$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft File: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft (raw, json) Hash identifier: r23gcexykBsgmxTLBrxwaqufjoPh9yoTQ3JxLePlN8k= Subject key identifier: 15:A0:BD:E2:64:AC:DF:73:2C:12:38:EF:B5:E0:C5:B9:72:8F:38:7C Authority key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 Certificate issuer: /CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Certificate serial: 484666A1812AF734AFEA82BCA5AED98B76B05E85 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer Subject info access: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft Manifest number: 01F4 Signing time: Sat 12 Apr 2025 08:21:53 +0000 Manifest this update: Sat 12 Apr 2025 08:16:53 +0000 Manifest next update: Sun 13 Apr 2025 11:53:53 +0000 Files and hashes: 1: 3133382e39372e3130342e302f32322d3232203d3e203533313037.roa (hash: YxmutoTj6CF7MhqKkZWdp2PcBcnZPzoU+yCAdwcvIH8=) 2: 323830343a323363383a3a2f33322d3332203d3e20323634313832.roa (hash: 3F2e2/DDYn3RX1xMVmaKyyDfXDqpy3jTInAQP0qhGc4=) 3: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl (hash: HvoPsnyZ2gKZBcILDoQ70UbRIA5O3mDR7SBeDT5bgJ0=) 4: 3133382e39372e3130372e302f32342d3234203d3e203533313037.roa (hash: d37RWCzmBlHMXyTEoKWy+EnzDGvUsG4ci+hJH2k1A/Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Apr 2025 11:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:46:66:a1:81:2a:f7:34:af:ea:82:bc:a5:ae:d9:8b:76:b0:5e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Validity Not Before: Apr 12 08:16:53 2025 GMT Not After : Apr 13 11:53:53 2025 GMT Subject: CN=15A0BDE264ACDF732C1238EFB5E0C5B9728F387C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5f:b5:d9:3f:a4:e4:8c:26:b3:67:d0:59:dd: e3:6a:6a:02:09:ef:24:ef:f6:26:84:1f:13:f8:5a: e2:ab:44:79:18:1a:a5:ad:c5:77:6e:9f:e9:01:28: 89:de:9a:91:93:e8:39:58:9d:bf:41:db:6b:59:6c: e3:3e:01:18:d6:a4:1d:43:2b:52:fe:81:27:fc:c6: 0b:15:7f:36:ae:a4:a5:4f:ee:09:ac:53:13:78:6c: 1c:ae:f8:31:6c:7f:da:1f:eb:d1:cb:1c:98:2d:3d: db:f2:bb:f7:c3:9a:58:86:d9:a8:d0:1c:5d:ca:0c: 58:9f:b9:82:87:4f:f2:25:77:b7:63:e2:7a:d4:94: d7:8d:8d:83:0c:c8:0e:9f:fb:bd:a0:0a:b8:f0:1c: 3a:84:9d:fc:1e:9e:70:26:e1:87:0b:a8:94:cf:2a: cc:ab:90:5a:52:0a:39:d6:71:5d:26:b5:37:eb:d3: 59:e5:10:c0:55:7e:c4:cb:7a:6c:37:a7:c7:82:2c: 39:8d:a1:5f:c1:52:b1:a2:16:c6:c2:47:0c:a6:3f: 5d:e9:87:e5:f9:1c:04:63:ff:59:15:77:b7:02:88: 9c:ad:64:18:45:61:69:09:7e:99:87:22:5f:d0:a5: a6:6e:5e:6a:0f:09:50:fc:7f:26:ea:61:b3:d6:e5: 6b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A0:BD:E2:64:AC:DF:73:2C:12:38:EF:B5:E0:C5:B9:72:8F:38:7C X509v3 Authority Key Identifier: keyid:71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:6e:17:15:1c:89:85:2b:ad:83:9e:9f:5c:03:55:d7:c9:21: 4e:fa:d0:0b:47:30:9a:ca:bd:6f:b5:89:22:7a:dd:91:87:a6: a4:16:e3:12:db:6e:8c:a4:8b:db:a1:ae:96:0d:47:21:29:2b: c6:d5:d6:b5:3d:0c:f8:f6:7d:6c:67:b2:23:f3:3f:db:21:1f: 92:16:c6:fa:65:ba:92:62:9b:12:c4:f5:0d:c4:3e:ad:88:d7: 3c:ad:c2:89:c9:a3:ac:8c:23:e6:b4:bc:ef:94:50:d4:87:bd: 38:05:65:57:10:4c:bc:cd:75:1c:64:e3:4d:d3:ad:7c:89:b1: ed:55:33:b4:bf:02:d4:9a:5d:0c:de:7f:25:85:21:8d:2e:0a: 34:73:6f:2c:ec:8b:27:9a:8f:f3:7f:7e:fe:f7:30:f8:59:09: 59:e7:b8:2d:e5:f4:1a:d4:9e:30:a4:44:bc:3e:99:2b:c4:bc: 40:03:40:52:30:31:f4:ac:8f:ae:40:dd:08:d3:de:24:e1:d0: 2a:6b:6d:47:2a:79:0d:bb:f2:81:fd:be:b4:59:4a:8c:3a:ce: 81:8e:f9:5b:93:3e:3d:5a:17:b0:aa:41:f1:1c:8d:5a:58:de: 11:8b:03:97:db:31:8c:6b:0d:ac:ab:de:36:ef:aa:04:42:99: 41:fd:41:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSEZmoYEq9zSv6oK8pa7Zi3awXoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEyNUJFRERGRUMyOUMwQTRDRjU5MUU1RUI0MDgzOEJG RTNDN0FDMTAeFw0yNTA0MTIwODE2NTNaFw0yNTA0MTMxMTUzNTNaMDMxMTAvBgNV BAMTKDE1QTBCREUyNjRBQ0RGNzMyQzEyMzhFRkI1RTBDNUI5NzI4RjM4N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBX7XZP6TkjCazZ9BZ3eNqagIJ 7yTv9iaEHxP4WuKrRHkYGqWtxXdun+kBKInempGT6DlYnb9B22tZbOM+ARjWpB1D K1L+gSf8xgsVfzaupKVP7gmsUxN4bByu+DFsf9of69HLHJgtPdvyu/fDmliG2ajQ HF3KDFifuYKHT/Ild7dj4nrUlNeNjYMMyA6f+72gCrjwHDqEnfwennAm4YcLqJTP KsyrkFpSCjnWcV0mtTfr01nlEMBVfsTLemw3p8eCLDmNoV/BUrGiFsbCRwymP13p h+X5HARj/1kVd7cCiJytZBhFYWkJfpmHIl/QpaZuXmoPCVD8fybqYbPW5WsNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFaC94mSs33MsEjjvteDFuXKPOHwwHwYDVR0j BBgwFoAUcSW+3f7CnApM9ZHl60CDi/48esEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEhnSnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRi eksvMS83MTI1QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxMjVCRURERkVDMjlDMEE0 Q0Y1OTFFNUVCNDA4MzhCRkUzQzdBQzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEhnSnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRieksvMS83 MTI1QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq24XFRyJhSutg56fXANV18khTvrQC0cwmsq9b7WJInrdkYempBbjEttujKSL 26Gulg1HISkrxtXWtT0M+PZ9bGeyI/M/2yEfkhbG+mW6kmKbEsT1DcQ+rYjXPK3C icmjrIwj5rS875RQ1Ie9OAVlVxBMvM11HGTjTdOtfImx7VUztL8C1JpdDN5/JYUh jS4KNHNvLOyLJ5qP839+/vcw+FkJWee4LeX0GtSeMKREvD6ZK8S8QANAUjAx9KyP rkDdCNPeJOHQKmttRyp5Dbvygf2+tFlKjDrOgY75W5M+PVoXsKpB8RyNWljeEYsD l9sxjGsNrKveNu+qBEKZQf1Bgw== -----END CERTIFICATE-----Generated at Sat Apr 12 16:20:04 2025 by rpki-client