$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.mft File: D515970A9684DA5CEE2A970D22C9F79AFA500F79.mft (raw, json) Hash identifier: M9U7u1HSc+Jx0h6AXRPuWITnVgsgbpTE/b4/HnLlib0= Subject key identifier: D6:63:E7:5C:01:23:F1:F9:BD:05:FB:11:B1:B2:2C:29:31:C4:E8:A5 Authority key identifier: D5:15:97:0A:96:84:DA:5C:EE:2A:97:0D:22:C9:F7:9A:FA:50:0F:79 Certificate issuer: /CN=D515970A9684DA5CEE2A970D22C9F79AFA500F79 Certificate serial: 20BC7118AAE38E4EFEBAB5F803B8B0F9FAF484CE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D515970A9684DA5CEE2A970D22C9F79AFA500F79.cer Subject info access: rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.mft Manifest number: 14 Signing time: Thu 24 Apr 2025 19:21:49 +0000 Manifest this update: Thu 24 Apr 2025 19:16:49 +0000 Manifest next update: Fri 25 Apr 2025 22:16:49 +0000 Files and hashes: 1: 3137372e37332e3132382e302f32342d3234203d3e20323731363234.roa (hash: krI7Y+0+cU95+YKKSSVMnjZLzWP/d2934F1KkDdzxCo=) 2: D515970A9684DA5CEE2A970D22C9F79AFA500F79.crl (hash: ASRodTRVTPrBu3j7K6ItCGLizxG91N1aXRC2I6NU7Q0=) 3: 3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa (hash: thTEV9x4K81qJU24q5KvaqVFnwk9W8sIBhICgQILApU=) 4: 323830343a376537303a3a2f33342d3334203d3e20323731363234.roa (hash: luuJM5tBMrknN5yxBGdcVZn4/3wssMmxxGbbWLXDVLE=) 5: 323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa (hash: p1U0CYkgTq3eSMrbEeye08G2ZTfJcqqxOhETpcT6rqA=) 6: 323830343a376537303a343030303a3a2f33342d3334203d3e20323731363234.roa (hash: GJOL4cF1+x9YkPvwM1KWHwx4eT5Vdi/XxRYjat23cFY=) 7: 3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa (hash: M3W+8lwYF1ikjUcpWA6yTYmEgOqHpwjBOgQ1oohTgAg=) 8: 3137372e37332e3133302e302f32332d3233203d3e20323731363234.roa (hash: 25co4NvdzIz0OdTLdZNmR77JjVgUS6mrfA7z66uUPh4=) 9: 3137372e37332e3133302e302f32342d3234203d3e20323731363234.roa (hash: ZG4hNhshdY2UW1f0R78kLoXUh8RFFYkH27X/xHs1EfM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.crl rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D515970A9684DA5CEE2A970D22C9F79AFA500F79.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:bc:71:18:aa:e3:8e:4e:fe:ba:b5:f8:03:b8:b0:f9:fa:f4:84:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D515970A9684DA5CEE2A970D22C9F79AFA500F79 Validity Not Before: Apr 24 19:16:49 2025 GMT Not After : Apr 25 22:16:49 2025 GMT Subject: CN=D663E75C0123F1F9BD05FB11B1B22C2931C4E8A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b2:a2:7a:1d:30:4f:ec:30:9b:a9:39:45:dc: de:b6:b5:eb:4d:78:ea:c0:b1:3f:19:aa:ea:3d:40: 12:a7:80:51:ec:e3:7f:08:51:5c:04:0c:c1:b0:d2: 4c:e0:2b:69:bb:c2:c5:3d:8d:62:1c:c6:eb:25:b2: fc:14:23:fc:87:df:8c:d8:44:e3:53:54:65:88:57: 2d:06:27:0c:54:c8:e4:a2:1c:28:2d:67:d3:0b:8f: 1b:65:e8:d7:d5:b1:51:fe:35:7e:da:a8:1b:d8:b9: 67:2c:33:74:b1:de:92:17:50:91:f8:76:14:f4:92: c5:65:4a:49:df:2e:f9:d4:a8:fa:24:13:e5:d9:9e: eb:26:87:24:18:71:f4:65:d3:5c:63:2c:18:98:a0: 53:8f:ec:43:33:56:9e:11:8b:dc:f1:ba:32:b1:d3: 3e:00:4c:ce:15:64:99:8d:a9:fe:53:20:68:1a:41: d3:33:77:5b:35:e3:59:56:c9:07:16:ed:05:34:e4: d4:3c:a5:5d:97:4e:40:8d:5c:0b:4f:0b:26:1c:ed: 8e:9c:eb:de:14:26:a3:5d:bd:a5:34:61:07:12:8c: 0b:34:2d:a9:97:4c:d4:09:35:da:a4:58:d0:5a:bb: 69:81:2b:b4:f4:74:0a:43:d1:b2:20:14:d6:9d:dd: df:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:63:E7:5C:01:23:F1:F9:BD:05:FB:11:B1:B2:2C:29:31:C4:E8:A5 X509v3 Authority Key Identifier: keyid:D5:15:97:0A:96:84:DA:5C:EE:2A:97:0D:22:C9:F7:9A:FA:50:0F:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D515970A9684DA5CEE2A970D22C9F79AFA500F79.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:46:bf:ea:a6:7a:75:77:f7:b9:11:99:3f:38:62:2b:aa:44: 95:bd:51:a6:9f:bd:58:44:87:36:c2:12:70:13:d3:00:63:4e: 30:57:bf:98:ae:10:ae:25:fe:b2:dc:65:aa:96:79:0e:4c:16: e6:d8:80:80:87:9f:29:c0:e9:ce:2b:e5:9e:ec:85:3e:2b:a5: 4b:8a:c3:b0:30:d5:64:79:e8:07:de:3f:f6:d3:a0:a0:66:3e: 5d:19:20:f2:66:e5:68:f7:25:41:75:27:b7:25:27:e9:6c:3a: 97:f8:bb:fb:b8:db:cb:c7:9a:ae:33:b7:3b:b2:b6:87:58:be: d0:79:65:80:11:07:e8:4b:e1:60:13:92:fe:6e:0e:43:82:06: 2f:25:db:d5:eb:66:60:d8:71:eb:02:86:96:fe:8a:6e:13:15: dd:a3:fe:9b:c3:5e:81:20:6d:e7:12:80:c1:b3:b2:b4:de:2a: 0f:a1:80:a0:6f:81:bc:ad:61:ea:fc:07:d7:af:b5:15:36:8d: c7:0f:72:7a:98:ef:7e:92:c8:26:89:14:7a:d9:69:92:0a:a1: da:69:b9:fe:fb:e3:a9:8c:12:e9:e0:75:7d:b7:9e:c6:b5:39: dc:74:3e:e3:db:2b:24:87:54:2c:a2:1e:fb:40:93:1a:f4:ba: be:85:40:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUILxxGKrjjk7+urX4A7iw+fr0hM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxNTk3MEE5Njg0REE1Q0VFMkE5NzBEMjJDOUY3OUFG QTUwMEY3OTAeFw0yNTA0MjQxOTE2NDlaFw0yNTA0MjUyMjE2NDlaMDMxMTAvBgNV BAMTKEQ2NjNFNzVDMDEyM0YxRjlCRDA1RkIxMUIxQjIyQzI5MzFDNEU4QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClsqJ6HTBP7DCbqTlF3N62tetN eOrAsT8Zquo9QBKngFHs438IUVwEDMGw0kzgK2m7wsU9jWIcxuslsvwUI/yH34zY RONTVGWIVy0GJwxUyOSiHCgtZ9MLjxtl6NfVsVH+NX7aqBvYuWcsM3Sx3pIXUJH4 dhT0ksVlSknfLvnUqPokE+XZnusmhyQYcfRl01xjLBiYoFOP7EMzVp4Ri9zxujKx 0z4ATM4VZJmNqf5TIGgaQdMzd1s141lWyQcW7QU05NQ8pV2XTkCNXAtPCyYc7Y6c 694UJqNdvaU0YQcSjAs0LamXTNQJNdqkWNBau2mBK7T0dApD0bIgFNad3d+zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1mPnXAEj8fm9BfsRsbIsKTHE6KUwHwYDVR0j BBgwFoAU1RWXCpaE2lzuKpcNIsn3mvpQD3kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXJuSlJXZ2MyY3E1QTdxcndMTFBXSlVxSlBmVTI5bUJKektqMjVxWHJp N3IvMC9ENTE1OTcwQTk2ODREQTVDRUUyQTk3MEQyMkM5Rjc5QUZBNTAwRjc5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MTU5NzBBOTY4NERBNUNF RTJBOTcwRDIyQzlGNzlBRkE1MDBGNzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXJuSlJXZ2MyY3E1QTdxcndMTFBXSlVxSlBmVTI5bUJKektqMjVxWHJpN3IvMC9E NTE1OTcwQTk2ODREQTVDRUUyQTk3MEQyMkM5Rjc5QUZBNTAwRjc5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASEa/6qZ6dXf3uRGZPzhiK6pElb1Rpp+9WESHNsIScBPTAGNOMFe/mK4QriX+ stxlqpZ5DkwW5tiAgIefKcDpzivlnuyFPiulS4rDsDDVZHnoB94/9tOgoGY+XRkg 8mblaPclQXUntyUn6Ww6l/i7+7jby8earjO3O7K2h1i+0HllgBEH6EvhYBOS/m4O Q4IGLyXb1etmYNhx6wKGlv6KbhMV3aP+m8NegSBt5xKAwbOytN4qD6GAoG+BvK1h 6vwH16+1FTaNxw9yepjvfpLIJokUetlpkgqh2mm5/vvjqYwS6eB1fbeexrU53HQ+ 49srJIdULKIe+0CTGvS6voVApQ== -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:56 2025 by rpki-client on console.sobornost.net