$ rpki-client -vvf rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft File: DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft (raw, json) Hash identifier: LBFeqtcAnDVyd7KVurlFrUHvmcpgwPp6Wsxa/i9+Y24= Subject key identifier: 67:E6:C8:89:53:F0:97:7C:83:B2:2A:AC:2E:D3:8B:39:EC:CA:83:C8 Authority key identifier: DA:A9:0F:AC:A0:DF:71:D2:7E:A4:00:93:7B:94:23:A3:BD:8F:05:BF Certificate issuer: /CN=DAA90FACA0DF71D27EA400937B9423A3BD8F05BF Certificate serial: 5A57E9132FFB1B3EBD5EAD1B825846FFC5629D11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer Subject info access: rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft Manifest number: FA Signing time: Mon 28 Apr 2025 11:18:03 +0000 Manifest this update: Mon 28 Apr 2025 11:13:03 +0000 Manifest next update: Tue 29 Apr 2025 14:44:03 +0000 Files and hashes: 1: DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl (hash: P6z4lL6YaZe2O4vJzLq6pj6xAfpRkG5jisDLP7bkKws=) 2: 3136302e3233382e3137322e302f32322d3234203d3e20323636353534.roa (hash: 3amzwyg3JtmpHjLsGYT1Ylihai+j4QHw4Iv2HmnWt0k=) 3: 323830343a336463633a3a2f33322d3438203d3e20323636353534.roa (hash: Us/qMtaBQT31jKRuL2J9Elh5GZUUnTD2YjkN5CM1wrA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 14:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:57:e9:13:2f:fb:1b:3e:bd:5e:ad:1b:82:58:46:ff:c5:62:9d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DAA90FACA0DF71D27EA400937B9423A3BD8F05BF Validity Not Before: Apr 28 11:13:03 2025 GMT Not After : Apr 29 14:44:03 2025 GMT Subject: CN=67E6C88953F0977C83B22AAC2ED38B39ECCA83C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:40:a8:65:7f:36:3b:52:17:f4:fd:10:a1: 49:da:8a:fb:4c:4e:89:26:ea:b9:6e:34:f4:4d:f8: 0b:6a:70:db:72:87:b7:6a:4e:fe:bb:00:7d:cb:49: aa:0f:55:68:86:c0:30:3e:0f:85:4a:65:f7:f7:6d: 04:67:84:fd:c9:e7:0b:55:33:03:5b:39:dc:8b:21: d9:79:46:cd:02:97:f1:1a:39:7f:c7:54:47:bf:ce: e5:65:54:4c:12:71:14:5e:43:d4:bd:a0:b3:a5:7d: 45:e9:4b:cd:d8:15:77:e4:b9:36:a6:57:ff:14:44: b3:a1:23:94:69:b1:01:63:ef:48:b3:c2:66:1b:62: 31:2b:70:43:39:53:a4:c3:af:59:3b:94:5f:9a:dd: a8:55:aa:a0:7d:82:79:9e:75:9f:5a:0f:24:f3:55: 76:7a:da:72:6d:4a:a4:a4:df:fd:6c:8a:42:c5:d0: eb:1e:c1:f3:be:0f:a5:4d:f7:0b:6f:36:44:d8:ef: c7:ad:bd:77:49:dc:76:38:d8:09:7f:a1:0e:aa:0a: 42:9c:87:7b:a8:ef:80:c4:5f:34:aa:da:d0:ea:4a: 03:d3:6f:68:70:a3:9b:3d:6c:b0:42:00:71:0c:a0: 78:73:3e:70:b6:7f:5c:c2:c7:6b:68:24:a1:f1:2c: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E6:C8:89:53:F0:97:7C:83:B2:2A:AC:2E:D3:8B:39:EC:CA:83:C8 X509v3 Authority Key Identifier: keyid:DA:A9:0F:AC:A0:DF:71:D2:7E:A4:00:93:7B:94:23:A3:BD:8F:05:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NduD1uiXwoMwisskAnPHEjX8RZ1QZdBcB5P3briAyqe/0/DAA90FACA0DF71D27EA400937B9423A3BD8F05BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:14:f8:5b:1f:04:79:ad:0c:dd:c5:79:b5:5d:2c:28:17:c0: 64:cb:8e:6b:7c:14:57:c5:44:7d:15:49:67:4b:fc:d9:12:dc: 79:ae:ff:68:99:fd:a7:4e:e4:64:65:7f:46:8a:cb:0f:95:0b: cd:77:5e:31:a1:78:60:13:d0:6d:68:5e:9b:83:af:f9:c8:5b: 81:77:47:79:c1:16:8f:c4:44:30:92:d1:47:c8:bd:55:d4:db: 79:bf:5e:7e:af:6a:7d:06:62:36:20:75:9d:6d:cf:bb:8c:62: 11:49:48:ba:6f:76:2b:69:9e:7d:a5:69:b3:a4:f8:65:c3:7a: d3:3c:fc:9a:68:a4:60:9e:6f:ae:24:7b:6c:90:ce:ac:35:89: f9:84:84:b3:68:c2:d9:32:7f:37:ca:fd:99:6a:29:ac:c3:e2: 77:1a:20:b6:57:27:62:96:eb:34:92:94:33:3a:de:a6:0d:6b: 14:be:dc:8f:1d:e6:ad:1f:20:3d:a3:6d:c9:04:24:6c:0d:23: 00:85:55:ce:52:c3:48:59:ff:00:6b:b1:f9:0c:f4:cd:df:dc: 09:40:d5:3b:81:55:8e:46:ac:86:7a:a8:3e:4c:2a:a9:eb:32: ed:8f:5d:a7:fd:16:20:7d:13:a3:c9:3c:28:f5:dd:13:1d:74: 3b:51:ca:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWlfpEy/7Gz69Xq0bglhG/8VinREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREFBOTBGQUNBMERGNzFEMjdFQTQwMDkzN0I5NDIzQTNC RDhGMDVCRjAeFw0yNTA0MjgxMTEzMDNaFw0yNTA0MjkxNDQ0MDNaMDMxMTAvBgNV BAMTKDY3RTZDODg5NTNGMDk3N0M4M0IyMkFBQzJFRDM4QjM5RUNDQTgzQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUECoZX82O1IX9P0QoUnaivtM Tokm6rluNPRN+AtqcNtyh7dqTv67AH3LSaoPVWiGwDA+D4VKZff3bQRnhP3J5wtV MwNbOdyLIdl5Rs0Cl/EaOX/HVEe/zuVlVEwScRReQ9S9oLOlfUXpS83YFXfkuTam V/8URLOhI5RpsQFj70izwmYbYjErcEM5U6TDr1k7lF+a3ahVqqB9gnmedZ9aDyTz VXZ62nJtSqSk3/1sikLF0OsewfO+D6VN9wtvNkTY78etvXdJ3HY42Al/oQ6qCkKc h3uo74DEXzSq2tDqSgPTb2hwo5s9bLBCAHEMoHhzPnC2f1zCx2toJKHxLEBNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZ+bIiVPwl3yDsiqsLtOLOezKg8gwHwYDVR0j BBgwFoAU2qkPrKDfcdJ+pACTe5Qjo72PBb8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk5kdUQxdWlYd29Nd2lzc2tBblBIRWpYOFJaMVFaZEJjQjVQM2JyaUF5 cWUvMC9EQUE5MEZBQ0EwREY3MUQyN0VBNDAwOTM3Qjk0MjNBM0JEOEYwNUJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBQTkwRkFDQTBERjcxRDI3 RUE0MDA5MzdCOTQyM0EzQkQ4RjA1QkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mk5kdUQxdWlYd29Nd2lzc2tBblBIRWpYOFJaMVFaZEJjQjVQM2JyaUF5cWUvMC9E QUE5MEZBQ0EwREY3MUQyN0VBNDAwOTM3Qjk0MjNBM0JEOEYwNUJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAERT4Wx8Eea0M3cV5tV0sKBfAZMuOa3wUV8VEfRVJZ0v82RLcea7/aJn9p07k ZGV/RorLD5ULzXdeMaF4YBPQbWhem4Ov+chbgXdHecEWj8REMJLRR8i9VdTbeb9e fq9qfQZiNiB1nW3Pu4xiEUlIum92K2mefaVps6T4ZcN60zz8mmikYJ5vriR7bJDO rDWJ+YSEs2jC2TJ/N8r9mWoprMPidxogtlcnYpbrNJKUMzrepg1rFL7cjx3mrR8g PaNtyQQkbA0jAIVVzlLDSFn/AGux+Qz0zd/cCUDVO4FVjkashnqoPkwqqesy7Y9d p/0WIH0To8k8KPXdEx10O1HK2Q== -----END CERTIFICATE-----Generated at Tue Apr 29 03:02:21 2025 by rpki-client