$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft File: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft (raw, json) Hash identifier: gx34M5eBVR1TszGrjCd4W0x4HvZl1wfdY8+lrGo/n7E= Subject key identifier: C2:F9:74:C3:83:98:71:78:8B:67:E4:DD:2E:A1:92:5E:4C:93:80:9D Authority key identifier: CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 Certificate issuer: /CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Certificate serial: 7E9CF48ADB75A0FF4E2700597889CAD2B9B4F1B9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject info access: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft Manifest number: 021A Signing time: Sun 11 May 2025 09:15:19 +0000 Manifest this update: Sun 11 May 2025 09:10:19 +0000 Manifest next update: Mon 12 May 2025 12:01:19 +0000 Files and hashes: 1: 34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa (hash: gE/DdB9YOblUsoK0HG9wnPd3YKHH2DbykTyw5B7/wBQ=) 2: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl (hash: Q3BYGvjs1WyhoIoPhW6iNHsVQjjjY+BSDiNTxhNYh/0=) 3: 323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (hash: JKjEt0hETRYlcDbmWQLZvhZ9xRQwxepiQuRghmhAfoA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 02:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:9c:f4:8a:db:75:a0:ff:4e:27:00:59:78:89:ca:d2:b9:b4:f1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Validity Not Before: May 11 09:10:19 2025 GMT Not After : May 12 12:01:19 2025 GMT Subject: CN=C2F974C3839871788B67E4DD2EA1925E4C93809D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:9d:48:59:7c:19:93:ea:84:c5:28:9e:97: f8:51:26:7d:bc:1a:71:90:b7:b4:9a:46:b9:bc:51: 21:d6:47:cd:8c:7d:78:b5:a5:cc:e0:86:b3:31:0b: 0d:bb:f1:43:cb:cd:f4:d7:e2:a6:ed:1e:71:de:f7: bb:53:55:a5:24:89:df:50:17:d4:69:3c:bf:f6:51: 82:7d:14:93:14:c2:de:35:24:aa:79:19:23:f6:77: eb:bd:c4:7f:c3:86:3c:dc:5a:fb:8e:a6:79:5c:0e: e7:90:63:c7:26:9a:f4:a4:31:4a:c7:9c:da:ef:38: 31:33:23:21:ae:e2:8e:e3:b9:f2:7f:37:b8:6f:20: e7:08:de:c5:c0:19:33:80:eb:e8:77:40:b0:1c:f5: ec:ee:07:b4:f5:ff:1f:86:8f:d2:ef:cc:c9:44:da: d4:99:37:cb:24:e6:33:23:b6:69:5d:68:45:b2:33: 35:24:ee:5d:c2:b8:40:a1:47:61:13:93:1e:ac:3e: 12:74:72:6e:ec:13:79:c7:d1:a7:bf:88:ff:85:05: c3:40:3b:4a:98:32:32:08:53:58:e9:6c:d5:d3:e0: 33:c5:34:ed:64:c6:3b:e6:55:a6:92:73:32:40:04: 69:6a:71:5f:ea:ef:69:95:89:97:c3:de:4d:b2:01: 56:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F9:74:C3:83:98:71:78:8B:67:E4:DD:2E:A1:92:5E:4C:93:80:9D X509v3 Authority Key Identifier: keyid:CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:21:7c:9a:46:25:3e:34:e4:74:fa:f0:bb:13:6f:9f:35:f0: 22:cb:6e:1b:a7:74:c5:53:39:09:8b:4d:72:dc:27:d5:0b:6b: a1:7c:2f:39:17:22:38:bf:b5:b7:60:d2:87:98:9f:fa:37:95: d3:d2:7e:12:7b:06:49:51:da:6c:38:47:a9:ed:e3:46:b1:c9: cb:a2:e4:37:cd:6d:58:68:da:56:93:08:3d:76:f7:c8:5b:34: a3:a4:01:5f:6c:b9:30:a9:99:a5:c1:1b:64:4d:59:1b:ec:18: 6a:a7:6e:fd:a8:7d:49:bb:89:96:be:36:ab:73:0d:73:c8:68: 76:4a:42:39:3f:54:cb:7e:51:3b:e6:ae:38:ca:f5:41:5c:19: f5:2b:bf:a5:64:c7:85:67:24:f2:9f:3b:2c:54:70:36:3c:c2: 34:86:ba:25:e2:c5:b5:e8:a2:f1:91:7f:64:5a:f5:29:8f:15: 77:e6:4f:d3:4f:26:b5:fd:b3:46:20:44:d6:e2:2e:22:1a:52: 6f:64:26:e6:d4:0d:db:3d:b5:74:5c:fb:f9:d4:25:3a:b3:25: c4:0b:56:64:d8:16:30:ec:cf:bb:b2:9b:e5:d5:63:74:24:58: 76:6d:0f:37:0d:c4:2a:b6:00:7b:d4:e4:36:c6:2c:4f:3e:6f: bf:2b:70:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfpz0itt1oP9OJwBZeInK0rm08bkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQzNEMzg5RUU2QkFCN0NDRDVGNjYwRDYzMEE4QkU4 RTFBRTA1MzAeFw0yNTA1MTEwOTEwMTlaFw0yNTA1MTIxMjAxMTlaMDMxMTAvBgNV BAMTKEMyRjk3NEMzODM5ODcxNzg4QjY3RTRERDJFQTE5MjVFNEM5MzgwOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyQ51IWXwZk+qExSiel/hRJn28 GnGQt7SaRrm8USHWR82MfXi1pczghrMxCw278UPLzfTX4qbtHnHe97tTVaUkid9Q F9RpPL/2UYJ9FJMUwt41JKp5GSP2d+u9xH/DhjzcWvuOpnlcDueQY8cmmvSkMUrH nNrvODEzIyGu4o7jufJ/N7hvIOcI3sXAGTOA6+h3QLAc9ezuB7T1/x+Gj9LvzMlE 2tSZN8sk5jMjtmldaEWyMzUk7l3CuEChR2ETkx6sPhJ0cm7sE3nH0ae/iP+FBcNA O0qYMjIIU1jpbNXT4DPFNO1kxjvmVaaSczJABGlqcV/q72mViZfD3k2yAVbZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwvl0w4OYcXiLZ+TdLqGSXkyTgJ0wHwYDVR0j BBgwFoAUz/w9OJ7murfM1fZg1jCovo4a4FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5 RFcvMS9DRkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRkMzRDM4OUVFNkJBQjdD Q0Q1RjY2MEQ2MzBBOEJFOEUxQUUwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5RFcvMS9D RkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANiF8mkYlPjTkdPrwuxNvnzXwIstuG6d0xVM5CYtNctwn1QtroXwvORciOL+1 t2DSh5if+jeV09J+EnsGSVHabDhHqe3jRrHJy6LkN81tWGjaVpMIPXb3yFs0o6QB X2y5MKmZpcEbZE1ZG+wYaqdu/ah9SbuJlr42q3MNc8hodkpCOT9Uy35RO+auOMr1 QVwZ9Su/pWTHhWck8p87LFRwNjzCNIa6JeLFteii8ZF/ZFr1KY8Vd+ZP008mtf2z RiBE1uIuIhpSb2Qm5tQN2z21dFz7+dQlOrMlxAtWZNgWMOzPu7Kb5dVjdCRYdm0P Nw3EKrYAe9TkNsYsTz5vvytwWg== -----END CERTIFICATE-----Generated at Sun May 11 12:44:26 2025 by rpki-client