$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft File: D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json) Hash identifier: Rc+Pz+K37ufhbMI6vBJo0HBCmQSZ+/2ql0J3MkRGgc8= Subject key identifier: C0:BE:33:2D:82:2C:AB:D3:ED:7B:3B:B2:0B:57:31:29:0A:46:10:0A Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 Certificate issuer: /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Certificate serial: 7C3FF0DBB815D1E1C679F5BA4D0DCB1D560283B9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft Manifest number: 020C Signing time: Mon 28 Apr 2025 11:22:06 +0000 Manifest this update: Mon 28 Apr 2025 11:17:06 +0000 Manifest next update: Tue 29 Apr 2025 15:09:06 +0000 Files and hashes: 1: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: 01pAW4QCHBpNqYLYxhHBFF+Hirycj7LT0087UnT0sog=) 2: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: 7Ua5vp4PvFoa/0HYqYm+2MRGnRdbo6jTMdLSmDHmkBI=) 3: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: FE+7zbwcRwFNCNZQz6JTL4PFhynEDJA2jUUaWQGOwlw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 13:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3f:f0:db:b8:15:d1:e1:c6:79:f5:ba:4d:0d:cb:1d:56:02:83:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Validity Not Before: Apr 28 11:17:06 2025 GMT Not After : Apr 29 15:09:06 2025 GMT Subject: CN=C0BE332D822CABD3ED7B3BB20B5731290A46100A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:0e:02:fd:0c:e5:cf:be:c2:89:22:ee:4a: 1f:e6:f9:24:13:68:a1:26:f7:d1:bd:76:c0:d5:08: b8:1b:95:8a:a0:5a:fd:ab:1e:8b:08:34:2f:25:6a: cb:d0:09:a6:77:f4:61:a4:e4:55:d0:fa:ac:04:96: cf:38:5e:c6:4b:b7:bb:77:3b:6e:b1:8c:ce:49:02: bd:b4:0e:0a:a3:00:7f:ed:38:38:2a:32:e2:42:08: 56:0e:87:6f:43:f8:7d:90:6f:3b:5c:b9:a7:f8:ac: af:d6:8d:cd:8e:e7:67:ff:4b:a2:93:d4:2e:0a:0d: a7:0a:eb:78:e0:67:62:91:eb:26:d1:aa:87:f7:30: 97:e1:9d:78:6e:c3:c8:12:79:76:3b:92:38:bf:c7: e0:12:2f:55:55:d6:fc:ab:ec:f0:9a:da:81:b3:ca: 81:49:ec:bf:13:f3:22:d2:d2:d4:66:71:44:1b:e2: a4:13:05:56:ba:08:db:47:da:6c:67:20:7e:a6:46: b8:f2:48:44:06:aa:ec:00:bb:83:a8:7f:e5:a4:a7: 0b:6f:48:36:78:f5:23:9e:e8:2a:7b:f0:fd:f0:22: c8:fb:30:4f:17:99:ce:a8:67:46:6c:18:96:fd:c0: 11:48:99:36:a6:5e:41:b6:e7:d3:54:b0:87:5a:a6: 14:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BE:33:2D:82:2C:AB:D3:ED:7B:3B:B2:0B:57:31:29:0A:46:10:0A X509v3 Authority Key Identifier: keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:b3:12:d3:25:2e:85:76:4d:4e:eb:87:c4:37:78:aa:75:0b: e8:c6:72:30:4b:0c:42:45:e7:bb:1b:1a:26:51:21:08:63:6b: b7:a3:81:f2:01:d4:5c:46:32:21:3f:3b:90:9d:69:9c:89:3a: 83:67:e8:49:c6:c3:dc:eb:89:36:16:dc:7c:39:5e:67:71:d0: 1b:a9:ee:e2:ac:46:f4:80:4e:d9:bf:1e:7e:85:1c:1e:b2:63: ad:bf:c2:ff:73:6b:ee:32:f8:06:35:c5:06:c4:d3:98:3a:c2: c9:76:c6:a5:d4:53:b8:80:d9:51:32:29:27:c2:64:cd:6f:c0: 19:e0:6d:8a:b6:e9:21:c9:f2:df:64:32:aa:a1:5a:25:60:a4: 91:b5:ab:9b:4a:f2:16:08:92:2e:7b:b3:e1:d4:e8:6f:f4:14: 9a:7c:e5:2e:fd:fd:bb:d7:30:17:4c:9b:0a:e9:04:40:3b:a3: b9:e7:e5:bd:98:1e:ec:d9:19:0d:db:dd:23:8f:cf:5c:d9:ac: 9c:7b:58:82:59:06:ed:c5:d1:e8:23:01:8f:df:0b:be:12:ee: d8:0d:0f:27:1a:a8:1f:79:e5:a1:d1:90:ab:d0:f8:1f:2c:40: 42:76:18:51:65:70:b2:4e:0a:38:55:6d:b2:04:54:9e:f3:2e: 04:14:bf:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfD/w27gV0eHGefW6TQ3LHVYCg7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUzOUNGOTI5QjZBNkEyQjk1OTZCOTIyRjQxN0ZBRDkx Nzc5OUVENzAeFw0yNTA0MjgxMTE3MDZaFw0yNTA0MjkxNTA5MDZaMDMxMTAvBgNV BAMTKEMwQkUzMzJEODIyQ0FCRDNFRDdCM0JCMjBCNTczMTI5MEE0NjEwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8PQ4C/Qzlz77CiSLuSh/m+SQT aKEm99G9dsDVCLgblYqgWv2rHosINC8lasvQCaZ39GGk5FXQ+qwEls84XsZLt7t3 O26xjM5JAr20DgqjAH/tODgqMuJCCFYOh29D+H2Qbztcuaf4rK/Wjc2O52f/S6KT 1C4KDacK63jgZ2KR6ybRqof3MJfhnXhuw8gSeXY7kji/x+ASL1VV1vyr7PCa2oGz yoFJ7L8T8yLS0tRmcUQb4qQTBVa6CNtH2mxnIH6mRrjySEQGquwAu4Oof+Wkpwtv SDZ49SOe6Cp78P3wIsj7ME8Xmc6oZ0ZsGJb9wBFImTamXkG259NUsIdaphSPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwL4zLYIsq9PtezuyC1cxKQpGEAowHwYDVR0j BBgwFoAU1TnPkptqaiuVlrki9Bf62Rd5ntcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNT M1QvMS9ENTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MzlDRjkyOUI2QTZBMkI5 NTk2QjkyMkY0MTdGQUQ5MTc3OTlFRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNTM1QvMS9E NTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzrMS0yUuhXZNTuuHxDd4qnUL6MZyMEsMQkXnuxsaJlEhCGNrt6OB8gHUXEYy IT87kJ1pnIk6g2foScbD3OuJNhbcfDleZ3HQG6nu4qxG9IBO2b8efoUcHrJjrb/C /3Nr7jL4BjXFBsTTmDrCyXbGpdRTuIDZUTIpJ8JkzW/AGeBtirbpIcny32QyqqFa JWCkkbWrm0ryFgiSLnuz4dTob/QUmnzlLv39u9cwF0ybCukEQDujueflvZge7NkZ DdvdI4/PXNmsnHtYglkG7cXR6CMBj98LvhLu2A0PJxqoH3nlodGQq9D4HyxAQnYY UWVwsk4KOFVtsgRUnvMuBBS/iA== -----END CERTIFICATE-----Generated at Mon Apr 28 13:05:01 2025 by rpki-client on console.sobornost.net