$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.mft File: 960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.mft (raw, json) Hash identifier: dOPtzJyfxJNfzEOmmKnnNuGILOMwfLDemDlWfi3wnps= Subject key identifier: 74:C8:B0:61:81:C9:E8:30:06:33:CA:83:C2:0A:D1:AF:0A:F8:2B:4B Authority key identifier: 96:0C:CA:2B:42:F8:9A:2A:9A:BD:CC:54:6D:E2:2E:BB:9B:DB:41:12 Certificate issuer: /CN=960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112 Certificate serial: 4B4BF8FED1E0EBBBF626A81D03E4A54AD687A23B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.cer Subject info access: rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.mft Manifest number: 28 Signing time: Fri 02 May 2025 12:29:52 +0000 Manifest this update: Fri 02 May 2025 12:24:52 +0000 Manifest next update: Sat 03 May 2025 15:44:52 +0000 Files and hashes: 1: 34352e3233382e3233362e302f32322d3332203d3e20323639313934.roa (hash: wvgfoY9AETz9twOBRuB94S/gLya+Kwk8MDPlUDwjElA=) 2: 960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.crl (hash: yjXe5pmqBPx3dfbMe2M+Yk3LkfuqqxwsaLtL5ZPTN7I=) 3: 34352e3137392e3233362e302f32322d3332203d3e20323639313934.roa (hash: 9Iv0LYK3E8ZPMXk9urzFO8MeiGgrmSbqgdqZMnosYv8=) 4: 34352e3138302e3231362e302f32322d3332203d3e20323639313934.roa (hash: JH6ju057H4XS8C46Y60zPc+z91M0/zaBhBfHy+PXe+s=) 5: 3137302e3234372e32382e302f32322d3332203d3e20323639313934.roa (hash: 0WANYNk1dYKiKVdK1NzxfG8v8vYE638Zi/TP6vzNNcg=) 6: 3136382e3138312e3235322e302f32322d3332203d3e20323639313934.roa (hash: DIsKuSZQPMKwxu8dcHmFONbGN9uTCivJuBHuLNM2g3M=) 7: 323830343a363064343a3a2f33322d313238203d3e20323639313934.roa (hash: LePTxjJBOrm9QYmecp3eRBR2rsruAfQsZj8f0K3tFDA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.crl rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 03 May 2025 15:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4b:f8:fe:d1:e0:eb:bb:f6:26:a8:1d:03:e4:a5:4a:d6:87:a2:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112 Validity Not Before: May 2 12:24:52 2025 GMT Not After : May 3 15:44:52 2025 GMT Subject: CN=74C8B06181C9E8300633CA83C20AD1AF0AF82B4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:b2:32:a5:2e:fa:cd:93:90:05:87:e5:ed: 00:46:e5:83:0e:1e:d9:df:14:e7:22:2b:1c:9c:62: e1:fe:29:7c:81:1a:9c:0e:3e:3e:a2:16:b3:4a:0b: 5d:df:41:29:fd:92:01:a9:ff:8d:bf:d3:80:75:e2: bf:59:8f:3d:ed:69:00:34:08:6c:9c:32:54:8f:b5: 3d:e5:4a:a0:0b:4f:70:90:c5:e1:0d:66:5b:85:47: c0:d5:a0:ba:6c:84:7b:1b:a4:21:6d:a7:ce:ec:3b: ae:1b:53:5a:aa:a3:f7:a0:bd:ae:1a:ed:21:47:28: ec:1b:6f:a2:5c:a5:35:ac:15:6e:ca:ce:fd:5c:d6: 3d:bc:ec:5e:92:19:45:1b:c3:0a:74:5d:ea:a5:64: 24:b1:fa:b2:aa:2d:5e:b5:4a:3f:fd:92:9f:fe:52: e3:d5:91:cd:15:36:c5:dd:a5:61:1e:e7:fc:0d:61: 8b:44:1d:f1:23:a4:d5:3e:03:62:93:bf:8a:43:e7: 5c:18:34:42:b2:b6:c4:00:56:cc:16:45:66:cc:67: 12:2e:50:4d:ce:b7:a2:da:d7:01:ab:ee:97:17:9a: 8f:25:26:9d:c3:99:21:27:50:21:d1:9b:14:29:26: 33:1f:9b:91:68:57:96:79:ee:ac:e8:08:a4:63:7d: a2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C8:B0:61:81:C9:E8:30:06:33:CA:83:C2:0A:D1:AF:0A:F8:2B:4B X509v3 Authority Key Identifier: keyid:96:0C:CA:2B:42:F8:9A:2A:9A:BD:CC:54:6D:E2:2E:BB:9B:DB:41:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:3f:aa:f4:2c:f7:c0:4e:0a:cf:32:00:45:c9:e1:8b:fd:77: 6f:40:5a:e7:97:d2:56:f0:53:c8:0f:70:24:7a:f4:a8:d0:d0: 80:bb:37:38:c4:72:02:bc:20:53:03:2e:75:81:1e:b1:59:6c: a4:4d:34:9f:9c:9d:a1:6e:4a:06:fe:89:ff:2f:62:28:3b:f7: 86:8b:ac:1f:1d:60:46:91:7f:c2:ab:a5:29:10:fa:03:1f:bb: bd:bd:35:5b:d9:6f:e5:f3:94:6c:d2:da:1e:b5:5e:13:97:dc: 9a:38:3a:e5:15:1e:10:a0:b2:e7:0a:5e:e0:8b:73:40:e3:c1: 68:b0:5c:20:44:d7:3f:75:d8:f5:82:94:05:5e:8d:93:58:44: 9b:07:10:74:c9:3c:a9:54:4d:14:5f:b7:ef:05:11:dc:8b:21: 76:46:e7:86:7a:7b:d5:b2:cb:86:0d:2c:23:28:12:2d:5f:17: 90:b7:86:02:78:06:ed:72:27:99:47:b2:d4:67:24:fb:61:4e: c2:7e:03:03:19:ca:de:5d:81:3b:85:8e:12:df:09:39:b2:c9: 54:4b:85:cc:3d:7b:96:09:cb:7f:99:b8:fa:9c:69:06:ee:db: ca:9c:a1:3d:a0:75:3b:37:37:2e:28:ee:3b:9f:10:8e:05:77: 01:da:66:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS0v4/tHg67v2JqgdA+SlStaHojswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYwQ0NBMkI0MkY4OUEyQTlBQkRDQzU0NkRFMjJFQkI5 QkRCNDExMjAeFw0yNTA1MDIxMjI0NTJaFw0yNTA1MDMxNTQ0NTJaMDMxMTAvBgNV BAMTKDc0QzhCMDYxODFDOUU4MzAwNjMzQ0E4M0MyMEFEMUFGMEFGODJCNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjT7IypS76zZOQBYfl7QBG5YMO HtnfFOciKxycYuH+KXyBGpwOPj6iFrNKC13fQSn9kgGp/42/04B14r9Zjz3taQA0 CGycMlSPtT3lSqALT3CQxeENZluFR8DVoLpshHsbpCFtp87sO64bU1qqo/egva4a 7SFHKOwbb6JcpTWsFW7Kzv1c1j287F6SGUUbwwp0XeqlZCSx+rKqLV61Sj/9kp/+ UuPVkc0VNsXdpWEe5/wNYYtEHfEjpNU+A2KTv4pD51wYNEKytsQAVswWRWbMZxIu UE3Ot6La1wGr7pcXmo8lJp3DmSEnUCHRmxQpJjMfm5FoV5Z57qzoCKRjfaJ5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdMiwYYHJ6DAGM8qDwgrRrwr4K0swHwYDVR0j BBgwFoAUlgzKK0L4miqavcxUbeIuu5vbQRIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl TDQvMC85NjBDQ0EyQjQyRjg5QTJBOUFCRENDNTQ2REUyMkVCQjlCREI0MTEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2MENDQTJCNDJGODlBMkE5 QUJEQ0M1NDZERTIyRUJCOUJEQjQxMTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1ZlTDQvMC85 NjBDQ0EyQjQyRjg5QTJBOUFCRENDNTQ2REUyMkVCQjlCREI0MTEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVT+q9Cz3wE4KzzIARcnhi/13b0Ba55fSVvBTyA9wJHr0qNDQgLs3OMRyArwg UwMudYEesVlspE00n5ydoW5KBv6J/y9iKDv3housHx1gRpF/wqulKRD6Ax+7vb01 W9lv5fOUbNLaHrVeE5fcmjg65RUeEKCy5wpe4ItzQOPBaLBcIETXP3XY9YKUBV6N k1hEmwcQdMk8qVRNFF+37wUR3Ishdkbnhnp71bLLhg0sIygSLV8XkLeGAngG7XIn mUey1Gck+2FOwn4DAxnK3l2BO4WOEt8JObLJVEuFzD17lgnLf5m4+pxpBu7bypyh PaB1Ozc3LijuO58QjgV3Adpm0A== -----END CERTIFICATE-----Generated at Sat May 3 00:54:15 2025 by rpki-client