$ rpki-client -vvf rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft File: 4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft (raw, json) Hash identifier: BtkhSVdRBVMRXrY9AJ7t3JXX0xmdhLGuxnpZ7c4zOUA= Subject key identifier: 5A:AF:E4:42:AB:FD:40:77:6D:E9:B2:74:84:C0:E7:4D:99:BD:0B:D6 Authority key identifier: 4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36 Certificate issuer: /CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236 Certificate serial: 5FCD5033E79F7EAB027CFB29E2293DB9F3A2E4DC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer Subject info access: rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft Manifest number: 018F Signing time: Sun 06 Apr 2025 15:31:32 +0000 Manifest this update: Sun 06 Apr 2025 15:26:32 +0000 Manifest next update: Mon 07 Apr 2025 17:06:32 +0000 Files and hashes: 1: 3138392e382e39362e302f32302d3234203d3e203238363730.roa (hash: lxFKXnJTpYmiLdDbRAAQ5xOWwBGNBDHEmEdgXYCWC/o=) 2: 323830343a316332343a3a2f33322d3438203d3e203238363730.roa (hash: +TDxYAnVsPID27nBhQMm7/l7Ah845871Q9Ijswo4tW4=) 3: 3133382e39342e3232302e302f32322d3234203d3e203238363730.roa (hash: h1KDDGDVQAgZw5iIAifKnPGr+0QAvRH1L3EFE/AtEWs=) 4: 3133312e37322e3134342e302f32322d3234203d3e203238363730.roa (hash: DDYbUZ/G5/VfQZctagP1EkWJOnq7ubdr8WJh/py7js8=) 5: 3133312e37322e3134372e302f32342d3234203d3e20323732323132.roa (hash: 8Ga4iO6HA088M7DMHkz0qswMZpEcuNs5onXQMygnvoc=) 6: 4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl (hash: RmyPoRlWQi2Y/gc0/0rb1vkldv9Gb0U6b2Qr/QCPri4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 17:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:cd:50:33:e7:9f:7e:ab:02:7c:fb:29:e2:29:3d:b9:f3:a2:e4:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236 Validity Not Before: Apr 6 15:26:32 2025 GMT Not After : Apr 7 17:06:32 2025 GMT Subject: CN=5AAFE442ABFD40776DE9B27484C0E74D99BD0BD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:af:89:10:e0:db:56:4b:9c:86:3c:a8:7a:91: 83:46:78:b9:0b:07:b2:b7:06:bc:23:02:0e:0a:16: 8a:56:db:82:99:5d:fc:47:74:67:0b:34:0e:9f:6d: dc:09:de:c6:98:76:bd:e4:74:5d:fd:44:1e:35:11: 28:e0:26:7b:e0:25:a9:c5:fb:72:09:68:40:ec:6d: f9:e8:b2:82:62:02:48:b1:8e:42:d5:ee:66:74:4a: 53:07:ea:a4:73:18:f2:7f:97:c2:18:51:4e:1f:49: 98:d8:75:5a:9c:0b:d8:f7:0f:cb:2d:d0:28:58:32: 64:98:ea:c7:db:bf:2c:bb:56:65:19:b5:54:67:5a: f3:26:a1:ab:59:91:1f:42:89:e5:fe:4a:5e:ba:c1: 10:9a:c6:65:e0:b8:8b:da:7b:b0:c9:75:78:f5:7c: db:24:f5:b4:17:1a:7c:f1:16:63:48:e6:14:2d:81: 26:7d:03:b6:de:a3:46:22:7d:80:2a:ad:71:53:96: 4d:ea:d9:e8:c5:1c:2b:c7:54:57:94:ea:24:d0:e6: 1b:c8:84:df:19:9a:bd:39:0e:c1:1c:6a:9d:61:3e: 2e:fa:30:af:30:38:b9:1f:3a:49:22:26:e1:2d:f5: 75:51:2c:0d:ae:9e:d4:70:66:f5:4d:6a:8e:b4:45: 22:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AF:E4:42:AB:FD:40:77:6D:E9:B2:74:84:C0:E7:4D:99:BD:0B:D6 X509v3 Authority Key Identifier: keyid:4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:60:47:79:13:66:e9:44:00:b5:84:11:49:9a:fc:99:70:34: d6:b0:59:c8:20:26:d2:c4:2c:de:7a:71:bf:7c:ed:f1:1b:d7: 70:b3:4a:d9:f3:6e:3c:d3:6b:57:c5:ac:b3:5d:e6:dd:b8:a9: 66:39:f0:4f:ae:62:2f:ee:59:8e:04:64:1a:89:91:0b:08:a8: 78:9c:95:8d:b3:a2:c8:7b:db:f7:d7:a9:d5:5e:4e:78:16:7b: 6c:88:98:36:21:4d:05:38:84:57:35:20:40:03:17:12:d0:ad: f8:c5:eb:52:9f:7a:71:35:ed:1d:85:a4:eb:95:c4:af:b3:b3: 5e:08:aa:1b:a0:3e:2f:2b:4f:e8:7e:8b:5c:e7:51:e7:56:3f: a4:b4:aa:b4:7d:12:c7:b3:7a:2f:c2:11:68:e0:0c:d5:b5:b1: 2d:ca:9d:f3:27:75:4a:c7:33:30:ec:2a:f2:77:85:2d:a0:b7: b8:5d:d9:9e:24:95:54:32:ba:bc:23:dd:35:9f:81:12:cf:c8: 75:40:37:39:04:7d:72:a1:76:21:9e:63:84:fd:e3:a3:d6:e3: d9:ae:a1:d1:7a:d3:ac:31:97:fd:42:29:08:41:33:24:ef:8f: a0:87:19:43:4c:1a:1a:cc:74:33:c2:f6:43:bb:96:e2:7e:39: 3b:ec:fd:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX81QM+effqsCfPsp4ik9ufOi5NwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU3RUIzMUI2RDQ1MzJEMUMxMDQ0NERCM0I4OEQxRjZE MDAyRjIzNjAeFw0yNTA0MDYxNTI2MzJaFw0yNTA0MDcxNzA2MzJaMDMxMTAvBgNV BAMTKDVBQUZFNDQyQUJGRDQwNzc2REU5QjI3NDg0QzBFNzREOTlCRDBCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzr4kQ4NtWS5yGPKh6kYNGeLkL B7K3BrwjAg4KFopW24KZXfxHdGcLNA6fbdwJ3saYdr3kdF39RB41ESjgJnvgJanF +3IJaEDsbfnosoJiAkixjkLV7mZ0SlMH6qRzGPJ/l8IYUU4fSZjYdVqcC9j3D8st 0ChYMmSY6sfbvyy7VmUZtVRnWvMmoatZkR9CieX+Sl66wRCaxmXguIvae7DJdXj1 fNsk9bQXGnzxFmNI5hQtgSZ9A7beo0YifYAqrXFTlk3q2ejFHCvHVFeU6iTQ5hvI hN8Zmr05DsEcap1hPi76MK8wOLkfOkkiJuEt9XVRLA2untRwZvVNao60RSKPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWq/kQqv9QHdt6bJ0hMDnTZm9C9YwHwYDVR0j BBgwFoAUTn6zG21FMtHBBETbO4jR9tAC8jYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNnJXenhZc2NqaFRqUkw5R2FVWDNGbVR6aXp2em5CZVNSTEc3aTYyRm5a UEwvMC80RTdFQjMxQjZENDUzMkQxQzEwNDQ0REIzQjg4RDFGNkQwMDJGMjM2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFN0VCMzFCNkQ0NTMyRDFD MTA0NDREQjNCODhEMUY2RDAwMkYyMzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NnJXenhZc2NqaFRqUkw5R2FVWDNGbVR6aXp2em5CZVNSTEc3aTYyRm5aUEwvMC80 RTdFQjMxQjZENDUzMkQxQzEwNDQ0REIzQjg4RDFGNkQwMDJGMjM2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlmBHeRNm6UQAtYQRSZr8mXA01rBZyCAm0sQs3npxv3zt8RvXcLNK2fNuPNNr V8Wss13m3bipZjnwT65iL+5ZjgRkGomRCwioeJyVjbOiyHvb99ep1V5OeBZ7bIiY NiFNBTiEVzUgQAMXEtCt+MXrUp96cTXtHYWk65XEr7OzXgiqG6A+LytP6H6LXOdR 51Y/pLSqtH0Sx7N6L8IRaOAM1bWxLcqd8yd1SsczMOwq8neFLaC3uF3ZniSVVDK6 vCPdNZ+BEs/IdUA3OQR9cqF2IZ5jhP3jo9bj2a6h0XrTrDGX/UIpCEEzJO+PoIcZ Q0waGsx0M8L2Q7uW4n45O+z9OA== -----END CERTIFICATE-----Generated at Mon Apr 7 04:56:06 2025 by rpki-client