$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft File: DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft (raw, json) Hash identifier: pc6HdqtTzb7ahypJnFveZEX1ljqZsWehFxhmhzom+QU= Subject key identifier: 53:65:A5:8F:38:E0:EE:08:9D:0B:05:C9:D6:7E:2D:77:71:63:72:90 Authority key identifier: DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70 Certificate issuer: /CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570 Certificate serial: 169CA2BC5FE066FCC0822DF2D0AFE1373A130984 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer Subject info access: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft Manifest number: 01E0 Signing time: Tue 06 May 2025 04:07:45 +0000 Manifest this update: Tue 06 May 2025 04:02:45 +0000 Manifest next update: Wed 07 May 2025 06:32:45 +0000 Files and hashes: 1: 323830343a346464343a3a2f33322d3438203d3e20323638323232.roa (hash: fv6ZnXxZ45ntnnbYQPrDO2OsehPsbW9FdZy/XuAwgL0=) 2: DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl (hash: 3CDdDHOgm5xHz+fVLOPeI9q5k7Pbs/fDu5rvIxMIN7A=) 3: 34352e3233362e32302e302f32322d3234203d3e20323638323232.roa (hash: FG1wug4MqyLJsAReVjvXRe7puwgFUXpXXwbr9j3w0ZI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 07 May 2025 06:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9c:a2:bc:5f:e0:66:fc:c0:82:2d:f2:d0:af:e1:37:3a:13:09:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570 Validity Not Before: May 6 04:02:45 2025 GMT Not After : May 7 06:32:45 2025 GMT Subject: CN=5365A58F38E0EE089D0B05C9D67E2D7771637290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:87:e4:9b:0e:f0:25:d4:ba:04:09:fd:a8:5b: 4f:b7:f1:ed:87:80:b3:f6:e7:ce:7d:02:00:0a:0a: bc:6b:58:0b:dc:e7:45:d7:1a:c8:a8:79:d5:22:24: 8a:d0:dc:5d:fc:e1:1f:b6:dc:ee:1e:f8:00:2b:7b: 1b:bd:cf:53:2e:76:a6:e0:c8:a1:2c:cf:c1:b0:c1: c1:d6:2e:ba:4a:c8:a0:d8:e7:db:f4:8c:47:51:3e: 19:97:4b:24:cf:8b:c2:3e:31:92:06:62:22:1e:93: 07:9f:92:66:e9:d7:e6:55:4b:10:73:9f:89:39:df: 56:de:06:e6:e7:48:b1:99:90:6d:62:59:e5:5d:13: c7:67:c9:9c:b9:12:d0:67:de:b8:e4:ec:d1:d9:08: d7:38:ce:07:d9:af:96:f9:7f:7b:e4:7e:ac:4a:17: 9b:54:24:26:fe:59:d2:83:80:17:74:c9:01:70:b2: cf:09:b6:58:19:2c:ec:31:d8:63:2c:72:7a:92:3c: ff:40:36:db:2c:da:e8:fe:74:98:28:bd:03:ee:02: ce:f7:9c:1d:da:61:b1:c1:d1:d9:4c:cc:08:ac:05: b0:3f:b0:bd:9d:62:a5:7b:54:57:8c:70:46:87:43: bf:37:90:cd:53:b5:7f:8f:da:31:48:79:da:b6:f6: f7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:65:A5:8F:38:E0:EE:08:9D:0B:05:C9:D6:7E:2D:77:71:63:72:90 X509v3 Authority Key Identifier: keyid:DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:82:3e:ac:7b:0b:4d:1e:03:62:03:5e:76:44:48:de:fd:af: 54:01:bc:e7:2a:68:bf:b6:3b:00:07:97:d1:6a:d9:c7:28:50: bc:f4:58:39:4a:85:26:40:c5:02:bc:31:d2:25:07:c1:8f:2f: b4:6c:7e:a1:10:da:f7:02:97:e3:bf:59:e5:c1:f2:c4:bb:55: 65:53:78:fb:f9:86:cb:de:81:51:fe:2e:5f:a2:78:87:37:c0: 89:61:1c:78:8e:bb:7f:aa:7a:ee:d7:0b:d8:68:e9:00:4f:65: ca:27:4f:1b:03:9f:9f:84:4b:36:f9:74:29:b3:3f:64:b4:23: b4:d8:fe:0f:4b:25:a9:1b:45:43:a2:86:c9:a6:1d:13:ce:f8: 7f:64:d7:03:ae:86:bf:1b:d3:33:dd:73:21:9b:28:2c:3e:44: 6d:3b:cf:31:64:94:06:51:fb:70:a1:db:c5:e3:6d:2a:d4:01: 81:66:0e:24:fe:bf:05:a2:64:cd:43:51:d8:df:10:46:74:a4: 1d:cc:d4:15:16:45:a8:86:f6:1c:4e:3f:ce:a1:09:70:46:e7: dd:38:d4:49:29:04:bb:1f:2f:d9:6b:88:3d:98:3f:bf:07:09: e5:40:79:33:72:93:eb:d7:0d:48:f4:ec:9c:8a:47:2d:18:6e: cf:0a:9e:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFpyivF/gZvzAgi3y0K/hNzoTCYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBMUVDNEEwRTQ4QjVDMDlGQjc0NjMyN0YwNUY1MUVC NUY4RTU3MDAeFw0yNTA1MDYwNDAyNDVaFw0yNTA1MDcwNjMyNDVaMDMxMTAvBgNV BAMTKDUzNjVBNThGMzhFMEVFMDg5RDBCMDVDOUQ2N0UyRDc3NzE2MzcyOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPh+SbDvAl1LoECf2oW0+38e2H gLP25859AgAKCrxrWAvc50XXGsioedUiJIrQ3F384R+23O4e+AArexu9z1Mudqbg yKEsz8GwwcHWLrpKyKDY59v0jEdRPhmXSyTPi8I+MZIGYiIekwefkmbp1+ZVSxBz n4k531beBubnSLGZkG1iWeVdE8dnyZy5EtBn3rjk7NHZCNc4zgfZr5b5f3vkfqxK F5tUJCb+WdKDgBd0yQFwss8JtlgZLOwx2GMscnqSPP9ANtss2uj+dJgovQPuAs73 nB3aYbHB0dlMzAisBbA/sL2dYqV7VFeMcEaHQ783kM1TtX+P2jFIedq29vcBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUU2Wljzjg7gidCwXJ1n4td3FjcpAwHwYDVR0j BBgwFoAU3aHsSg5ItcCft0YyfwX1HrX45XAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERq UksvMC9EREExRUM0QTBFNDhCNUMwOUZCNzQ2MzI3RjA1RjUxRUI1RjhFNTcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REQTFFQzRBMEU0OEI1QzA5 RkI3NDYzMjdGMDVGNTFFQjVGOEU1NzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERqUksvMC9E REExRUM0QTBFNDhCNUMwOUZCNzQ2MzI3RjA1RjUxRUI1RjhFNTcwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsYI+rHsLTR4DYgNedkRI3v2vVAG85ypov7Y7AAeX0WrZxyhQvPRYOUqFJkDF Arwx0iUHwY8vtGx+oRDa9wKX479Z5cHyxLtVZVN4+/mGy96BUf4uX6J4hzfAiWEc eI67f6p67tcL2GjpAE9lyidPGwOfn4RLNvl0KbM/ZLQjtNj+D0slqRtFQ6KGyaYd E874f2TXA66GvxvTM91zIZsoLD5EbTvPMWSUBlH7cKHbxeNtKtQBgWYOJP6/BaJk zUNR2N8QRnSkHczUFRZFqIb2HE4/zqEJcEbn3TjUSSkEux8v2WuIPZg/vwcJ5UB5 M3KT69cNSPTsnIpHLRhuzwqeyg== -----END CERTIFICATE-----Generated at Tue May 6 20:14:05 2025 by rpki-client