBkokU+bU236+qouP8Oh9wO+GFFp0eaWxp3uOT8BiPuiLY4ovts3 OtiiVoAH8hO8dxDUdKjA3p3TtrHT59Q/5yHX8JFl5/ZmksKDFpK7jk+RR+RPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6VznwZ49p1f1huT0/eh8FukqhQYwHwYDVR0j BBgwFoAU53APE2WMoPrSGlaMcZUwnqwgIbowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFZRVWFKbW14THhmbmNGeDdMbjFBTHBTWmpCYmh1YnhvNUJOVHpWamdN dlUvMC9FNzcwMEYxMzY1OENBMEZBRDIxQTU2OEM3MTk1MzA5RUFDMjAyMUJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3NzAwRjEzNjU4Q0EwRkFE MjFBNTY4QzcxOTUzMDlFQUMyMDIxQkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFZRVWFKbW14THhmbmNGeDdMbjFBTHBTWmpCYmh1YnhvNUJOVHpWamdNdlUvMC9F NzcwMEYxMzY1OENBMEZBRDIxQTU2OEM3MTk1MzA5RUFDMjAyMUJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe1hnmAIogHkSS/NuVw+vvqilrYOypXdyncDKFLbhHRY3Z7Nlw8Hk36V8d70Y SXwGcUbN1/fWCehZK01IZQubBS7sj0fGGdbgRaMeyRQxRUcdjEKifrdlqM4bz+Ki to2BhsET2+SGMCkzYMNB2u0S9y1Np4enS078OwfQAs78Psxk1Wm2E4FW4POdSQ0v T2WZf1915jct3VMp4PzmSag3apwjNwW/gUg5Z+4jAbYjucDMtNBloavZwbhEW60k k2mMUCpuzZwfDVdoHN+gpmNulbCFTouzz3qCkTQCs7bDCEW1Md4Vb22zFsEylZQ3 LKR6xPWDAgvhjsOxJcIPNk01Zw== -----END CERTIFICATE-----Generated at Sat Apr 5 13:49:46 2025 by rpki-client