$ rpki-client -vvf rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft File: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft (raw, json) Hash identifier: R/9GLQaB8N9m1R00c2bXZe28f4BJ2QY0ii4e1P9E31c= Subject key identifier: 6D:B8:C6:29:F6:9B:66:0F:B6:42:D7:93:2B:CC:F0:24:4D:0F:95:F4 Authority key identifier: D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 Certificate issuer: /CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Certificate serial: 14017D97193C62C121A5DCCECB02B3D3BCF3409B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject info access: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft Manifest number: 0191 Signing time: Sun 04 May 2025 06:07:00 +0000 Manifest this update: Sun 04 May 2025 06:02:00 +0000 Manifest next update: Mon 05 May 2025 08:47:00 +0000 Files and hashes: 1: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl (hash: TZImnAWFF3fDE0oIpGA2ut7xMowojnrHTkyKF2MccSI=) 2: 3139302e3132332e3139322e302f32322d3234203d3e20323636323533.roa (hash: KpOmHNyf+qk8mZG+75EeGAxo+/Mu9xpKUyBHcWeY2Yc=) 3: 323830343a336431383a3a2f33322d3438203d3e20323636323533.roa (hash: bkc7PD/eoMEAwVgn7rQvXWlY3Vh94NdNwzo2VtWfGSs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 04 May 2025 23:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:01:7d:97:19:3c:62:c1:21:a5:dc:ce:cb:02:b3:d3:bc:f3:40:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Validity Not Before: May 4 06:02:00 2025 GMT Not After : May 5 08:47:00 2025 GMT Subject: CN=6DB8C629F69B660FB642D7932BCCF0244D0F95F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bd:6c:21:e2:7c:5c:59:41:f2:0e:c9:2b:2d: 91:3c:b0:1a:12:27:ad:ac:3c:5f:b9:da:4a:a3:73: f1:57:64:3c:34:5e:c5:6c:88:34:d8:d9:6e:dd:17: df:5b:d0:3b:48:13:2d:09:d9:5f:81:43:9a:96:e7: 18:39:9c:2a:d1:1e:74:2d:d6:67:8e:5c:00:71:36: 75:80:48:bf:84:83:8e:66:86:a1:fc:8d:65:6c:1e: 6a:80:61:40:e7:01:1b:d0:e7:2f:42:f0:79:47:bf: a7:55:d1:20:9b:4e:83:9b:1c:85:79:79:7e:43:f1: 1d:36:4d:d9:fa:2a:fa:ec:d6:01:97:ec:82:ce:d3: 54:b8:29:6a:81:86:b0:b4:68:10:68:95:e0:16:fb: 1d:7b:63:70:07:3d:77:14:91:ea:1c:d8:ae:66:70: b8:cc:81:8f:7e:7d:d2:47:f5:11:97:83:17:a7:fd: ec:3a:e5:aa:be:5c:35:6f:9a:ae:27:b3:dc:f9:ab: 0e:df:1e:d3:d0:3f:25:7a:f4:35:cc:4f:21:b1:5c: f5:71:61:37:12:51:6e:0c:2c:d4:2e:2e:ce:5d:a7: 47:d0:2b:d5:a9:28:cd:59:a0:54:cf:f0:2c:62:42: c0:d5:ba:83:1c:dd:13:8d:4e:d1:3e:a9:c4:ba:fb: 52:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B8:C6:29:F6:9B:66:0F:B6:42:D7:93:2B:CC:F0:24:4D:0F:95:F4 X509v3 Authority Key Identifier: keyid:D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a5:ab:17:2a:95:10:fe:54:d7:d6:0e:bd:52:bb:7b:d7:86: 3f:33:b1:b1:f8:60:31:d2:59:ee:b0:74:66:19:bc:7e:67:a8: 9f:53:2c:13:50:20:07:dd:e1:f7:b3:2f:22:60:0d:13:b7:69: 6f:32:fa:f8:0f:e5:aa:95:5e:72:09:32:bb:0a:99:a5:f0:c6: f8:05:73:fa:5b:24:56:04:70:b0:96:5c:c6:b7:42:5d:40:75: cb:ff:45:b1:8b:ac:f7:14:a2:76:1f:4e:66:4e:0d:09:ee:ce: 64:a1:05:96:aa:90:6c:41:6b:ec:1e:a1:84:0c:38:a0:e4:c8: 80:41:96:87:16:9d:1c:10:d6:96:69:c1:7d:a4:d5:41:e1:9b: 63:28:53:ba:22:ec:ae:07:d8:39:e3:eb:bf:34:67:15:29:b2: 4e:8c:03:0a:68:37:52:19:3c:d0:dc:47:1b:cc:4a:8b:d4:a3: 47:0e:2a:8d:f6:64:f5:c6:0b:65:d3:77:50:09:2d:94:dc:07: f1:5a:cf:19:92:0b:df:f4:88:cc:a7:21:c1:8a:84:6e:d7:f7: 92:c4:8a:69:af:33:1a:d5:f1:18:3a:4a:a8:cd:6e:1c:52:39: 25:f3:5d:93:a7:8f:3f:0f:8d:b9:4f:c4:34:60:31:5a:05:93: a6:1f:29:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFAF9lxk8YsEhpdzOywKz07zzQJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJCRTQwQzY2QTBCMEVGOTc0N0FDQzlEMkMzQTBGNDVC Q0JEODhEMDAeFw0yNTA1MDQwNjAyMDBaFw0yNTA1MDUwODQ3MDBaMDMxMTAvBgNV BAMTKDZEQjhDNjI5RjY5QjY2MEZCNjQyRDc5MzJCQ0NGMDI0NEQwRjk1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfvWwh4nxcWUHyDskrLZE8sBoS J62sPF+52kqjc/FXZDw0XsVsiDTY2W7dF99b0DtIEy0J2V+BQ5qW5xg5nCrRHnQt 1meOXABxNnWASL+Eg45mhqH8jWVsHmqAYUDnARvQ5y9C8HlHv6dV0SCbToObHIV5 eX5D8R02Tdn6Kvrs1gGX7ILO01S4KWqBhrC0aBBoleAW+x17Y3AHPXcUkeoc2K5m cLjMgY9+fdJH9RGXgxen/ew65aq+XDVvmq4ns9z5qw7fHtPQPyV69DXMTyGxXPVx YTcSUW4MLNQuLs5dp0fQK9WpKM1ZoFTP8CxiQsDVuoMc3RONTtE+qcS6+1I9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUbbjGKfabZg+2QteTK8zwJE0PlfQwHwYDVR0j BBgwFoAU0r5AxmoLDvl0esydLDoPRby9iNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5l NnIvMC9EMkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQkU0MEM2NkEwQjBFRjk3 NDdBQ0M5RDJDM0EwRjQ1QkNCRDg4RDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5lNnIvMC9E MkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfaWrFyqVEP5U19YOvVK7e9eGPzOxsfhgMdJZ7rB0Zhm8fmeon1MsE1AgB93h 97MvImANE7dpbzL6+A/lqpVecgkyuwqZpfDG+AVz+lskVgRwsJZcxrdCXUB1y/9F sYus9xSidh9OZk4NCe7OZKEFlqqQbEFr7B6hhAw4oOTIgEGWhxadHBDWlmnBfaTV QeGbYyhTuiLsrgfYOePrvzRnFSmyTowDCmg3Uhk80NxHG8xKi9SjRw4qjfZk9cYL ZdN3UAktlNwH8VrPGZIL3/SIzKchwYqEbtf3ksSKaa8zGtXxGDpKqM1uHFI5JfNd k6ePPw+NuU/ENGAxWgWTph8p1A== -----END CERTIFICATE-----Generated at Sun May 4 12:06:25 2025 by rpki-client