$ rpki-client -vvf rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft File: CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft (raw, json) Hash identifier: Z7sw7faf/cdZI5qjgne1QgeVanK7Acx789bVu0IunXA= Subject key identifier: E7:0B:5E:03:62:EA:21:91:EC:4B:BE:DD:60:84:AF:EC:CA:58:11:54 Authority key identifier: CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7 Certificate issuer: /CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7 Certificate serial: 015129417E0296B240D57AED98B32C4D0DC8E104 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft Manifest number: 0216 Signing time: Sun 11 May 2025 07:15:02 +0000 Manifest this update: Sun 11 May 2025 07:10:02 +0000 Manifest next update: Mon 12 May 2025 10:41:02 +0000 Files and hashes: 1: 323830343a346136303a3a2f33322d3438203d3e20323637323336.roa (hash: HXHsYhUdByPYxba36KCh/OEG0vVpZrXEtjG/lzDILwA=) 2: 34352e3233312e3130302e302f32322d3234203d3e20323637323336.roa (hash: hqUbgxj/RNJQi5nqrnPwBzhh7SYK/ax4xDI+T6kQN58=) 3: CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl (hash: Dj9zXHiRwxrnPVLrH9GW7fyWJwRUNv4mr0Qc27hCMCk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 02:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:51:29:41:7e:02:96:b2:40:d5:7a:ed:98:b3:2c:4d:0d:c8:e1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7 Validity Not Before: May 11 07:10:02 2025 GMT Not After : May 12 10:41:02 2025 GMT Subject: CN=E70B5E0362EA2191EC4BBEDD6084AFECCA581154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e2:f3:31:0e:49:79:a6:05:1e:de:b7:1e:ed: eb:59:88:ce:4c:91:ca:4b:a3:4d:b3:28:9e:76:c1: be:7d:f9:bc:59:fd:f8:37:16:75:68:9c:c2:4f:3f: 20:79:77:07:f1:e8:75:cb:71:2e:e3:ad:8f:8a:b1: 29:5e:85:d7:87:4c:eb:de:29:d0:f3:a6:18:71:0d: 03:52:b7:f2:33:f1:b4:1a:ec:b5:60:6c:13:51:c0: 1d:16:f3:37:79:0d:d9:2f:91:fe:e2:fd:34:15:7c: 4d:e4:59:01:e5:48:3b:b3:48:e5:f4:40:02:3d:64: db:dd:e9:8d:03:c7:c4:20:76:16:45:ee:c1:25:f8: 49:23:de:f8:78:32:fb:d4:75:8f:a9:e1:6c:3b:7a: a8:08:46:c3:9c:b8:53:ad:a0:26:ef:fa:51:b4:78: af:fd:6c:ff:fe:ec:8a:cd:60:e7:b3:95:27:b7:c2: 89:1e:11:26:50:35:7c:2d:ea:ee:4f:5c:cf:99:65: cc:bc:ba:86:44:6b:5c:ba:a2:88:71:1d:ad:ab:43: 3d:b2:bf:7e:e6:ab:53:e6:ec:ff:d7:45:1a:78:cb: c4:82:1e:99:1f:e5:19:83:03:c3:07:19:01:6c:ac: 64:29:b1:95:14:6e:81:0b:b3:a7:82:68:74:42:e9: 6b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0B:5E:03:62:EA:21:91:EC:4B:BE:DD:60:84:AF:EC:CA:58:11:54 X509v3 Authority Key Identifier: keyid:CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:67:b0:0f:60:75:5f:ae:75:ac:cf:68:c6:6a:fb:af:ed:17: bb:86:2f:0b:5d:ab:1a:cf:ca:9f:0b:e0:95:ae:38:70:6f:4e: c9:04:54:21:7d:b4:04:d6:d9:a9:c3:fd:78:f0:74:b7:6e:92: ce:62:9f:2f:c7:93:b0:e2:62:8f:54:41:8e:1e:3d:52:08:3c: 2b:6e:ec:39:0f:50:77:08:ff:00:41:3c:c3:76:11:64:7b:65: ec:6d:9a:a6:2e:fb:c1:3c:9a:6d:44:92:0c:2a:5b:55:8b:2f: 90:05:5f:89:ce:4a:5c:1c:54:a0:94:48:b5:7d:dc:70:1f:98: 74:15:92:11:12:f0:85:be:aa:99:d0:8e:a3:2a:bb:2b:02:5c: 35:09:33:f3:62:a5:b2:75:d4:28:85:e6:01:5c:f1:4c:85:ef: b3:1b:34:43:29:45:3b:51:eb:30:db:07:a1:db:e8:a5:bf:3e: 92:42:9b:9d:e5:4c:35:93:df:38:ff:ae:13:fd:17:b4:75:67: f7:7e:b5:44:d7:6a:1c:4c:88:c8:ff:99:e8:7a:92:4b:61:e2: 07:44:d1:e2:05:7a:5a:57:04:44:af:dd:c7:78:51:62:f0:bd: ef:13:32:62:46:1f:4c:7b:a1:eb:5b:ec:46:60:3f:d3:03:9b: bb:11:3d:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAVEpQX4ClrJA1XrtmLMsTQ3I4QQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NFRjJEM0VBNUJEMTg3QzQ1RUE2RDNBOEZBRjcxQ0Qx NUY3RDJBNzAeFw0yNTA1MTEwNzEwMDJaFw0yNTA1MTIxMDQxMDJaMDMxMTAvBgNV BAMTKEU3MEI1RTAzNjJFQTIxOTFFQzRCQkVERDYwODRBRkVDQ0E1ODExNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq4vMxDkl5pgUe3rce7etZiM5M kcpLo02zKJ52wb59+bxZ/fg3FnVonMJPPyB5dwfx6HXLcS7jrY+KsSlehdeHTOve KdDzphhxDQNSt/Iz8bQa7LVgbBNRwB0W8zd5Ddkvkf7i/TQVfE3kWQHlSDuzSOX0 QAI9ZNvd6Y0Dx8QgdhZF7sEl+Ekj3vh4MvvUdY+p4Ww7eqgIRsOcuFOtoCbv+lG0 eK/9bP/+7IrNYOezlSe3wokeESZQNXwt6u5PXM+ZZcy8uoZEa1y6oohxHa2rQz2y v37mq1Pm7P/XRRp4y8SCHpkf5RmDA8MHGQFsrGQpsZUUboELs6eCaHRC6WspAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5wteA2LqIZHsS77dYISv7MpYEVQwHwYDVR0j BBgwFoAUzO8tPqW9GHxF6m06j69xzRX30qcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1wcHdiUWpFclp6ZENDd2R4eDVLbjdXR0tWeGNrUlJzNW05OWFtcGM1 WDYvMS9DQ0VGMkQzRUE1QkQxODdDNDVFQTZEM0E4RkFGNzFDRDE1RjdEMkE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDRUYyRDNFQTVCRDE4N0M0 NUVBNkQzQThGQUY3MUNEMTVGN0QyQTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1wcHdiUWpFclp6ZENDd2R4eDVLbjdXR0tWeGNrUlJzNW05OWFtcGM1WDYvMS9D Q0VGMkQzRUE1QkQxODdDNDVFQTZEM0E4RkFGNzFDRDE1RjdEMkE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXWewD2B1X651rM9oxmr7r+0Xu4YvC12rGs/Knwvgla44cG9OyQRUIX20BNbZ qcP9ePB0t26SzmKfL8eTsOJij1RBjh49Ugg8K27sOQ9Qdwj/AEE8w3YRZHtl7G2a pi77wTyabUSSDCpbVYsvkAVfic5KXBxUoJRItX3ccB+YdBWSERLwhb6qmdCOoyq7 KwJcNQkz82KlsnXUKIXmAVzxTIXvsxs0QylFO1HrMNsHodvopb8+kkKbneVMNZPf OP+uE/0XtHVn9361RNdqHEyIyP+Z6HqSS2HiB0TR4gV6WlcERK/dx3hRYvC97xMy YkYfTHuh61vsRmA/0wObuxE95w== -----END CERTIFICATE-----Generated at Sun May 11 17:01:49 2025 by rpki-client