$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft File: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft (raw, json) Hash identifier: WoCcEe/MqS7JbebB9ezYBY27UfvAWc8ycWdMj84yzj4= Subject key identifier: B3:5B:6E:AF:B4:DD:91:F6:45:FC:F7:97:B9:5D:D0:BA:C0:EB:6A:2C Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA Certificate issuer: /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Certificate serial: 0833A4F421BF500BBD94CC9519A3EF9922BA7312 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft Manifest number: 01EB Signing time: Thu 17 Apr 2025 12:58:24 +0000 Manifest this update: Thu 17 Apr 2025 12:53:23 +0000 Manifest next update: Fri 18 Apr 2025 16:21:23 +0000 Files and hashes: 1: 323830343a333164343a3a2f33322d3438203d3e203533313339.roa (hash: Tny32eTDORgq/MtVMRE6pvmeZrpwE0nT6BNCMfyIuNM=) 2: 3138372e3130392e38302e302f32302d3234203d3e203533313339.roa (hash: IQvjHctOgbHfUkTO0U34ErrEutSrCbjo/UK2hA9NLGA=) 3: 3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (hash: sPenw571n896sllNaEQg92EoBX7mLS0ivDvfDaPaky8=) 4: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl (hash: YQd+XTePB42aRNG8qMYwd3lpgIV4pLmdfebUXF7NN9w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 16:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:33:a4:f4:21:bf:50:0b:bd:94:cc:95:19:a3:ef:99:22:ba:73:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Validity Not Before: Apr 17 12:53:23 2025 GMT Not After : Apr 18 16:21:23 2025 GMT Subject: CN=B35B6EAFB4DD91F645FCF797B95DD0BAC0EB6A2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9c:51:5f:7d:5b:b3:d5:69:8b:c3:09:d5:0b: a7:54:2e:50:53:3e:15:0f:13:11:b7:00:f3:43:5f: bb:4e:c0:9f:07:55:26:a9:6a:ea:e8:d3:29:1a:c8: a8:90:6b:e5:9d:83:2f:25:7c:5a:e2:2d:21:c2:07: bc:70:b6:d7:92:ad:f9:ec:e2:f9:dc:8e:f5:27:62: 76:02:9d:39:de:dd:c1:49:94:9a:a3:0e:9e:c1:3e: e8:28:6b:17:02:a7:26:c8:71:51:3e:3c:9e:63:09: 79:cd:3b:00:45:40:ef:38:6d:b8:7c:f8:25:29:6d: ed:66:f9:22:d9:34:84:9f:a5:00:43:bb:49:c8:8a: b9:38:2d:3e:7d:cd:46:04:79:dd:01:74:45:77:48: b9:b8:77:05:1c:11:bd:fd:8c:e5:20:e3:5e:1b:24: 8e:b0:5d:95:b3:c2:c9:14:18:be:ce:ff:d8:f4:74: 23:68:71:48:e6:a3:aa:01:0d:80:58:05:6e:6a:04: c8:0a:70:b1:87:22:4b:69:97:1c:69:87:25:e9:00: a9:4d:79:34:8d:92:f1:ec:69:bf:06:ba:69:ff:e3: d0:34:e3:64:31:b2:47:1c:ac:c0:fa:67:95:06:87: a7:52:cc:99:b8:2c:44:ee:64:63:5f:cd:ac:5b:0a: b7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5B:6E:AF:B4:DD:91:F6:45:FC:F7:97:B9:5D:D0:BA:C0:EB:6A:2C X509v3 Authority Key Identifier: keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:85:11:d3:5d:c6:b4:05:2e:60:44:46:7f:50:9c:07:ca:6b: 37:67:52:47:60:86:eb:ce:c2:55:b7:65:fb:17:3d:08:68:e9: f8:7e:d4:ab:64:84:97:da:1e:30:46:5b:7f:a5:e5:92:c9:19: 76:26:0f:a6:25:1e:34:bf:28:4b:a8:9f:33:f0:8c:d2:db:cb: bd:5a:7c:b8:fc:b8:9a:f8:6e:cf:7b:44:d2:21:6b:06:e6:cf: c0:5d:34:16:c6:d1:89:fa:03:f0:7b:91:be:12:9a:fe:a9:7e: 86:69:4b:13:e7:08:5c:14:3a:e4:11:1e:8b:34:59:fe:24:f0: c0:58:af:ca:f1:3c:54:62:5c:6d:f6:b4:22:34:99:43:cd:cf: 23:24:28:0b:c9:31:9a:58:26:34:19:0e:31:8a:01:25:bc:ef: bf:ab:04:6a:74:f9:16:b0:15:a5:6c:2b:e4:52:58:6c:69:60: 05:aa:98:64:10:a2:be:09:7f:31:08:be:04:17:41:5c:19:dd: 55:62:e6:a6:d0:f4:45:c3:e9:cf:ee:a2:ad:ec:01:61:f8:4f: ff:4f:b6:7e:b4:4e:32:3e:20:79:ba:08:2c:d1:8e:59:d7:ad: 01:0b:76:2c:d6:04:fa:4a:d3:67:a8:45:15:12:40:67:a2:ba: 07:a2:04:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCDOk9CG/UAu9lMyVGaPvmSK6cxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNERGRjE5ODIyQzVCMjdDN0JDQzE2QkZEOEJFMkEz ODRGODlBQTAeFw0yNTA0MTcxMjUzMjNaFw0yNTA0MTgxNjIxMjNaMDMxMTAvBgNV BAMTKEIzNUI2RUFGQjRERDkxRjY0NUZDRjc5N0I5NUREMEJBQzBFQjZBMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7nFFffVuz1WmLwwnVC6dULlBT PhUPExG3APNDX7tOwJ8HVSapauro0ykayKiQa+Wdgy8lfFriLSHCB7xwtteSrfns 4vncjvUnYnYCnTne3cFJlJqjDp7BPugoaxcCpybIcVE+PJ5jCXnNOwBFQO84bbh8 +CUpbe1m+SLZNISfpQBDu0nIirk4LT59zUYEed0BdEV3SLm4dwUcEb39jOUg414b JI6wXZWzwskUGL7O/9j0dCNocUjmo6oBDYBYBW5qBMgKcLGHIktplxxphyXpAKlN eTSNkvHsab8Gumn/49A042QxskccrMD6Z5UGh6dSzJm4LETuZGNfzaxbCrfDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUs1tur7TdkfZF/PeXuV3QusDraiwwHwYDVR0j BBgwFoAU0iTf8ZgixbJ8e8wWv9i+KjhPiaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlW QXYvMS9EMjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMjRERkYxOTgyMkM1QjI3 QzdCQ0MxNkJGRDhCRTJBMzg0Rjg5QUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlWQXYvMS9E MjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAoUR013GtAUuYERGf1CcB8prN2dSR2CG687CVbdl+xc9CGjp+H7Uq2SEl9oe MEZbf6XlkskZdiYPpiUeNL8oS6ifM/CM0tvLvVp8uPy4mvhuz3tE0iFrBubPwF00 FsbRifoD8HuRvhKa/ql+hmlLE+cIXBQ65BEeizRZ/iTwwFivyvE8VGJcbfa0IjSZ Q83PIyQoC8kxmlgmNBkOMYoBJbzvv6sEanT5FrAVpWwr5FJYbGlgBaqYZBCivgl/ MQi+BBdBXBndVWLmptD0RcPpz+6irewBYfhP/0+2frROMj4geboILNGOWdetAQt2 LNYE+krTZ6hFFRJAZ6K6B6IEyA== -----END CERTIFICATE-----Generated at Thu Apr 17 15:59:08 2025 by rpki-client