$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft File: 8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft (raw, json) Hash identifier: G6vSQl/ODNxX5zGTwLtkO3DBlpAhi98YsKnXWaT/rwM= Subject key identifier: 60:A3:63:5E:5E:A1:D8:8B:95:00:06:DC:54:B7:7B:84:D6:83:2B:A2 Authority key identifier: 8D:AD:F2:62:5A:DA:58:A1:BB:ED:95:A1:05:F3:50:C7:99:62:F7:DF Certificate issuer: /CN=8DADF2625ADA58A1BBED95A105F350C79962F7DF Certificate serial: 3C8568BECB907F3E639E66140F8DB87E293D13EF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DADF2625ADA58A1BBED95A105F350C79962F7DF.cer Subject info access: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft Manifest number: 20 Signing time: Sun 06 Apr 2025 15:26:00 +0000 Manifest this update: Sun 06 Apr 2025 15:21:00 +0000 Manifest next update: Mon 07 Apr 2025 19:24:00 +0000 Files and hashes: 1: 323830343a313934383a3a2f33322d313238203d3e203631373834.roa (hash: c4qHtAaRVCfHGye+AmZjvOdvXcBA17zzyqsMVQdybL8=) 2: 8DADF2625ADA58A1BBED95A105F350C79962F7DF.crl (hash: h6XU/1oICMndpquClopziPwuyv4LfF/89RRoLFTmUEI=) 3: 3230312e35352e3230302e302f32322d3332203d3e203631373834.roa (hash: rT6UND/SmBGOjHVUN3QxSDRoFdYbach6YTC7z92UaOw=) 4: 3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa (hash: jvOaxLjiqvOdI8K+lUyUL7YEETsfWoSFl0/uLR99Oe8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.crl rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DADF2625ADA58A1BBED95A105F350C79962F7DF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 19:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:85:68:be:cb:90:7f:3e:63:9e:66:14:0f:8d:b8:7e:29:3d:13:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DADF2625ADA58A1BBED95A105F350C79962F7DF Validity Not Before: Apr 6 15:21:00 2025 GMT Not After : Apr 7 19:24:00 2025 GMT Subject: CN=60A3635E5EA1D88B950006DC54B77B84D6832BA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:23:37:6f:16:e1:49:e2:47:97:2f:91:b7: 48:e4:cc:08:18:5a:43:68:7c:b1:61:de:6d:01:99: 20:be:4c:cd:7a:90:b1:3c:ef:a7:2a:59:ba:6e:2c: 46:ad:ea:0d:06:2e:47:5f:f6:4c:29:45:3a:80:f2: 51:74:f4:74:9d:ea:7b:8b:d6:21:bf:9a:f7:0a:08: 1b:b9:79:90:d4:a6:07:24:d9:ea:29:08:d4:97:96: 73:5d:5a:9d:ca:1e:43:4d:c7:29:a4:98:62:71:b3: 98:98:c4:bb:7a:1d:14:ee:f3:fd:2a:15:37:38:40: 13:34:9f:98:f1:02:32:a7:5f:44:0b:0d:dc:d8:b5: 0a:71:32:7d:95:cb:3c:c6:2b:ed:0d:c8:56:3e:57: 39:d2:9f:ea:d8:36:47:0c:a3:b4:48:75:3e:27:4a: 6d:d3:81:f1:25:21:76:f0:b3:c9:f2:92:4f:a9:c0: 13:1a:b2:4f:8c:54:5b:7d:ab:85:d0:81:bb:e8:ea: ae:d4:61:d9:9e:6b:b2:8a:79:a8:12:b6:c3:9a:3c: 0e:8b:71:9b:65:81:dd:78:d1:d7:23:30:9c:36:94: b3:bb:cd:fd:69:73:72:e0:c8:4b:dd:a1:de:16:1a: 4d:5c:c5:83:b9:00:e4:e1:3e:58:79:c9:bc:6c:db: 46:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A3:63:5E:5E:A1:D8:8B:95:00:06:DC:54:B7:7B:84:D6:83:2B:A2 X509v3 Authority Key Identifier: keyid:8D:AD:F2:62:5A:DA:58:A1:BB:ED:95:A1:05:F3:50:C7:99:62:F7:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DADF2625ADA58A1BBED95A105F350C79962F7DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:a2:28:b9:79:58:cd:74:09:63:9f:8e:9e:96:2b:e2:90:11: dd:c6:2b:dd:c3:48:80:cf:28:5f:04:6e:2a:6c:a9:1b:47:0e: d7:19:e9:d8:d1:80:9f:07:54:ec:8f:f5:ea:05:a4:6f:82:37: 46:61:4d:f0:fe:7d:57:d2:c5:f2:e6:89:2a:b5:05:6e:f8:67: bf:a7:44:a0:90:80:8f:80:48:8f:15:ed:0c:9a:b1:06:02:89: 02:35:f5:0f:28:a5:14:3d:de:08:fd:0d:d5:3c:99:82:7e:66: 87:4c:16:75:80:af:39:9d:01:0a:27:0c:a4:4f:09:1d:93:29: 07:6a:82:d6:17:87:57:89:a2:22:c6:36:41:37:83:0e:7f:3c: fb:66:31:d5:10:0b:bf:a6:71:30:de:bb:15:a9:b5:e5:51:f1: cf:82:ae:b6:40:41:6a:bb:b4:8e:16:fb:ef:05:18:87:cb:e3: 79:be:e5:c0:e6:37:26:98:22:1a:a0:ca:e1:87:2a:42:5d:64: f6:38:47:9a:54:6f:40:7f:0a:7c:7c:64:3f:98:ff:7b:0a:f8: 33:ad:3e:6d:7b:4e:ac:e6:36:31:65:7a:f4:89:a9:27:03:52: 2d:63:da:9d:49:05:ab:db:c6:ae:41:87:80:76:2b:a7:2f:2c: 32:15:bf:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPIVovsuQfz5jnmYUD424fik9E+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBREYyNjI1QURBNThBMUJCRUQ5NUExMDVGMzUwQzc5 OTYyRjdERjAeFw0yNTA0MDYxNTIxMDBaFw0yNTA0MDcxOTI0MDBaMDMxMTAvBgNV BAMTKDYwQTM2MzVFNUVBMUQ4OEI5NTAwMDZEQzU0Qjc3Qjg0RDY4MzJCQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqQSM3bxbhSeJHly+Rt0jkzAgY WkNofLFh3m0BmSC+TM16kLE876cqWbpuLEat6g0GLkdf9kwpRTqA8lF09HSd6nuL 1iG/mvcKCBu5eZDUpgck2eopCNSXlnNdWp3KHkNNxymkmGJxs5iYxLt6HRTu8/0q FTc4QBM0n5jxAjKnX0QLDdzYtQpxMn2VyzzGK+0NyFY+VznSn+rYNkcMo7RIdT4n Sm3TgfElIXbws8nykk+pwBMask+MVFt9q4XQgbvo6q7UYdmea7KKeagStsOaPA6L cZtlgd140dcjMJw2lLO7zf1pc3LgyEvdod4WGk1cxYO5AOThPlh5ybxs20ZnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYKNjXl6h2IuVAAbcVLd7hNaDK6IwHwYDVR0j BBgwFoAUja3yYlraWKG77ZWhBfNQx5li998wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDRFV1RYWEdVaW9CcGFTMzhiV1VHUDMxdzFwR2hFVkxxRGRSYlViWjJU VVIvMC84REFERjI2MjVBREE1OEExQkJFRDk1QTEwNUYzNTBDNzk5NjJGN0RGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEQURGMjYyNUFEQTU4QTFC QkVEOTVBMTA1RjM1MEM3OTk2MkY3REYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDRFV1RYWEdVaW9CcGFTMzhiV1VHUDMxdzFwR2hFVkxxRGRSYlViWjJUVVIvMC84 REFERjI2MjVBREE1OEExQkJFRDk1QTEwNUYzNTBDNzk5NjJGN0RGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwKIouXlYzXQJY5+OnpYr4pAR3cYr3cNIgM8oXwRuKmypG0cO1xnp2NGAnwdU 7I/16gWkb4I3RmFN8P59V9LF8uaJKrUFbvhnv6dEoJCAj4BIjxXtDJqxBgKJAjX1 DyilFD3eCP0N1TyZgn5mh0wWdYCvOZ0BCicMpE8JHZMpB2qC1heHV4miIsY2QTeD Dn88+2Yx1RALv6ZxMN67Fam15VHxz4KutkBBaru0jhb77wUYh8vjeb7lwOY3Jpgi GqDK4YcqQl1k9jhHmlRvQH8KfHxkP5j/ewr4M60+bXtOrOY2MWV69ImpJwNSLWPa nUkFq9vGrkGHgHYrpy8sMhW/xQ== -----END CERTIFICATE-----Generated at Mon Apr 7 08:15:42 2025 by rpki-client