$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.mft File: D515970A9684DA5CEE2A970D22C9F79AFA500F79.mft (raw, json) Hash identifier: AWahDhi8mxpmzMRc7p4h4zixWmDuTHZXifbo3DYMRpg= Subject key identifier: 0C:F1:50:6D:AA:83:40:E7:92:38:4B:89:F8:C2:B6:E4:BE:33:94:A1 Authority key identifier: D5:15:97:0A:96:84:DA:5C:EE:2A:97:0D:22:C9:F7:9A:FA:50:0F:79 Certificate issuer: /CN=D515970A9684DA5CEE2A970D22C9F79AFA500F79 Certificate serial: 6E53818B50986EC1EC270DE55E48399F812EDB80 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D515970A9684DA5CEE2A970D22C9F79AFA500F79.cer Subject info access: rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.mft Manifest number: 15 Signing time: Mon 28 Apr 2025 21:38:59 +0000 Manifest this update: Mon 28 Apr 2025 21:33:59 +0000 Manifest next update: Wed 30 Apr 2025 01:29:59 +0000 Files and hashes: 1: 3137372e37332e3132382e302f32342d3234203d3e20323731363234.roa (hash: krI7Y+0+cU95+YKKSSVMnjZLzWP/d2934F1KkDdzxCo=) 2: 323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa (hash: p1U0CYkgTq3eSMrbEeye08G2ZTfJcqqxOhETpcT6rqA=) 3: 3137372e37332e3133302e302f32332d3233203d3e20323731363234.roa (hash: 25co4NvdzIz0OdTLdZNmR77JjVgUS6mrfA7z66uUPh4=) 4: 3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa (hash: M3W+8lwYF1ikjUcpWA6yTYmEgOqHpwjBOgQ1oohTgAg=) 5: D515970A9684DA5CEE2A970D22C9F79AFA500F79.crl (hash: canSK4076s/ddpoaNysKBRl5HHgQrxIASPcSMnPiEBU=) 6: 3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa (hash: thTEV9x4K81qJU24q5KvaqVFnwk9W8sIBhICgQILApU=) 7: 323830343a376537303a343030303a3a2f33342d3334203d3e20323731363234.roa (hash: GJOL4cF1+x9YkPvwM1KWHwx4eT5Vdi/XxRYjat23cFY=) 8: 3137372e37332e3133302e302f32342d3234203d3e20323731363234.roa (hash: ZG4hNhshdY2UW1f0R78kLoXUh8RFFYkH27X/xHs1EfM=) 9: 323830343a376537303a3a2f33342d3334203d3e20323731363234.roa (hash: luuJM5tBMrknN5yxBGdcVZn4/3wssMmxxGbbWLXDVLE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.crl rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D515970A9684DA5CEE2A970D22C9F79AFA500F79.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 01:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:53:81:8b:50:98:6e:c1:ec:27:0d:e5:5e:48:39:9f:81:2e:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D515970A9684DA5CEE2A970D22C9F79AFA500F79 Validity Not Before: Apr 28 21:33:59 2025 GMT Not After : Apr 30 01:29:59 2025 GMT Subject: CN=0CF1506DAA8340E792384B89F8C2B6E4BE3394A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ea:8f:f6:6c:51:15:4b:03:e6:b7:35:f8:73: 9b:80:d5:39:50:d9:15:3f:74:d0:10:3a:02:26:e0: e2:83:a3:b6:69:96:71:91:07:1b:aa:b2:0d:b0:ff: f8:59:92:f8:83:f3:58:e1:be:1f:27:07:6f:b0:fc: 92:1b:2b:58:bf:50:c8:23:da:0b:7a:bb:98:7c:d8: 62:0f:01:2d:24:d4:14:2f:e5:2a:4d:f4:4f:45:02: b0:b5:b0:98:89:86:3e:46:5e:5a:b4:58:19:f5:85: ea:9d:04:29:6d:6f:b5:3e:c0:ec:42:8b:6c:5f:1b: e2:a1:67:c4:c4:30:b3:78:0c:65:df:e5:35:34:9e: a5:98:16:a8:e5:ca:88:ab:05:b5:d9:4f:b1:a9:b1: 0f:8e:27:6c:77:86:df:b2:1c:88:e7:03:c3:8c:04: 3c:05:52:a9:68:46:7d:e8:cb:ed:72:5f:5d:fa:ab: 7e:f5:ff:0f:a8:8f:48:f7:c4:1d:cf:a7:f0:d8:a3: 17:5d:d0:06:5f:ca:aa:14:cd:17:07:4e:38:be:d2: 00:a6:33:0e:38:ee:b7:60:2e:a7:b9:cc:a0:93:a1: bf:01:41:21:22:9a:e3:87:0c:a3:f4:a5:6e:2f:c0: b0:41:8c:8c:fa:34:b5:62:29:57:08:c6:a8:5b:d5: e0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F1:50:6D:AA:83:40:E7:92:38:4B:89:F8:C2:B6:E4:BE:33:94:A1 X509v3 Authority Key Identifier: keyid:D5:15:97:0A:96:84:DA:5C:EE:2A:97:0D:22:C9:F7:9A:FA:50:0F:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D515970A9684DA5CEE2A970D22C9F79AFA500F79.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:22:b8:45:e0:bd:e7:0a:d5:b2:53:a8:f9:ae:ee:30:59:b9: 44:af:16:cd:22:95:5f:3d:f8:84:cc:7f:6d:b1:d6:32:35:4b: 9e:60:6a:8a:39:6d:97:18:2f:3b:fa:ad:15:64:b5:54:cb:c1: ff:65:3c:f3:cc:78:67:52:44:d9:f8:b8:a2:e4:0d:96:c9:99: 06:13:5a:48:71:ca:11:62:3a:d6:d7:85:80:08:4c:b8:80:72: 4e:21:a7:c3:fc:cb:8b:fe:5c:3a:a6:4c:5f:98:48:a7:91:fa: 20:cb:64:a8:98:02:3b:0e:4e:5c:22:d7:7d:be:86:08:ab:5a: 39:2b:15:13:bb:74:b2:f5:e4:18:a0:4c:92:7f:3e:d5:d4:13: 68:a3:d3:73:3e:b7:c3:c0:4d:ba:32:1f:b0:40:0e:6b:56:12: 37:c8:24:30:c6:fa:96:70:8e:7d:1a:1a:cc:d8:49:e9:60:9a: 98:8f:68:8d:05:b1:06:40:19:76:7d:74:de:79:52:06:f0:91: bb:b0:d4:74:a8:5f:d6:fe:36:b0:cf:09:cd:d6:b4:e4:e0:e3: eb:fb:0b:56:40:a3:12:61:19:6a:7a:f3:42:3c:7a:db:4a:37: 94:33:ec:5e:45:79:30:e3:f6:7d:9d:bf:87:33:c7:b4:b8:16: 44:f1:39:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUblOBi1CYbsHsJw3lXkg5n4Eu24AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxNTk3MEE5Njg0REE1Q0VFMkE5NzBEMjJDOUY3OUFG QTUwMEY3OTAeFw0yNTA0MjgyMTMzNTlaFw0yNTA0MzAwMTI5NTlaMDMxMTAvBgNV BAMTKDBDRjE1MDZEQUE4MzQwRTc5MjM4NEI4OUY4QzJCNkU0QkUzMzk0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6o/2bFEVSwPmtzX4c5uA1TlQ 2RU/dNAQOgIm4OKDo7ZplnGRBxuqsg2w//hZkviD81jhvh8nB2+w/JIbK1i/UMgj 2gt6u5h82GIPAS0k1BQv5SpN9E9FArC1sJiJhj5GXlq0WBn1heqdBCltb7U+wOxC i2xfG+KhZ8TEMLN4DGXf5TU0nqWYFqjlyoirBbXZT7GpsQ+OJ2x3ht+yHIjnA8OM BDwFUqloRn3oy+1yX136q371/w+oj0j3xB3Pp/DYoxdd0AZfyqoUzRcHTji+0gCm Mw447rdgLqe5zKCTob8BQSEimuOHDKP0pW4vwLBBjIz6NLViKVcIxqhb1eBhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDPFQbaqDQOeSOEuJ+MK25L4zlKEwHwYDVR0j BBgwFoAU1RWXCpaE2lzuKpcNIsn3mvpQD3kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXJuSlJXZ2MyY3E1QTdxcndMTFBXSlVxSlBmVTI5bUJKektqMjVxWHJp N3IvMC9ENTE1OTcwQTk2ODREQTVDRUUyQTk3MEQyMkM5Rjc5QUZBNTAwRjc5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MTU5NzBBOTY4NERBNUNF RTJBOTcwRDIyQzlGNzlBRkE1MDBGNzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXJuSlJXZ2MyY3E1QTdxcndMTFBXSlVxSlBmVTI5bUJKektqMjVxWHJpN3IvMC9E NTE1OTcwQTk2ODREQTVDRUUyQTk3MEQyMkM5Rjc5QUZBNTAwRjc5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYCK4ReC95wrVslOo+a7uMFm5RK8WzSKVXz34hMx/bbHWMjVLnmBqijltlxgv O/qtFWS1VMvB/2U888x4Z1JE2fi4ouQNlsmZBhNaSHHKEWI61teFgAhMuIByTiGn w/zLi/5cOqZMX5hIp5H6IMtkqJgCOw5OXCLXfb6GCKtaOSsVE7t0svXkGKBMkn8+ 1dQTaKPTcz63w8BNujIfsEAOa1YSN8gkMMb6lnCOfRoazNhJ6WCamI9ojQWxBkAZ dn103nlSBvCRu7DUdKhf1v42sM8Jzda05ODj6/sLVkCjEmEZanrzQjx620o3lDPs XkV5MOP2fZ2/hzPHtLgWRPE5Fg== -----END CERTIFICATE-----Generated at Tue Apr 29 05:14:47 2025 by rpki-client