$ rpki-client -vvf rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft File: A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft (raw, json) Hash identifier: zNKmfo4X1iNiXv0A5AP6cXryenGgAwYJTyH/JDQ4hXk= Subject key identifier: 03:61:67:31:4B:C4:E6:56:25:02:4D:46:C4:41:01:6B:D0:6B:83:4F Authority key identifier: A5:70:DB:0D:91:B6:56:7F:10:6B:41:4F:6E:BC:CA:BA:EB:55:8C:CE Certificate issuer: /CN=A570DB0D91B6567F106B414F6EBCCABAEB558CCE Certificate serial: 3DA8EDD0A0DA316D493FC863444B7C52F2B209D5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer Subject info access: rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft Manifest number: 2C Signing time: Sat 05 Apr 2025 03:21:40 +0000 Manifest this update: Sat 05 Apr 2025 03:16:40 +0000 Manifest next update: Sun 06 Apr 2025 04:55:40 +0000 Files and hashes: 1: 323830343a343538303a3a2f33322d313238203d3e20323636393331.roa (hash: ytvTBSqdA6ESqEjSleQU0wx8l2QZVZpAu4HEtplaryo=) 2: A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl (hash: 4RpFfDh+/VysBaNbpcCIsaPxDBkYhNPUSdR+VbpAtdY=) 3: 34352e352e33322e302f32322d3332203d3e20323636393331.roa (hash: i+hKSf7Edy4YPx3dwt4qknf7zzdmCdkBXB6ADwZOLm4=) 4: 34352e3232352e38342e302f32322d3332203d3e20323636393331.roa (hash: ifJ3bNpC/40v2/tbm9iE06g1HPM2eMkeU2sFLWjHZB8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Apr 2025 04:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a8:ed:d0:a0:da:31:6d:49:3f:c8:63:44:4b:7c:52:f2:b2:09:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A570DB0D91B6567F106B414F6EBCCABAEB558CCE Validity Not Before: Apr 5 03:16:40 2025 GMT Not After : Apr 6 04:55:40 2025 GMT Subject: CN=036167314BC4E65625024D46C441016BD06B834F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:95:1a:cd:d5:69:29:0b:f3:ef:0b:49:53:28: 9d:9b:1e:2e:94:27:76:13:86:a5:61:09:a0:4f:ee: 57:0c:a3:01:7a:97:44:a8:d3:53:b4:1d:b7:e1:ce: b0:9e:83:be:fb:a4:c3:fc:96:e2:11:c5:f4:3b:e1: e2:89:7a:38:e4:a0:58:64:6b:37:49:f6:d5:9c:16: df:4a:33:c0:b8:bd:3a:c8:77:91:2e:35:08:12:61: 5f:f2:a5:20:94:75:4e:0f:85:5d:33:fd:6e:76:50: 75:9a:20:ab:07:57:a8:2f:95:cf:e8:8e:a4:9c:a7: 45:13:0c:ef:b6:5e:d0:78:99:c4:ab:c3:d9:e1:e9: 46:82:47:ea:cb:34:43:89:37:9e:80:79:9f:32:3e: b5:c3:2a:e3:c5:f7:2f:8b:1e:bd:62:78:b9:62:d4: 86:6c:74:47:78:fe:0a:bf:99:df:06:7b:42:67:df: e1:15:a4:05:73:0b:7a:66:7c:ba:0e:ee:0a:e6:d6: 8c:4b:28:a8:b8:83:4f:51:5f:f5:cd:24:33:4b:85: 29:d2:54:76:c7:17:ca:d6:60:d7:5e:38:89:22:3e: a3:1a:7b:b9:88:a6:f1:a6:3c:d4:8f:13:b4:83:81: c2:f3:b6:e1:97:82:fa:af:38:ad:7c:55:10:07:78: 2a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:61:67:31:4B:C4:E6:56:25:02:4D:46:C4:41:01:6B:D0:6B:83:4F X509v3 Authority Key Identifier: keyid:A5:70:DB:0D:91:B6:56:7F:10:6B:41:4F:6E:BC:CA:BA:EB:55:8C:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAtLeGEjMG3iAQaPCXrS6TmuoDwDEk5MA13Gc9nusmK5/0/A570DB0D91B6567F106B414F6EBCCABAEB558CCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b3:ee:0c:f7:c5:3b:4b:25:81:29:b0:94:17:0d:83:27:83: f7:4f:7a:13:54:76:f4:77:94:f4:a3:35:3f:7e:18:a7:44:2b: 4a:65:ae:9d:1d:b4:28:d4:7a:8b:a2:bf:d7:9b:6f:5a:b9:ff: 71:77:30:95:e9:1e:c7:e4:73:e2:5e:68:7e:c1:23:f2:ee:47: 00:d7:c9:74:a8:05:eb:25:33:84:21:cc:0e:5f:f0:3d:4d:a9: ce:2f:8d:19:21:fb:85:b7:f9:40:71:94:54:d9:48:e1:59:0b: b1:5b:41:f2:26:ad:9d:ce:46:8d:f1:e9:0d:45:c8:5a:ac:0e: a6:fa:b1:06:ec:f2:2c:21:2d:ed:4f:7e:12:ac:7b:e3:c2:62: 65:f1:16:6b:74:bd:35:86:56:2b:d1:2f:16:a4:95:f3:85:dc: bc:8d:73:56:aa:60:80:9e:06:66:67:88:f9:64:6e:8f:45:4d: 51:03:c6:27:87:88:4a:79:6d:24:a6:1b:a7:67:db:08:d8:64: fa:06:f2:6c:58:19:42:d5:3b:1a:ca:db:7d:dd:16:cc:f1:ef: d0:c3:63:51:7f:ba:91:f4:a0:20:3b:3f:98:16:57:b6:04:af: be:d2:1f:d8:06:1d:47:12:10:f8:70:dd:c1:4a:f8:87:ed:dc: 90:83:04:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPajt0KDaMW1JP8hjREt8UvKyCdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3MERCMEQ5MUI2NTY3RjEwNkI0MTRGNkVCQ0NBQkFF QjU1OENDRTAeFw0yNTA0MDUwMzE2NDBaFw0yNTA0MDYwNDU1NDBaMDMxMTAvBgNV BAMTKDAzNjE2NzMxNEJDNEU2NTYyNTAyNEQ0NkM0NDEwMTZCRDA2QjgzNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRlRrN1WkpC/PvC0lTKJ2bHi6U J3YThqVhCaBP7lcMowF6l0So01O0HbfhzrCeg777pMP8luIRxfQ74eKJejjkoFhk azdJ9tWcFt9KM8C4vTrId5EuNQgSYV/ypSCUdU4PhV0z/W52UHWaIKsHV6gvlc/o jqScp0UTDO+2XtB4mcSrw9nh6UaCR+rLNEOJN56AeZ8yPrXDKuPF9y+LHr1ieLli 1IZsdEd4/gq/md8Ge0Jn3+EVpAVzC3pmfLoO7grm1oxLKKi4g09RX/XNJDNLhSnS VHbHF8rWYNdeOIkiPqMae7mIpvGmPNSPE7SDgcLztuGXgvqvOK18VRAHeCpvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUA2FnMUvE5lYlAk1GxEEBa9Brg08wHwYDVR0j BBgwFoAUpXDbDZG2Vn8Qa0FPbrzKuutVjM4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREF0TGVHRWpNRzNpQVFhUENYclM2VG11b0R3REVrNU1BMTNHYzludXNt SzUvMC9BNTcwREIwRDkxQjY1NjdGMTA2QjQxNEY2RUJDQ0FCQUVCNTU4Q0NFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NzBEQjBEOTFCNjU2N0Yx MDZCNDE0RjZFQkNDQUJBRUI1NThDQ0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REF0TGVHRWpNRzNpQVFhUENYclM2VG11b0R3REVrNU1BMTNHYzludXNtSzUvMC9B NTcwREIwRDkxQjY1NjdGMTA2QjQxNEY2RUJDQ0FCQUVCNTU4Q0NFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhLPuDPfFO0slgSmwlBcNgyeD9096E1R29HeU9KM1P34Yp0QrSmWunR20KNR6 i6K/15tvWrn/cXcwlekex+Rz4l5ofsEj8u5HANfJdKgF6yUzhCHMDl/wPU2pzi+N GSH7hbf5QHGUVNlI4VkLsVtB8iatnc5GjfHpDUXIWqwOpvqxBuzyLCEt7U9+Eqx7 48JiZfEWa3S9NYZWK9EvFqSV84XcvI1zVqpggJ4GZmeI+WRuj0VNUQPGJ4eISnlt JKYbp2fbCNhk+gbybFgZQtU7Gsrbfd0WzPHv0MNjUX+6kfSgIDs/mBZXtgSvvtIf 2AYdRxIQ+HDdwUr4h+3ckIME2A== -----END CERTIFICATE-----Generated at Sat Apr 5 10:30:22 2025 by rpki-client