$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft File: A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft (raw, json) Hash identifier: HW3nW1fokyUGxdIOkuARhriBeSXbO81VaqM3LgCtIM4= Subject key identifier: 12:E9:6C:74:F5:04:F1:94:E8:00:95:AB:B6:0A:DC:49:F5:C8:EE:7C Authority key identifier: A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5 Certificate issuer: /CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5 Certificate serial: 7BF15BE4671BBF347C52181B22BB0E719B3CE72F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer Subject info access: rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft Manifest number: 01E5 Signing time: Fri 04 Apr 2025 08:16:04 +0000 Manifest this update: Fri 04 Apr 2025 08:11:04 +0000 Manifest next update: Sat 05 Apr 2025 10:33:04 +0000 Files and hashes: 1: A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl (hash: +BAe57U0z3iWebA2kldsC+iaKlcHV1+yUdkZ1X14Sm0=) 2: 3137302e37392e38302e302f32322d3234203d3e20323633363530.roa (hash: 3cl7qGY3Uah+LpaKDYBwqUJTIJ54UAe8CPZu85SXw8w=) 3: 3133382e3235352e3134382e302f32332d3233203d3e20323633363530.roa (hash: J/Q4INq5+rxx5or7Dtxsc3e0XJVFM0Z9uzhdnU1PvWM=) 4: 3137372e37342e3135322e302f32312d3234203d3e20323633363530.roa (hash: OrXhQQlp7RZ6/MIGX1Taycaaqe9MXNKl7a134sAYK6k=) 5: 323830343a313063633a3a2f33322d3336203d3e20323633363530.roa (hash: +qIJkvUXoe+sIHM7LFZEksM0O2f43VVtgvbVf1lt8CU=) 6: 3133382e3235352e3135312e302f32342d3234203d3e20323633363530.roa (hash: fdcldvS++SsDTYn8odxPcaAMMAB1n8qJoznzHm+tfAw=) 7: 3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa (hash: LXRmb4zfD6o3B7/VmuFOKShUsVwwF+Iq5iC0r91FsZM=) 8: 3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa (hash: KgQCtdSAmI2B7P7wIGxaMQ4eNKfghqvBGqN62/hpOTY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 10:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f1:5b:e4:67:1b:bf:34:7c:52:18:1b:22:bb:0e:71:9b:3c:e7:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5 Validity Not Before: Apr 4 08:11:04 2025 GMT Not After : Apr 5 10:33:04 2025 GMT Subject: CN=12E96C74F504F194E80095ABB60ADC49F5C8EE7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:0c:7b:a0:18:fc:85:9c:00:cc:4b:8d:a1: a1:60:0d:34:2d:6d:43:7b:3c:e1:dc:e5:8f:91:e4: 32:f1:de:77:39:13:55:bf:fc:c7:cd:e6:0d:66:fe: de:8f:08:5f:c1:1b:9c:6d:55:dd:28:0f:15:8c:1c: f9:e4:bc:9a:f8:8b:e7:cd:32:58:bd:c8:78:77:29: 0f:07:cb:73:5f:b4:e1:5e:46:e9:03:0f:20:82:cd: eb:46:9c:a0:82:e2:86:6c:fb:31:35:a5:7d:00:08: c5:4c:58:87:ba:e9:00:32:ec:54:da:07:67:94:f3: 77:23:71:de:fe:3e:0d:65:ce:9e:c1:d3:90:01:f6: ed:72:be:9a:ad:f5:6b:64:24:8c:01:90:47:ef:05: 98:37:a2:fb:90:86:ec:92:a1:eb:81:ed:f0:7c:6f: 97:88:07:6d:da:5e:0b:e4:7b:56:06:3c:34:f6:2b: 12:0f:3b:b7:73:10:a4:24:50:ed:3e:8f:02:04:3f: 1b:8e:2d:cc:1b:12:bc:c7:58:8c:2b:51:be:d6:cb: 76:57:f4:bc:5e:c7:3a:58:1c:ab:ae:f4:77:67:d4: 62:f6:fc:66:2f:4a:4a:a6:f6:73:9a:81:b3:24:1e: 6f:43:e6:4a:4c:fa:41:44:68:aa:f1:c0:7f:60:91: d0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E9:6C:74:F5:04:F1:94:E8:00:95:AB:B6:0A:DC:49:F5:C8:EE:7C X509v3 Authority Key Identifier: keyid:A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e5:fa:31:73:95:c1:3a:ba:7f:c4:8b:a8:0f:e9:84:4a:e4: 2c:9f:c8:8f:37:69:9f:4a:86:db:fd:e7:d4:7c:b6:26:fd:32: 5d:dd:4c:ab:fe:c0:98:8d:28:3d:56:a6:78:64:7e:d2:d4:65: 92:41:a5:07:f9:6b:da:7f:51:e4:09:1b:83:20:5f:67:7c:74: ab:ce:03:24:d9:32:f0:96:ea:13:03:a6:c0:df:62:b8:19:fe: cd:56:2f:8d:22:52:c3:43:46:1b:25:b6:dc:83:13:1a:35:4f: 9f:a5:99:cc:41:f4:8e:a0:e0:28:05:1e:71:c5:3f:03:d4:70: 25:15:2c:48:f0:4f:a6:d8:6f:43:6b:90:bd:ce:25:53:40:ab: dc:06:d7:d5:e4:1d:11:1c:0a:c2:45:50:2d:0f:58:e8:bb:22: bd:f2:16:81:65:5e:83:ba:1e:11:1e:e2:3b:cc:bd:f0:f1:0d: bb:a0:ac:49:33:29:20:67:c8:df:0a:69:c0:fb:b0:37:a6:58: 27:1a:9f:c5:d7:9e:f5:57:49:c7:da:f5:0e:a1:bf:f3:b9:ea: 81:f4:df:64:0e:4b:20:8a:cf:ad:df:95:40:65:26:68:7e:00: 55:57:be:68:a0:4a:8c:f0:2b:ba:8c:bc:de:07:7c:cd:1d:89: 30:c1:ca:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe/Fb5GcbvzR8UhgbIrsOcZs85y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMxMERDQjA1RDJDQTIzRjIyMzBEODQyN0MzMkVGRjBD QkZGNDJCNTAeFw0yNTA0MDQwODExMDRaFw0yNTA0MDUxMDMzMDRaMDMxMTAvBgNV BAMTKDEyRTk2Qzc0RjUwNEYxOTRFODAwOTVBQkI2MEFEQzQ5RjVDOEVFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykAx7oBj8hZwAzEuNoaFgDTQt bUN7POHc5Y+R5DLx3nc5E1W//MfN5g1m/t6PCF/BG5xtVd0oDxWMHPnkvJr4i+fN Mli9yHh3KQ8Hy3NftOFeRukDDyCCzetGnKCC4oZs+zE1pX0ACMVMWIe66QAy7FTa B2eU83cjcd7+Pg1lzp7B05AB9u1yvpqt9WtkJIwBkEfvBZg3ovuQhuySoeuB7fB8 b5eIB23aXgvke1YGPDT2KxIPO7dzEKQkUO0+jwIEPxuOLcwbErzHWIwrUb7Wy3ZX 9LxexzpYHKuu9Hdn1GL2/GYvSkqm9nOagbMkHm9D5kpM+kFEaKrxwH9gkdCfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEulsdPUE8ZToAJWrtgrcSfXI7nwwHwYDVR0j BBgwFoAUoxDcsF0soj8iMNhCfDLv8Mv/QrUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUwxaldOTGlnV1lNOXhtMzl6ZVpZeHlyTGpUWWZ5cWtHQ2VvRTNYWGha ekwvMS9BMzEwRENCMDVEMkNBMjNGMjIzMEQ4NDI3QzMyRUZGMENCRkY0MkI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzMTBEQ0IwNUQyQ0EyM0Yy MjMwRDg0MjdDMzJFRkYwQ0JGRjQyQjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUwxaldOTGlnV1lNOXhtMzl6ZVpZeHlyTGpUWWZ5cWtHQ2VvRTNYWGhaekwvMS9B MzEwRENCMDVEMkNBMjNGMjIzMEQ4NDI3QzMyRUZGMENCRkY0MkI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU+X6MXOVwTq6f8SLqA/phErkLJ/Ijzdpn0qG2/3n1Hy2Jv0yXd1Mq/7AmI0o PVameGR+0tRlkkGlB/lr2n9R5AkbgyBfZ3x0q84DJNky8JbqEwOmwN9iuBn+zVYv jSJSw0NGGyW23IMTGjVPn6WZzEH0jqDgKAUeccU/A9RwJRUsSPBPpthvQ2uQvc4l U0Cr3AbX1eQdERwKwkVQLQ9Y6LsivfIWgWVeg7oeER7iO8y98PENu6CsSTMpIGfI 3wppwPuwN6ZYJxqfxdee9VdJx9r1DqG/87nqgfTfZA5LIIrPrd+VQGUmaH4AVVe+ aKBKjPAruoy83gd8zR2JMMHKxQ== -----END CERTIFICATE-----Generated at Fri Apr 4 17:55:49 2025 by rpki-client