$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft File: 5668EE81C8705A595C00BF220C5BB48B38682B81.mft (raw, json) Hash identifier: PZfQsN+p4PVjUc0s2Vg4geGilhVMrdCtsZRtuaPrtLo= Subject key identifier: 29:78:9A:0B:F0:57:F1:EA:89:CF:D1:D9:C1:39:BF:02:07:08:82:44 Authority key identifier: 56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81 Certificate issuer: /CN=5668EE81C8705A595C00BF220C5BB48B38682B81 Certificate serial: 29FA5B79D2CEDE638271466ACBC48102607FB859 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer Subject info access: rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft Manifest number: 39 Signing time: Thu 01 May 2025 04:29:17 +0000 Manifest this update: Thu 01 May 2025 04:24:17 +0000 Manifest next update: Fri 02 May 2025 07:08:17 +0000 Files and hashes: 1: 3134332e3235352e3139362e302f32322d3332203d3e20323633353538.roa (hash: 4n22Tbe2fEYdOUmIisT+wAqG3uK1QIzJ8uF9ujZ4V4Q=) 2: 323830343a6566303a3a2f33322d313238203d3e20323633353538.roa (hash: vnGyHnP1vADvHkg5AnUniHI5nPpVnePRmquRFZ1T/Rw=) 3: 5668EE81C8705A595C00BF220C5BB48B38682B81.crl (hash: 71KAhjxJbf9I6kxw8ZODilnCAbnjH+WwUYVjB6plvMk=) 4: 3138362e3233372e3231362e302f32312d3332203d3e20323633353538.roa (hash: devNyf5uV7e2XYzIjGzsi+jDNLJbab/FwbfxIAbLzaY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.crl rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 07:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fa:5b:79:d2:ce:de:63:82:71:46:6a:cb:c4:81:02:60:7f:b8:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5668EE81C8705A595C00BF220C5BB48B38682B81 Validity Not Before: May 1 04:24:17 2025 GMT Not After : May 2 07:08:17 2025 GMT Subject: CN=29789A0BF057F1EA89CFD1D9C139BF0207088244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:d6:e2:c9:ba:73:67:7f:7c:8f:2d:98:54: dc:41:ad:34:92:83:fc:34:cb:ee:d9:aa:03:5a:80: 4c:a1:e0:0d:ac:fc:72:f2:e7:69:38:81:4f:de:7a: 82:43:92:42:45:dc:7c:ce:86:e1:eb:9b:16:e7:65: f2:fe:14:59:53:3c:6d:21:d4:8b:2f:bd:d6:84:1b: f8:51:19:cc:aa:3a:cc:54:62:3b:0a:55:d6:25:4d: 6b:be:6c:07:de:68:33:17:8b:75:0f:20:0f:7f:05: c4:1b:94:05:28:73:22:5e:ca:7f:f7:92:be:bd:05: 71:5e:3a:6e:06:5f:56:c2:9f:3a:b0:18:7e:84:a4: aa:9d:76:aa:a5:18:31:f0:5d:fc:b5:86:5a:7b:2a: b1:83:7b:63:aa:c2:a5:23:f3:36:71:34:69:be:ed: 08:aa:28:7f:c0:82:26:0f:5f:c4:35:de:d0:f0:79: 99:b6:63:0b:4c:81:b3:39:16:f8:9b:74:30:84:31: e2:9d:09:e3:c5:90:52:74:49:b8:0c:a5:b0:f4:21: 9d:95:8c:1f:fc:fa:a0:0e:00:09:aa:90:94:4b:92: 7f:52:51:d8:68:fd:54:15:57:b0:ed:cb:7f:4b:48: e2:b0:c9:ae:37:88:b5:e9:1f:b3:ec:ba:dc:0e:7f: 10:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:78:9A:0B:F0:57:F1:EA:89:CF:D1:D9:C1:39:BF:02:07:08:82:44 X509v3 Authority Key Identifier: keyid:56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:dc:f2:1b:af:12:3b:ce:77:d8:a6:fb:13:ea:bd:f5:05:90: ae:81:08:fe:a3:9d:21:d1:c5:31:fd:d9:d6:b0:51:4b:5d:a0: d6:ca:ef:3c:c8:c1:1f:26:71:8a:f6:29:dd:33:d5:7e:09:ef: cb:a9:13:69:45:75:5a:a5:61:a6:77:cb:0c:46:f7:3e:27:79: b5:17:f9:31:77:56:90:dc:5c:da:ec:d9:c7:9e:13:32:f0:ac: 33:4b:96:c0:d6:8d:66:23:9c:f4:90:be:fd:af:45:52:68:c0: 5b:ec:9c:3c:f6:45:4a:1f:0a:b5:9e:30:ac:aa:93:c2:d3:fb: 47:2a:a7:a9:fa:34:f1:7c:9c:5c:66:e4:6a:85:81:66:58:5b: 09:86:e3:ec:b7:29:c7:fb:bf:40:ae:e4:92:4c:4e:df:39:68: fa:49:61:aa:fa:42:19:8f:12:4b:72:e8:75:31:2f:bb:b1:a7: ce:e6:b7:5e:da:14:4b:a7:cf:d6:87:eb:77:a1:23:ca:c3:26: 2c:9c:c7:b7:29:bd:07:3d:88:e6:c9:ac:92:cf:5c:2b:87:f7: b4:8c:62:63:9a:f1:37:2a:42:9b:00:b0:39:a3:a8:32:3c:c2: e4:81:57:bb:61:9d:db:6b:5d:b2:c4:e1:92:96:ec:e1:2a:27: 4c:c0:82:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKfpbedLO3mOCcUZqy8SBAmB/uFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2OEVFODFDODcwNUE1OTVDMDBCRjIyMEM1QkI0OEIz ODY4MkI4MTAeFw0yNTA1MDEwNDI0MTdaFw0yNTA1MDIwNzA4MTdaMDMxMTAvBgNV BAMTKDI5Nzg5QTBCRjA1N0YxRUE4OUNGRDFEOUMxMzlCRjAyMDcwODgyNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTOdbiybpzZ398jy2YVNxBrTSS g/w0y+7ZqgNagEyh4A2s/HLy52k4gU/eeoJDkkJF3HzOhuHrmxbnZfL+FFlTPG0h 1IsvvdaEG/hRGcyqOsxUYjsKVdYlTWu+bAfeaDMXi3UPIA9/BcQblAUocyJeyn/3 kr69BXFeOm4GX1bCnzqwGH6EpKqddqqlGDHwXfy1hlp7KrGDe2OqwqUj8zZxNGm+ 7QiqKH/AgiYPX8Q13tDweZm2YwtMgbM5FvibdDCEMeKdCePFkFJ0SbgMpbD0IZ2V jB/8+qAOAAmqkJRLkn9SUdho/VQVV7Dty39LSOKwya43iLXpH7PsutwOfxCrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKXiaC/BX8eqJz9HZwTm/AgcIgkQwHwYDVR0j BBgwFoAUVmjugchwWllcAL8iDFu0izhoK4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREFEWHFRbXB4RXNoQ2ZTNTZoWUNYNVR1R2ZGWmhjN1J6VzhDNlk5enVt YWcvMC81NjY4RUU4MUM4NzA1QTU5NUMwMEJGMjIwQzVCQjQ4QjM4NjgyQjgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2NjhFRTgxQzg3MDVBNTk1 QzAwQkYyMjBDNUJCNDhCMzg2ODJCODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REFEWHFRbXB4RXNoQ2ZTNTZoWUNYNVR1R2ZGWmhjN1J6VzhDNlk5enVtYWcvMC81 NjY4RUU4MUM4NzA1QTU5NUMwMEJGMjIwQzVCQjQ4QjM4NjgyQjgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3tzyG68SO8532Kb7E+q99QWQroEI/qOdIdHFMf3Z1rBRS12g1srvPMjBHyZx ivYp3TPVfgnvy6kTaUV1WqVhpnfLDEb3Pid5tRf5MXdWkNxc2uzZx54TMvCsM0uW wNaNZiOc9JC+/a9FUmjAW+ycPPZFSh8KtZ4wrKqTwtP7Ryqnqfo08XycXGbkaoWB ZlhbCYbj7Lcpx/u/QK7kkkxO3zlo+klhqvpCGY8SS3LodTEvu7Gnzua3XtoUS6fP 1ofrd6EjysMmLJzHtym9Bz2I5smsks9cK4f3tIxiY5rxNypCmwCwOaOoMjzC5IFX u2Gd22tdssThkpbs4SonTMCCtQ== -----END CERTIFICATE-----Generated at Thu May 1 16:44:18 2025 by rpki-client