$ rpki-client -vvf rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft File: 37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft (raw, json) Hash identifier: SvZr9ruKDL9M/09UkPIcj9+k84+niZyVPjkN6iZG5TI= Subject key identifier: 49:8C:7B:64:AC:32:0E:59:EA:86:F2:E7:A9:B8:5E:EA:55:B0:53:97 Authority key identifier: 37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87 Certificate issuer: /CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87 Certificate serial: 7EC6A869CA92E05BE6A264FE7E1950A7CEDE9F5F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft Manifest number: 01F8 Signing time: Thu 10 Apr 2025 12:09:21 +0000 Manifest this update: Thu 10 Apr 2025 12:04:21 +0000 Manifest next update: Fri 11 Apr 2025 14:51:21 +0000 Files and hashes: 1: 37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl (hash: wTmPBnoQJsF5p1+nyc7T7X87ILV+eDYuccw5liSEaRQ=) 2: 323830343a323935383a3a2f33322d3430203d3e20323634303130.roa (hash: cLNURStJu5eQongcSd5F/uNBcK5qxK2dTs84ITmqdTY=) 3: 3134332e302e3139362e302f32322d3234203d3e20323634303130.roa (hash: wfuDZyzxxzfnOOIqzYL69wZq2lthDLjupE8Io4WDAqo=) 4: 3137372e35342e38302e302f32302d3234203d3e20323634303130.roa (hash: H+IBgnyrvLId3jMJF5jADUvdFmFLXsJ/4k9Cnr4cTrM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 11 Apr 2025 14:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c6:a8:69:ca:92:e0:5b:e6:a2:64:fe:7e:19:50:a7:ce:de:9f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87 Validity Not Before: Apr 10 12:04:21 2025 GMT Not After : Apr 11 14:51:21 2025 GMT Subject: CN=498C7B64AC320E59EA86F2E7A9B85EEA55B05397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a3:cc:26:7d:18:d8:06:4a:99:b0:00:a3:0c: 8e:b9:6b:48:f1:27:d1:55:4c:20:a4:38:0e:5b:73: c6:b5:fa:72:76:ed:e7:48:25:a3:a9:35:4f:fb:88: c5:9d:b6:89:5c:09:99:8e:13:5e:79:63:c5:f2:7e: 78:cb:5e:77:f7:6d:3c:6e:e2:9a:b8:30:4d:27:b6: fe:68:0f:6d:a6:5f:3b:8d:dc:72:a0:e9:e0:25:92: 76:c6:05:fa:f5:6f:3c:41:54:9a:a9:99:3c:e4:1a: cb:97:5b:bb:df:b3:ae:7f:d0:82:0d:dc:20:c7:29: f3:40:c0:20:54:bc:c7:a9:dc:75:72:14:2c:3e:64: c1:36:09:f8:91:bc:59:98:7d:f9:65:ce:4d:b8:73: ca:7d:4b:d1:b8:97:d2:b1:7e:69:08:04:3d:d5:71: 5c:a5:89:c4:40:0e:e7:1e:aa:58:c3:62:2b:a2:db: 7c:9c:6b:60:15:cb:43:61:c9:19:bf:c5:5b:e5:3b: b3:23:f2:bc:67:f4:56:06:19:29:4a:0f:ba:b1:fb: 5d:c1:1d:b4:ec:73:21:b0:6c:f0:43:9a:9e:1b:39: 7a:4f:72:e3:0e:67:a6:58:8e:ea:12:35:ff:77:7f: 88:68:b7:92:3d:28:4d:30:e7:4b:8c:34:99:a2:8f: 43:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8C:7B:64:AC:32:0E:59:EA:86:F2:E7:A9:B8:5E:EA:55:B0:53:97 X509v3 Authority Key Identifier: keyid:37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:bb:f1:64:18:16:f4:ed:31:a3:44:89:1b:2c:14:0d:23:5c: f3:03:93:58:48:bd:b6:4a:f9:21:6e:96:d0:69:da:e3:4b:6e: 2c:7c:bc:c9:52:f9:4e:6a:88:39:db:4f:76:f6:90:4c:53:85: 25:f6:6c:58:48:b7:56:35:0b:5c:c9:62:c6:18:b6:3a:dc:c8: 43:23:0a:61:75:67:26:04:39:04:1f:b3:d8:6b:89:d5:06:c4: 77:88:05:f2:90:9b:bb:b7:57:07:e4:db:d9:34:ec:58:c4:e2: 3e:fd:18:07:da:04:7e:18:0b:40:bf:09:0e:db:cb:75:33:80: 85:bd:90:b8:a4:09:80:cc:8a:6c:40:00:ce:1b:f9:f9:56:ab: 7b:a6:e9:04:ce:05:c1:d9:bc:60:da:f1:79:85:5b:3f:d1:9a: 1f:93:b0:34:c7:55:0f:45:27:72:a8:f8:62:59:5e:a6:19:f0: 8d:bb:92:a4:ab:2a:f5:3c:2e:90:f4:e4:25:61:71:b3:60:6c: 08:75:85:9e:fb:46:a1:76:49:56:7d:bd:e7:34:7f:84:47:7a: d1:f9:5b:b3:f0:ce:f1:b6:da:a4:b3:fd:fa:43:68:1e:e6:eb: 03:14:56:da:b5:6f:55:b8:ac:f2:75:44:2b:90:ba:89:8a:2a: cd:fa:9c:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfsaoacqS4FvmomT+fhlQp87en18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFQzY2RTZENTE1M0UzMzVDNEExMUI1MUM3REZCNDgx RTkxQ0I4NzAeFw0yNTA0MTAxMjA0MjFaFw0yNTA0MTExNDUxMjFaMDMxMTAvBgNV BAMTKDQ5OEM3QjY0QUMzMjBFNTlFQTg2RjJFN0E5Qjg1RUVBNTVCMDUzOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKo8wmfRjYBkqZsACjDI65a0jx J9FVTCCkOA5bc8a1+nJ27edIJaOpNU/7iMWdtolcCZmOE155Y8XyfnjLXnf3bTxu 4pq4ME0ntv5oD22mXzuN3HKg6eAlknbGBfr1bzxBVJqpmTzkGsuXW7vfs65/0IIN 3CDHKfNAwCBUvMep3HVyFCw+ZME2CfiRvFmYffllzk24c8p9S9G4l9KxfmkIBD3V cVylicRADuceqljDYiui23yca2AVy0NhyRm/xVvlO7Mj8rxn9FYGGSlKD7qx+13B HbTscyGwbPBDmp4bOXpPcuMOZ6ZYjuoSNf93f4hot5I9KE0w50uMNJmij0PZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSYx7ZKwyDlnqhvLnqbhe6lWwU5cwHwYDVR0j BBgwFoAUN+xm5tUVPjNcShG1HH37SB6Ry4cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHd3MUNmRmFGeWRYdjNlMzdBaEVWSEYxRXpjTDlXNjJnTWIxUmp0ZXBj Mk0vMS8zN0VDNjZFNkQ1MTUzRTMzNUM0QTExQjUxQzdERkI0ODFFOTFDQjg3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3RUM2NkU2RDUxNTNFMzM1 QzRBMTFCNTFDN0RGQjQ4MUU5MUNCODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHd3MUNmRmFGeWRYdjNlMzdBaEVWSEYxRXpjTDlXNjJnTWIxUmp0ZXBjMk0vMS8z N0VDNjZFNkQ1MTUzRTMzNUM0QTExQjUxQzdERkI0ODFFOTFDQjg3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYbvxZBgW9O0xo0SJGywUDSNc8wOTWEi9tkr5IW6W0Gna40tuLHy8yVL5TmqI OdtPdvaQTFOFJfZsWEi3VjULXMlixhi2OtzIQyMKYXVnJgQ5BB+z2GuJ1QbEd4gF 8pCbu7dXB+Tb2TTsWMTiPv0YB9oEfhgLQL8JDtvLdTOAhb2QuKQJgMyKbEAAzhv5 +Vare6bpBM4Fwdm8YNrxeYVbP9GaH5OwNMdVD0Uncqj4YllephnwjbuSpKsq9Twu kPTkJWFxs2BsCHWFnvtGoXZJVn295zR/hEd60flbs/DO8bbapLP9+kNoHubrAxRW 2rVvVbis8nVEK5C6iYoqzfqcJw== -----END CERTIFICATE-----Generated at Thu Apr 10 16:13:35 2025 by rpki-client