$ rpki-client -vvf rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft File: 3583862D781B71B103E9FA8D726C4D02380ACEE3.mft (raw, json) Hash identifier: zHtuL3vtOu+rJUwOUNIUN+d13aBRP2Zfn+AugrdDrYI= Subject key identifier: 5D:4B:0A:56:EA:5B:21:D0:21:3B:9B:F8:A5:58:FE:AC:27:DF:9D:B5 Authority key identifier: 35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3 Certificate issuer: /CN=3583862D781B71B103E9FA8D726C4D02380ACEE3 Certificate serial: 517FA491B579793903261D7801BA1B0FE2FD4CDE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer Subject info access: rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft Manifest number: 01F4 Signing time: Fri 11 Apr 2025 19:44:50 +0000 Manifest this update: Fri 11 Apr 2025 19:39:50 +0000 Manifest next update: Sat 12 Apr 2025 22:49:50 +0000 Files and hashes: 1: 3583862D781B71B103E9FA8D726C4D02380ACEE3.crl (hash: 0zP/GtLVmruEUhInxDDxs5EH4FugaVa7HXK/DYRVpEQ=) 2: 323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa (hash: F3fG9mFxvglpd2enKC9y9YG4bfXdBUOav0qW+NySFMc=) 3: 323830343a386361633a323030303a3a2f34302d3430203d3e20323733383134.roa (hash: VKDf7ggbfiz8rpCjJSQ+yu2T5sqSYuaym0M0bLcYVKI=) 4: 323830343a386361633a3a2f33322d3332203d3e20323733383134.roa (hash: roe3CRwUBZHOfPicJI5B0uNIJHF0uBEXZDkKOt8LSec=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 22:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:7f:a4:91:b5:79:79:39:03:26:1d:78:01:ba:1b:0f:e2:fd:4c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3583862D781B71B103E9FA8D726C4D02380ACEE3 Validity Not Before: Apr 11 19:39:50 2025 GMT Not After : Apr 12 22:49:50 2025 GMT Subject: CN=5D4B0A56EA5B21D0213B9BF8A558FEAC27DF9DB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:1d:14:aa:cf:a1:33:0e:b2:26:47:25:17: ce:1c:02:33:07:77:c3:ae:40:81:91:57:23:bc:e7: 3b:79:7e:3e:f5:29:ce:9d:98:63:6f:aa:a5:c2:02: ac:96:8c:9c:83:e5:c1:28:01:0e:f5:90:84:2d:b6: 62:dc:d8:2d:c6:96:24:51:78:8b:ee:b7:35:11:e0: 22:3d:47:24:2e:38:c9:3a:d0:28:e6:10:27:75:35: 0f:f0:a4:e8:df:6e:a5:b3:c6:46:e2:0b:61:f7:7c: 4d:d8:11:de:86:0d:06:db:e1:79:76:87:a4:df:77: 0c:05:0f:ff:10:a0:73:ff:10:54:b5:cc:f7:90:47: 6c:37:b5:a4:7b:91:25:d2:30:56:94:19:5e:4e:33: 6d:12:e4:b5:90:00:d8:40:0c:36:3e:5a:3b:34:c0: 48:6c:4f:6e:07:bc:1b:59:fc:db:26:c8:d7:5a:43: 3a:82:26:15:d7:63:37:56:a5:e3:77:45:4f:b3:6c: e9:c3:3a:af:a9:9f:a9:a6:03:a3:1e:9f:fe:c5:f5: e8:61:29:7d:30:95:34:be:4b:96:64:d8:41:ee:ad: 44:f2:0c:b4:b4:92:97:9a:94:9d:32:dd:c6:75:b0: f9:94:48:20:05:72:81:78:7b:db:ba:38:65:19:5d: 6c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4B:0A:56:EA:5B:21:D0:21:3B:9B:F8:A5:58:FE:AC:27:DF:9D:B5 X509v3 Authority Key Identifier: keyid:35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:4f:f8:d0:b8:d8:4e:7c:63:e7:e6:8d:5c:46:a8:20:3a:19: ac:e1:6e:38:59:6b:83:a9:2a:bf:b6:20:d0:94:de:71:10:3e: e1:0e:34:46:a3:1e:d4:66:25:13:ac:91:1b:30:01:8c:5d:13: e0:92:a6:56:20:b2:26:05:66:cd:25:e6:d9:d2:12:6a:04:7b: 9b:d6:6a:ca:cb:45:e2:0d:b3:c0:a8:6f:63:16:1f:06:69:d4: ed:5a:1a:a2:67:47:98:d7:16:e9:3c:02:68:3e:42:87:13:5a: f0:34:e5:49:c4:f0:0f:34:02:23:1f:b7:3d:66:d3:24:25:54: 1f:fc:5b:54:ec:7c:06:52:8c:04:4a:7d:e2:b4:11:bc:eb:34: 30:e4:ea:e4:1d:69:7c:5e:67:a0:1b:09:c3:87:12:b0:73:9b: 0a:83:40:0c:bc:9c:31:4e:14:24:74:6b:8a:ec:9c:de:7f:61: c0:15:fc:8c:a0:f0:b0:b3:bc:0d:45:92:e0:74:02:c6:05:ea: 78:82:1e:02:93:d4:0a:09:28:82:d9:84:7c:a9:85:5a:58:b8: 53:92:73:20:a8:f7:6f:41:72:62:e2:33:d0:bf:e3:d6:ef:b4: b0:17:bf:e0:d7:51:81:51:3d:3f:a7:dc:1b:e7:62:03:81:82: 8f:07:e5:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUX+kkbV5eTkDJh14AbobD+L9TN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4Mzg2MkQ3ODFCNzFCMTAzRTlGQThENzI2QzREMDIz ODBBQ0VFMzAeFw0yNTA0MTExOTM5NTBaFw0yNTA0MTIyMjQ5NTBaMDMxMTAvBgNV BAMTKDVENEIwQTU2RUE1QjIxRDAyMTNCOUJGOEE1NThGRUFDMjdERjlEQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDOB0Uqs+hMw6yJkclF84cAjMH d8OuQIGRVyO85zt5fj71Kc6dmGNvqqXCAqyWjJyD5cEoAQ71kIQttmLc2C3GliRR eIvutzUR4CI9RyQuOMk60CjmECd1NQ/wpOjfbqWzxkbiC2H3fE3YEd6GDQbb4Xl2 h6TfdwwFD/8QoHP/EFS1zPeQR2w3taR7kSXSMFaUGV5OM20S5LWQANhADDY+Wjs0 wEhsT24HvBtZ/NsmyNdaQzqCJhXXYzdWpeN3RU+zbOnDOq+pn6mmA6Men/7F9ehh KX0wlTS+S5Zk2EHurUTyDLS0kpealJ0y3cZ1sPmUSCAFcoF4e9u6OGUZXWxlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXUsKVupbIdAhO5v4pVj+rCffnbUwHwYDVR0j BBgwFoAUNYOGLXgbcbED6fqNcmxNAjgKzuMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmhxNm9YM2J4eGtuWHRjZkIxcnRZeVRqa21rMkR2Rm9tb1I1RzRqNjZQ TEsvMS8zNTgzODYyRDc4MUI3MUIxMDNFOUZBOEQ3MjZDNEQwMjM4MEFDRUUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1ODM4NjJENzgxQjcxQjEw M0U5RkE4RDcyNkM0RDAyMzgwQUNFRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RmhxNm9YM2J4eGtuWHRjZkIxcnRZeVRqa21rMkR2Rm9tb1I1RzRqNjZQTEsvMS8z NTgzODYyRDc4MUI3MUIxMDNFOUZBOEQ3MjZDNEQwMjM4MEFDRUUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQE/40LjYTnxj5+aNXEaoIDoZrOFuOFlrg6kqv7Yg0JTecRA+4Q40RqMe1GYl E6yRGzABjF0T4JKmViCyJgVmzSXm2dISagR7m9ZqystF4g2zwKhvYxYfBmnU7Voa omdHmNcW6TwCaD5ChxNa8DTlScTwDzQCIx+3PWbTJCVUH/xbVOx8BlKMBEp94rQR vOs0MOTq5B1pfF5noBsJw4cSsHObCoNADLycMU4UJHRriuyc3n9hwBX8jKDwsLO8 DUWS4HQCxgXqeIIeApPUCgkogtmEfKmFWli4U5JzIKj3b0FyYuIz0L/j1u+0sBe/ 4NdRgVE9P6fcG+diA4GCjwflIw== -----END CERTIFICATE-----Generated at Sat Apr 12 15:38:56 2025 by rpki-client