$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft File: D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json) Hash identifier: 8f1fCavjME2oVENybfUlhibGe+52UjBpi0jUOnoomAA= Subject key identifier: CA:B1:58:51:74:28:3E:CD:87:17:4E:87:F3:D7:3A:A0:7A:27:F3:53 Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 Certificate issuer: /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Certificate serial: 414EC9EF0D0BC141C8DF09F5D2193C336314CB9C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft Manifest number: 01EC Signing time: Fri 04 Apr 2025 06:57:13 +0000 Manifest this update: Fri 04 Apr 2025 06:52:13 +0000 Manifest next update: Sat 05 Apr 2025 10:48:13 +0000 Files and hashes: 1: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: hIeVRdSmptdoXxSAsoXNSMmp/oGzm1Ahx7W/DHJn520=) 2: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: 01pAW4QCHBpNqYLYxhHBFF+Hirycj7LT0087UnT0sog=) 3: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: FE+7zbwcRwFNCNZQz6JTL4PFhynEDJA2jUUaWQGOwlw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Apr 2025 10:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:4e:c9:ef:0d:0b:c1:41:c8:df:09:f5:d2:19:3c:33:63:14:cb:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Validity Not Before: Apr 4 06:52:13 2025 GMT Not After : Apr 5 10:48:13 2025 GMT Subject: CN=CAB1585174283ECD87174E87F3D73AA07A27F353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f6:c3:3d:65:9c:3c:13:b8:c9:88:51:b8:48: ba:15:9c:9e:b9:93:44:58:ad:bb:b6:62:8e:58:ba: 69:1b:58:38:a7:e1:77:71:d1:3a:cb:95:d0:c5:3d: d3:8e:ec:e3:d8:43:49:26:9f:39:9b:f5:16:8b:c5: 09:7b:fb:6d:22:c0:be:c9:ab:d0:34:6e:65:3e:7e: 49:47:82:5d:de:13:5e:81:d6:5c:18:21:28:57:ba: 07:51:72:2b:22:f4:1f:78:8e:8d:60:99:38:09:e1: bb:50:9f:ad:23:ce:aa:f2:9d:02:e5:8d:07:50:80: d5:16:1f:83:5b:7d:75:97:ea:b3:67:f2:c8:3c:ac: 18:f8:84:ff:90:df:3b:4b:47:d2:ba:74:e6:ea:58: e8:1c:95:e6:79:44:ed:fe:bd:f7:64:f1:9c:11:e0: 12:49:a0:bb:34:eb:d3:09:4c:d3:53:ab:7d:5c:d7: 98:0e:9e:c9:09:a5:ed:a4:13:e5:dd:b2:ea:a6:ef: b7:03:07:8a:d1:af:0e:e6:03:79:64:a8:81:55:eb: 9d:14:f2:a4:c3:a4:5f:d8:14:81:bd:1b:cf:fd:d8: bb:82:ca:5e:9e:03:57:e2:04:60:54:ef:f3:09:92: fc:50:04:41:87:b3:a2:a5:7b:c8:88:e8:c7:0f:b1: 82:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B1:58:51:74:28:3E:CD:87:17:4E:87:F3:D7:3A:A0:7A:27:F3:53 X509v3 Authority Key Identifier: keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e0:04:c7:da:24:6f:8d:a1:61:c0:b8:64:89:48:57:5e:d4: ef:14:bc:19:05:a6:b8:10:4b:6c:0d:fb:31:f4:3d:8c:f5:c2: ed:3d:eb:8e:81:fb:e2:08:db:d3:4d:5b:e9:dd:45:b0:60:9d: fe:1b:b2:90:fe:e8:83:44:83:5e:28:44:cf:1b:c7:60:a9:27: 9e:c2:27:15:24:90:f0:73:c5:33:da:0a:fb:36:d2:3b:4e:4c: 3e:61:fd:c2:25:29:37:6d:07:52:3c:14:8c:8e:3f:f6:ff:ed: 1f:cb:49:9d:53:ef:88:77:77:c7:e7:eb:53:2d:ae:6d:32:04: be:29:7f:12:0b:07:37:77:9b:d3:ff:5b:83:65:a3:da:21:0b: 12:eb:b2:c4:43:42:75:ea:91:51:2f:f9:dd:63:d7:73:fb:23: 28:b0:e3:ae:da:ac:2e:00:77:c4:10:8b:e8:b4:aa:17:5e:75: 9b:b8:36:0d:ed:17:2b:9c:92:15:10:ec:cc:56:ff:2d:f8:4c: 6d:17:3d:b8:ca:b7:97:16:05:6a:52:4c:21:e3:91:71:a0:d9: 01:38:f7:20:ab:29:5b:02:5e:94:35:51:60:90:b6:a8:41:7d: d4:32:ed:7f:e1:a8:11:d4:bb:80:81:9e:29:51:72:a8:49:da: 18:d1:ed:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQU7J7w0LwUHI3wn10hk8M2MUy5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUzOUNGOTI5QjZBNkEyQjk1OTZCOTIyRjQxN0ZBRDkx Nzc5OUVENzAeFw0yNTA0MDQwNjUyMTNaFw0yNTA0MDUxMDQ4MTNaMDMxMTAvBgNV BAMTKENBQjE1ODUxNzQyODNFQ0Q4NzE3NEU4N0YzRDczQUEwN0EyN0YzNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN9sM9ZZw8E7jJiFG4SLoVnJ65 k0RYrbu2Yo5YumkbWDin4Xdx0TrLldDFPdOO7OPYQ0kmnzmb9RaLxQl7+20iwL7J q9A0bmU+fklHgl3eE16B1lwYIShXugdRcisi9B94jo1gmTgJ4btQn60jzqrynQLl jQdQgNUWH4NbfXWX6rNn8sg8rBj4hP+Q3ztLR9K6dObqWOgcleZ5RO3+vfdk8ZwR 4BJJoLs069MJTNNTq31c15gOnskJpe2kE+Xdsuqm77cDB4rRrw7mA3lkqIFV650U 8qTDpF/YFIG9G8/92LuCyl6eA1fiBGBU7/MJkvxQBEGHs6Kle8iI6McPsYLlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyrFYUXQoPs2HF06H89c6oHon81MwHwYDVR0j BBgwFoAU1TnPkptqaiuVlrki9Bf62Rd5ntcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNT M1QvMS9ENTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MzlDRjkyOUI2QTZBMkI5 NTk2QjkyMkY0MTdGQUQ5MTc3OTlFRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNTM1QvMS9E NTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYuAEx9okb42hYcC4ZIlIV17U7xS8GQWmuBBLbA37MfQ9jPXC7T3rjoH74gjb 001b6d1FsGCd/huykP7og0SDXihEzxvHYKknnsInFSSQ8HPFM9oK+zbSO05MPmH9 wiUpN20HUjwUjI4/9v/tH8tJnVPviHd3x+frUy2ubTIEvil/EgsHN3eb0/9bg2Wj 2iELEuuyxENCdeqRUS/53WPXc/sjKLDjrtqsLgB3xBCL6LSqF151m7g2De0XK5yS FRDszFb/LfhMbRc9uMq3lxYFalJMIeORcaDZATj3IKspWwJelDVRYJC2qEF91DLt f+GoEdS7gIGeKVFyqEnaGNHtFg== -----END CERTIFICATE-----Generated at Fri Apr 4 18:02:28 2025 by rpki-client