$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft File: 85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft (raw, json) Hash identifier: dtPRKoGeTCN80pVL5ZNjHNvh62yswrjPZwl/DtZh0hs= Subject key identifier: AD:29:64:DF:6B:97:C2:CE:40:1B:97:4C:70:41:3F:CE:60:CB:FE:C3 Authority key identifier: 85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95 Certificate issuer: /CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995 Certificate serial: 64E3C8701C9ECD9E9459BB9BDC7AB643DE077652 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer Subject info access: rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft Manifest number: 01E7 Signing time: Fri 04 Apr 2025 08:58:15 +0000 Manifest this update: Fri 04 Apr 2025 08:53:15 +0000 Manifest next update: Sat 05 Apr 2025 10:20:15 +0000 Files and hashes: 1: 323830343a6366303a3a2f33322d3438203d3e203532353736.roa (hash: wiHI9SrflkamLTOfmYBEaJJSlinTuLYPlmXxJbPhtpo=) 2: 85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl (hash: T8zahBaC/4BX+hLGCs/nvwgC2PFbsFRR0bD7WRfxqG8=) 3: 3137372e38362e3230302e302f32312d3234203d3e203532353736.roa (hash: TI8fvU+DA9BGVyDJ2qm1cJltZ0I1E38L4u9tbujdTOY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 10:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e3:c8:70:1c:9e:cd:9e:94:59:bb:9b:dc:7a:b6:43:de:07:76:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995 Validity Not Before: Apr 4 08:53:15 2025 GMT Not After : Apr 5 10:20:15 2025 GMT Subject: CN=AD2964DF6B97C2CE401B974C70413FCE60CBFEC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:df:49:a9:4e:cd:93:20:15:10:01:fa:26:50: 99:b9:48:58:b5:31:7b:5e:b8:44:77:46:ad:e6:91: 76:bb:5b:a6:db:41:e6:ed:b5:5a:80:c2:33:fa:1d: 3c:36:d0:fc:a9:e2:de:2c:ce:fd:0d:63:e0:9d:98: cf:9c:af:18:1e:1a:61:de:77:8f:6f:77:70:96:ea: 16:8e:f2:a7:7c:71:52:07:6e:48:63:7c:b9:bf:0f: 30:c3:f0:6f:3f:69:a6:8e:1a:4a:de:20:13:97:be: eb:43:2d:d8:6c:80:e0:cd:62:fc:35:21:19:be:e0: 23:3e:09:97:9f:0f:b7:34:9b:84:7e:b8:68:5a:79: e7:b8:fd:a3:71:85:00:3b:5a:a6:5b:f8:c4:be:56: 58:33:e0:bb:e3:80:24:ba:d8:bc:30:bc:e4:20:77: c5:9c:f0:2d:9d:56:14:d4:13:0d:da:21:b8:4a:94: 32:3c:68:e8:1b:ce:90:34:47:5f:be:ed:29:d3:64: a0:c0:91:8c:89:14:50:d3:4c:90:04:95:9d:06:49: 17:b0:2c:16:8a:60:24:9e:b4:87:e0:14:82:cf:3b: bc:5b:b7:4a:3b:9b:ab:08:70:e8:e0:50:19:31:e4: a4:13:d3:2e:05:ed:4f:15:47:5d:53:b7:ed:3e:ab: a5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:29:64:DF:6B:97:C2:CE:40:1B:97:4C:70:41:3F:CE:60:CB:FE:C3 X509v3 Authority Key Identifier: keyid:85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:93:49:f8:94:44:a5:41:af:82:e6:5c:28:ee:bb:b9:d5:7a: 8f:a5:08:2d:ea:e7:d2:cf:fc:cc:96:36:fe:6b:9f:d1:7c:82: fe:2f:6b:90:b9:20:6e:1f:5b:6c:78:38:3d:35:70:b7:49:38: 97:f3:49:e4:96:cf:c2:f3:cb:ce:3a:db:94:95:bc:12:2a:89: 9a:c9:89:b1:d0:5d:36:5c:ad:4a:bc:b0:7d:a6:f4:c7:7b:a1: 97:37:c6:ea:c0:05:78:1c:2e:e9:8d:d5:41:b4:d4:52:a2:58: 27:d9:71:e5:73:07:88:a2:d5:23:00:55:c6:70:79:13:04:17: ae:17:6b:90:91:b0:2b:7a:49:68:bc:68:55:01:73:a7:b3:8b: e9:63:d4:23:9d:14:9c:5c:d7:6c:93:1f:e7:28:d9:3d:ee:f4: 05:e3:4d:02:7d:27:17:4b:be:43:40:20:8c:d8:cd:fa:07:90: fa:3b:52:72:35:2f:b8:38:c6:fa:33:60:05:f0:a2:d5:a5:4c: 14:7e:6b:fa:01:2e:43:5e:48:86:23:2a:36:2d:2a:4b:d1:bc: 7a:0e:16:e4:8e:7b:49:11:8d:cd:94:19:77:8b:16:68:5e:56: 25:f6:9d:c2:a2:43:27:e2:df:72:fa:c3:66:40:8d:10:8f:57: 69:12:18:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZOPIcByezZ6UWbub3Hq2Q94HdlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVBQzdGRjA3MjI0MDkxMTZDMUUzQzQwRkU0N0VBQTYw M0RERDk5NTAeFw0yNTA0MDQwODUzMTVaFw0yNTA0MDUxMDIwMTVaMDMxMTAvBgNV BAMTKEFEMjk2NERGNkI5N0MyQ0U0MDFCOTc0QzcwNDEzRkNFNjBDQkZFQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH30mpTs2TIBUQAfomUJm5SFi1 MXteuER3Rq3mkXa7W6bbQebttVqAwjP6HTw20Pyp4t4szv0NY+CdmM+crxgeGmHe d49vd3CW6haO8qd8cVIHbkhjfLm/DzDD8G8/aaaOGkreIBOXvutDLdhsgODNYvw1 IRm+4CM+CZefD7c0m4R+uGhaeee4/aNxhQA7WqZb+MS+Vlgz4LvjgCS62LwwvOQg d8Wc8C2dVhTUEw3aIbhKlDI8aOgbzpA0R1++7SnTZKDAkYyJFFDTTJAElZ0GSRew LBaKYCSetIfgFILPO7xbt0o7m6sIcOjgUBkx5KQT0y4F7U8VR11Tt+0+q6WxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrSlk32uXws5AG5dMcEE/zmDL/sMwHwYDVR0j BBgwFoAUhax/8HIkCRFsHjxA/kfqpgPd2ZUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdK WFIvMS84NUFDN0ZGMDcyMjQwOTExNkMxRTNDNDBGRTQ3RUFBNjAzREREOTk1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1QUM3RkYwNzIyNDA5MTE2 QzFFM0M0MEZFNDdFQUE2MDNEREQ5OTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdKWFIvMS84 NUFDN0ZGMDcyMjQwOTExNkMxRTNDNDBGRTQ3RUFBNjAzREREOTk1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj5NJ+JREpUGvguZcKO67udV6j6UILern0s/8zJY2/muf0XyC/i9rkLkgbh9b bHg4PTVwt0k4l/NJ5JbPwvPLzjrblJW8EiqJmsmJsdBdNlytSrywfab0x3uhlzfG 6sAFeBwu6Y3VQbTUUqJYJ9lx5XMHiKLVIwBVxnB5EwQXrhdrkJGwK3pJaLxoVQFz p7OL6WPUI50UnFzXbJMf5yjZPe70BeNNAn0nF0u+Q0AgjNjN+geQ+jtScjUvuDjG +jNgBfCi1aVMFH5r+gEuQ15IhiMqNi0qS9G8eg4W5I57SRGNzZQZd4sWaF5WJfad wqJDJ+LfcvrDZkCNEI9XaRIY8w== -----END CERTIFICATE-----Generated at Fri Apr 4 22:14:44 2025 by rpki-client