$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft File: CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft (raw, json) Hash identifier: 0+iL3VFIshXyCRzo1O4mh2JBUbvgftSF30Epd76Axyo= Subject key identifier: 45:68:18:D4:D4:68:9A:18:25:3A:89:DE:5E:AA:DB:14:D7:55:4F:D9 Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2 Certificate issuer: /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2 Certificate serial: 121B8743216BA14FC82FCED0B8BDD95788506071 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer Subject info access: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft Manifest number: 01EA Signing time: Fri 04 Apr 2025 02:23:40 +0000 Manifest this update: Fri 04 Apr 2025 02:18:40 +0000 Manifest next update: Sat 05 Apr 2025 04:55:40 +0000 Files and hashes: 1: CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl (hash: kNWznroxdc+F6/L2Hi5GQlJ8E8s/PJfO8G3iH0Mi1n8=) 2: 3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa (hash: BfZMW7bDrUq4NsSpiv7ajjwX3JOcPJxVrUruXpORHTY=) 3: 3137302e3233332e3131322e302f32322d3232203d3e20323635303738.roa (hash: +dM9P1qQIorF8G+5/cwwQ/gmsTd5imaFLqsmKtI0wn8=) 4: 3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa (hash: p8W8veq7Lvg13s22TEkKvPEGhG5J155S2orjeEClMbI=) 5: 3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa (hash: ssuLAytq/OHz9ywB7G0F/3NjIxPtlXCrc4g55U9IvkI=) 6: 323830343a333237303a3a2f33322d3430203d3e20323635303738.roa (hash: mWceP2rzR05Egi1VVd5zyaviINwwnfTfMxgvkPFbjos=) 7: 3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa (hash: GaIG9OWUtk4xo/fOP/Bwcg92Lk0HLbqb+2guy4zZ8fo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 04:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:1b:87:43:21:6b:a1:4f:c8:2f:ce:d0:b8:bd:d9:57:88:50:60:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2 Validity Not Before: Apr 4 02:18:40 2025 GMT Not After : Apr 5 04:55:40 2025 GMT Subject: CN=456818D4D4689A18253A89DE5EAADB14D7554FD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:89:3e:60:ea:19:5a:bf:8f:52:e4:ab:11:56: 4d:3e:ef:6b:fb:19:f4:82:4e:43:5a:37:2e:4f:77: f4:19:5a:51:d2:80:96:c7:69:0a:f1:86:28:51:ad: aa:a1:fa:e5:43:48:b3:83:ad:10:60:bc:db:0c:60: 47:0b:4a:45:0e:39:57:84:f6:ea:67:16:11:3f:aa: 54:70:1f:94:b5:77:60:c0:d8:92:a4:85:ee:7c:5b: b5:98:6a:18:ee:89:64:c6:7d:64:88:39:39:02:d9: a6:ad:b4:ed:50:81:bb:87:a7:4c:02:89:db:c6:4b: 20:2c:32:f8:25:a0:10:d8:be:48:95:75:ed:8e:16: 6c:93:19:8d:43:37:53:54:73:18:1f:96:9b:8a:e8: f2:34:8c:79:c4:c7:d9:e6:be:7c:dc:0c:43:ab:24: dc:cd:d7:e4:1b:8d:ff:91:30:50:ee:00:fc:53:06: 1b:40:22:fd:e7:4a:f5:4a:0c:9d:17:8b:03:8e:aa: cd:85:ba:ae:00:ea:04:57:a2:9d:17:ca:96:47:97: 61:60:a7:45:a3:2f:e9:8c:e1:4b:84:1b:cc:db:ac: ca:38:66:a6:e3:57:a4:46:fd:87:5b:04:a5:84:e3: 64:cd:48:78:cd:ee:77:32:da:28:b2:42:15:b1:23: 5f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:68:18:D4:D4:68:9A:18:25:3A:89:DE:5E:AA:DB:14:D7:55:4F:D9 X509v3 Authority Key Identifier: keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f0:f1:10:a3:76:c6:78:68:4f:1c:df:cb:14:ba:fd:bb:5f: 82:d5:64:3b:6e:29:55:4c:69:90:86:d8:d5:89:d9:0b:25:27: 5e:c8:51:26:74:e5:b5:ba:ea:e3:ec:6c:2e:03:57:39:d3:45: d5:37:ef:ca:0b:df:f5:0e:b9:9d:a0:80:c7:4b:38:3f:30:13: 16:65:0e:24:1b:7f:16:a1:81:e8:b3:8d:a2:86:31:2c:7f:43: 79:04:04:f3:ed:fe:25:75:dc:22:f7:66:a4:d3:c8:8f:47:b0: 85:8e:67:bd:90:06:c1:4d:46:c5:2d:01:af:eb:79:d7:d1:f4: 95:7b:e8:ad:b3:0f:09:46:0d:9b:a8:0f:55:55:ab:e2:b9:d9: fd:c4:76:cf:6e:10:15:e9:d6:cc:2c:00:04:36:1f:a6:71:41: 2f:13:b3:e3:e2:25:d6:9c:37:be:19:54:c1:04:38:70:73:1d: 1e:43:af:bd:e3:1e:99:63:0c:d7:06:60:cd:1a:cb:55:0b:7f: 13:be:37:6d:a9:46:e9:4b:71:56:ee:60:e5:2f:87:c7:f8:bb: 34:2c:8c:a7:b1:17:6b:b4:b5:bd:1d:df:20:56:1f:f8:88:42: 19:c0:a1:4e:83:10:0e:3d:0d:9a:1b:ae:f5:9f:68:c6:52:94: 50:f8:89:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEhuHQyFroU/IL87QuL3ZV4hQYHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U5RTdENEZCNjY0RTNDRjJGQzkwRTk2MDRGQUUxOThB MUEzMDJCMjAeFw0yNTA0MDQwMjE4NDBaFw0yNTA0MDUwNDU1NDBaMDMxMTAvBgNV BAMTKDQ1NjgxOEQ0RDQ2ODlBMTgyNTNBODlERTVFQUFEQjE0RDc1NTRGRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfiT5g6hlav49S5KsRVk0+72v7 GfSCTkNaNy5Pd/QZWlHSgJbHaQrxhihRraqh+uVDSLODrRBgvNsMYEcLSkUOOVeE 9upnFhE/qlRwH5S1d2DA2JKkhe58W7WYahjuiWTGfWSIOTkC2aattO1QgbuHp0wC idvGSyAsMvgloBDYvkiVde2OFmyTGY1DN1NUcxgflpuK6PI0jHnEx9nmvnzcDEOr JNzN1+Qbjf+RMFDuAPxTBhtAIv3nSvVKDJ0XiwOOqs2Fuq4A6gRXop0XypZHl2Fg p0WjL+mM4UuEG8zbrMo4ZqbjV6RG/YdbBKWE42TNSHjN7ncy2iiyQhWxI19zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURWgY1NRomhglOoneXqrbFNdVT9kwHwYDVR0j BBgwFoAUzp59T7Zk488vyQ6WBPrhmKGjArIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDZiNXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdz VHYvMS9DRTlFN0Q0RkI2NjRFM0NGMkZDOTBFOTYwNEZBRTE5OEExQTMwMkIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFOUU3RDRGQjY2NEUzQ0Yy RkM5MEU5NjA0RkFFMTk4QTFBMzAyQjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDZiNXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdzVHYvMS9D RTlFN0Q0RkI2NjRFM0NGMkZDOTBFOTYwNEZBRTE5OEExQTMwMkIyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX/DxEKN2xnhoTxzfyxS6/btfgtVkO24pVUxpkIbY1YnZCyUnXshRJnTltbrq 4+xsLgNXOdNF1Tfvygvf9Q65naCAx0s4PzATFmUOJBt/FqGB6LONooYxLH9DeQQE 8+3+JXXcIvdmpNPIj0ewhY5nvZAGwU1GxS0Br+t519H0lXvorbMPCUYNm6gPVVWr 4rnZ/cR2z24QFenWzCwABDYfpnFBLxOz4+Il1pw3vhlUwQQ4cHMdHkOvveMemWMM 1wZgzRrLVQt/E743balG6UtxVu5g5S+Hx/i7NCyMp7EXa7S1vR3fIFYf+IhCGcCh ToMQDj0Nmhuu9Z9oxlKUUPiJIg== -----END CERTIFICATE-----Generated at Fri Apr 4 17:42:25 2025 by rpki-client