$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft File: DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft (raw, json) Hash identifier: GJE1oqrWZ+rXaU8mie6erkVPSTHkbWzq3cUI/j5e/AU= Subject key identifier: 9B:6E:3B:F5:62:64:8D:17:A9:28:2D:22:A9:C4:BB:5E:D8:87:82:4F Authority key identifier: DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE Certificate issuer: /CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE Certificate serial: 3D2920D7FFB5A681B75FFD7DBC436D3EEEA0979E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer Subject info access: rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft Manifest number: 1A Signing time: Sun 27 Apr 2025 19:06:05 +0000 Manifest this update: Sun 27 Apr 2025 19:01:05 +0000 Manifest next update: Mon 28 Apr 2025 22:29:05 +0000 Files and hashes: 1: 3137372e3132352e37322e302f32332d3233203d3e203532373636.roa (hash: RUgWQbSbfKqm4Hfu18+LGJPAqutuS6ikmtMKvWzJroY=) 2: 3137372e3132352e37332e302f32342d3234203d3e203532373636.roa (hash: yHmJCMANwgyJZi7RpIORKezVofQsOnGYoQYEeBdFCP0=) 3: DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl (hash: JmZvSHhWQLnwqH1yL67d5tnYiu6PLWSh8RTq96GRe1M=) 4: 3137372e3132352e37322e302f32342d3234203d3e203532373636.roa (hash: 8l8sj6Lhn0LhQN9ND1pd5nXSQ+34FWL+b1PnT0OphM8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 20:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:29:20:d7:ff:b5:a6:81:b7:5f:fd:7d:bc:43:6d:3e:ee:a0:97:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE Validity Not Before: Apr 27 19:01:05 2025 GMT Not After : Apr 28 22:29:05 2025 GMT Subject: CN=9B6E3BF562648D17A9282D22A9C4BB5ED887824F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:d8:b6:b5:40:0f:7b:d4:43:92:26:6b:93: a5:dc:ef:c7:63:0b:dd:62:a3:85:2a:75:b3:44:65: 06:3e:39:5e:c8:d3:8a:a2:05:57:50:f3:86:da:d7: 2a:26:de:4a:44:be:8a:eb:62:d6:88:69:4f:5d:eb: 19:c4:9b:af:d5:af:f1:99:73:f3:cd:c2:c1:73:db: f5:0a:d8:37:f9:ca:c4:10:e2:88:5a:94:cc:1b:63: ff:4d:03:4d:85:ad:d9:c0:f3:65:74:4c:a9:5c:c5: 11:32:74:47:cf:94:03:c8:91:d1:17:e7:6f:e1:83: f8:a8:f7:8a:92:15:62:ca:aa:15:3b:c9:3d:5f:bc: 6b:ce:cb:0c:ac:b5:22:2c:e1:dd:36:6e:f8:a7:d8: 09:e9:a6:a6:b4:28:46:7e:81:4f:54:28:73:b8:6d: ea:fc:e1:c0:8e:89:23:59:8c:e2:02:7d:58:e6:f3: 71:c2:90:ef:6d:02:7d:e6:72:0b:40:85:24:e7:1e: 29:38:9d:4e:f0:e2:7f:39:20:95:a9:dc:fc:78:22: c5:05:fd:e0:ef:6c:b6:26:52:8f:92:2e:24:96:ce: f0:ce:d2:22:2c:79:53:dd:8b:f8:bc:ef:00:ad:3f: b1:0b:21:5c:b6:32:e2:c1:b1:41:99:45:26:a2:6a: e3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6E:3B:F5:62:64:8D:17:A9:28:2D:22:A9:C4:BB:5E:D8:87:82:4F X509v3 Authority Key Identifier: keyid:DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ad:ba:cb:4a:d1:56:85:00:26:08:ec:7d:2c:49:44:9f:f4: 12:8a:b5:96:23:52:fa:de:ca:99:a0:9a:f8:01:10:f7:a6:9d: d2:ac:96:a0:38:48:97:6c:9f:e7:a2:e4:49:79:48:5a:ce:ec: 6e:32:f5:96:ef:7a:62:85:08:24:49:92:34:cb:61:29:27:ba: 2f:55:a2:23:1b:92:21:a0:a4:4c:bc:11:05:60:03:4e:a3:72: 12:aa:0f:f3:ab:cb:81:57:d2:0f:3f:1e:7c:29:4b:21:e5:49: 2a:96:cc:fe:23:1b:0c:2e:ce:9f:d3:ee:97:e7:25:84:14:3e: be:24:c7:cf:2b:d0:c4:fd:18:48:2a:71:76:21:95:4c:f8:75: 84:7d:11:50:f1:e1:e1:33:93:28:42:63:46:17:df:58:1c:dc: 9f:ad:c1:eb:a0:e3:16:f7:a3:02:8e:a4:fa:43:04:22:0f:e4: 1e:e8:ce:3f:7d:bc:26:0f:37:36:cb:f8:70:14:94:fb:38:fc: 78:75:53:0d:4c:84:72:d5:65:10:78:97:72:c4:a0:71:ca:08: 63:4e:1f:d5:a4:37:54:87:68:9a:ca:43:c1:d6:1f:f0:2a:db: 66:bc:aa:31:19:e0:2b:a7:e2:1f:23:e9:91:6b:f7:9b:61:68: 9a:0b:e1:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPSkg1/+1poG3X/19vENtPu6gl54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJBOUJCNkZENTY3QTUwODNCN0JBMEJCMDdDRDMxMjEw RjNDOEJFRTAeFw0yNTA0MjcxOTAxMDVaFw0yNTA0MjgyMjI5MDVaMDMxMTAvBgNV BAMTKDlCNkUzQkY1NjI2NDhEMTdBOTI4MkQyMkE5QzRCQjVFRDg4NzgyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsK9i2tUAPe9RDkiZrk6Xc78dj C91io4UqdbNEZQY+OV7I04qiBVdQ84ba1yom3kpEvorrYtaIaU9d6xnEm6/Vr/GZ c/PNwsFz2/UK2Df5ysQQ4ohalMwbY/9NA02FrdnA82V0TKlcxREydEfPlAPIkdEX 52/hg/io94qSFWLKqhU7yT1fvGvOywystSIs4d02bvin2Anppqa0KEZ+gU9UKHO4 ber84cCOiSNZjOICfVjm83HCkO9tAn3mcgtAhSTnHik4nU7w4n85IJWp3Px4IsUF /eDvbLYmUo+SLiSWzvDO0iIseVPdi/i87wCtP7ELIVy2MuLBsUGZRSaiauMlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUm2479WJkjRepKC0iqcS7XtiHgk8wHwYDVR0j BBgwFoAU26m7b9VnpQg7e6C7B80xIQ88i+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0NQUFp1UGppdVFCWWt2M0JhS1ZOcXFLNXQyN3ppcXA5ZmhCV1NTZUVv ZlYvMC9EQkE5QkI2RkQ1NjdBNTA4M0I3QkEwQkIwN0NEMzEyMTBGM0M4QkVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQTlCQjZGRDU2N0E1MDgz QjdCQTBCQjA3Q0QzMTIxMEYzQzhCRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0NQUFp1UGppdVFCWWt2M0JhS1ZOcXFLNXQyN3ppcXA5ZmhCV1NTZUVvZlYvMC9E QkE5QkI2RkQ1NjdBNTA4M0I3QkEwQkIwN0NEMzEyMTBGM0M4QkVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVa26y0rRVoUAJgjsfSxJRJ/0Eoq1liNS+t7KmaCa+AEQ96ad0qyWoDhIl2yf 56LkSXlIWs7sbjL1lu96YoUIJEmSNMthKSe6L1WiIxuSIaCkTLwRBWADTqNyEqoP 86vLgVfSDz8efClLIeVJKpbM/iMbDC7On9Pul+clhBQ+viTHzyvQxP0YSCpxdiGV TPh1hH0RUPHh4TOTKEJjRhffWBzcn63B66DjFvejAo6k+kMEIg/kHujOP328Jg83 Nsv4cBSU+zj8eHVTDUyEctVlEHiXcsSgccoIY04f1aQ3VIdomspDwdYf8CrbZryq MRngK6fiHyPpkWv3m2Fomgvh/g== -----END CERTIFICATE-----Generated at Sun Apr 27 23:50:34 2025 by rpki-client