$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft File: 8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft (raw, json) Hash identifier: HlR6KK3l3kgiyRW536/2gPOgjX6zcg8SYKDW14IWJbQ= Subject key identifier: 18:85:53:A5:03:29:36:44:E6:50:B0:F5:DD:A2:3C:CA:5D:EB:EE:E1 Authority key identifier: 8D:AD:F2:62:5A:DA:58:A1:BB:ED:95:A1:05:F3:50:C7:99:62:F7:DF Certificate issuer: /CN=8DADF2625ADA58A1BBED95A105F350C79962F7DF Certificate serial: 017D7EE46A043384DF4BDEA71290F5A813C1608C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DADF2625ADA58A1BBED95A105F350C79962F7DF.cer Subject info access: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft Manifest number: 4A Signing time: Thu 08 May 2025 08:59:00 +0000 Manifest this update: Thu 08 May 2025 08:54:00 +0000 Manifest next update: Fri 09 May 2025 12:17:00 +0000 Files and hashes: 1: 323830343a313934383a3a2f33322d313238203d3e203631373834.roa (hash: c4qHtAaRVCfHGye+AmZjvOdvXcBA17zzyqsMVQdybL8=) 2: 3230312e35352e3230302e302f32322d3332203d3e203631373834.roa (hash: rT6UND/SmBGOjHVUN3QxSDRoFdYbach6YTC7z92UaOw=) 3: 8DADF2625ADA58A1BBED95A105F350C79962F7DF.crl (hash: +5qUxC1Bih3+19YijmsdzTIVeglu1RpcOUE6SmIXn80=) 4: 3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa (hash: jvOaxLjiqvOdI8K+lUyUL7YEETsfWoSFl0/uLR99Oe8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.crl rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DADF2625ADA58A1BBED95A105F350C79962F7DF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 12:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:7d:7e:e4:6a:04:33:84:df:4b:de:a7:12:90:f5:a8:13:c1:60:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DADF2625ADA58A1BBED95A105F350C79962F7DF Validity Not Before: May 8 08:54:00 2025 GMT Not After : May 9 12:17:00 2025 GMT Subject: CN=188553A503293644E650B0F5DDA23CCA5DEBEEE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:4f:39:95:47:45:eb:3d:45:6f:6b:9d:d2: 26:38:2c:9b:c0:a3:c1:a8:26:32:87:4a:56:b4:05: a2:ff:a0:52:68:5e:fc:85:aa:fb:26:29:32:c7:23: eb:cf:fc:1d:f1:e1:0e:00:55:dc:5b:b8:d0:a6:61: 8e:72:4f:1e:a4:ea:99:a8:cf:97:0c:cc:93:05:6e: 64:e7:19:b5:6c:14:6a:3e:d1:e4:0f:f5:c2:1f:0f: c3:9e:ca:c5:88:65:62:89:71:06:56:e6:c3:60:7b: 43:b8:87:7e:8d:69:18:48:55:9e:a7:48:b7:62:4e: a6:e6:4e:81:34:2a:d1:a0:97:cd:ef:58:b1:85:79: f3:7b:7c:79:02:d0:45:ae:ad:c0:df:80:51:9f:32: e4:1c:33:53:3a:df:31:48:26:90:27:45:96:9d:ba: 88:2c:ce:d8:0a:5f:24:b3:ac:f0:33:c6:85:76:29: e9:77:12:08:66:de:2b:ee:f4:eb:e3:ee:db:e3:24: 38:e7:93:6a:3e:15:58:22:d6:2d:3e:37:47:a5:7d: 1b:32:c2:57:23:5d:a0:d5:18:06:8e:d5:bc:21:ec: 96:2f:8e:90:b7:49:e9:57:0c:ba:b2:cc:95:2c:77: b5:03:7a:be:16:b9:f2:da:04:d3:a4:3c:d6:3a:f2: ef:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:85:53:A5:03:29:36:44:E6:50:B0:F5:DD:A2:3C:CA:5D:EB:EE:E1 X509v3 Authority Key Identifier: keyid:8D:AD:F2:62:5A:DA:58:A1:BB:ED:95:A1:05:F3:50:C7:99:62:F7:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DADF2625ADA58A1BBED95A105F350C79962F7DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/8DADF2625ADA58A1BBED95A105F350C79962F7DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:b5:60:3b:01:e8:ef:95:bd:9e:11:e8:17:80:1f:48:82:d2: 3b:b4:a9:db:95:3b:af:47:c5:0b:b6:8f:73:e9:04:e6:6c:33: 51:a3:5f:2d:ed:d4:7a:5a:f5:a3:4b:68:df:39:f4:d4:ed:d8: 9a:5f:63:84:46:81:86:33:a1:d1:d6:00:45:8d:02:45:6e:1d: 41:26:af:b4:7f:ed:32:31:83:74:a2:93:10:c2:5f:8e:36:88: 4a:c2:01:7a:91:f6:b6:6f:53:fb:50:70:c0:6d:27:fa:8e:11: 09:72:ef:f8:c9:76:44:54:ed:ac:31:ea:03:aa:9e:ad:63:39: ac:e3:24:d4:f4:d0:37:dc:99:5f:c5:7c:cf:05:f6:e5:16:c0: 6b:be:e6:1e:51:f6:42:d0:2c:0c:79:89:ef:d3:34:a4:0e:42: 89:3e:23:17:4d:6a:65:e0:bc:13:5b:79:dc:8a:be:dd:7f:18: 44:88:77:47:3e:71:f7:72:ca:6a:b6:73:84:6b:dd:2a:f3:4b: 92:86:04:82:38:42:ba:6c:3d:c4:f5:c2:05:ab:8f:e8:46:64: 98:d0:95:bf:2b:17:f0:34:62:c9:03:2c:a3:dc:51:c5:c6:d4: 88:8e:4e:e5:b2:17:63:88:02:e2:5e:ed:7d:b0:23:df:3e:84: cd:ce:c7:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAX1+5GoEM4TfS96nEpD1qBPBYIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBREYyNjI1QURBNThBMUJCRUQ5NUExMDVGMzUwQzc5 OTYyRjdERjAeFw0yNTA1MDgwODU0MDBaFw0yNTA1MDkxMjE3MDBaMDMxMTAvBgNV BAMTKDE4ODU1M0E1MDMyOTM2NDRFNjUwQjBGNUREQTIzQ0NBNURFQkVFRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYU85lUdF6z1Fb2ud0iY4LJvA o8GoJjKHSla0BaL/oFJoXvyFqvsmKTLHI+vP/B3x4Q4AVdxbuNCmYY5yTx6k6pmo z5cMzJMFbmTnGbVsFGo+0eQP9cIfD8OeysWIZWKJcQZW5sNge0O4h36NaRhIVZ6n SLdiTqbmToE0KtGgl83vWLGFefN7fHkC0EWurcDfgFGfMuQcM1M63zFIJpAnRZad uogsztgKXySzrPAzxoV2Kel3Eghm3ivu9Ovj7tvjJDjnk2o+FVgi1i0+N0elfRsy wlcjXaDVGAaO1bwh7JYvjpC3SelXDLqyzJUsd7UDer4WufLaBNOkPNY68u9LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGIVTpQMpNkTmULD13aI8yl3r7uEwHwYDVR0j BBgwFoAUja3yYlraWKG77ZWhBfNQx5li998wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDRFV1RYWEdVaW9CcGFTMzhiV1VHUDMxdzFwR2hFVkxxRGRSYlViWjJU VVIvMC84REFERjI2MjVBREE1OEExQkJFRDk1QTEwNUYzNTBDNzk5NjJGN0RGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEQURGMjYyNUFEQTU4QTFC QkVEOTVBMTA1RjM1MEM3OTk2MkY3REYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDRFV1RYWEdVaW9CcGFTMzhiV1VHUDMxdzFwR2hFVkxxRGRSYlViWjJUVVIvMC84 REFERjI2MjVBREE1OEExQkJFRDk1QTEwNUYzNTBDNzk5NjJGN0RGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy7VgOwHo75W9nhHoF4AfSILSO7Sp25U7r0fFC7aPc+kE5mwzUaNfLe3Uelr1 o0to3zn01O3Yml9jhEaBhjOh0dYARY0CRW4dQSavtH/tMjGDdKKTEMJfjjaISsIB epH2tm9T+1BwwG0n+o4RCXLv+Ml2RFTtrDHqA6qerWM5rOMk1PTQN9yZX8V8zwX2 5RbAa77mHlH2QtAsDHmJ79M0pA5CiT4jF01qZeC8E1t53Iq+3X8YRIh3Rz5x93LK arZzhGvdKvNLkoYEgjhCumw9xPXCBauP6EZkmNCVvysX8DRiyQMso9xRxcbUiI5O 5bIXY4gC4l7tfbAj3z6Ezc7HvA== -----END CERTIFICATE-----Generated at Thu May 8 22:59:23 2025 by rpki-client