$ rpki-client -vvf rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft File: EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft (raw, json) Hash identifier: SYNrJpoA/oBkpCDp/+59JclDLWgZPqjbhOnDubTKeZ0= Subject key identifier: DD:A3:23:3B:E9:64:53:39:C2:EB:98:00:59:3A:94:E6:49:83:A3:FF Authority key identifier: EF:D9:D5:35:E1:79:1A:7D:0C:76:38:F6:D5:C7:BC:66:00:35:31:F6 Certificate issuer: /CN=EFD9D535E1791A7D0C7638F6D5C7BC66003531F6 Certificate serial: 30B5108D91A8D462B031AC76C5556D83D27CBED9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.cer Subject info access: rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft Manifest number: 4A Signing time: Sun 06 Apr 2025 06:09:29 +0000 Manifest this update: Sun 06 Apr 2025 06:04:29 +0000 Manifest next update: Mon 07 Apr 2025 06:56:29 +0000 Files and hashes: 1: 323830343a363362303a3a2f33322d313238203d3e20323639333737.roa (hash: /7XnMicGdZhyziJLgRBhQq7LzcxL6fL5TVn/spvS4Mk=) 2: 34352e3138352e3133362e302f32322d3332203d3e20323639333737.roa (hash: VYOKYWTW4KYHyjWxZPNuftL4qjJ4ZSOyhDAXEVVS9P8=) 3: EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.crl (hash: H1oOMnQ1TIeBbOYviYyFCrmI+GTAgryQZJnknt/p+74=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.crl rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 07 Apr 2025 06:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b5:10:8d:91:a8:d4:62:b0:31:ac:76:c5:55:6d:83:d2:7c:be:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFD9D535E1791A7D0C7638F6D5C7BC66003531F6 Validity Not Before: Apr 6 06:04:29 2025 GMT Not After : Apr 7 06:56:29 2025 GMT Subject: CN=DDA3233BE9645339C2EB9800593A94E64983A3FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:3d:1a:fb:c0:b7:4c:3a:77:19:57:81:bb: c4:23:b0:94:6b:3d:67:12:c3:29:ef:5d:d3:bb:52: 8d:5d:5b:6a:03:1e:70:61:86:0d:bf:78:a0:e1:ac: 6b:49:54:bb:1f:71:01:f3:9e:f2:a7:46:24:39:72: e5:b0:b4:ed:86:78:74:76:36:24:f7:8d:c1:80:ac: 0a:8a:c7:8c:6b:82:b7:e8:4b:8f:f3:33:45:bd:e5: e3:54:66:0c:15:2e:1b:15:05:2a:37:3f:1a:0a:b0: d4:6c:36:7c:54:81:7a:66:bb:92:0a:0e:04:b5:a2: 9c:0c:98:c2:cc:63:7a:02:c9:a3:26:00:ae:78:47: a5:fe:80:a6:8c:d1:4a:ac:54:57:d3:5b:1b:d8:4a: 32:ba:b3:b2:e9:e8:ea:51:e0:d3:08:8d:7c:96:15: e2:29:28:79:e2:ca:66:b1:26:3a:9a:97:a5:15:03: 53:47:92:ae:76:e3:d8:ac:b9:b7:74:77:46:53:40: f2:79:f1:24:6f:6f:d4:11:59:fb:45:c3:3f:53:20: 2d:30:a6:7d:cb:f1:6a:5b:2c:32:fc:2d:72:45:9b: b9:f1:c8:aa:fa:6c:99:4f:ea:56:1b:c2:9d:15:9d: 98:3c:92:5e:0c:cf:66:71:76:6b:53:3b:29:0a:78: de:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A3:23:3B:E9:64:53:39:C2:EB:98:00:59:3A:94:E6:49:83:A3:FF X509v3 Authority Key Identifier: keyid:EF:D9:D5:35:E1:79:1A:7D:0C:76:38:F6:D5:C7:BC:66:00:35:31:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:dd:e8:dc:3d:6b:ab:3e:4d:6c:16:d5:74:1a:d6:af:9b:5c: f4:e6:13:26:35:43:4e:86:f5:2e:df:7f:0c:72:66:62:a3:f2: 1d:ff:df:b7:ec:07:70:e2:c8:15:76:48:e1:1a:80:5e:56:f1: dd:86:a8:95:76:26:22:35:b9:a9:f4:1e:23:ae:06:bc:f4:74: d6:84:5c:eb:27:50:67:55:7c:18:d7:89:17:28:65:38:94:71: 2e:dc:97:e5:bc:e1:0b:62:51:05:21:57:cd:de:05:26:2d:ec: c4:54:50:6c:07:55:29:bb:f9:60:84:ad:e2:ce:e4:20:e1:8a: a6:32:67:20:30:4d:80:42:ab:28:f1:64:8f:b0:2b:90:e8:18: bc:b5:11:c0:d6:50:f5:5e:5c:1a:a6:0e:bb:32:73:d2:0d:e2: 28:ab:a1:7c:13:d0:56:36:a3:34:f1:bb:08:81:36:d5:98:0c: 1c:79:a0:17:9e:c7:bc:b6:44:17:0f:a6:19:45:70:06:96:0f: 1c:74:0f:19:8e:1b:40:44:da:49:bc:fb:15:51:a0:db:35:72: 07:73:20:4c:e3:9e:51:82:f0:d2:df:75:1b:03:f2:29:ff:96: 22:2d:94:24:e4:c6:f2:89:2e:34:6b:0d:c7:19:ea:56:4d:40: f8:5a:86:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMLUQjZGo1GKwMax2xVVtg9J8vtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZEOUQ1MzVFMTc5MUE3RDBDNzYzOEY2RDVDN0JDNjYw MDM1MzFGNjAeFw0yNTA0MDYwNjA0MjlaFw0yNTA0MDcwNjU2MjlaMDMxMTAvBgNV BAMTKEREQTMyMzNCRTk2NDUzMzlDMkVCOTgwMDU5M0E5NEU2NDk4M0EzRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFET0a+8C3TDp3GVeBu8QjsJRr PWcSwynvXdO7Uo1dW2oDHnBhhg2/eKDhrGtJVLsfcQHznvKnRiQ5cuWwtO2GeHR2 NiT3jcGArAqKx4xrgrfoS4/zM0W95eNUZgwVLhsVBSo3PxoKsNRsNnxUgXpmu5IK DgS1opwMmMLMY3oCyaMmAK54R6X+gKaM0UqsVFfTWxvYSjK6s7Lp6OpR4NMIjXyW FeIpKHniymaxJjqal6UVA1NHkq5249isubd0d0ZTQPJ58SRvb9QRWftFwz9TIC0w pn3L8WpbLDL8LXJFm7nxyKr6bJlP6lYbwp0VnZg8kl4Mz2ZxdmtTOykKeN7NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3aMjO+lkUznC65gAWTqU5kmDo/8wHwYDVR0j BBgwFoAU79nVNeF5Gn0Mdjj21ce8ZgA1MfYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFpKdDFCYUVrUUh0TEVNY3FhVW9BclpEVGt5bVMyYjhGWjRoSGJZUmhS TEcvMC9FRkQ5RDUzNUUxNzkxQTdEMEM3NjM4RjZENUM3QkM2NjAwMzUzMUY2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGRDlENTM1RTE3OTFBN0Qw Qzc2MzhGNkQ1QzdCQzY2MDAzNTMxRjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFpKdDFCYUVrUUh0TEVNY3FhVW9BclpEVGt5bVMyYjhGWjRoSGJZUmhSTEcvMC9F RkQ5RDUzNUUxNzkxQTdEMEM3NjM4RjZENUM3QkM2NjAwMzUzMUY2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT93o3D1rqz5NbBbVdBrWr5tc9OYTJjVDTob1Lt9/DHJmYqPyHf/ft+wHcOLI FXZI4RqAXlbx3YaolXYmIjW5qfQeI64GvPR01oRc6ydQZ1V8GNeJFyhlOJRxLtyX 5bzhC2JRBSFXzd4FJi3sxFRQbAdVKbv5YISt4s7kIOGKpjJnIDBNgEKrKPFkj7Ar kOgYvLURwNZQ9V5cGqYOuzJz0g3iKKuhfBPQVjajNPG7CIE21ZgMHHmgF57HvLZE Fw+mGUVwBpYPHHQPGY4bQETaSbz7FVGg2zVyB3MgTOOeUYLw0t91GwPyKf+WIi2U JOTG8okuNGsNxxnqVk1A+FqG+Q== -----END CERTIFICATE-----Generated at Sun Apr 6 12:52:43 2025 by rpki-client