$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft File: 2D59905C3FCA5BDA34D7101B088D80451D026C47.mft (raw, json) Hash identifier: yt6GEi6cLNluaC9JjJTHY3LGZljBAO7/obuGA+Q16V0= Subject key identifier: 59:FB:D6:6A:0E:13:25:CF:4E:25:12:A5:A9:FE:89:66:8E:FC:2F:D4 Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 Certificate issuer: /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Certificate serial: 40C54B6F9154BEC6363F6531135B7E9BF192DEE8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject info access: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft Manifest number: 01E8 Signing time: Fri 04 Apr 2025 20:09:21 +0000 Manifest this update: Fri 04 Apr 2025 20:04:21 +0000 Manifest next update: Sat 05 Apr 2025 22:37:21 +0000 Files and hashes: 1: 323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (hash: NawnnPEHbMCtTiXRZuqs51ycbe695zSEZpiIfj2SEO8=) 2: 2D59905C3FCA5BDA34D7101B088D80451D026C47.crl (hash: mExnm1NJ58XKeV+Tz67O5CI39SYKIcKH0//qf4wfW88=) 3: 3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (hash: zTSSMFG/lgVqOaFeXf9pCktuzCsj0jIoIIi1uaEYa0I=) 4: 3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (hash: GZELRNfuplahvPNzTKoCXKCGe7m/TvcDFJFlJBobK9k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 22:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c5:4b:6f:91:54:be:c6:36:3f:65:31:13:5b:7e:9b:f1:92:de:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Validity Not Before: Apr 4 20:04:21 2025 GMT Not After : Apr 5 22:37:21 2025 GMT Subject: CN=59FBD66A0E1325CF4E2512A5A9FE89668EFC2FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:49:4b:eb:e2:f4:89:58:91:fa:26:23:a3:cb: 4b:ca:69:88:c0:0f:82:82:00:75:c7:13:78:9b:4d: 72:c6:47:ad:a2:2f:c4:1f:78:7a:91:0c:9f:a6:5f: 21:28:dc:6c:2f:12:e3:d7:5b:b6:88:30:9a:65:b2: af:66:1c:56:5d:de:c4:d0:e1:c9:0e:c3:d3:f4:d6: 27:96:5d:db:33:41:ff:9c:e6:b5:86:81:98:a6:0e: be:9a:06:51:e8:ad:da:82:5a:75:aa:ff:47:48:3d: 00:74:7f:62:66:ec:da:69:c4:0b:e4:db:e4:29:37: 2a:16:aa:aa:08:33:8a:02:58:33:38:c0:6b:d8:77: f4:1c:eb:95:39:1a:28:39:d6:17:53:18:de:b1:d4: 8a:cb:ac:89:ec:12:26:44:f1:fe:f6:92:02:82:46: c6:32:1d:56:e4:25:cf:2c:77:fd:49:3e:8b:e2:71: 3c:f4:5d:d7:b6:a2:89:a4:a8:39:a3:e7:3a:2d:8d: 86:b3:d5:92:b6:6b:fb:2d:24:ad:e5:07:39:25:30: 57:09:b6:c8:7c:d8:9a:09:b6:bb:cf:2e:1d:41:da: ae:69:12:1d:c6:23:ee:0e:d9:c5:9d:73:3f:ac:83: 77:dc:ed:6a:a8:a9:c7:8f:01:96:0a:94:9f:4f:8c: 1f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FB:D6:6A:0E:13:25:CF:4E:25:12:A5:A9:FE:89:66:8E:FC:2F:D4 X509v3 Authority Key Identifier: keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f7:d4:30:c5:e5:80:3a:15:a0:4b:6e:e4:f0:08:41:a3:e1: 3f:82:5c:c7:26:0f:0e:d8:19:2a:40:c9:7b:23:62:f1:46:cd: 77:e3:05:90:b4:76:be:c3:b1:34:eb:97:bb:58:fe:a0:c3:c2: db:49:f8:76:a8:4e:eb:89:a1:db:96:fc:8f:86:b4:df:76:b0: cb:ae:88:20:78:94:70:bc:ff:1b:cc:5d:36:63:08:d4:25:b5: 5e:41:92:bf:e1:99:89:b1:75:4e:0a:06:5f:8a:77:79:6b:57: 85:e9:6c:09:9a:8b:47:0a:8c:a4:03:d3:3b:ea:59:5d:dc:97: 21:c4:02:42:28:f0:1a:31:d0:21:19:19:18:3c:cb:f8:5b:56: 93:00:8b:33:9d:6f:ea:4e:31:2e:5a:c1:a4:da:d2:63:32:63: cb:38:7e:26:88:41:a8:9a:fa:e4:28:1f:ec:90:57:64:a2:a5: cd:23:a4:9a:9c:62:4b:01:e7:53:9d:dd:10:73:bb:89:fa:05: 5a:a5:2f:20:a6:5b:e8:92:3b:a8:78:2f:2d:5b:8c:88:26:61: db:22:a6:a8:86:45:e1:47:6f:ce:86:e3:61:88:9c:80:01:93: 5c:29:2d:8a:5f:48:62:2e:e2:0d:ab:f1:9d:a6:fd:5c:cf:42: aa:ba:06:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQMVLb5FUvsY2P2UxE1t+m/GS3ugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1OTkwNUMzRkNBNUJEQTM0RDcxMDFCMDg4RDgwNDUx RDAyNkM0NzAeFw0yNTA0MDQyMDA0MjFaFw0yNTA0MDUyMjM3MjFaMDMxMTAvBgNV BAMTKDU5RkJENjZBMEUxMzI1Q0Y0RTI1MTJBNUE5RkU4OTY2OEVGQzJGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWSUvr4vSJWJH6JiOjy0vKaYjA D4KCAHXHE3ibTXLGR62iL8QfeHqRDJ+mXyEo3GwvEuPXW7aIMJplsq9mHFZd3sTQ 4ckOw9P01ieWXdszQf+c5rWGgZimDr6aBlHordqCWnWq/0dIPQB0f2Jm7NppxAvk 2+QpNyoWqqoIM4oCWDM4wGvYd/Qc65U5Gig51hdTGN6x1IrLrInsEiZE8f72kgKC RsYyHVbkJc8sd/1JPovicTz0Xde2oomkqDmj5zotjYaz1ZK2a/stJK3lBzklMFcJ tsh82JoJtrvPLh1B2q5pEh3GI+4O2cWdcz+sg3fc7WqoqcePAZYKlJ9PjB8LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWfvWag4TJc9OJRKlqf6JZo78L9QwHwYDVR0j BBgwFoAULVmQXD/KW9o01xAbCI2ARR0CbEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5 QUgvMS8yRDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTk5MDVDM0ZDQTVCREEz NEQ3MTAxQjA4OEQ4MDQ1MUQwMjZDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5QUgvMS8y RDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGffUMMXlgDoVoEtu5PAIQaPhP4JcxyYPDtgZKkDJeyNi8UbNd+MFkLR2vsOx NOuXu1j+oMPC20n4dqhO64mh25b8j4a033awy66IIHiUcLz/G8xdNmMI1CW1XkGS v+GZibF1TgoGX4p3eWtXhelsCZqLRwqMpAPTO+pZXdyXIcQCQijwGjHQIRkZGDzL +FtWkwCLM51v6k4xLlrBpNrSYzJjyzh+JohBqJr65Cgf7JBXZKKlzSOkmpxiSwHn U53dEHO7ifoFWqUvIKZb6JI7qHgvLVuMiCZh2yKmqIZF4UdvzobjYYicgAGTXCkt il9IYi7iDavxnab9XM9CqroGWw== -----END CERTIFICATE-----Generated at Sat Apr 5 03:48:33 2025 by rpki-client