$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft File: 2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft (raw, json) Hash identifier: JVjTQGC+lKMEamFNLN6YI5DkUAeAXqmnNIZjb9FOXfU= Subject key identifier: 12:D9:72:7F:24:0C:61:CB:07:88:D3:F2:F7:EC:FB:7B:45:90:29:74 Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47 Certificate issuer: /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647 Certificate serial: 2C728FB9D1391DFC75D2EF04C4DE6846BD906B69 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer Subject info access: rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft Manifest number: 01AC Signing time: Fri 18 Apr 2025 19:41:48 +0000 Manifest this update: Fri 18 Apr 2025 19:36:48 +0000 Manifest next update: Sat 19 Apr 2025 20:50:48 +0000 Files and hashes: 1: 3230302e33392e34392e302f32342d3234203d3e20323731353234.roa (hash: 27YomA8TpPWq056IxLZdNFeCc9AAqgUAcMtyVHrU7JI=) 2: 323830343a376365303a3a2f33322d3333203d3e20323731353234.roa (hash: jbZ7m/cZ2XC8pnRIQ9hoHimB9Dj0Rfx0URi4KyT+Pdw=) 3: 3230302e33392e35312e302f32342d3234203d3e20323731353234.roa (hash: eaHNN+6vzLIJPLthvhRu8XALhQCUuVyk7EwjYSTBDTw=) 4: 3230302e33392e34382e302f32322d3232203d3e20323731353234.roa (hash: 9EY7apw8vm0HkmsbpiQUW6dmLnGVjoF4qsDb8nu5zhk=) 5: 3230302e33392e35302e302f32342d3234203d3e20323731353234.roa (hash: Z3kmpsldci+k0etKHqSHjFsR/sd0khJ9mMYU2nyZdBc=) 6: 2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl (hash: CGT7tmfCgaiEeb5ASWikW63TimWvn9HO9ZpGUyxCirU=) 7: 3230302e33392e34382e302f32342d3234203d3e20323731353234.roa (hash: T8tKlDwd9TGCI+s7MB2oi6kCEtd2vIMrUnKqOxql/cI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 19 Apr 2025 20:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:72:8f:b9:d1:39:1d:fc:75:d2:ef:04:c4:de:68:46:bd:90:6b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647 Validity Not Before: Apr 18 19:36:48 2025 GMT Not After : Apr 19 20:50:48 2025 GMT Subject: CN=12D9727F240C61CB0788D3F2F7ECFB7B45902974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ea:47:6d:d1:81:77:97:32:e9:46:84:93:53: e9:fb:fa:94:5e:ca:11:25:c4:00:98:b7:88:de:8a: f0:6b:70:e9:95:ee:af:ef:8f:de:7f:aa:8c:d0:78: 0a:e2:9a:2c:bb:61:e0:cc:71:07:ea:e7:d3:5b:a6: 5e:a8:e9:8f:f5:85:56:89:59:ce:1e:7a:ce:a3:ca: 97:d7:40:38:a1:01:d1:b0:4d:c4:3e:43:15:4c:bb: 2c:ea:e8:be:3d:79:20:1c:08:e9:a8:c3:e0:e3:d0: 00:40:f1:d6:7d:44:3d:35:84:60:6a:29:48:f9:2b: 82:26:53:c6:72:0b:3d:6a:a2:58:e6:4a:08:61:8b: 36:59:92:e6:da:03:85:ce:f1:30:d2:9a:93:8d:1a: 58:1a:a0:40:c1:f1:64:89:75:8c:31:16:e5:63:df: bb:51:c5:e9:1b:aa:a2:6a:dc:88:f3:6e:08:66:b9: d3:a9:40:3f:12:62:59:d6:69:7e:5c:7a:42:4e:c4: d6:f3:b7:d4:e8:f8:d4:50:0d:34:e2:c3:ff:bb:db: ce:bd:b3:e4:b1:8b:0c:3d:ad:de:fe:07:56:ee:c6: 4e:af:46:11:d5:f8:29:03:44:b4:c7:e0:5d:fb:21: b8:81:80:83:9d:57:32:a4:e5:90:a0:33:ec:20:a0: 2a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D9:72:7F:24:0C:61:CB:07:88:D3:F2:F7:EC:FB:7B:45:90:29:74 X509v3 Authority Key Identifier: keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:62:f9:16:40:0e:ad:53:b8:15:bc:67:79:7a:2e:6c:25:2c: 2d:8f:3a:4c:2b:59:c8:06:ce:2a:77:2c:39:cf:16:b4:03:5a: 79:79:ed:70:db:06:86:9d:68:2a:e5:7f:84:5c:c8:c0:68:76: d6:85:0f:a3:99:07:d8:9d:f2:46:d0:37:64:50:2b:0e:07:11: 79:1f:6e:fe:e3:32:6f:5e:e0:ee:5b:a6:ef:b1:c9:fb:33:10: d7:b5:a5:36:44:95:d5:05:e2:42:ef:d8:90:6e:d1:7f:ac:47: 80:64:0a:fa:1d:f0:0c:a6:4e:35:b8:dc:01:2a:e7:e1:d2:3d: 58:9c:29:15:d6:78:75:fc:12:72:27:a3:6c:6b:80:6f:08:59: f6:b8:77:de:db:55:71:f2:f0:f4:ba:8f:7a:db:cf:68:8d:cc: 65:e5:af:73:b1:cf:5d:f4:c5:53:00:a7:a2:66:79:42:cc:38: fb:f0:27:83:2a:9a:9b:21:93:79:13:f2:32:e7:ad:03:1c:1f: cd:9b:47:9a:f8:f3:3e:be:49:ea:b6:1c:41:64:90:40:15:6b: f4:b5:3d:cc:c2:32:80:d5:0f:61:f5:a8:4d:fc:8f:7d:42:6e: e6:7c:54:73:78:73:50:da:ac:4a:4a:a6:18:50:62:54:3c:08: 8c:44:97:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULHKPudE5Hfx10u8ExN5oRr2Qa2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREOTdGNUU4NUQ1QTk1NzhFNzg5NDBDRkQ1QkFFREZC ODJFMDY0NzAeFw0yNTA0MTgxOTM2NDhaFw0yNTA0MTkyMDUwNDhaMDMxMTAvBgNV BAMTKDEyRDk3MjdGMjQwQzYxQ0IwNzg4RDNGMkY3RUNGQjdCNDU5MDI5NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6kdt0YF3lzLpRoSTU+n7+pRe yhElxACYt4jeivBrcOmV7q/vj95/qozQeArimiy7YeDMcQfq59Nbpl6o6Y/1hVaJ Wc4ees6jypfXQDihAdGwTcQ+QxVMuyzq6L49eSAcCOmow+Dj0ABA8dZ9RD01hGBq KUj5K4ImU8ZyCz1qoljmSghhizZZkubaA4XO8TDSmpONGlgaoEDB8WSJdYwxFuVj 37tRxekbqqJq3IjzbghmudOpQD8SYlnWaX5cekJOxNbzt9To+NRQDTTiw/+72869 s+Sxiww9rd7+B1buxk6vRhHV+CkDRLTH4F37IbiBgIOdVzKk5ZCgM+wgoCodAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEtlyfyQMYcsHiNPy9+z7e0WQKXQwHwYDVR0j BBgwFoAULdl/XoXVqVeOeJQM/Vuu37guBkcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2ZVVEdxUTI0YmNMcUNjQjkyOE15ZldBYkNrZFVreVV0WFB5RFhlQW0x b0IvMC8yREQ5N0Y1RTg1RDVBOTU3OEU3ODk0MENGRDVCQUVERkI4MkUwNjQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDk3RjVFODVENUE5NTc4 RTc4OTQwQ0ZENUJBRURGQjgyRTA2NDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2ZVVEdxUTI0YmNMcUNjQjkyOE15ZldBYkNrZFVreVV0WFB5RFhlQW0xb0IvMC8y REQ5N0Y1RTg1RDVBOTU3OEU3ODk0MENGRDVCQUVERkI4MkUwNjQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGGL5FkAOrVO4FbxneXoubCUsLY86TCtZyAbOKncsOc8WtANaeXntcNsGhp1o KuV/hFzIwGh21oUPo5kH2J3yRtA3ZFArDgcReR9u/uMyb17g7lum77HJ+zMQ17Wl NkSV1QXiQu/YkG7Rf6xHgGQK+h3wDKZONbjcASrn4dI9WJwpFdZ4dfwSciejbGuA bwhZ9rh33ttVcfLw9LqPetvPaI3MZeWvc7HPXfTFUwCnomZ5Qsw4+/AngyqamyGT eRPyMuetAxwfzZtHmvjzPr5J6rYcQWSQQBVr9LU9zMIygNUPYfWoTfyPfUJu5nxU c3hzUNqsSkqmGFBiVDwIjESXaQ== -----END CERTIFICATE-----Generated at Sat Apr 19 05:03:38 2025 by rpki-client