$ rpki-client -vvf rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft File: DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft (raw, json) Hash identifier: 44lE/F/jKe8I2pnD10w07CFNHoQGxJMoadDPrKiacmA= Subject key identifier: AA:DC:1B:29:58:44:AF:6D:2B:85:F1:13:2A:F9:80:35:C8:7C:21:E4 Authority key identifier: DA:41:07:AF:1D:9F:F7:0E:9E:D7:B9:A2:E8:E3:58:08:BA:92:1C:85 Certificate issuer: /CN=DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85 Certificate serial: 55F98DE0C8283487A12EA4965501C50EB4F591C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft Manifest number: 0238 Signing time: Thu 05 Jun 2025 22:05:30 +0000 Manifest this update: Thu 05 Jun 2025 22:00:30 +0000 Manifest next update: Sat 07 Jun 2025 02:03:30 +0000 Files and hashes: 1: DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.crl (hash: qti/jDOpHQLgqQr+FTgBz1fr/y90eEP9mxShUVhezmk=) 2: 34352e342e3134382e302f32322d3332203d3e20323636303733.roa (hash: QL8xJK7hM/kyoTtLChr0LeDEwR5NGa8CxHOEBhklRe4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.crl rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 02:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f9:8d:e0:c8:28:34:87:a1:2e:a4:96:55:01:c5:0e:b4:f5:91:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85 Validity Not Before: Jun 5 22:00:30 2025 GMT Not After : Jun 7 02:03:30 2025 GMT Subject: CN=AADC1B295844AF6D2B85F1132AF98035C87C21E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:28:cb:46:ef:48:06:74:07:01:b6:45:be:a4: c0:21:a4:00:68:9a:b1:f1:0d:9d:da:52:17:ed:99: f4:7a:8f:e2:2f:0d:62:c3:63:c7:9f:94:a5:31:e6: a4:b9:9d:9e:dd:02:65:90:f3:9b:c1:bf:bf:cd:f2: 0a:c3:14:a7:fd:e0:80:ad:4d:6d:d5:12:63:bb:09: 98:35:e9:06:1c:f9:fb:0b:18:5b:f4:e4:13:9f:4c: d6:cc:ef:22:ff:c9:53:70:3c:d3:23:a1:ed:18:b8: 66:d8:0e:97:5d:09:ff:ce:49:ec:a5:fa:bd:65:22: e5:d2:e4:29:a2:a3:12:78:32:49:f2:d4:03:16:d0: 86:b1:d0:60:1c:d0:4d:29:d6:97:81:5b:16:cc:78: 4c:c6:76:86:03:81:a1:a2:89:10:a4:93:54:36:5b: 04:1b:4d:21:4c:ef:c1:1c:b0:ed:9d:24:85:89:63: cb:a2:d6:2a:23:56:fc:36:c0:17:d8:57:af:5d:8b: 34:f7:6f:03:67:55:73:9f:8f:c1:47:bd:d6:c5:bb: 27:d9:e4:f6:2f:73:18:45:43:f4:9d:f4:ec:b6:9c: 8b:fe:ba:0d:9a:8d:d0:31:32:bc:46:19:e4:5d:46: e3:bd:3d:03:4a:c9:85:89:4e:a4:fb:4b:79:b7:66: 5d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DC:1B:29:58:44:AF:6D:2B:85:F1:13:2A:F9:80:35:C8:7C:21:E4 X509v3 Authority Key Identifier: keyid:DA:41:07:AF:1D:9F:F7:0E:9E:D7:B9:A2:E8:E3:58:08:BA:92:1C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwdf1XoP5RWoizMknSBmk3CYKotu97fVt6gMRGdKj8de/1/DA4107AF1D9FF70E9ED7B9A2E8E35808BA921C85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:59:5b:35:ef:2d:e8:58:ca:47:95:cb:0b:bc:4c:e7:bf:01: f5:e5:20:32:32:18:40:63:fe:fb:5b:85:0a:97:3d:3d:50:d2: bb:9d:54:6a:47:33:f0:53:3e:1e:f4:7e:13:ff:86:39:71:5e: c0:f7:3b:29:06:81:53:27:12:5b:76:4f:c7:69:51:af:c3:76: b2:82:36:45:53:13:12:ec:c7:fb:c4:86:28:fa:bb:ff:6e:b2: af:15:e1:10:e5:aa:09:7f:87:fa:fc:4b:61:3a:3c:13:64:f8: 05:91:b7:f6:7e:da:22:ae:f2:3a:7f:06:2d:05:93:d2:eb:f7: 9e:1d:65:50:9a:4e:08:61:cf:57:20:5f:91:b0:6d:ed:80:fb: c1:1b:d1:17:c0:1b:60:ed:41:ec:88:eb:11:e0:90:72:cd:7d: c1:59:9a:d9:33:97:51:bf:85:94:1f:fd:0f:fe:b4:31:3c:20: bb:03:bb:f0:9f:e3:31:7c:95:b6:fc:13:a2:f1:29:c5:87:57: 84:ec:13:b9:79:69:51:90:2a:49:5c:0c:29:c0:24:de:19:8f: 53:88:9a:db:cb:f3:90:4d:53:24:bc:38:4d:88:a9:d5:f1:12: 48:17:9d:51:d2:23:0a:0c:fc:56:b2:df:2a:74:47:57:28:7e: 38:00:24:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVfmN4MgoNIehLqSWVQHFDrT1kccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0MTA3QUYxRDlGRjcwRTlFRDdCOUEyRThFMzU4MDhC QTkyMUM4NTAeFw0yNTA2MDUyMjAwMzBaFw0yNTA2MDcwMjAzMzBaMDMxMTAvBgNV BAMTKEFBREMxQjI5NTg0NEFGNkQyQjg1RjExMzJBRjk4MDM1Qzg3QzIxRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSKMtG70gGdAcBtkW+pMAhpABo mrHxDZ3aUhftmfR6j+IvDWLDY8eflKUx5qS5nZ7dAmWQ85vBv7/N8grDFKf94ICt TW3VEmO7CZg16QYc+fsLGFv05BOfTNbM7yL/yVNwPNMjoe0YuGbYDpddCf/OSeyl +r1lIuXS5CmioxJ4Mkny1AMW0Iax0GAc0E0p1peBWxbMeEzGdoYDgaGiiRCkk1Q2 WwQbTSFM78EcsO2dJIWJY8ui1iojVvw2wBfYV69dizT3bwNnVXOfj8FHvdbFuyfZ 5PYvcxhFQ/Sd9Oy2nIv+ug2ajdAxMrxGGeRdRuO9PQNKyYWJTqT7S3m3Zl2DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqtwbKVhEr20rhfETKvmANch8IeQwHwYDVR0j BBgwFoAU2kEHrx2f9w6e17mi6ONYCLqSHIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3dkZjFYb1A1UldvaXpNa25TQm1rM0NZS290dTk3ZlZ0NmdNUkdkS2o4 ZGUvMS9EQTQxMDdBRjFEOUZGNzBFOUVEN0I5QTJFOEUzNTgwOEJBOTIxQzg1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBNDEwN0FGMUQ5RkY3MEU5 RUQ3QjlBMkU4RTM1ODA4QkE5MjFDODUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3dkZjFYb1A1UldvaXpNa25TQm1rM0NZS290dTk3ZlZ0NmdNUkdkS2o4ZGUvMS9E QTQxMDdBRjFEOUZGNzBFOUVEN0I5QTJFOEUzNTgwOEJBOTIxQzg1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOFlbNe8t6FjKR5XLC7xM578B9eUgMjIYQGP++1uFCpc9PVDSu51Uakcz8FM+ HvR+E/+GOXFewPc7KQaBUycSW3ZPx2lRr8N2soI2RVMTEuzH+8SGKPq7/26yrxXh EOWqCX+H+vxLYTo8E2T4BZG39n7aIq7yOn8GLQWT0uv3nh1lUJpOCGHPVyBfkbBt 7YD7wRvRF8AbYO1B7IjrEeCQcs19wVma2TOXUb+FlB/9D/60MTwguwO78J/jMXyV tvwTovEpxYdXhOwTuXlpUZAqSVwMKcAk3hmPU4ia28vzkE1TJLw4TYip1fESSBed UdIjCgz8VrLfKnRHVyh+OAAkKA== -----END CERTIFICATE-----Generated at Fri Jun 6 19:41:01 2025 by rpki-client