$ rpki-client -vvf rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft File: DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft (raw, json) Hash identifier: ml8F/zhY2Jhuint8A0zKR4cFQ0RJPW1XdYqk2gRycl0= Subject key identifier: 71:B5:23:BB:E0:F1:29:FC:30:46:3F:56:2C:DA:60:0C:DE:B6:8F:90 Authority key identifier: DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 Certificate issuer: /CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Certificate serial: 5DC2860208CE41040F89DDC132A8B8695FBBCEFC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft Manifest number: 0217 Signing time: Fri 09 May 2025 00:14:13 +0000 Manifest this update: Fri 09 May 2025 00:09:13 +0000 Manifest next update: Sat 10 May 2025 04:08:13 +0000 Files and hashes: 1: 3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa (hash: Z6rpwRyuxvgqZK9wg3IWbxseWkxo3KvfvA7U8nx0qtI=) 2: 3138362e3235302e32382e302f32322d3235203d3e20323632393636.roa (hash: iKC8mrbvMcLPzl1+sFNxgHBkh7HGux1xw4YCVG73YFo=) 3: DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl (hash: 9Z0E4fiyD804VsTPKSknCJxUfYDqbHwirytglFT0Wf0=) 4: 323830343a6561383a3a2f33322d3438203d3e20323632393636.roa (hash: k3mQQh+jFVJ+W9lI5qcYz2pIEXAoMKMazd3p9xRcR90=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 09 May 2025 23:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c2:86:02:08:ce:41:04:0f:89:dd:c1:32:a8:b8:69:5f:bb:ce:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Validity Not Before: May 9 00:09:13 2025 GMT Not After : May 10 04:08:13 2025 GMT Subject: CN=71B523BBE0F129FC30463F562CDA600CDEB68F90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:7e:a2:ca:bb:92:b9:d9:6c:6e:2c:f5:ba: ee:af:a5:1c:42:3a:0c:a1:f8:93:8e:b8:93:e5:ba: c4:88:a1:ea:89:a8:f9:22:5d:91:5d:43:13:72:f4: 22:26:88:1b:2c:42:54:20:61:f3:cc:6c:11:a1:46: c2:8f:e4:f7:da:8e:51:fa:b0:a1:33:6c:5e:ed:e3: fb:d6:bb:17:7e:d2:6f:26:1c:6b:19:02:36:b5:28: 85:ac:cf:d1:dd:5f:40:96:de:ef:95:be:c8:8e:38: b2:02:e8:3d:ff:b6:8a:76:52:50:c9:6a:1e:f2:67: 83:d1:f3:bf:0c:1e:83:9a:c9:5f:fc:ae:2b:8c:27: 6b:09:3e:05:f3:bb:6b:6c:8f:4f:a7:28:03:dd:ad: 1f:36:3c:45:56:e0:50:c4:b7:3a:f7:75:4d:c1:c8: ab:53:c9:02:c0:f6:86:da:ce:77:11:dc:39:6e:e0: fb:70:50:20:02:1d:2c:3e:80:8f:24:a1:ae:a7:fd: 5b:83:b4:c7:54:9f:61:f1:97:08:15:d1:7f:31:aa: 06:7a:01:34:fe:28:b7:14:54:ac:a8:fa:54:af:b9: 4d:45:ca:3e:6a:cc:a0:4d:d0:8e:3c:d9:5b:08:22: 60:ee:a9:ad:f4:06:7c:8d:86:f4:78:1c:93:b1:6d: ed:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B5:23:BB:E0:F1:29:FC:30:46:3F:56:2C:DA:60:0C:DE:B6:8F:90 X509v3 Authority Key Identifier: keyid:DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:81:8e:7d:c0:71:b2:e7:7c:0d:bf:93:7c:4d:36:47:44:02: b2:47:69:ba:2b:f0:f5:fc:a2:cd:29:8c:e0:80:4d:ab:03:35: 45:a9:3e:fe:27:01:0a:18:9e:53:b1:07:02:7d:37:3f:66:91: 9d:7f:a0:16:40:c0:18:8a:c3:9c:e4:aa:c3:ef:48:0f:56:74: 14:73:3c:ac:fd:01:6a:c8:fa:e0:11:62:6c:9b:29:d5:ab:7b: e3:b6:c1:d7:1b:1d:74:f0:5b:c1:f1:8f:2e:9c:16:12:91:9c: 24:7a:a6:e0:ef:ef:e0:71:e6:9b:b1:86:96:ea:d9:0e:d0:bd: 3d:69:1f:ff:26:80:8d:39:e9:b7:c1:6d:8d:e0:e6:30:75:e3: d6:5b:80:f2:94:a5:51:e0:6d:39:d5:2b:95:f0:7d:7c:31:74: a4:6c:97:44:4b:7c:21:b3:27:ce:e1:40:b2:1e:9f:b8:89:9c: c0:4d:5b:05:92:3e:d0:e2:4d:bf:f3:96:f6:61:fc:72:66:ac: 22:0c:34:3e:83:6f:dc:0c:72:fa:ff:7f:96:e2:b8:50:02:a4: f7:ed:8d:5f:f9:a3:0d:72:ca:13:15:cf:60:ef:61:26:8b:51: 02:16:60:d1:67:67:19:8b:eb:67:28:bf:18:f6:45:54:4a:8d: 4d:05:dd:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXcKGAgjOQQQPid3BMqi4aV+7zvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2MDExM0RCODQ3RUU0RkRGRUNGOEU3QjMyRDhDQjBB MjhBNDIyOTAeFw0yNTA1MDkwMDA5MTNaFw0yNTA1MTAwNDA4MTNaMDMxMTAvBgNV BAMTKDcxQjUyM0JCRTBGMTI5RkMzMDQ2M0Y1NjJDREE2MDBDREVCNjhGOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQH6iyruSudlsbiz1uu6vpRxC Ogyh+JOOuJPlusSIoeqJqPkiXZFdQxNy9CImiBssQlQgYfPMbBGhRsKP5PfajlH6 sKEzbF7t4/vWuxd+0m8mHGsZAja1KIWsz9HdX0CW3u+VvsiOOLIC6D3/top2UlDJ ah7yZ4PR878MHoOayV/8riuMJ2sJPgXzu2tsj0+nKAPdrR82PEVW4FDEtzr3dU3B yKtTyQLA9obazncR3Dlu4PtwUCACHSw+gI8koa6n/VuDtMdUn2HxlwgV0X8xqgZ6 ATT+KLcUVKyo+lSvuU1Fyj5qzKBN0I482VsIImDuqa30BnyNhvR4HJOxbe07AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcbUju+DxKfwwRj9WLNpgDN62j5AwHwYDVR0j BBgwFoAU22ARPbhH7k/f7Pjnsy2MsKKKQikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2szZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01z Q2ovMS9EQjYwMTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCNjAxMTNEQjg0N0VFNEZE RkVDRjhFN0IzMkQ4Q0IwQTI4QTQyMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2szZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01zQ2ovMS9E QjYwMTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArIGOfcBxsud8Db+TfE02R0QCskdpuivw9fyizSmM4IBNqwM1Rak+/icBChie U7EHAn03P2aRnX+gFkDAGIrDnOSqw+9ID1Z0FHM8rP0Basj64BFibJsp1at747bB 1xsddPBbwfGPLpwWEpGcJHqm4O/v4HHmm7GGlurZDtC9PWkf/yaAjTnpt8FtjeDm MHXj1luA8pSlUeBtOdUrlfB9fDF0pGyXREt8IbMnzuFAsh6fuImcwE1bBZI+0OJN v/OW9mH8cmasIgw0PoNv3Axy+v9/luK4UAKk9+2NX/mjDXLKExXPYO9hJotRAhZg 0WdnGYvrZyi/GPZFVEqNTQXdJQ== -----END CERTIFICATE-----Generated at Fri May 9 07:54:31 2025 by rpki-client