$ rpki-client -vvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft File: 06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft (raw, json) Hash identifier: j2Bj38bqiryllSrk3kN8+9BVtlJZolrzbl2iV6HOocM= Subject key identifier: BD:68:29:F7:80:2F:91:0A:B4:EF:15:6F:FA:97:8D:1B:2C:48:2C:D9 Authority key identifier: 06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8 Certificate issuer: /CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8 Certificate serial: 5DDE3B3B23404239FE909DD48FEFAAE643BEA137 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft Manifest number: FF Signing time: Sun 27 Apr 2025 08:43:32 +0000 Manifest this update: Sun 27 Apr 2025 08:38:32 +0000 Manifest next update: Mon 28 Apr 2025 11:54:32 +0000 Files and hashes: 1: 06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl (hash: jeNBCKBnJ80+mPV+GBTuwi6Gqpm7iGIu6y7xW4LmINU=) 2: 3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa (hash: +dy0OguRHHodpvI7m+maVRaKu+AFPlpY/u0O/GjQHAk=) 3: 3133322e3235352e3137322e302f32322d3234203d3e20323634353137.roa (hash: 796yusbbPZ/62GBpJks3J3pz4e0+5gB+NVAL+An9w5I=) 4: 323830343a323064633a3a2f33322d3438203d3e20323634353137.roa (hash: M5hBf8sBNi6/oq7AprV5Am9TiLrx3NpGRnhuqPlNE6E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 11:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:de:3b:3b:23:40:42:39:fe:90:9d:d4:8f:ef:aa:e6:43:be:a1:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8 Validity Not Before: Apr 27 08:38:32 2025 GMT Not After : Apr 28 11:54:32 2025 GMT Subject: CN=BD6829F7802F910AB4EF156FFA978D1B2C482CD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:10:9a:2c:2b:5b:19:cf:01:d2:61:53:6e:5f: e2:8e:1c:bf:84:41:61:5d:78:c9:e0:98:78:e5:58: 66:75:88:0f:ce:3a:47:f8:a3:41:01:54:5c:c8:14: db:0b:1e:44:91:ef:9a:c4:24:a2:23:59:cf:b4:2f: 6e:65:70:d4:78:df:16:61:d1:62:ff:79:ec:38:dc: 95:55:eb:d1:c8:b2:58:6d:40:9e:b3:db:fb:ed:3f: 92:79:86:83:e5:5c:c8:38:3f:0c:d6:73:f7:23:eb: 46:46:d2:df:02:10:4f:8a:fa:39:ca:18:28:11:0d: 67:7d:d4:35:9c:9b:0e:70:77:c7:a6:c2:d9:25:a0: c0:6d:21:0b:3f:42:66:97:fb:c8:9e:29:76:1c:d2: 6c:b3:e2:7b:6d:60:3c:75:2f:ff:06:f0:fa:31:04: e8:fe:27:e1:bf:7e:cc:c9:80:e0:cd:cb:41:9a:f5: 9f:f4:58:9f:bd:d7:07:d5:2f:62:c7:8d:26:85:0b: 38:8e:21:83:7e:10:27:19:69:84:56:52:36:3b:fb: eb:61:9d:50:5c:88:60:3c:2f:e2:63:11:7f:9d:be: af:a6:64:1e:07:6a:86:06:e0:1f:6c:cd:2d:0b:76: 0a:2c:9a:54:eb:36:1d:ca:7e:2d:e2:af:be:26:05: 4b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:68:29:F7:80:2F:91:0A:B4:EF:15:6F:FA:97:8D:1B:2C:48:2C:D9 X509v3 Authority Key Identifier: keyid:06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a6:fb:0f:48:51:cc:ba:4a:2b:b9:f1:56:5c:75:1c:1a:fa: 34:3c:1f:f6:44:95:e4:5c:8b:49:a6:b4:db:44:e5:0b:bf:09: 42:eb:a8:bf:90:dd:2d:85:50:cd:a2:17:f2:2e:38:f6:7c:b2: 6e:b5:2d:3c:69:61:61:ef:71:e6:16:90:82:8a:33:15:0a:f9: 75:e5:64:99:1e:21:00:1d:9d:49:a6:aa:ff:fe:c9:a1:88:dd: c1:b0:2c:10:3c:a3:69:55:00:0b:7a:b8:98:fd:e2:ee:95:ba: 2d:ed:97:a7:ed:3c:a9:59:25:6b:f9:78:0c:54:86:2b:f7:1d: 8b:29:63:13:1a:a1:30:62:9a:86:14:9c:19:b5:1e:b4:19:0b: c1:36:88:54:20:9e:74:50:df:a6:2d:82:f4:4d:ad:e4:1b:fd: ba:78:9f:b8:f9:05:1e:c0:8e:af:ad:1c:5a:3c:b0:66:3b:df: 6a:24:56:1a:9f:f1:11:16:7f:62:03:53:a4:5f:75:9d:58:de: 37:b1:9a:47:ca:88:71:f9:18:3f:95:b3:a1:f8:00:34:79:07: cc:45:81:a5:6e:0b:27:b1:4c:75:f3:e8:9a:82:03:51:34:cc: b1:76:7c:21:5b:8d:21:e8:b7:b7:b9:da:44:e9:1c:d1:e6:7f: aa:7d:a1:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXd47OyNAQjn+kJ3Uj++q5kO+oTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQkQzMkU4NjVEOUQwOEZBNUM5ODJBQjdDQkRBNEZD QjIyNjJFODAeFw0yNTA0MjcwODM4MzJaFw0yNTA0MjgxMTU0MzJaMDMxMTAvBgNV BAMTKEJENjgyOUY3ODAyRjkxMEFCNEVGMTU2RkZBOTc4RDFCMkM0ODJDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTEJosK1sZzwHSYVNuX+KOHL+E QWFdeMngmHjlWGZ1iA/OOkf4o0EBVFzIFNsLHkSR75rEJKIjWc+0L25lcNR43xZh 0WL/eew43JVV69HIslhtQJ6z2/vtP5J5hoPlXMg4PwzWc/cj60ZG0t8CEE+K+jnK GCgRDWd91DWcmw5wd8emwtkloMBtIQs/QmaX+8ieKXYc0myz4nttYDx1L/8G8Pox BOj+J+G/fszJgODNy0Ga9Z/0WJ+91wfVL2LHjSaFCziOIYN+ECcZaYRWUjY7++th nVBciGA8L+JjEX+dvq+mZB4HaoYG4B9szS0LdgosmlTrNh3Kfi3ir74mBUslAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvWgp94AvkQq07xVv+peNGyxILNkwHwYDVR0j BBgwFoAUBtvTLoZdnQj6XJgqt8vaT8siYugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEdud1gybUFndFlZM1lvcmFkc0Ztb1NWWDRuamZ6bzVkVHFobzhtZzhl UkwvMC8wNkRCRDMyRTg2NUQ5RDA4RkE1Qzk4MkFCN0NCREE0RkNCMjI2MkU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2REJEMzJFODY1RDlEMDhG QTVDOTgyQUI3Q0JEQTRGQ0IyMjYyRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEdud1gybUFndFlZM1lvcmFkc0Ztb1NWWDRuamZ6bzVkVHFobzhtZzhlUkwvMC8w NkRCRDMyRTg2NUQ5RDA4RkE1Qzk4MkFCN0NCREE0RkNCMjI2MkU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjqb7D0hRzLpKK7nxVlx1HBr6NDwf9kSV5FyLSaa020TlC78JQuuov5DdLYVQ zaIX8i449nyybrUtPGlhYe9x5haQgoozFQr5deVkmR4hAB2dSaaq//7JoYjdwbAs EDyjaVUAC3q4mP3i7pW6Le2Xp+08qVkla/l4DFSGK/cdiyljExqhMGKahhScGbUe tBkLwTaIVCCedFDfpi2C9E2t5Bv9unifuPkFHsCOr60cWjywZjvfaiRWGp/xERZ/ YgNTpF91nVjeN7GaR8qIcfkYP5WzofgANHkHzEWBpW4LJ7FMdfPomoIDUTTMsXZ8 IVuNIei3t7naROkc0eZ/qn2h/A== -----END CERTIFICATE-----Generated at Mon Apr 28 04:06:56 2025 by rpki-client