$ rpki-client -vvf rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft File: D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft (raw, json) Hash identifier: alyZTgRoejz9cTJSWX98OZ9K2XEE61J75neO6J0wsFU= Subject key identifier: 11:A2:6A:13:D0:6E:C2:AB:1D:C2:34:35:4F:51:69:61:82:86:D5:0B Authority key identifier: D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5 Certificate issuer: /CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5 Certificate serial: 42CB702826930EA03EEA6444501978000731DEBF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft Manifest number: 1D Signing time: Wed 07 May 2025 06:16:53 +0000 Manifest this update: Wed 07 May 2025 06:11:53 +0000 Manifest next update: Thu 08 May 2025 06:25:53 +0000 Files and hashes: 1: D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl (hash: bQs9XvPtGlaO0SSmmgPp+0UeHMw27it8O2TEnpdcF6Y=) 2: 3137372e3132382e3232382e302f32322d3332203d3e203238353932.roa (hash: ZuDr+uoivnY73ETayT+plzAx38hIjwRMmlYEOg/XzDw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 08 May 2025 06:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:cb:70:28:26:93:0e:a0:3e:ea:64:44:50:19:78:00:07:31:de:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D78BD49F1698DE948F47136B6B8D2484F53C56D5 Validity Not Before: May 7 06:11:53 2025 GMT Not After : May 8 06:25:53 2025 GMT Subject: CN=11A26A13D06EC2AB1DC234354F5169618286D50B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:f7:97:c3:68:22:fb:33:5c:2f:aa:75:34: f3:31:9d:eb:be:9f:5d:2b:05:fc:dd:f9:de:06:bd: 0f:55:56:81:98:d7:d1:f8:a6:91:ec:51:f2:76:42: ee:5e:9d:5c:1b:e1:08:d7:3b:3c:45:74:78:27:8e: 71:5c:60:20:a3:4b:bc:05:d6:ef:f4:08:0c:31:3e: 71:92:07:57:7f:86:34:d8:40:87:f7:6a:ac:4f:68: b4:7f:39:83:fc:35:64:99:d9:1d:29:93:57:d8:10: c1:a4:df:1d:dd:43:3a:99:16:5b:11:e6:87:74:14: 14:da:72:84:36:1c:bd:25:d2:d8:be:7e:b3:c9:1f: 13:8d:f2:cf:47:8c:f2:e6:b1:b5:8e:e5:7f:38:15: 83:70:ec:80:d4:0d:e7:3f:0a:6e:2b:d2:94:24:f4: e6:bb:ad:cd:4c:56:8d:85:fc:2a:69:8d:fb:3e:88: c3:67:07:77:ce:ba:4d:30:77:82:cd:03:3f:4d:49: 56:3e:4c:fc:6c:b3:f7:90:e3:ec:06:b7:36:20:2a: 60:d8:88:42:b3:53:63:6d:24:0a:9e:21:9a:6f:3b: 59:e7:f6:04:2b:82:29:d1:80:2b:93:7e:f0:2e:09: 15:fb:7f:6c:38:2f:eb:5e:28:41:0f:f3:b7:e0:a6: ae:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A2:6A:13:D0:6E:C2:AB:1D:C2:34:35:4F:51:69:61:82:86:D5:0B X509v3 Authority Key Identifier: keyid:D7:8B:D4:9F:16:98:DE:94:8F:47:13:6B:6B:8D:24:84:F5:3C:56:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D78BD49F1698DE948F47136B6B8D2484F53C56D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KWuXxJHMTbxVRohdXi8hb9M9HMQkyqEjHhSVsnLnD33/0/D78BD49F1698DE948F47136B6B8D2484F53C56D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d5:02:0a:bd:ed:ef:93:e8:1a:5e:c9:d6:48:5a:57:02:d2: 09:35:7b:7b:7b:4e:7c:96:f2:eb:98:8a:8c:62:91:15:e4:de: 1e:2d:74:b5:3c:79:38:7b:61:d9:d2:07:60:85:be:32:00:e1: 3a:84:c6:0f:67:60:bb:4a:db:57:7d:6b:da:f0:61:48:be:b2: c8:c5:49:fa:80:17:08:eb:66:12:7c:51:dc:47:dd:d0:bf:cf: 5e:ae:71:01:fb:ec:0e:18:93:e5:6c:53:1c:70:f0:dd:42:65: 0f:fb:2d:0b:55:05:ec:df:aa:88:da:5d:58:43:aa:e4:1e:f6: 55:0b:fc:22:95:3f:f1:34:6a:fb:0b:02:86:7b:a1:f1:2b:a2: 1f:ec:1f:54:c7:02:19:18:2e:81:86:2a:cf:98:81:b7:6a:2a: 67:68:34:e7:13:67:79:3f:67:0e:a3:de:99:27:60:de:1f:d1: 27:4f:24:76:53:3f:4a:a2:06:ab:4a:2b:a5:2b:a8:37:89:82: 80:13:67:6d:c3:4f:aa:a4:0d:33:87:2c:7f:b5:93:d3:6e:f5: 3b:e1:b9:58:07:51:5a:1b:2e:79:fe:9e:3e:e0:17:2c:17:54: c3:28:4e:6d:6c:ab:89:cf:7f:4c:09:ea:18:78:13:98:9d:19: 78:8a:06:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQstwKCaTDqA+6mREUBl4AAcx3r8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4QkQ0OUYxNjk4REU5NDhGNDcxMzZCNkI4RDI0ODRG NTNDNTZENTAeFw0yNTA1MDcwNjExNTNaFw0yNTA1MDgwNjI1NTNaMDMxMTAvBgNV BAMTKDExQTI2QTEzRDA2RUMyQUIxREMyMzQzNTRGNTE2OTYxODI4NkQ1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqPeXw2gi+zNcL6p1NPMxneu+ n10rBfzd+d4GvQ9VVoGY19H4ppHsUfJ2Qu5enVwb4QjXOzxFdHgnjnFcYCCjS7wF 1u/0CAwxPnGSB1d/hjTYQIf3aqxPaLR/OYP8NWSZ2R0pk1fYEMGk3x3dQzqZFlsR 5od0FBTacoQ2HL0l0ti+frPJHxON8s9HjPLmsbWO5X84FYNw7IDUDec/Cm4r0pQk 9Oa7rc1MVo2F/Cppjfs+iMNnB3fOuk0wd4LNAz9NSVY+TPxss/eQ4+wGtzYgKmDY iEKzU2NtJAqeIZpvO1nn9gQrginRgCuTfvAuCRX7f2w4L+teKEEP87fgpq4zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEaJqE9BuwqsdwjQ1T1FpYYKG1QswHwYDVR0j BBgwFoAU14vUnxaY3pSPRxNra40khPU8VtUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEtXdVh4SkhNVGJ4VlJvaGRYaThoYjlNOUhNUWt5cUVqSGhTVnNuTG5E MzMvMC9ENzhCRDQ5RjE2OThERTk0OEY0NzEzNkI2QjhEMjQ4NEY1M0M1NkQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OEJENDlGMTY5OERFOTQ4 RjQ3MTM2QjZCOEQyNDg0RjUzQzU2RDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEtXdVh4SkhNVGJ4VlJvaGRYaThoYjlNOUhNUWt5cUVqSGhTVnNuTG5EMzMvMC9E NzhCRDQ5RjE2OThERTk0OEY0NzEzNkI2QjhEMjQ4NEY1M0M1NkQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp9UCCr3t75PoGl7J1khaVwLSCTV7e3tOfJby65iKjGKRFeTeHi10tTx5OHth 2dIHYIW+MgDhOoTGD2dgu0rbV31r2vBhSL6yyMVJ+oAXCOtmEnxR3Efd0L/PXq5x AfvsDhiT5WxTHHDw3UJlD/stC1UF7N+qiNpdWEOq5B72VQv8IpU/8TRq+wsChnuh 8SuiH+wfVMcCGRgugYYqz5iBt2oqZ2g05xNneT9nDqPemSdg3h/RJ08kdlM/SqIG q0orpSuoN4mCgBNnbcNPqqQNM4csf7WT0271O+G5WAdRWhsuef6ePuAXLBdUwyhO bWyric9/TAnqGHgTmJ0ZeIoGEw== -----END CERTIFICATE-----Generated at Wed May 7 22:57:01 2025 by rpki-client