$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft File: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft (raw, json) Hash identifier: 5lbTJ2x1cgNIn/BhJOws04braW/vJwywoiX588F1PKk= Subject key identifier: 00:8A:08:B4:75:A1:24:0B:F7:51:35:74:D5:44:F1:6A:C2:58:31:0C Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Certificate serial: 52DBB4C73A6AEA0BD7538D92E244E7CE351C00EA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft Manifest number: 0290 Signing time: Fri 09 May 2025 07:00:37 +0000 Manifest this update: Fri 09 May 2025 06:55:37 +0000 Manifest next update: Sat 10 May 2025 10:58:37 +0000 Files and hashes: 1: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: AJNOOqPt9YDmVyj7oLMiS+ahRBlnaPrzhm3IG8z6/rY=) 2: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: oPMBUQyiQOvcv4tb1YKSLPGxZ04J+5T7lbQU8TfpNP8=) 3: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl (hash: VIH+FuAg4EPHhNG9YQDPWJvVpZby2btKTLMbRbpY4JI=) 4: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: xlFzvxIG/gYH0KzWQM5/0pJLtz7KgwD/JIoIT+dykDo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 10 May 2025 10:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:db:b4:c7:3a:6a:ea:0b:d7:53:8d:92:e2:44:e7:ce:35:1c:00:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Validity Not Before: May 9 06:55:37 2025 GMT Not After : May 10 10:58:37 2025 GMT Subject: CN=008A08B475A1240BF7513574D544F16AC258310C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a8:d5:2e:38:68:e0:3f:b1:ae:93:95:10:59: 47:52:c9:24:6d:86:d4:4f:1f:ce:1f:2b:68:b1:10: c2:7e:4f:d4:a7:bd:85:f4:ab:73:19:bb:cd:f5:2d: fc:ca:47:7d:47:65:da:74:9c:57:75:a2:1b:3a:4f: e1:d4:95:86:17:c5:04:fa:86:47:ac:5e:9e:ba:7e: 2e:a1:54:69:be:c5:cf:fa:14:32:2d:21:84:a4:bd: 7d:8b:d1:54:46:a8:dd:d5:96:57:46:e6:3f:53:21: cd:9d:ee:04:06:9e:1e:34:49:fa:3e:ac:14:52:45: 6e:76:3b:ef:64:ba:1d:a3:90:02:6f:c5:d8:02:a7: 02:6d:12:e2:1a:e1:4c:90:b3:e1:13:24:d8:89:0a: b3:03:89:b3:50:2f:9b:24:a8:a2:68:97:66:19:2a: 51:67:b0:5f:7c:08:82:b0:f9:90:6c:d5:37:ba:1f: ef:f4:86:16:e7:77:68:89:37:da:56:fd:2e:6c:bd: b6:88:d0:b2:9b:8a:5f:c2:b6:30:91:67:d6:fb:bd: 29:5e:62:75:7e:8e:73:02:af:e9:f7:13:5f:d6:54: fb:e1:55:8e:14:19:28:c1:a9:98:64:90:54:3c:9b: e5:0e:51:82:90:1e:11:ae:35:c5:4b:c2:38:f4:08: 61:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8A:08:B4:75:A1:24:0B:F7:51:35:74:D5:44:F1:6A:C2:58:31:0C X509v3 Authority Key Identifier: keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:84:9d:84:a2:b1:b4:5d:8e:9f:00:3e:d4:14:7c:45:fc:57: d4:fc:0c:51:18:36:1b:09:8f:ce:31:40:bf:22:1e:11:2d:12: de:86:b4:62:ca:c1:92:ec:56:0a:d0:60:ef:d8:f0:2d:0f:4d: b8:f9:4a:cc:62:d4:3e:46:e5:08:60:d8:3b:84:ee:75:05:d0: 91:ab:61:71:a2:e2:5a:6a:31:00:96:d5:15:08:17:f5:12:d4: d9:32:f7:18:a0:2c:b5:b3:c7:bc:5a:7f:f2:92:f7:74:84:86: b0:ae:93:b1:2c:68:8e:1a:5a:ba:6f:42:3e:1e:45:1c:9d:c6: 37:02:a5:6f:05:9d:6a:c3:f8:38:5f:82:04:96:f1:e3:4e:93: 70:3f:e2:32:b8:6f:d8:12:b0:6c:1d:ee:41:ba:db:d7:ac:77: a8:c5:ca:8f:19:fe:6d:d7:b6:ff:65:b2:b1:2f:26:d6:42:8f: ed:37:0f:db:c8:c8:31:72:01:73:19:d8:76:69:1f:30:c0:64: 65:9f:19:d5:2c:4f:10:b5:8a:01:cc:0c:19:fe:00:56:19:5b: 9e:c2:eb:f3:2e:32:ae:8f:4d:86:c6:ea:82:ec:e3:dc:45:e3: ca:fb:c3:8a:79:52:a6:63:a6:0a:66:ed:74:90:5a:a7:e6:50: 0e:4b:32:d3 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUUtu0xzpq6gvXU42S4kTnzjUcAOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFB MzY0M0Y5NDAeFw0yNTA1MDkwNjU1MzdaFw0yNTA1MTAxMDU4MzdaMDMxMTAvBgNV BAMTKDAwOEEwOEI0NzVBMTI0MEJGNzUxMzU3NEQ1NDRGMTZBQzI1ODMxMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBqNUuOGjgP7Guk5UQWUdSySRt htRPH84fK2ixEMJ+T9SnvYX0q3MZu831LfzKR31HZdp0nFd1ohs6T+HUlYYXxQT6 hkesXp66fi6hVGm+xc/6FDItIYSkvX2L0VRGqN3VlldG5j9TIc2d7gQGnh40Sfo+ rBRSRW52O+9kuh2jkAJvxdgCpwJtEuIa4UyQs+ETJNiJCrMDibNQL5skqKJol2YZ KlFnsF98CIKw+ZBs1Te6H+/0hhbnd2iJN9pW/S5svbaI0LKbil/CtjCRZ9b7vSle YnV+jnMCr+n3E1/WVPvhVY4UGSjBqZhkkFQ8m+UOUYKQHhGuNcVLwjj0CGGfAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUAIoItHWhJAv3UTV01UTxasJYMQwwHwYDVR0j BBgwFoAULQ0Ui98u1Pvb64DbHrN36qNkP5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C LzAvMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFBMzY0M0Y5NC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRDBEMTQ4QkRGMkVENEZCREJF QjgwREIxRUIzNzdFQUEzNjQzRjk0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0tG ZTlGRzNheEhabzVHZUhGM2ZGRmJtV0MxNTd1NW5jVFdkYzZZQXFWbUIvMC8yRDBE MTQ4QkRGMkVENEZCREJFQjgwREIxRUIzNzdFQUEzNjQzRjk0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA JYSdhKKxtF2OnwA+1BR8RfxX1PwMURg2GwmPzjFAvyIeES0S3oa0YsrBkuxWCtBg 79jwLQ9NuPlKzGLUPkblCGDYO4TudQXQkathcaLiWmoxAJbVFQgX9RLU2TL3GKAs tbPHvFp/8pL3dISGsK6TsSxojhpaum9CPh5FHJ3GNwKlbwWdasP4OF+CBJbx406T cD/iMrhv2BKwbB3uQbrb16x3qMXKjxn+bde2/2WysS8m1kKP7TcP28jIMXIBcxnY dmkfMMBkZZ8Z1SxPELWKAcwMGf4AVhlbnsLr8y4yro9Nhsbqguzj3EXjyvvDinlS pmOmCmbtdJBap+ZQDksy0w== -----END CERTIFICATE-----Generated at Sat May 10 03:38:58 2025 by rpki-client