$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft File: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json) Hash identifier: /oaeeQ5cAd7K8d79CwORv/+VLhwNU2qeKQbJlcy0izE= Subject key identifier: F0:B3:6C:47:B6:54:DA:67:58:8D:D7:AA:B3:A5:75:5E:19:D8:97:E8 Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Certificate serial: 33DF6A6606B0FF281A433C43DE091994AB89B44D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft Manifest number: 0223 Signing time: Thu 15 May 2025 16:04:34 +0000 Manifest this update: Thu 15 May 2025 15:59:34 +0000 Manifest next update: Fri 16 May 2025 19:59:34 +0000 Files and hashes: 1: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: lSV/o4YOc33lWUDRl1YfEXFloffiS8CE/b74ZMOG18A=) 2: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: 43Ljd5ZmPAKUprUqtbjRviJ2coJ+43O634wSKbrp4AM=) 3: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: Qo7jd7bqgZ8RaIGB3HsVpFHOePniB9jZXdO3Roenvho=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 May 2025 19:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:df:6a:66:06:b0:ff:28:1a:43:3c:43:de:09:19:94:ab:89:b4:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Validity Not Before: May 15 15:59:34 2025 GMT Not After : May 16 19:59:34 2025 GMT Subject: CN=F0B36C47B654DA67588DD7AAB3A5755E19D897E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:29:6a:7a:fe:10:c9:03:6d:52:1f:ae:84:9d: 69:44:3b:64:29:35:51:be:4a:c0:33:7a:28:ed:d3: aa:6b:94:05:c4:01:8b:cb:20:1b:d9:41:52:4f:df: d6:54:fc:26:57:5a:90:63:26:f5:17:4b:f6:f7:cf: 8c:be:37:a5:cd:88:54:db:72:ac:cb:3e:c9:13:ea: 8b:a2:20:e2:b5:75:68:4a:9a:44:f8:50:55:3f:8a: a1:b3:25:ad:40:84:0a:a5:18:0b:d0:d1:db:b4:e6: c4:15:a1:d9:04:3d:6f:02:13:98:80:79:58:d6:70: 69:9d:7b:b7:4b:3d:30:a1:0a:ff:b5:c7:af:cb:66: d2:57:55:28:9b:94:91:fa:52:58:ab:79:63:36:10: 1d:52:0a:33:09:df:d5:fa:d3:7a:d7:06:f6:b1:ac: a1:e4:2e:9c:d9:aa:82:8d:d6:e5:68:53:e3:07:76: de:af:33:87:dc:2c:7c:a7:c3:f0:97:c2:d7:89:af: d8:b1:0c:4a:fb:4f:be:16:83:7e:b7:e3:ab:08:71: 53:5b:b4:4d:92:1c:e2:e6:d9:de:75:65:25:57:fd: 30:9b:a8:46:a8:ac:14:30:05:24:fb:c4:59:99:44: 24:a0:c2:fe:7c:5d:59:cc:dc:7c:5e:49:a1:b2:6f: 5c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B3:6C:47:B6:54:DA:67:58:8D:D7:AA:B3:A5:75:5E:19:D8:97:E8 X509v3 Authority Key Identifier: keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:57:ed:b1:36:fa:65:e9:9f:cf:36:8f:a9:8b:eb:e6:0c:a5: 7e:6e:0e:f2:2a:86:d7:8d:aa:6c:42:e5:18:f4:58:7c:cd:2d: aa:fb:f0:6c:11:fb:35:eb:c3:78:89:a8:3b:ae:1c:3d:9a:ac: b8:e1:16:33:fe:88:8f:0e:d7:d7:e2:7b:95:19:fc:5e:1e:1e: e7:5e:6b:ea:a6:fa:2a:28:b8:32:1f:ad:97:09:eb:2e:8e:ed: c0:e1:e8:7c:d5:4a:aa:9c:34:33:bd:08:0c:5b:37:33:6f:92: 44:53:90:37:93:4c:1e:5b:31:8b:5f:64:f7:0e:b4:af:8f:27: 17:07:14:25:21:26:d2:ce:8e:c8:99:bc:cb:44:56:e3:53:df: 18:fb:4b:75:8f:2a:a8:b0:50:37:24:43:d8:ee:a4:d1:e9:18: db:73:ff:73:ce:7a:da:a0:1b:38:17:de:f0:28:81:8e:ce:2e: e2:02:8d:37:f7:91:da:88:26:02:24:be:19:b5:f5:df:4a:25: cd:54:ab:26:90:4a:8a:ec:52:25:cb:f3:7f:71:bf:34:06:f7: ed:e9:be:b9:7f:7a:30:75:1e:ea:36:56:3e:c3:a6:e8:79:a1: e8:05:3a:4c:fd:37:b8:e7:39:28:ed:eb:a2:19:d9:2b:ee:ec: 52:82:29:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM99qZgaw/ygaQzxD3gkZlKuJtE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0 ODdBMkVDOTAeFw0yNTA1MTUxNTU5MzRaFw0yNTA1MTYxOTU5MzRaMDMxMTAvBgNV BAMTKEYwQjM2QzQ3QjY1NERBNjc1ODhERDdBQUIzQTU3NTVFMTlEODk3RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKWp6/hDJA21SH66EnWlEO2Qp NVG+SsAzeijt06prlAXEAYvLIBvZQVJP39ZU/CZXWpBjJvUXS/b3z4y+N6XNiFTb cqzLPskT6ouiIOK1dWhKmkT4UFU/iqGzJa1AhAqlGAvQ0du05sQVodkEPW8CE5iA eVjWcGmde7dLPTChCv+1x6/LZtJXVSiblJH6UlireWM2EB1SCjMJ39X603rXBvax rKHkLpzZqoKN1uVoU+MHdt6vM4fcLHynw/CXwteJr9ixDEr7T74Wg36346sIcVNb tE2SHOLm2d51ZSVX/TCbqEaorBQwBST7xFmZRCSgwv58XVnM3HxeSaGyb1wjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8LNsR7ZU2mdYjdeqs6V1XhnYl+gwHwYDVR0j BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5 QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRoU1gvMS9D RDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFlftsTb6ZemfzzaPqYvr5gylfm4O8iqG142qbELlGPRYfM0tqvvwbBH7NevD eImoO64cPZqsuOEWM/6Ijw7X1+J7lRn8Xh4e515r6qb6Kii4Mh+tlwnrLo7twOHo fNVKqpw0M70IDFs3M2+SRFOQN5NMHlsxi19k9w60r48nFwcUJSEm0s6OyJm8y0RW 41PfGPtLdY8qqLBQNyRD2O6k0ekY23P/c8562qAbOBfe8CiBjs4u4gKNN/eR2ogm AiS+GbX130olzVSrJpBKiuxSJcvzf3G/NAb37em+uX96MHUe6jZWPsOm6Hmh6AU6 TP03uOc5KO3rohnZK+7sUoIpyw== -----END CERTIFICATE-----Generated at Thu May 15 17:52:33 2025 by rpki-client