$ rpki-client -vvf rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.mft File: EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.mft (raw, json) Hash identifier: losoBE8QBfhUeVFTf5TpPme6IEvuPz0fMPiacgKg+Kk= Subject key identifier: 45:0B:04:2E:D1:20:FE:A4:DD:26:11:3A:04:DB:65:6D:D4:D7:B5:B7 Authority key identifier: EA:3B:F4:28:2B:2E:55:EC:94:8E:8D:55:C9:C5:00:F5:3D:D2:E5:74 Certificate issuer: /CN=EA3BF4282B2E55EC948E8D55C9C500F53DD2E574 Certificate serial: 70AC1D54A27E369EB3CE1794B542FC705FC90034 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.cer Subject info access: rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.mft Manifest number: 021C Signing time: Thu 15 May 2025 00:25:35 +0000 Manifest this update: Thu 15 May 2025 00:20:35 +0000 Manifest next update: Fri 16 May 2025 02:03:35 +0000 Files and hashes: 1: 3137302e37392e32302e302f32322d3332203d3e20323634383831.roa (hash: AsvVRlQtTq0+3Wl0iIUJxlrSE6ewvKWZCImGDniybgU=) 2: 3136382e3232372e3137322e302f32322d3332203d3e20323634383831.roa (hash: 3+1UMekKUEH6MViWrluhMHOFPsIcewuJaj8+RjiL+DQ=) 3: 323830343a326634343a3a2f33322d313238203d3e20323634383831.roa (hash: qJ5SzFbxzauhmz2FW6oLpDNIU1jMfY14WCIS9FBNsk4=) 4: EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.crl (hash: P1fpQX4JOctrMg2CQBJCG7QV/DLgNcL67002t/sbYQE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.crl rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 16 May 2025 02:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ac:1d:54:a2:7e:36:9e:b3:ce:17:94:b5:42:fc:70:5f:c9:00:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA3BF4282B2E55EC948E8D55C9C500F53DD2E574 Validity Not Before: May 15 00:20:35 2025 GMT Not After : May 16 02:03:35 2025 GMT Subject: CN=450B042ED120FEA4DD26113A04DB656DD4D7B5B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:09:19:b4:de:64:b4:8b:03:de:09:bd:a7:0b: 7e:91:02:d1:7b:74:e0:10:cd:e3:4b:fd:20:18:2a: da:24:b2:dc:c1:1c:56:a5:b8:3b:15:77:46:4d:06: 26:fd:b5:85:b0:7a:1d:67:25:64:e8:fa:be:18:ee: c3:ee:22:c9:87:53:52:21:c4:fc:d0:a1:72:af:ec: ee:9b:66:0e:66:a4:ab:d5:09:1e:c1:33:88:7d:d4: 2c:b9:ef:a7:0d:2d:32:f5:d5:85:42:50:1d:e4:55: 18:72:6f:9d:ac:70:bb:b1:88:77:e7:01:d9:ff:0b: 5e:18:83:50:e3:55:2a:29:0f:97:05:4d:67:0d:fe: d6:bf:b6:23:73:a3:98:c5:b6:15:12:a0:f2:8b:2f: b0:b3:fb:7b:40:31:8f:2d:dc:79:76:c3:75:8d:ef: 13:a0:06:46:b5:61:df:fa:63:11:5e:4d:65:09:e8: 9f:c4:80:95:ba:63:cc:7d:f3:fe:c0:3b:c1:89:1d: 91:ac:e1:1c:7b:08:68:2d:b7:58:1a:35:04:46:a4: 83:7a:15:19:11:24:78:8b:4a:ac:65:c6:6d:6c:22: f6:94:55:24:8c:0c:ad:13:82:e5:df:5c:08:a1:55: dc:67:c6:63:10:00:a2:e8:dc:2f:11:9f:89:2a:e1: 9e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0B:04:2E:D1:20:FE:A4:DD:26:11:3A:04:DB:65:6D:D4:D7:B5:B7 X509v3 Authority Key Identifier: keyid:EA:3B:F4:28:2B:2E:55:EC:94:8E:8D:55:C9:C5:00:F5:3D:D2:E5:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:28:2f:4d:fb:b1:27:77:70:26:29:f6:9d:e7:03:d6:6e:c5: 74:bd:b5:ee:5b:1b:5d:a9:8a:9a:42:ee:2f:23:f0:13:88:f1: ee:81:5d:ff:34:3d:77:37:28:ed:7f:d1:29:19:75:b8:87:d5: cc:1c:57:d8:52:21:eb:be:d2:80:3b:d7:41:08:4f:72:55:04: 06:aa:23:d8:bf:72:4d:f9:f0:9c:b5:87:c6:cd:4d:80:d9:a5: 2e:c7:fa:a4:d8:95:ab:cf:37:da:74:3c:42:09:ba:14:13:77: e5:90:16:e9:27:2e:55:35:7a:5b:c3:cc:bc:14:17:63:2b:ef: 56:72:ab:dd:4b:bb:7c:d7:14:17:72:3a:53:2e:b3:c9:9c:17: 27:0b:b5:ba:b9:92:70:08:7d:ac:7f:c4:43:3e:ed:68:aa:c1: fa:81:8c:21:22:89:7d:88:9c:38:88:b7:d7:08:22:e5:13:7c: 52:dd:a0:3c:89:b3:b1:5a:65:9e:bb:2a:4c:f1:3c:43:a5:da: 45:3d:fa:97:3b:d6:88:89:05:55:80:18:f0:f2:37:bc:31:1c: 9e:53:71:52:5e:00:59:70:bd:86:97:bd:00:81:5a:03:d8:83: c4:e5:d5:93:10:b8:de:2d:49:93:f8:bd:63:7f:ad:8c:3a:65: eb:9d:11:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcKwdVKJ+Np6zzheUtUL8cF/JADQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEzQkY0MjgyQjJFNTVFQzk0OEU4RDU1QzlDNTAwRjUz REQyRTU3NDAeFw0yNTA1MTUwMDIwMzVaFw0yNTA1MTYwMjAzMzVaMDMxMTAvBgNV BAMTKDQ1MEIwNDJFRDEyMEZFQTRERDI2MTEzQTA0REI2NTZERDREN0I1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0CRm03mS0iwPeCb2nC36RAtF7 dOAQzeNL/SAYKtokstzBHFaluDsVd0ZNBib9tYWweh1nJWTo+r4Y7sPuIsmHU1Ih xPzQoXKv7O6bZg5mpKvVCR7BM4h91Cy576cNLTL11YVCUB3kVRhyb52scLuxiHfn Adn/C14Yg1DjVSopD5cFTWcN/ta/tiNzo5jFthUSoPKLL7Cz+3tAMY8t3Hl2w3WN 7xOgBka1Yd/6YxFeTWUJ6J/EgJW6Y8x98/7AO8GJHZGs4Rx7CGgtt1gaNQRGpIN6 FRkRJHiLSqxlxm1sIvaUVSSMDK0TguXfXAihVdxnxmMQAKLo3C8Rn4kq4Z6hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURQsELtEg/qTdJhE6BNtlbdTXtbcwHwYDVR0j BBgwFoAU6jv0KCsuVeyUjo1VycUA9T3S5XQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNlNTcVRwaUNMRUpuRDFlbzZ0b29Tc1EzTHAyTFJMMjN0R043M0RyREZn YzYvMS9FQTNCRjQyODJCMkU1NUVDOTQ4RThENTVDOUM1MDBGNTNERDJFNTc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBM0JGNDI4MkIyRTU1RUM5 NDhFOEQ1NUM5QzUwMEY1M0REMkU1NzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NlNTcVRwaUNMRUpuRDFlbzZ0b29Tc1EzTHAyTFJMMjN0R043M0RyREZnYzYvMS9F QTNCRjQyODJCMkU1NUVDOTQ4RThENTVDOUM1MDBGNTNERDJFNTc0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUSgvTfuxJ3dwJin2necD1m7FdL217lsbXamKmkLuLyPwE4jx7oFd/zQ9dzco 7X/RKRl1uIfVzBxX2FIh677SgDvXQQhPclUEBqoj2L9yTfnwnLWHxs1NgNmlLsf6 pNiVq8832nQ8Qgm6FBN35ZAW6ScuVTV6W8PMvBQXYyvvVnKr3Uu7fNcUF3I6Uy6z yZwXJwu1urmScAh9rH/EQz7taKrB+oGMISKJfYicOIi31wgi5RN8Ut2gPImzsVpl nrsqTPE8Q6XaRT36lzvWiIkFVYAY8PI3vDEcnlNxUl4AWXC9hpe9AIFaA9iDxOXV kxC43i1Jk/i9Y3+tjDpl650RMw== -----END CERTIFICATE-----Generated at Thu May 15 15:22:55 2025 by rpki-client