$ rpki-client -vvf rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.mft File: 40024D9137B1E11B244B48E87E69634A33E200A3.mft (raw, json) Hash identifier: 7ATgAjkHM+bRGxj7175YwiKVnhcu+/DjyPv6DzXsPxY= Subject key identifier: 65:76:AA:B2:95:42:96:64:C6:E5:C7:D0:E1:13:C9:BE:DB:17:88:93 Authority key identifier: 40:02:4D:91:37:B1:E1:1B:24:4B:48:E8:7E:69:63:4A:33:E2:00:A3 Certificate issuer: /CN=40024D9137B1E11B244B48E87E69634A33E200A3 Certificate serial: 7AD6585A763535095C79B98B64DAE3D30118E1F6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.mft Manifest number: 0208 Signing time: Mon 28 Apr 2025 14:41:12 +0000 Manifest this update: Mon 28 Apr 2025 14:36:12 +0000 Manifest next update: Tue 29 Apr 2025 14:53:12 +0000 Files and hashes: 1: 3139312e352e34382e302f32312d3234203d3e20323633353332.roa (hash: xwhiR8s2KXPoYmAj/BsNvhfcFgjUvWyfc1+EWR5Q9eE=) 2: 40024D9137B1E11B244B48E87E69634A33E200A3.crl (hash: Jbf7J8YQcdA8dA8WuyronhFpYqTUnRPAlgz9iPXbInQ=) 3: 323830343a313336343a3a2f33322d3438203d3e20323633353332.roa (hash: /NlP/nFInfupYyPAIeeNmFEHxIgrARxYeJrMLAyFWfI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.crl rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 14:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d6:58:5a:76:35:35:09:5c:79:b9:8b:64:da:e3:d3:01:18:e1:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40024D9137B1E11B244B48E87E69634A33E200A3 Validity Not Before: Apr 28 14:36:12 2025 GMT Not After : Apr 29 14:53:12 2025 GMT Subject: CN=6576AAB295429664C6E5C7D0E113C9BEDB178893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ad:5e:5b:81:a4:bc:13:a1:96:5c:a1:54:84: 96:ef:cc:53:59:c5:ef:04:c7:1c:f5:4c:d8:75:00: 2a:8c:d0:79:19:7a:0c:00:15:f5:da:5f:55:e7:1f: 7c:f7:3a:c1:bf:68:35:2a:a3:3a:4f:b3:15:9a:65: 68:72:88:32:cb:2a:40:17:3e:10:d4:19:22:b6:0c: ca:48:0f:e2:09:6b:07:a4:cb:67:bb:75:46:9c:a2: 2a:25:af:17:d2:1e:42:b0:29:a3:7c:71:31:eb:d4: 5f:f6:54:e6:9a:9a:3b:3a:b0:32:f9:05:48:fe:c6: 4f:c3:4c:f4:4d:a8:2f:20:66:f7:02:95:42:f4:76: 35:8b:e1:87:7a:41:09:0b:9d:16:29:dc:14:a9:c1: 7d:a7:1e:35:00:71:bf:56:36:aa:ae:c3:48:1e:da: de:41:4f:f5:0e:9d:0a:d7:7c:bf:1f:3c:c3:c8:53: 8b:00:aa:7f:fd:cf:f8:b2:02:0e:ff:ce:32:8e:95: 6e:81:2d:97:dd:eb:cc:d9:b1:82:c9:0f:da:00:0e: 65:7d:36:fb:b8:67:8f:1c:b5:63:ff:25:e6:bb:9a: 37:ad:6b:a4:c4:ba:27:98:98:68:9e:24:cf:a4:e5: 93:6f:dc:23:0b:4f:51:9c:05:6e:5f:4b:40:3f:cf: 89:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:76:AA:B2:95:42:96:64:C6:E5:C7:D0:E1:13:C9:BE:DB:17:88:93 X509v3 Authority Key Identifier: keyid:40:02:4D:91:37:B1:E1:1B:24:4B:48:E8:7E:69:63:4A:33:E2:00:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ec:68:1d:51:7c:d6:95:74:17:90:b4:ba:29:39:43:ba:91: 89:a8:f2:40:c7:23:c7:2a:77:c7:6a:62:15:24:1f:7b:7e:0d: b8:e5:9c:bd:c6:9a:67:5e:ea:83:c3:d1:67:57:75:b4:3d:c6: 35:4f:88:ea:c9:dc:2d:ec:84:78:32:a7:c0:86:ae:95:6d:36: 00:7e:f5:82:b4:55:f1:03:ed:c7:c6:98:4d:92:98:05:1d:0e: a9:43:28:d0:a8:e3:cd:2d:7a:ae:e0:35:70:ac:53:d5:c5:c5: 91:c7:5a:82:27:90:c8:ea:cc:3e:78:75:f0:5b:10:e2:d1:dc: db:74:56:a2:47:76:1e:3b:b6:ea:92:4d:37:16:a3:13:5d:9c: ca:a8:5a:cf:82:66:1e:13:f9:84:33:17:44:b2:d2:17:eb:b8: 3f:3d:43:0b:5a:26:8c:a9:a8:fc:0b:97:2f:38:3c:78:43:87: 44:67:f7:86:44:3d:8c:2c:76:7e:ef:87:df:57:2d:87:ab:d4: 1b:30:06:6a:b3:36:09:17:43:74:35:e1:c4:fe:85:cc:ad:59: 3a:28:ac:e9:13:2c:d1:ee:28:26:35:b5:f5:1a:96:e6:e5:84: 8b:8c:a7:75:86:13:e9:33:c3:a0:c9:1d:49:85:48:17:7d:8d: 55:50:43:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUetZYWnY1NQlcebmLZNrj0wEY4fYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAwMjREOTEzN0IxRTExQjI0NEI0OEU4N0U2OTYzNEEz M0UyMDBBMzAeFw0yNTA0MjgxNDM2MTJaFw0yNTA0MjkxNDUzMTJaMDMxMTAvBgNV BAMTKDY1NzZBQUIyOTU0Mjk2NjRDNkU1QzdEMEUxMTNDOUJFREIxNzg4OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJrV5bgaS8E6GWXKFUhJbvzFNZ xe8Exxz1TNh1ACqM0HkZegwAFfXaX1XnH3z3OsG/aDUqozpPsxWaZWhyiDLLKkAX PhDUGSK2DMpID+IJaweky2e7dUacoiolrxfSHkKwKaN8cTHr1F/2VOaamjs6sDL5 BUj+xk/DTPRNqC8gZvcClUL0djWL4Yd6QQkLnRYp3BSpwX2nHjUAcb9WNqquw0ge 2t5BT/UOnQrXfL8fPMPIU4sAqn/9z/iyAg7/zjKOlW6BLZfd68zZsYLJD9oADmV9 Nvu4Z48ctWP/Jea7mjeta6TEuieYmGieJM+k5ZNv3CMLT1GcBW5fS0A/z4l/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZXaqspVClmTG5cfQ4RPJvtsXiJMwHwYDVR0j BBgwFoAUQAJNkTex4RskS0jofmljSjPiAKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXBvdzd0eUR2UEE2MjFVN3JKcG9DaUVGRjZwV1Y1bTdjV2hUOW1zajRy VkgvMS80MDAyNEQ5MTM3QjFFMTFCMjQ0QjQ4RTg3RTY5NjM0QTMzRTIwMEEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwMDI0RDkxMzdCMUUxMUIy NDRCNDhFODdFNjk2MzRBMzNFMjAwQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXBvdzd0eUR2UEE2MjFVN3JKcG9DaUVGRjZwV1Y1bTdjV2hUOW1zajRyVkgvMS80 MDAyNEQ5MTM3QjFFMTFCMjQ0QjQ4RTg3RTY5NjM0QTMzRTIwMEEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAquxoHVF81pV0F5C0uik5Q7qRiajyQMcjxyp3x2piFSQfe34NuOWcvcaaZ17q g8PRZ1d1tD3GNU+I6sncLeyEeDKnwIaulW02AH71grRV8QPtx8aYTZKYBR0OqUMo 0KjjzS16ruA1cKxT1cXFkcdagieQyOrMPnh18FsQ4tHc23RWokd2Hju26pJNNxaj E12cyqhaz4JmHhP5hDMXRLLSF+u4Pz1DC1omjKmo/AuXLzg8eEOHRGf3hkQ9jCx2 fu+H31cth6vUGzAGarM2CRdDdDXhxP6FzK1ZOiis6RMs0e4oJjW19RqW5uWEi4yn dYYT6TPDoMkdSYVIF32NVVBDhg== -----END CERTIFICATE-----Generated at Mon Apr 28 17:38:02 2025 by rpki-client on console.sobornost.net