$ rpki-client -vvf rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft File: 0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft (raw, json) Hash identifier: andV80fON+/JwpW0nEWYQ1Ft6O1DpadostIWggnwIxs= Subject key identifier: 86:E5:6E:E8:8D:DE:DD:8A:0A:FD:70:A5:B1:74:8D:FB:12:7C:60:BB Authority key identifier: 0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15 Certificate issuer: /CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15 Certificate serial: 58C5E3501E5C42F3DD9A3D92FD87426FE004C261 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer Subject info access: rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft Manifest number: 48 Signing time: Sat 05 Apr 2025 11:23:19 +0000 Manifest this update: Sat 05 Apr 2025 11:18:19 +0000 Manifest next update: Sun 06 Apr 2025 12:37:19 +0000 Files and hashes: 1: 3137302e38312e34342e302f32322d3234203d3e203631383732.roa (hash: 3uUj0R6DlPY399C9yzaH3KMwAJiuFg6IDEJm6Flo7/I=) 2: 3137372e32322e3230382e302f32302d3234203d3e203631383732.roa (hash: Ff7NxA9f2NFen6Fa/2ff2j5YwONNZaeQShwc44r8Cz8=) 3: 323830343a316161303a3a2f33322d3438203d3e203631383732.roa (hash: zSptNN8DkmF10Nv+nlCLUTysqOi1fB0W3pY01wsysuw=) 4: 0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl (hash: XnzWz23EyjNOl/NtpiL3rGZmPtv8Jed7YT3P86RRCSw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 12:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c5:e3:50:1e:5c:42:f3:dd:9a:3d:92:fd:87:42:6f:e0:04:c2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15 Validity Not Before: Apr 5 11:18:19 2025 GMT Not After : Apr 6 12:37:19 2025 GMT Subject: CN=86E56EE88DDEDD8A0AFD70A5B1748DFB127C60BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:60:70:82:6f:e1:29:60:b4:06:da:ed:6c:a4: 81:b8:c2:67:21:7a:b0:07:93:dd:10:fb:09:7d:62: 1f:51:d5:40:6d:3a:19:b8:a4:b7:4f:ec:a9:76:07: fb:55:18:bf:df:7d:6b:35:8b:ae:94:a8:cf:4b:da: ad:93:8a:ef:f4:40:d4:0f:19:54:71:92:1d:2d:71: 53:bb:7a:51:2c:0c:23:a9:7e:3b:33:84:97:00:3e: 9c:fa:e7:b2:7f:bd:7f:36:d1:ac:99:d9:45:4a:16: 61:5a:12:30:62:d1:10:81:62:a7:2c:13:c9:9c:d4: c5:cf:1e:ae:24:b6:5d:d4:b8:52:47:ef:54:1b:1f: 97:a2:10:00:68:a3:f8:71:ee:c3:31:17:84:23:b0: 11:00:85:1b:17:f2:3c:08:78:69:9b:3f:0e:3b:46: 4a:37:ef:8a:aa:c0:a5:5f:b2:8f:6c:46:b9:ea:6c: 3f:81:57:e1:45:6c:2b:e5:9a:ba:fe:82:2c:ef:9d: f6:5e:9b:89:ae:08:c7:df:c2:49:a0:60:ba:7d:6f: 8b:f5:32:a1:6d:cc:78:2b:86:c5:8c:22:e6:c1:fb: 63:cc:03:5a:26:d0:10:2d:fd:02:cb:35:e4:cb:38: 43:77:a0:31:b8:d1:a1:2a:7e:61:e8:2a:4d:a5:8d: c9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E5:6E:E8:8D:DE:DD:8A:0A:FD:70:A5:B1:74:8D:FB:12:7C:60:BB X509v3 Authority Key Identifier: keyid:0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:83:6a:f6:6f:84:b8:19:03:48:c5:8e:e9:3e:b2:2c:7b:06: 1e:92:0f:20:87:cf:04:d0:a0:ba:bd:27:68:52:26:1d:92:54: 01:46:31:4d:f9:7e:4e:25:91:fc:3e:13:0d:1e:b1:bf:b0:a0: c2:f5:21:f5:7e:2f:09:3f:34:23:3c:18:09:a9:d1:ed:58:50: 5a:a9:7f:f6:42:d5:32:59:61:8e:fa:4e:7d:27:38:5e:35:88: 60:04:9f:89:2f:58:55:40:3a:09:ce:78:98:ae:7b:14:6f:01: 82:5c:5b:6d:67:51:16:69:c8:26:45:23:a1:32:fa:ab:ec:73: 2c:8d:ca:a2:f7:fc:c5:99:00:6f:59:a5:75:0f:a6:1e:35:ff: 94:da:b8:7f:01:12:de:1c:d4:9c:4e:49:07:61:24:67:91:e2: e4:3a:43:ba:b9:3b:10:68:35:33:04:6b:d0:4c:d8:ee:7f:89: 09:35:da:fc:07:65:e5:3e:e0:e0:59:c6:40:3e:72:10:d5:a9: e9:fb:4a:b2:5e:5c:89:dd:a3:29:1b:70:02:88:8a:37:cd:4b: 61:f8:c0:8c:6f:fc:76:d4:e8:40:c7:30:9d:f2:34:23:68:51: 4f:9d:31:80:3a:95:f7:30:4c:85:49:30:3e:d9:c9:9c:e2:e4: dc:c7:26:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWMXjUB5cQvPdmj2S/YdCb+AEwmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEREMTFENEZGOERBRDlBNTY0OUM4RjEzNTNENDE0QkJF RkI3QkMxNTAeFw0yNTA0MDUxMTE4MTlaFw0yNTA0MDYxMjM3MTlaMDMxMTAvBgNV BAMTKDg2RTU2RUU4OERERUREOEEwQUZENzBBNUIxNzQ4REZCMTI3QzYwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYHCCb+EpYLQG2u1spIG4wmch erAHk90Q+wl9Yh9R1UBtOhm4pLdP7Kl2B/tVGL/ffWs1i66UqM9L2q2Tiu/0QNQP GVRxkh0tcVO7elEsDCOpfjszhJcAPpz657J/vX820ayZ2UVKFmFaEjBi0RCBYqcs E8mc1MXPHq4ktl3UuFJH71QbH5eiEABoo/hx7sMxF4QjsBEAhRsX8jwIeGmbPw47 Rko374qqwKVfso9sRrnqbD+BV+FFbCvlmrr+gizvnfZem4muCMffwkmgYLp9b4v1 MqFtzHgrhsWMIubB+2PMA1om0BAt/QLLNeTLOEN3oDG40aEqfmHoKk2ljckjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhuVu6I3e3YoK/XClsXSN+xJ8YLswHwYDVR0j BBgwFoAUDdEdT/ja2aVknI8TU9QUu++3vBUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2pXWmVTNXJta0dyN211bUNtcmtXTDZBQkVZYXQ1c1A1TjhzS0VEV0ND cUYvMC8wREQxMUQ0RkY4REFEOUE1NjQ5QzhGMTM1M0Q0MTRCQkVGQjdCQzE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBERDExRDRGRjhEQUQ5QTU2 NDlDOEYxMzUzRDQxNEJCRUZCN0JDMTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2pXWmVTNXJta0dyN211bUNtcmtXTDZBQkVZYXQ1c1A1TjhzS0VEV0NDcUYvMC8w REQxMUQ0RkY4REFEOUE1NjQ5QzhGMTM1M0Q0MTRCQkVGQjdCQzE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGINq9m+EuBkDSMWO6T6yLHsGHpIPIIfPBNCgur0naFImHZJUAUYxTfl+TiWR /D4TDR6xv7CgwvUh9X4vCT80IzwYCanR7VhQWql/9kLVMllhjvpOfSc4XjWIYASf iS9YVUA6Cc54mK57FG8BglxbbWdRFmnIJkUjoTL6q+xzLI3Kovf8xZkAb1mldQ+m HjX/lNq4fwES3hzUnE5JB2EkZ5Hi5DpDurk7EGg1MwRr0EzY7n+JCTXa/Adl5T7g 4FnGQD5yENWp6ftKsl5cid2jKRtwAoiKN81LYfjAjG/8dtToQMcwnfI0I2hRT50x gDqV9zBMhUkwPtnJnOLk3Mcm8Q== -----END CERTIFICATE-----Generated at Sun Apr 6 03:17:09 2025 by rpki-client