$ rpki-client -vvf rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft File: 1A10A2ED52FC4857ABCA56A1489602C109D46814.mft (raw, json) Hash identifier: j0+hJxyKobHAtxZObp8N+TWqOiDZWy6fSGGPMO1UxaY= Subject key identifier: C0:FF:8B:90:6C:DA:68:29:90:67:CC:ED:14:B1:56:9C:26:64:62:C8 Authority key identifier: 1A:10:A2:ED:52:FC:48:57:AB:CA:56:A1:48:96:02:C1:09:D4:68:14 Certificate issuer: /CN=1A10A2ED52FC4857ABCA56A1489602C109D46814 Certificate serial: 03BD0A58E75E221E5B7D2A786D65107169B11EDD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer Subject info access: rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft Manifest number: 0133 Signing time: Mon 21 Apr 2025 21:14:40 +0000 Manifest this update: Mon 21 Apr 2025 21:09:40 +0000 Manifest next update: Wed 23 Apr 2025 13:07:40 +0000 Files and hashes: 1: 3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa (hash: dwBSc//sXi45dTapRIXLgvpyMOBIXnuNMUkFPTLT1O4=) 2: 323830343a6538303a3a2f33322d3438203d3e20323632363736.roa (hash: xBu/tPjzc3U7Xtp/+5ZxwRcbLfpIPhzFjn97C0jLbfE=) 3: 1A10A2ED52FC4857ABCA56A1489602C109D46814.crl (hash: KmkEidIvoEOjHEs5jou/KsEkxrjWbxCeIMkHJWBWDoM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.crl rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Apr 2025 12:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:bd:0a:58:e7:5e:22:1e:5b:7d:2a:78:6d:65:10:71:69:b1:1e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A10A2ED52FC4857ABCA56A1489602C109D46814 Validity Not Before: Apr 21 21:09:40 2025 GMT Not After : Apr 23 13:07:40 2025 GMT Subject: CN=C0FF8B906CDA68299067CCED14B1569C266462C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ba:31:fb:f0:28:32:47:58:3a:62:e5:5c:f6: de:a2:3c:f7:ed:5d:45:76:da:fd:42:f5:86:dc:25: 86:34:84:dc:90:1a:52:7f:21:9b:3f:4c:d4:de:f1: 24:c6:fe:fd:c0:c8:b7:e8:5b:7b:a3:3a:9b:bf:3f: 3b:c6:8c:60:29:c4:a4:cf:e7:1a:b7:87:05:f1:87: 9a:bf:c9:49:66:c0:ae:f3:a8:42:99:fc:f0:4f:bf: 77:c2:27:c3:d2:f4:c7:06:0c:0d:00:c4:48:cb:02: 20:b1:63:c4:97:5a:d0:6c:79:d7:3f:51:84:a1:21: f7:c0:f7:cc:fa:bb:95:21:cc:73:5f:ea:be:69:0a: cb:87:70:e8:63:02:18:da:5f:8a:4a:7e:69:ec:cb: 0b:9c:a2:fd:a3:50:1d:c8:1d:4e:6b:aa:40:82:fa: 59:73:9a:62:ae:b2:37:87:3a:0b:da:57:b6:60:67: 39:92:6b:8b:ba:0f:65:a7:fb:f7:63:d1:c7:af:54: d0:db:9b:da:7d:d2:00:f4:a2:7f:33:44:f2:c6:b5: 20:a7:1e:f8:0c:2a:13:74:dd:fd:e6:fa:03:36:90: 93:01:e4:a0:46:3d:d5:ef:1e:8b:fd:6d:e2:23:4b: ce:a6:a9:e1:66:bb:56:06:fc:64:53:9a:70:d0:cd: a2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FF:8B:90:6C:DA:68:29:90:67:CC:ED:14:B1:56:9C:26:64:62:C8 X509v3 Authority Key Identifier: keyid:1A:10:A2:ED:52:FC:48:57:AB:CA:56:A1:48:96:02:C1:09:D4:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:52:e3:4e:cc:a8:24:47:24:09:ba:d8:bf:c1:bf:41:a2:0c: 1c:b3:70:42:de:5e:35:65:e2:cb:a2:0a:28:7e:85:18:85:49: 79:40:b4:af:ee:9c:d6:8e:54:9e:6b:93:5e:44:76:79:17:aa: df:71:bb:d9:8d:ec:f1:78:3c:b8:20:72:35:61:fb:06:63:26: 0e:51:18:31:e2:e1:d9:4d:de:d1:dd:6a:ce:6a:22:26:b4:44: 7c:ba:63:7d:82:9c:aa:c2:47:12:0f:90:a6:71:d2:2f:b2:e7: 46:20:27:16:dc:2e:d2:05:f0:68:fb:ce:5e:4e:40:29:b0:b0: e0:b3:05:72:e2:4e:0c:28:88:96:31:bb:2a:82:0f:c0:4b:56: a4:9b:62:65:b6:2f:ef:76:05:45:d9:61:f1:97:84:97:e9:fb: 8d:19:07:51:ea:f8:c3:bf:14:3c:ff:4d:e3:6b:5e:4c:d1:8f: 87:af:fc:a3:7d:8f:97:5e:49:a2:1a:18:ef:34:b4:f2:55:c7: 4e:f0:b0:51:1c:ec:b1:db:dd:2b:cb:8b:80:39:c4:89:5f:65: 99:6f:2a:bb:24:d6:ab:04:78:4d:01:18:83:26:fb:4b:9e:76: 3d:5e:94:00:d6:e2:77:2c:8c:9b:6e:03:58:4e:f9:d9:76:fe: 39:cc:b9:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA70KWOdeIh5bfSp4bWUQcWmxHt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUExMEEyRUQ1MkZDNDg1N0FCQ0E1NkExNDg5NjAyQzEw OUQ0NjgxNDAeFw0yNTA0MjEyMTA5NDBaFw0yNTA0MjMxMzA3NDBaMDMxMTAvBgNV BAMTKEMwRkY4QjkwNkNEQTY4Mjk5MDY3Q0NFRDE0QjE1NjlDMjY2NDYyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaujH78CgyR1g6YuVc9t6iPPft XUV22v1C9YbcJYY0hNyQGlJ/IZs/TNTe8STG/v3AyLfoW3ujOpu/PzvGjGApxKTP 5xq3hwXxh5q/yUlmwK7zqEKZ/PBPv3fCJ8PS9McGDA0AxEjLAiCxY8SXWtBsedc/ UYShIffA98z6u5UhzHNf6r5pCsuHcOhjAhjaX4pKfmnsywucov2jUB3IHU5rqkCC +llzmmKusjeHOgvaV7ZgZzmSa4u6D2Wn+/dj0cevVNDbm9p90gD0on8zRPLGtSCn HvgMKhN03f3m+gM2kJMB5KBGPdXvHov9beIjS86mqeFmu1YG/GRTmnDQzaL1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwP+LkGzaaCmQZ8ztFLFWnCZkYsgwHwYDVR0j BBgwFoAUGhCi7VL8SFerylahSJYCwQnUaBQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGlpeERFckQ4d0FDb3RIRHZDU1hicmZWeTM1dXJrN2FGSE5XN3JSbWZQ cm0vMS8xQTEwQTJFRDUyRkM0ODU3QUJDQTU2QTE0ODk2MDJDMTA5RDQ2ODE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBMTBBMkVENTJGQzQ4NTdB QkNBNTZBMTQ4OTYwMkMxMDlENDY4MTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGlpeERFckQ4d0FDb3RIRHZDU1hicmZWeTM1dXJrN2FGSE5XN3JSbWZQcm0vMS8x QTEwQTJFRDUyRkM0ODU3QUJDQTU2QTE0ODk2MDJDMTA5RDQ2ODE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlFLjTsyoJEckCbrYv8G/QaIMHLNwQt5eNWXiy6IKKH6FGIVJeUC0r+6c1o5U nmuTXkR2eReq33G72Y3s8Xg8uCByNWH7BmMmDlEYMeLh2U3e0d1qzmoiJrREfLpj fYKcqsJHEg+QpnHSL7LnRiAnFtwu0gXwaPvOXk5AKbCw4LMFcuJODCiIljG7KoIP wEtWpJtiZbYv73YFRdlh8ZeEl+n7jRkHUer4w78UPP9N42teTNGPh6/8o32Pl15J ohoY7zS08lXHTvCwURzssdvdK8uLgDnEiV9lmW8quyTWqwR4TQEYgyb7S552PV6U ANbidyyMm24DWE752Xb+Ocy5mA== -----END CERTIFICATE-----Generated at Tue Apr 22 12:14:34 2025 by rpki-client