$ rpki-client -vvf rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft File: BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft (raw, json) Hash identifier: 4tiaxBKMTxl3Z/qEXm3kYbdFq9zYPKTiiS5L+BzdD3k= Subject key identifier: 6C:84:4A:2C:74:2C:0D:1F:61:D5:3D:CF:4C:06:0B:80:25:4F:E5:23 Authority key identifier: BE:C2:FF:1E:C8:AC:86:D3:B2:25:2C:93:7D:13:CB:8E:9D:51:FF:33 Certificate issuer: /CN=BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33 Certificate serial: 0C7BAB34D8196F52BC2B9A00FE7E310FC7A3DF59 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer Subject info access: rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft Manifest number: 41 Signing time: Thu 10 Apr 2025 11:30:40 +0000 Manifest this update: Thu 10 Apr 2025 11:25:40 +0000 Manifest next update: Fri 11 Apr 2025 14:59:40 +0000 Files and hashes: 1: 3133382e3131372e33362e302f32322d3234203d3e20323634323231.roa (hash: dc2zzkPt/FrTmrlMWfPw/bh9Y+qsTsLgI5TLRMS0UTM=) 2: 34352e3138352e3135362e302f32322d3234203d3e20323634323231.roa (hash: fyjWBO/MWv6WWiZ2ttqDhCoXHXgNM5nEzN5rFhcHSsA=) 3: BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.crl (hash: HjkuvA26nzI/Zj4iLeV0fQnM3Q11XnqPTk+ZwZfFpu4=) 4: 323830343a323436383a3a2f33322d3438203d3e20323634323231.roa (hash: QGDwcQEqCT7btwVyIGdgyY62zgT7pMJk3TEqaOeRqUI=) 5: 323830343a363363633a3a2f33322d3438203d3e20323639333834.roa (hash: AXHystB3eqZMIj2Yh1MFxyYntNHwew/Ipuy4kde4+ZQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.crl rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 11 Apr 2025 14:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:7b:ab:34:d8:19:6f:52:bc:2b:9a:00:fe:7e:31:0f:c7:a3:df:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33 Validity Not Before: Apr 10 11:25:40 2025 GMT Not After : Apr 11 14:59:40 2025 GMT Subject: CN=6C844A2C742C0D1F61D53DCF4C060B80254FE523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0c:c5:d1:4d:b2:36:0c:6c:79:6d:8a:15:cb: 47:b4:be:2d:84:18:f7:59:df:f5:37:b0:40:09:73: fd:34:f2:00:d3:c9:7b:7d:dd:40:84:3c:18:48:82: c5:7e:cb:4f:83:a6:c9:e6:d5:d1:96:41:73:07:37: 9a:7c:dd:1a:9e:b3:02:dd:50:35:25:ab:4b:e9:52: f2:ce:8a:09:e5:f7:b3:05:f4:1f:b3:d5:bf:20:fe: ca:c1:8f:de:56:b1:f9:27:de:44:59:ea:40:ff:d4: 1c:e5:42:c3:33:1b:c5:b6:2b:db:4a:e6:d1:b6:ca: 3d:6c:65:94:a8:b1:35:ed:01:71:ab:85:30:00:51: ed:e8:07:cf:8c:38:e2:91:1d:ab:44:f5:89:3d:d5: 4d:7b:c9:a5:0d:a9:0a:69:71:e8:ee:3e:2b:7a:41: fb:a6:e4:a0:80:2d:31:49:68:e4:31:b7:20:29:99: 27:87:88:a9:05:3b:88:19:23:fd:07:7f:d6:f6:3b: c7:0a:2d:12:5a:89:97:6c:20:f3:a4:9e:5c:27:56: 6a:a1:52:73:ac:92:db:7b:99:ce:0c:fb:57:e3:39: 7a:15:45:85:2d:dc:e7:8b:2d:ec:c0:72:a6:ae:66: ad:18:e4:16:03:ae:30:2f:81:9a:44:42:d1:68:0a: 1e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:84:4A:2C:74:2C:0D:1F:61:D5:3D:CF:4C:06:0B:80:25:4F:E5:23 X509v3 Authority Key Identifier: keyid:BE:C2:FF:1E:C8:AC:86:D3:B2:25:2C:93:7D:13:CB:8E:9D:51:FF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:0f:58:41:b3:29:24:03:e4:12:8e:f2:18:98:5b:b7:91:de: 2a:6f:0e:1b:c8:79:f3:1b:7b:e5:97:db:ed:2d:b0:d6:7f:d7: 0c:22:95:82:fa:22:e5:0b:a5:fe:1d:38:bc:f6:dc:a6:36:07: 2c:ec:73:f3:3f:62:d0:75:3e:f6:f4:08:78:d4:61:f9:85:ac: 34:e8:2c:e0:15:a4:3c:81:df:96:e2:1a:c0:5f:b0:4f:22:9f: 78:74:dd:0f:25:0e:77:58:d3:d7:3e:ae:54:90:c8:ae:79:15: 45:5e:13:51:f1:bc:bf:e2:2a:21:e5:6f:25:91:db:ab:ed:12: a2:c5:4a:e6:3e:c9:2c:d6:9c:cb:03:2a:c6:65:d3:29:e6:ec: f6:ab:7e:01:1f:30:fd:66:d7:fe:87:52:fe:0f:8e:c6:27:d3: 5f:8a:7e:e9:bd:39:cf:c7:e9:48:58:ce:fe:a8:26:49:5b:77: af:80:06:7b:7f:0b:ae:4d:64:e5:56:9c:8f:9f:93:96:ba:e5: 57:8c:fe:ea:1c:e6:56:a0:a2:ac:dc:b8:ba:7e:48:c8:87:36: e3:6d:c1:fc:43:0d:4f:75:39:91:14:e8:1c:7f:94:6d:3b:46: 79:49:72:f8:ef:d2:20:f5:ce:43:92:08:72:1d:e6:74:9d:d3: ae:6b:e5:ce -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUDHurNNgZb1K8K5oA/n4xD8ej31kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDMkZGMUVDOEFDODZEM0IyMjUyQzkzN0QxM0NCOEU5 RDUxRkYzMzAeFw0yNTA0MTAxMTI1NDBaFw0yNTA0MTExNDU5NDBaMDMxMTAvBgNV BAMTKDZDODQ0QTJDNzQyQzBEMUY2MUQ1M0RDRjRDMDYwQjgwMjU0RkU1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiDMXRTbI2DGx5bYoVy0e0vi2E GPdZ3/U3sEAJc/008gDTyXt93UCEPBhIgsV+y0+Dpsnm1dGWQXMHN5p83RqeswLd UDUlq0vpUvLOignl97MF9B+z1b8g/srBj95Wsfkn3kRZ6kD/1BzlQsMzG8W2K9tK 5tG2yj1sZZSosTXtAXGrhTAAUe3oB8+MOOKRHatE9Yk91U17yaUNqQppcejuPit6 Qfum5KCALTFJaOQxtyApmSeHiKkFO4gZI/0Hf9b2O8cKLRJaiZdsIPOknlwnVmqh UnOsktt7mc4M+1fjOXoVRYUt3OeLLezAcqauZq0Y5BYDrjAvgZpEQtFoCh7FAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUbIRKLHQsDR9h1T3PTAYLgCVP5SMwHwYDVR0j BBgwFoAUvsL/HsishtOyJSyTfRPLjp1R/zMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9FZW5uUlRTWWZ3R3VEZ1NSVHcydEZMS1NNYkU3ZTZNWGg4V2VoR0NFOVRh LzAvQkVDMkZGMUVDOEFDODZEM0IyMjUyQzkzN0QxM0NCOEU5RDUxRkYzMy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CRUMyRkYxRUM4QUM4NkQzQjIy NTJDOTM3RDEzQ0I4RTlENTFGRjMzLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vl bm5SVFNZZndHdURnU1JUdzJ0RkxLU01iRTdlNk1YaDhXZWhHQ0U5VGEvMC9CRUMy RkYxRUM4QUM4NkQzQjIyNTJDOTM3RDEzQ0I4RTlENTFGRjMzLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA JQ9YQbMpJAPkEo7yGJhbt5HeKm8OG8h58xt75Zfb7S2w1n/XDCKVgvoi5Qul/h04 vPbcpjYHLOxz8z9i0HU+9vQIeNRh+YWsNOgs4BWkPIHfluIawF+wTyKfeHTdDyUO d1jT1z6uVJDIrnkVRV4TUfG8v+IqIeVvJZHbq+0SosVK5j7JLNacywMqxmXTKebs 9qt+AR8w/WbX/odS/g+OxifTX4p+6b05z8fpSFjO/qgmSVt3r4AGe38Lrk1k5Vac j5+TlrrlV4z+6hzmVqCirNy4un5IyIc2423B/EMNT3U5kRToHH+UbTtGeUly+O/S IPXOQ5IIch3mdJ3Trmvlzg== -----END CERTIFICATE-----Generated at Fri Apr 11 07:38:59 2025 by rpki-client