$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.mft File: A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.mft (raw, json) Hash identifier: FsNFMicyHN6RZckrZzUx6GNL5isefJEtyC3Sr5F8pJo= Subject key identifier: 52:C9:5C:06:79:B1:4B:92:C4:A9:D4:B8:F0:CF:08:35:9D:21:F1:EF Authority key identifier: A9:55:D3:ED:FA:B3:E2:59:0F:76:6F:0D:4C:F5:D8:B3:1C:71:38:36 Certificate issuer: /CN=A955D3EDFAB3E2590F766F0D4CF5D8B31C713836 Certificate serial: 12FDC1332C5AD03E97E3531A5BFF700845CBD184 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer Subject info access: rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.mft Manifest number: 0207 Signing time: Mon 28 Apr 2025 20:19:39 +0000 Manifest this update: Mon 28 Apr 2025 20:14:39 +0000 Manifest next update: Tue 29 Apr 2025 23:08:39 +0000 Files and hashes: 1: 323830343a346435633a3a2f33322d3334203d3e20323638313932.roa (hash: iPVEGW3bOanlt6xEAKiKNF4xgEWPmr7FOhM8RsWlKBI=) 2: 34352e3233332e38322e302f32332d3234203d3e20323638313932.roa (hash: rbm+nGaO1C44SR1jUP7bBg9xi6ETMNOx32ruaBHegrs=) 3: 3136382e3138312e33362e302f32322d3234203d3e20323638313932.roa (hash: 9JASxHFiATJqbmlKUd9Ny5yIJcLSpH0PT9R50oX2f3s=) 4: 3138362e3232372e3232342e302f32302d3232203d3e20323638313932.roa (hash: 8G9ybWOQ3hvARCqcwtS1WYqWiWzjkyNKllrFVIaFYC8=) 5: A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.crl (hash: Bo6QnWTgzmuP9srqWPAtOMc6oK9jvS7OKBcmRAXlLzg=) 6: 34352e3233352e3138302e302f32322d3234203d3e20323638313932.roa (hash: jKwZQR4B8dYdGlAVl9rDjm6rImv5Lr+X9t7kannxCWo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.crl rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 23:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:fd:c1:33:2c:5a:d0:3e:97:e3:53:1a:5b:ff:70:08:45:cb:d1:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A955D3EDFAB3E2590F766F0D4CF5D8B31C713836 Validity Not Before: Apr 28 20:14:39 2025 GMT Not After : Apr 29 23:08:39 2025 GMT Subject: CN=52C95C0679B14B92C4A9D4B8F0CF08359D21F1EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:9f:04:de:ac:56:bb:79:19:38:8f:7b:27: 19:3b:ca:da:ee:89:6f:f5:47:70:cb:d6:da:66:04: e0:72:5c:13:a9:aa:96:b7:fd:42:fa:2b:77:9d:eb: 02:84:2d:94:2e:a7:9e:54:ff:91:16:8a:3a:b3:a2: b4:d8:83:9f:b7:74:7e:c3:27:ef:41:ff:1e:c4:38: d3:75:4c:f9:8f:d3:bd:fa:bb:3d:78:ef:35:33:91: b3:79:c8:7c:f1:d4:65:d6:02:46:7b:10:47:a8:83: d9:24:2f:d5:5f:f4:d7:0b:aa:40:8e:9e:46:67:97: e1:7e:6e:0d:cf:ff:3e:76:93:36:39:50:56:87:d1: 2e:de:cb:fc:e2:7b:32:69:da:81:f5:22:b6:20:52: 19:83:29:1c:96:c6:fd:b6:41:15:e9:79:f4:f8:e4: b0:4c:e9:7a:5b:fe:96:26:9c:54:16:f6:0e:dd:4e: d1:ce:0d:02:4d:1c:b2:87:6f:0f:b1:d0:58:52:7d: ab:04:b6:d8:2a:73:7a:3c:ac:51:24:4e:a5:53:48: 84:8b:81:46:f3:29:e8:9c:8f:04:d8:b8:f0:ab:b7: 70:6b:a7:d5:39:fc:b0:af:93:dc:fb:39:67:f0:50: 1d:cb:95:9a:2a:b1:58:b0:2c:b5:f1:bf:c4:87:32: 5a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C9:5C:06:79:B1:4B:92:C4:A9:D4:B8:F0:CF:08:35:9D:21:F1:EF X509v3 Authority Key Identifier: keyid:A9:55:D3:ED:FA:B3:E2:59:0F:76:6F:0D:4C:F5:D8:B3:1C:71:38:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/0/A955D3EDFAB3E2590F766F0D4CF5D8B31C713836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:21:e2:92:5e:8f:39:86:25:cf:ca:ed:e6:96:94:17:87:ba: f5:95:26:42:41:c7:33:46:b2:0a:d8:ff:37:e2:7b:d1:29:be: a6:63:bf:2c:4e:ea:38:db:72:f4:d1:62:a6:37:49:5a:02:89: 5a:1e:c3:02:21:7a:38:7e:80:98:3f:f5:e7:76:f6:8e:1f:4a: cd:fb:56:38:4d:cd:1a:81:d7:8e:10:a9:e5:ea:59:57:60:74: 6a:f9:05:85:70:77:55:48:b5:54:4d:c0:3d:d6:b4:20:b1:24: 9f:0f:f4:9c:10:4a:84:c4:a2:1d:7d:48:33:61:a9:a1:06:ad: 8d:f3:f8:3b:90:b4:7d:ff:31:5c:9a:03:0c:35:5b:02:0a:6e: 3a:13:bf:f0:55:57:5b:9b:7a:d1:19:d8:d2:7f:16:42:ad:bb: b2:a5:79:38:fa:d7:fa:83:17:7b:4d:8a:df:b7:2e:12:e6:d2: d6:9b:ef:8d:47:3a:7e:76:7c:a9:09:5f:87:5a:5d:e2:99:b2: 34:fa:58:69:82:5c:d4:a3:ea:69:12:1a:87:33:e4:1e:66:61: 2e:48:15:9f:c7:93:89:4f:7e:10:62:f6:2e:06:13:83:a2:2e: df:10:0b:e3:7f:7b:d2:d3:27:c4:e0:21:76:c4:b4:74:d0:54: 63:d9:d0:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEv3BMyxa0D6X41MaW/9wCEXL0YQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1NUQzRURGQUIzRTI1OTBGNzY2RjBENENGNUQ4QjMx QzcxMzgzNjAeFw0yNTA0MjgyMDE0MzlaFw0yNTA0MjkyMzA4MzlaMDMxMTAvBgNV BAMTKDUyQzk1QzA2NzlCMTRCOTJDNEE5RDRCOEYwQ0YwODM1OUQyMUYxRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKZ58E3qxWu3kZOI97Jxk7ytru iW/1R3DL1tpmBOByXBOpqpa3/UL6K3ed6wKELZQup55U/5EWijqzorTYg5+3dH7D J+9B/x7EONN1TPmP0736uz147zUzkbN5yHzx1GXWAkZ7EEeog9kkL9Vf9NcLqkCO nkZnl+F+bg3P/z52kzY5UFaH0S7ey/ziezJp2oH1IrYgUhmDKRyWxv22QRXpefT4 5LBM6Xpb/pYmnFQW9g7dTtHODQJNHLKHbw+x0FhSfasEttgqc3o8rFEkTqVTSISL gUbzKeicjwTYuPCrt3Brp9U5/LCvk9z7OWfwUB3LlZoqsViwLLXxv8SHMlonAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUslcBnmxS5LEqdS48M8INZ0h8e8wHwYDVR0j BBgwFoAUqVXT7fqz4lkPdm8NTPXYsxxxODYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVhHNk45aFNkWFBGeGIzalFVV1lBd0E5N0cyMk5GQUNjOHdSTTdHd3BB SmQvMC9BOTU1RDNFREZBQjNFMjU5MEY3NjZGMEQ0Q0Y1RDhCMzFDNzEzODM2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5NTVEM0VERkFCM0UyNTkw Rjc2NkYwRDRDRjVEOEIzMUM3MTM4MzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVhHNk45aFNkWFBGeGIzalFVV1lBd0E5N0cyMk5GQUNjOHdSTTdHd3BBSmQvMC9B OTU1RDNFREZBQjNFMjU5MEY3NjZGMEQ0Q0Y1RDhCMzFDNzEzODM2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHCHikl6POYYlz8rt5paUF4e69ZUmQkHHM0ayCtj/N+J70Sm+pmO/LE7qONty 9NFipjdJWgKJWh7DAiF6OH6AmD/153b2jh9KzftWOE3NGoHXjhCp5epZV2B0avkF hXB3VUi1VE3APda0ILEknw/0nBBKhMSiHX1IM2GpoQatjfP4O5C0ff8xXJoDDDVb AgpuOhO/8FVXW5t60RnY0n8WQq27sqV5OPrX+oMXe02K37cuEubS1pvvjUc6fnZ8 qQlfh1pd4pmyNPpYaYJc1KPqaRIahzPkHmZhLkgVn8eTiU9+EGL2LgYTg6Iu3xAL 43970tMnxOAhdsS0dNBUY9nQ4g== -----END CERTIFICATE-----Generated at Tue Apr 29 00:34:28 2025 by rpki-client