$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft File: DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft (raw, json) Hash identifier: Z2KuyxtGn1vgtGtPV1SSr5jJSSJgNs9aNPYbfpT10dE= Subject key identifier: D0:A0:AF:83:65:87:BC:3E:C8:E6:1A:49:E9:1B:64:26:EC:D8:05:40 Authority key identifier: DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D Certificate issuer: /CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D Certificate serial: 1A666590EB90A98C5B0215F6BB8CD2EFC223295E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer Subject info access: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft Manifest number: 19 Signing time: Sun 20 Apr 2025 02:05:59 +0000 Manifest this update: Sun 20 Apr 2025 02:00:59 +0000 Manifest next update: Mon 21 Apr 2025 02:37:59 +0000 Files and hashes: 1: DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl (hash: fGoBaUcLU7OQPjKi7I+4sQcJh+IAmjQbWIFmXZQxaQw=) 2: 323830343a353764303a3a2f33322d3332203d3e20323638303838.roa (hash: V86kNco5ZHxMjKrWgLTi/qoHVEZvpbWtFOyczBdYZAU=) 3: 34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa (hash: EBy3rQwQ+8YvV1n0NbcOpSkf6ZX3JhodQDIQP6f8oCY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Apr 2025 02:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:66:65:90:eb:90:a9:8c:5b:02:15:f6:bb:8c:d2:ef:c2:23:29:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D Validity Not Before: Apr 20 02:00:59 2025 GMT Not After : Apr 21 02:37:59 2025 GMT Subject: CN=D0A0AF836587BC3EC8E61A49E91B6426ECD80540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e4:7f:af:66:58:2c:22:bd:b3:a9:e6:1e:cc: 87:07:de:16:35:94:ec:27:7d:20:48:bc:bf:6b:2b: 19:13:00:cb:e7:51:ac:b0:e7:a7:94:9b:f2:79:c7: e7:fa:35:6d:58:16:8a:9f:98:12:8c:6d:87:98:eb: e2:1d:f0:a8:37:08:23:ba:dc:07:d3:ab:d0:6f:d4: 06:06:23:cb:13:47:de:b5:92:a8:c0:dc:79:96:12: 15:fb:eb:72:05:93:49:01:47:58:f0:8d:81:39:7a: ae:d0:9b:ac:67:56:39:d3:47:14:a1:a5:4c:e7:31: 80:c6:55:58:70:74:30:b6:29:63:d5:e3:be:92:0d: 17:6f:e6:e6:e1:4c:d0:e9:15:71:f4:dd:85:e1:41: 8d:d2:4f:6c:da:9f:ae:84:4d:4d:00:38:a6:ed:2b: 77:85:34:a5:cb:e4:7d:56:e9:68:e4:e2:9a:e5:1f: 23:2b:b7:38:92:1a:74:4a:41:86:42:dc:64:55:bc: b5:ca:24:4b:26:eb:f5:ae:54:c1:d8:d8:4b:63:6e: 51:e6:12:e2:40:08:59:24:71:49:86:82:37:28:1f: b4:9f:12:43:02:6c:14:73:31:5d:44:9d:ac:32:4e: a0:93:de:e1:38:c4:22:97:70:77:24:99:5f:3d:dc: 3f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A0:AF:83:65:87:BC:3E:C8:E6:1A:49:E9:1B:64:26:EC:D8:05:40 X509v3 Authority Key Identifier: keyid:DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bf:8e:89:e8:7e:ae:46:1f:cc:03:4b:77:02:90:48:c2:0b: 70:56:9b:63:82:61:00:29:5e:da:e3:d0:30:5a:0c:bd:41:c4: 3f:50:60:7a:df:66:2a:7c:3e:a6:85:67:ed:85:96:00:98:59: 9c:87:84:ca:86:8f:52:1f:6b:a3:30:ef:48:c0:eb:97:88:26: 42:b9:51:f1:5b:75:6e:23:da:ac:9a:4c:50:b3:0d:a5:60:fc: 16:37:6a:b8:f6:cf:45:65:f8:26:8b:86:38:0d:ed:0e:a2:35: be:1a:a7:41:f2:0e:11:82:ae:ce:53:6f:52:9e:69:1f:e3:05: 66:35:e1:aa:00:67:54:a0:9e:d9:03:d7:0a:57:5e:06:ba:35: e9:e1:7c:01:38:2f:bc:28:96:68:56:2c:f3:cf:6a:fb:ce:6b: 34:f1:f2:28:e4:b2:57:2b:4f:6f:3c:fd:fc:ae:f5:ba:b1:b2: a4:a6:c8:1c:b1:bc:54:ea:1f:89:14:78:82:39:8a:2e:0c:0e: 4f:36:c1:55:98:b6:ce:6b:e4:3f:9a:22:f3:eb:42:7a:0f:e9: 39:aa:1d:30:35:54:c6:1e:8b:6f:fd:59:6b:31:67:66:99:1d: b3:86:a7:50:5b:d9:3d:b3:cd:e2:5f:fb:63:e2:d0:2e:49:e3: 97:0b:8a:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGmZlkOuQqYxbAhX2u4zS78IjKV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQzOTk3RUE2MjRCMjc0N0YwNkU3N0Q5MTQxMjJFQURF QzREMEI3RDAeFw0yNTA0MjAwMjAwNTlaFw0yNTA0MjEwMjM3NTlaMDMxMTAvBgNV BAMTKEQwQTBBRjgzNjU4N0JDM0VDOEU2MUE0OUU5MUI2NDI2RUNEODA1NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD5H+vZlgsIr2zqeYezIcH3hY1 lOwnfSBIvL9rKxkTAMvnUayw56eUm/J5x+f6NW1YFoqfmBKMbYeY6+Id8Kg3CCO6 3AfTq9Bv1AYGI8sTR961kqjA3HmWEhX763IFk0kBR1jwjYE5eq7Qm6xnVjnTRxSh pUznMYDGVVhwdDC2KWPV476SDRdv5ubhTNDpFXH03YXhQY3ST2zan66ETU0AOKbt K3eFNKXL5H1W6Wjk4prlHyMrtziSGnRKQYZC3GRVvLXKJEsm6/WuVMHY2EtjblHm EuJACFkkcUmGgjcoH7SfEkMCbBRzMV1EnawyTqCT3uE4xCKXcHckmV893D8NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0KCvg2WHvD7I5hpJ6RtkJuzYBUAwHwYDVR0j BBgwFoAU3TmX6mJLJ0fwbnfZFBIurexNC30wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhy dUUvMC9ERDM5OTdFQTYyNEIyNzQ3RjA2RTc3RDkxNDEyMkVBREVDNEQwQjdELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMzk5N0VBNjI0QjI3NDdG MDZFNzdEOTE0MTIyRUFERUM0RDBCN0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhydUUvMC9E RDM5OTdFQTYyNEIyNzQ3RjA2RTc3RDkxNDEyMkVBREVDNEQwQjdELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP7+Oieh+rkYfzANLdwKQSMILcFabY4JhACle2uPQMFoMvUHEP1Bget9mKnw+ poVn7YWWAJhZnIeEyoaPUh9rozDvSMDrl4gmQrlR8Vt1biParJpMULMNpWD8Fjdq uPbPRWX4JouGOA3tDqI1vhqnQfIOEYKuzlNvUp5pH+MFZjXhqgBnVKCe2QPXClde Bro16eF8ATgvvCiWaFYs889q+85rNPHyKOSyVytPbzz9/K71urGypKbIHLG8VOof iRR4gjmKLgwOTzbBVZi2zmvkP5oi8+tCeg/pOaodMDVUxh6Lb/1ZazFnZpkds4an UFvZPbPN4l/7Y+LQLknjlwuK+A== -----END CERTIFICATE-----Generated at Sun Apr 20 12:59:55 2025 by rpki-client