$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft File: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft (raw, json) Hash identifier: hoH+yX91G+wCoMZUzek4bu2+TzZgXgZ9OtTGRATXnl0= Subject key identifier: AC:C7:F7:5F:51:C9:BC:9F:41:6B:FF:08:34:4C:38:9E:B5:13:81:5B Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA Certificate issuer: /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Certificate serial: 32FB8C447275AE8B27C7FF279A2B7E4843B39DBA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft Manifest number: 020E Signing time: Tue 13 May 2025 19:03:38 +0000 Manifest this update: Tue 13 May 2025 18:58:36 +0000 Manifest next update: Wed 14 May 2025 21:36:36 +0000 Files and hashes: 1: 323830343a333164343a3a2f33322d3438203d3e203533313339.roa (hash: Tny32eTDORgq/MtVMRE6pvmeZrpwE0nT6BNCMfyIuNM=) 2: 3138372e3130392e38302e302f32302d3234203d3e203533313339.roa (hash: IQvjHctOgbHfUkTO0U34ErrEutSrCbjo/UK2hA9NLGA=) 3: 3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (hash: sPenw571n896sllNaEQg92EoBX7mLS0ivDvfDaPaky8=) 4: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl (hash: 67PC9C6XUhaf9NRQtRgs2ppyiV7icnKfbqangGtdpi8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 May 2025 21:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:fb:8c:44:72:75:ae:8b:27:c7:ff:27:9a:2b:7e:48:43:b3:9d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Validity Not Before: May 13 18:58:36 2025 GMT Not After : May 14 21:36:36 2025 GMT Subject: CN=ACC7F75F51C9BC9F416BFF08344C389EB513815B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9f:df:88:23:3f:1b:7f:70:e2:8d:a8:cf:61: a2:fe:ca:c7:37:0b:2a:46:d6:5a:58:88:f1:11:51: cf:48:a1:75:52:b8:da:a4:3c:19:7b:32:e3:93:08: 79:32:96:8b:bc:3b:52:22:9a:8b:ed:85:1c:9d:81: e3:e2:dc:4b:da:ec:6f:23:9f:68:ff:52:f4:61:06: 78:ad:f5:87:78:b4:01:d2:f1:7d:e3:aa:34:a0:5a: 81:85:71:36:af:8b:4d:23:04:8f:27:35:21:25:ee: de:c4:8c:4d:5b:e0:62:f7:81:99:b3:08:22:ee:03: 40:09:da:6d:82:5f:36:2d:ab:d4:26:3c:e9:ca:84: c6:e6:d9:8d:35:b8:01:c2:8f:6d:74:d2:fc:42:4a: 7d:10:e5:04:fd:a9:66:a2:0e:f7:73:f2:5b:75:46: 41:43:d3:ef:d7:c4:cd:aa:49:e1:10:58:dd:80:fb: d8:1b:52:94:ba:72:3e:4d:e1:cf:1d:83:34:c3:b6: 7e:2a:10:09:c1:b4:b5:08:7b:0a:84:f8:1f:dd:71: 53:89:3e:78:fd:39:8d:e8:b4:7e:ab:05:9d:54:bd: 48:5f:b5:65:b9:60:dc:40:df:48:31:74:74:a1:8e: 8f:7c:78:e8:75:25:e5:5e:ee:8e:cd:35:c1:9c:2e: fd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C7:F7:5F:51:C9:BC:9F:41:6B:FF:08:34:4C:38:9E:B5:13:81:5B X509v3 Authority Key Identifier: keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:6c:64:4b:b1:7f:46:17:46:90:58:69:38:e5:5c:69:00:42: 59:68:36:9e:9b:8f:8e:3e:a3:95:1c:42:34:88:31:7d:04:d8: bf:72:d0:7b:97:b0:1a:49:1b:42:ee:22:8b:42:11:4b:8f:df: 11:85:b9:b7:9f:20:91:8a:29:af:b4:9e:b3:4f:be:4b:7f:15: 0c:e3:7f:a4:50:b5:01:5f:25:3d:41:03:99:05:48:41:9f:7d: 89:8c:5b:7d:38:44:ad:4c:70:f2:f1:09:52:a9:26:c5:ee:08: fd:68:87:05:3c:fb:44:a7:b6:ac:b9:0e:5b:1b:7a:64:00:c1: 0b:07:0f:11:b6:cc:91:f6:46:50:1a:b0:df:ca:74:37:25:a1: ba:e9:8c:8f:27:45:b4:db:f6:43:6a:09:4d:d2:ba:f7:36:d9: c4:27:05:17:02:ab:ce:8f:1a:ad:d0:e0:71:7a:2b:88:55:db: ef:6b:96:c6:5f:1b:3b:db:44:1f:f7:17:e6:70:21:96:7b:ce: 5d:a6:c0:5a:b2:12:08:e8:9f:49:73:1b:61:fc:41:31:ca:72: 7c:7b:81:28:f2:a4:03:dc:e6:ad:75:30:a2:7d:98:73:16:52: 49:1a:5c:4a:92:77:7b:73:04:b9:99:8f:27:4a:8f:16:a5:7a: 3a:66:5a:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMvuMRHJ1rosnx/8nmit+SEOznbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNERGRjE5ODIyQzVCMjdDN0JDQzE2QkZEOEJFMkEz ODRGODlBQTAeFw0yNTA1MTMxODU4MzZaFw0yNTA1MTQyMTM2MzZaMDMxMTAvBgNV BAMTKEFDQzdGNzVGNTFDOUJDOUY0MTZCRkYwODM0NEMzODlFQjUxMzgxNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEn9+IIz8bf3DijajPYaL+ysc3 CypG1lpYiPERUc9IoXVSuNqkPBl7MuOTCHkylou8O1IimovthRydgePi3Eva7G8j n2j/UvRhBnit9Yd4tAHS8X3jqjSgWoGFcTavi00jBI8nNSEl7t7EjE1b4GL3gZmz CCLuA0AJ2m2CXzYtq9QmPOnKhMbm2Y01uAHCj2100vxCSn0Q5QT9qWaiDvdz8lt1 RkFD0+/XxM2qSeEQWN2A+9gbUpS6cj5N4c8dgzTDtn4qEAnBtLUIewqE+B/dcVOJ Pnj9OY3otH6rBZ1UvUhftWW5YNxA30gxdHShjo98eOh1JeVe7o7NNcGcLv2jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrMf3X1HJvJ9Ba/8INEw4nrUTgVswHwYDVR0j BBgwFoAU0iTf8ZgixbJ8e8wWv9i+KjhPiaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlW QXYvMS9EMjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMjRERkYxOTgyMkM1QjI3 QzdCQ0MxNkJGRDhCRTJBMzg0Rjg5QUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlWQXYvMS9E MjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI2xkS7F/RhdGkFhpOOVcaQBCWWg2npuPjj6jlRxCNIgxfQTYv3LQe5ewGkkb Qu4ii0IRS4/fEYW5t58gkYopr7Ses0++S38VDON/pFC1AV8lPUEDmQVIQZ99iYxb fThErUxw8vEJUqkmxe4I/WiHBTz7RKe2rLkOWxt6ZADBCwcPEbbMkfZGUBqw38p0 NyWhuumMjydFtNv2Q2oJTdK69zbZxCcFFwKrzo8ardDgcXoriFXb72uWxl8bO9tE H/cX5nAhlnvOXabAWrISCOifSXMbYfxBMcpyfHuBKPKkA9zmrXUwon2YcxZSSRpc SpJ3e3MEuZmPJ0qPFqV6OmZaOw== -----END CERTIFICATE-----Generated at Wed May 14 13:41:46 2025 by rpki-client