$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft File: D95738A14AD98B305087E048FD2E4821E5E2299A.mft (raw, json) Hash identifier: l0jJPBk988icTR6SAk/18U2Bu27FPZztCcH9YJA2+k8= Subject key identifier: DC:3A:FB:3E:35:B7:D1:62:15:C0:53:CB:7D:52:86:4E:48:B7:2B:22 Authority key identifier: D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A Certificate issuer: /CN=D95738A14AD98B305087E048FD2E4821E5E2299A Certificate serial: 66C6E041AD86EA1E7F7B0B96EBB08BE38769B29D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft Manifest number: 17 Signing time: Thu 24 Apr 2025 18:22:42 +0000 Manifest this update: Thu 24 Apr 2025 18:17:42 +0000 Manifest next update: Fri 25 Apr 2025 21:55:42 +0000 Files and hashes: 1: 323830343a313235343a3a2f33322d3332203d3e20323633343730.roa (hash: ELWb7rC3fgvn1sa3PxipINIruhW615Gy+69ajKYPWzI=) 2: D95738A14AD98B305087E048FD2E4821E5E2299A.crl (hash: IYtVfY0a84/UsLsN/yaymt9GenbAtklIxebUKH8zphQ=) 3: 3137302e38332e3230302e302f32322d3232203d3e20323633343730.roa (hash: SX8AbXi+iS5u/zSkop95o2gqo5aPGoTATj6GIZpeIko=) 4: 3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa (hash: g6mPrnM05WB2yDxH6Zlq8hbCsk4V+orsbGR3GF+AKT8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c6:e0:41:ad:86:ea:1e:7f:7b:0b:96:eb:b0:8b:e3:87:69:b2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D95738A14AD98B305087E048FD2E4821E5E2299A Validity Not Before: Apr 24 18:17:42 2025 GMT Not After : Apr 25 21:55:42 2025 GMT Subject: CN=DC3AFB3E35B7D16215C053CB7D52864E48B72B22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:68:fb:59:0e:05:0e:3d:81:1a:57:8d:f1:5a: 61:b1:dd:b2:3d:e0:ba:c9:56:1f:72:1d:46:c2:b1: 46:f8:21:f5:f0:6b:d1:48:43:95:af:dd:39:28:40: 8d:60:34:0d:8d:77:10:78:98:8f:2a:f1:d7:03:fe: 2e:7b:75:ea:90:39:00:0c:ac:85:dc:74:09:5d:05: 61:f1:41:8b:fa:ea:58:8d:6f:47:45:9e:14:6f:22: 88:1c:d0:a3:98:4a:58:c0:d1:c1:c9:5e:f3:99:f7: 4c:8d:36:ca:2f:09:b5:4d:cf:df:d9:bc:4a:12:38: 02:47:24:73:38:c0:e3:14:aa:7f:08:ab:79:12:10: 39:bb:69:f9:6a:e6:38:4c:e7:71:f7:33:8e:7e:63: a5:24:51:85:52:db:66:37:e5:30:22:72:86:c7:bd: 0a:5a:a0:68:a4:6b:10:d5:1d:a7:48:5e:01:7f:75: 9d:9b:e8:2b:61:ae:6a:ec:f9:3e:60:be:8c:98:90: 53:58:47:9f:6c:b0:6e:35:e2:66:4f:1a:f7:d4:0f: e2:98:ee:9c:df:c3:25:b4:cb:02:8b:26:05:25:95: 1b:15:9f:14:80:e2:ae:bc:69:8f:2d:d8:a4:f5:bb: 25:66:8f:67:f8:8c:9a:b7:30:05:1e:7e:52:ae:2f: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3A:FB:3E:35:B7:D1:62:15:C0:53:CB:7D:52:86:4E:48:B7:2B:22 X509v3 Authority Key Identifier: keyid:D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7b:b7:08:41:17:3a:84:32:64:a1:1f:e3:d7:1c:0c:6d:38: d6:b2:c5:86:fa:16:43:ef:44:e8:c7:41:36:30:00:6a:4f:f5: 15:c1:5d:9f:2e:76:b4:76:f8:44:82:5a:9c:6d:81:f2:2f:0e: ae:13:4a:44:2c:94:5a:46:69:b1:77:bc:77:75:d6:2e:83:c2: fe:34:b2:c5:72:0b:ba:4d:e9:a9:17:08:1a:fa:78:f5:41:4d: 66:d8:7a:ea:0d:c4:5f:77:19:4f:28:aa:64:a9:6f:9a:c5:4a: bc:78:d2:4c:87:d0:d3:ee:fc:ea:bc:be:5f:d2:06:e0:7a:46: e5:8e:48:d2:93:b4:9f:07:e3:f1:85:41:f6:8f:e4:ca:d8:b9: 82:e0:78:e7:f2:2b:19:a8:bc:5c:95:7b:c2:8f:a8:68:df:51: e8:11:f4:7b:70:b3:c0:42:a2:ac:56:8b:15:0c:91:03:93:ec: 65:d3:73:59:4a:24:03:9c:55:1a:cb:0d:fe:1a:34:ae:5d:dc: 65:db:93:ce:9b:3d:8a:9c:e7:43:82:38:b7:09:2b:36:57:1a: 4e:0a:fb:e0:76:d0:23:9a:fe:b7:8c:60:16:5b:70:f0:a7:6b: 9d:5d:2f:dc:3b:a9:ac:ca:b6:93:f6:e5:71:1e:f2:ba:9c:bf: c6:35:df:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZsbgQa2G6h5/ewuW67CL44dpsp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk1NzM4QTE0QUQ5OEIzMDUwODdFMDQ4RkQyRTQ4MjFF NUUyMjk5QTAeFw0yNTA0MjQxODE3NDJaFw0yNTA0MjUyMTU1NDJaMDMxMTAvBgNV BAMTKERDM0FGQjNFMzVCN0QxNjIxNUMwNTNDQjdENTI4NjRFNDhCNzJCMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXaPtZDgUOPYEaV43xWmGx3bI9 4LrJVh9yHUbCsUb4IfXwa9FIQ5Wv3TkoQI1gNA2NdxB4mI8q8dcD/i57deqQOQAM rIXcdAldBWHxQYv66liNb0dFnhRvIogc0KOYSljA0cHJXvOZ90yNNsovCbVNz9/Z vEoSOAJHJHM4wOMUqn8Iq3kSEDm7aflq5jhM53H3M45+Y6UkUYVS22Y35TAicobH vQpaoGikaxDVHadIXgF/dZ2b6Cthrmrs+T5gvoyYkFNYR59ssG414mZPGvfUD+KY 7pzfwyW0ywKLJgUllRsVnxSA4q68aY8t2KT1uyVmj2f4jJq3MAUeflKuLyeJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3Dr7PjW30WIVwFPLfVKGTki3KyIwHwYDVR0j BBgwFoAU2Vc4oUrZizBQh+BI/S5IIeXiKZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2 UFkvMC9EOTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NTczOEExNEFEOThCMzA1 MDg3RTA0OEZEMkU0ODIxRTVFMjI5OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2UFkvMC9E OTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlXu3CEEXOoQyZKEf49ccDG041rLFhvoWQ+9E6MdBNjAAak/1FcFdny52tHb4 RIJanG2B8i8OrhNKRCyUWkZpsXe8d3XWLoPC/jSyxXILuk3pqRcIGvp49UFNZth6 6g3EX3cZTyiqZKlvmsVKvHjSTIfQ0+786ry+X9IG4HpG5Y5I0pO0nwfj8YVB9o/k yti5guB45/IrGai8XJV7wo+oaN9R6BH0e3CzwEKirFaLFQyRA5PsZdNzWUokA5xV GssN/ho0rl3cZduTzps9ipznQ4I4twkrNlcaTgr74HbQI5r+t4xgFltw8KdrnV0v 3DuprMq2k/blcR7yupy/xjXfUQ== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:45 2025 by rpki-client on console.sobornost.net