$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft File: 11CAB655737FE08C031052B869B67F7F82CCE9CC.mft (raw, json) Hash identifier: ERfN0ra9R1rCL/jxUSuhB7t7OYJROzasJT/v2qnhBtI= Subject key identifier: 2B:E0:69:9A:79:7E:1A:87:FA:5A:DE:D7:D2:A4:13:C2:12:3D:16:5C Authority key identifier: 11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC Certificate issuer: /CN=11CAB655737FE08C031052B869B67F7F82CCE9CC Certificate serial: 34894BE7AE77D7DA4B93D069AE0D06E2EFB56B3F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft Manifest number: 86 Signing time: Mon 28 Apr 2025 20:24:04 +0000 Manifest this update: Mon 28 Apr 2025 20:19:04 +0000 Manifest next update: Tue 29 Apr 2025 23:28:04 +0000 Files and hashes: 1: 323830343a343031343a3a2f33322d313238203d3e20323635393333.roa (hash: s5G6Z9jrVoevflU84bZ+yzQEF2Gyexpuwo5a+N4Yd7w=) 2: 3136342e3136332e302e302f32322d3332203d3e20323635393333.roa (hash: GHvq9r74x2Xc9pO/newiw9yIkLQrbVGTcJbcBnLLpsk=) 3: 34352e342e38302e302f32322d3332203d3e20323635393333.roa (hash: Hjx5RjpzokA4knJgq0k249DxnjzKzpITikPCcGMUtr8=) 4: 11CAB655737FE08C031052B869B67F7F82CCE9CC.crl (hash: 7Whj3O+iknMq+r38q2A6caT61HUCXCILxL5S+V/j5dc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.crl rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 23:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:89:4b:e7:ae:77:d7:da:4b:93:d0:69:ae:0d:06:e2:ef:b5:6b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11CAB655737FE08C031052B869B67F7F82CCE9CC Validity Not Before: Apr 28 20:19:04 2025 GMT Not After : Apr 29 23:28:04 2025 GMT Subject: CN=2BE0699A797E1A87FA5ADED7D2A413C2123D165C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:63:5e:3a:74:d2:8a:e7:8d:0d:ad:f0:d3:87: 5d:30:2a:fc:6a:0f:38:03:17:22:49:76:f5:3b:f4: dd:ff:27:e1:52:35:53:81:08:f6:92:be:47:f8:a7: 10:16:07:68:19:c3:71:9e:d5:9a:3a:af:60:4a:46: 1e:c8:e2:42:02:54:a3:ed:9c:57:66:90:8b:f7:99: 49:b9:51:8a:e4:30:ac:9e:a9:60:1f:a5:02:42:1c: 42:9a:15:20:40:11:77:e6:f6:65:4b:1a:67:8a:14: 2d:0d:87:4a:cb:23:3e:77:ec:2e:48:72:85:74:6b: a7:c4:f3:c7:8c:88:5c:17:c7:0b:13:7c:87:42:3c: 30:b0:09:f7:60:35:6d:c2:7d:45:24:98:f3:60:35: 75:92:bb:6b:55:2c:af:83:24:db:ab:e6:f3:42:ad: 57:1a:a0:bb:58:f0:a1:d7:55:61:15:1b:8a:54:c6: 94:b2:96:db:0b:f8:79:b9:3c:24:90:5c:fc:8d:8e: f7:65:98:47:ca:f6:93:cc:86:2d:62:76:7d:d0:9c: 64:9b:77:17:22:9b:99:9c:87:8a:62:22:7e:93:d3: 5a:11:2e:15:17:07:e6:12:ca:66:8e:77:52:32:b1: 24:f5:a9:45:32:1c:ba:2a:6b:33:c3:77:11:cc:03: 4b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E0:69:9A:79:7E:1A:87:FA:5A:DE:D7:D2:A4:13:C2:12:3D:16:5C X509v3 Authority Key Identifier: keyid:11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:57:36:71:66:14:5e:15:e3:9a:6c:97:08:fa:e6:08:2b:79: 52:26:cc:5b:13:25:af:b6:5e:bd:c8:98:f1:05:6b:77:88:fb: 00:1a:c8:b0:b3:7c:d9:8a:ad:00:32:bc:45:a4:6c:9c:bd:ea: f7:c2:44:e2:67:b9:f8:02:10:64:53:f7:86:01:9d:4e:85:f7: 10:4f:e1:ff:4d:ac:ff:e9:6c:23:25:68:56:82:c2:7f:ac:71: c2:b9:9f:7d:db:6e:a5:a2:d9:c2:c9:13:b9:5a:78:9a:c5:f3: df:1f:1a:ce:2b:b6:b9:55:e7:81:3a:54:10:b2:f0:af:17:88: 9b:fd:30:51:c8:c0:bf:66:9f:e9:41:db:23:dc:09:b9:cf:68: 59:48:58:be:9d:96:77:b3:e7:ce:ef:46:0a:83:1e:8e:13:df: ce:42:ba:62:14:b0:1a:75:18:a6:27:5b:74:4e:5b:9f:31:01: f0:e7:38:f0:92:58:88:44:dd:15:e2:66:a7:1d:3d:7f:15:ac: 83:9f:a4:2a:cd:6e:40:4f:43:0e:e7:26:d0:59:a8:41:80:89: 98:cc:a5:d3:da:37:4a:fe:38:cd:71:8a:ba:6e:b0:73:51:e6: fb:c2:bf:02:36:5f:37:60:65:89:b7:f9:32:1d:69:ae:3f:e0: b7:98:a2:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNIlL565319pLk9Bprg0G4u+1az8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDQUI2NTU3MzdGRTA4QzAzMTA1MkI4NjlCNjdGN0Y4 MkNDRTlDQzAeFw0yNTA0MjgyMDE5MDRaFw0yNTA0MjkyMzI4MDRaMDMxMTAvBgNV BAMTKDJCRTA2OTlBNzk3RTFBODdGQTVBREVEN0QyQTQxM0MyMTIzRDE2NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCY146dNKK540NrfDTh10wKvxq DzgDFyJJdvU79N3/J+FSNVOBCPaSvkf4pxAWB2gZw3Ge1Zo6r2BKRh7I4kICVKPt nFdmkIv3mUm5UYrkMKyeqWAfpQJCHEKaFSBAEXfm9mVLGmeKFC0Nh0rLIz537C5I coV0a6fE88eMiFwXxwsTfIdCPDCwCfdgNW3CfUUkmPNgNXWSu2tVLK+DJNur5vNC rVcaoLtY8KHXVWEVG4pUxpSyltsL+Hm5PCSQXPyNjvdlmEfK9pPMhi1idn3QnGSb dxcim5mch4piIn6T01oRLhUXB+YSymaOd1IysST1qUUyHLoqazPDdxHMA0thAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUK+Bpmnl+Gof6Wt7X0qQTwhI9FlwwHwYDVR0j BBgwFoAUEcq2VXN/4IwDEFK4abZ/f4LM6cwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFlOblF1QTVNR1lqMUpXcEVQeFVUS0hZOWZHaWl2ZHQ3WWJDeWFCaW50 RHEvMC8xMUNBQjY1NTczN0ZFMDhDMDMxMDUyQjg2OUI2N0Y3RjgyQ0NFOUNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQ0FCNjU1NzM3RkUwOEMw MzEwNTJCODY5QjY3RjdGODJDQ0U5Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFlOblF1QTVNR1lqMUpXcEVQeFVUS0hZOWZHaWl2ZHQ3WWJDeWFCaW50RHEvMC8x MUNBQjY1NTczN0ZFMDhDMDMxMDUyQjg2OUI2N0Y3RjgyQ0NFOUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqVc2cWYUXhXjmmyXCPrmCCt5UibMWxMlr7ZevciY8QVrd4j7ABrIsLN82Yqt ADK8RaRsnL3q98JE4me5+AIQZFP3hgGdToX3EE/h/02s/+lsIyVoVoLCf6xxwrmf fdtupaLZwskTuVp4msXz3x8aziu2uVXngTpUELLwrxeIm/0wUcjAv2af6UHbI9wJ uc9oWUhYvp2Wd7Pnzu9GCoMejhPfzkK6YhSwGnUYpidbdE5bnzEB8Oc48JJYiETd FeJmpx09fxWsg5+kKs1uQE9DDucm0FmoQYCJmMyl09o3Sv44zXGKum6wc1Hm+8K/ AjZfN2Blibf5Mh1prj/gt5iiIQ== -----END CERTIFICATE-----Generated at Tue Apr 29 03:55:28 2025 by rpki-client