$ rpki-client -vvf rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.mft File: 60A27F042B57F4E872855F5353E0A6432DAC4AF2.mft (raw, json) Hash identifier: A8ZN4mCg4v9jigsAlVZG9bWqm1JvRYGF4GT0J4S7O9s= Subject key identifier: 23:12:65:F8:63:98:96:38:32:16:04:AB:49:1D:20:62:2D:CF:71:2C Authority key identifier: 60:A2:7F:04:2B:57:F4:E8:72:85:5F:53:53:E0:A6:43:2D:AC:4A:F2 Certificate issuer: /CN=60A27F042B57F4E872855F5353E0A6432DAC4AF2 Certificate serial: 399DB9F89D24A0B3A7E183A31452A900B7A8FC67 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A27F042B57F4E872855F5353E0A6432DAC4AF2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.mft Manifest number: 01A4 Signing time: Mon 28 Apr 2025 09:04:52 +0000 Manifest this update: Mon 28 Apr 2025 08:59:52 +0000 Manifest next update: Tue 29 Apr 2025 11:54:52 +0000 Files and hashes: 1: 3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa (hash: HPZdA2dCwhdvPU5dP5QoH0m+ITDwmF2MOO2w8okzFPU=) 2: 3137372e3132392e32382e302f32322d3234203d3e20323633323636.roa (hash: q59nYU2N6cYlI7UxR2A/ZJBy55kM8BhWtnJR5fjoP48=) 3: 60A27F042B57F4E872855F5353E0A6432DAC4AF2.crl (hash: Iws8GwsMxfCE96wKNIdNE+peISjo1PVmiCOlCb61R64=) 4: 323830343a313631343a3a2f33322d3336203d3e20323633323636.roa (hash: O1ZdgJEWGK+f3kNKwnNet+gUN2zvNC9SRkIbkgGZyxM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.crl rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A27F042B57F4E872855F5353E0A6432DAC4AF2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9d:b9:f8:9d:24:a0:b3:a7:e1:83:a3:14:52:a9:00:b7:a8:fc:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60A27F042B57F4E872855F5353E0A6432DAC4AF2 Validity Not Before: Apr 28 08:59:52 2025 GMT Not After : Apr 29 11:54:52 2025 GMT Subject: CN=231265F863989638321604AB491D20622DCF712C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:81:4e:87:65:47:30:50:38:87:ea:51:22:68: 00:69:91:49:0f:48:4c:c5:b7:2e:3e:2a:cd:36:97: b4:d7:f3:5a:b5:e5:25:fc:02:de:1e:1a:3a:96:1c: d3:6c:96:96:b7:79:4a:97:d8:bd:a1:65:97:20:b6: a7:fc:80:c4:3d:94:c5:09:62:bc:84:91:7b:0b:6b: 37:36:22:64:5e:41:ab:98:71:63:6a:f7:53:db:95: 55:60:c1:15:67:ca:c5:b4:76:2d:0c:47:b9:ef:c4: f9:12:b8:ff:42:98:c7:50:3a:00:71:a5:ca:83:a4: 89:50:44:00:34:b1:2b:4a:96:e6:fa:6d:ce:3f:bf: 74:2d:72:65:e0:a6:03:0d:a6:f5:27:6f:7b:24:d6: f9:20:25:02:0a:6c:b4:3e:80:6c:33:91:c0:53:eb: c7:4e:13:e6:22:00:26:31:90:08:03:63:35:83:75: ba:90:bb:84:ed:cd:dd:cf:7b:e3:87:3f:70:f5:68: 9f:01:38:84:b9:a0:1d:2e:c7:8b:81:d6:37:ad:c5: d1:c3:47:3e:26:67:46:3d:63:54:50:ae:e2:31:e1: ec:76:41:67:b4:0f:c4:a1:66:a0:41:be:4c:93:1f: 29:e2:20:d0:86:5a:c9:8b:f2:34:be:12:36:09:98: 23:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:12:65:F8:63:98:96:38:32:16:04:AB:49:1D:20:62:2D:CF:71:2C X509v3 Authority Key Identifier: keyid:60:A2:7F:04:2B:57:F4:E8:72:85:5F:53:53:E0:A6:43:2D:AC:4A:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A27F042B57F4E872855F5353E0A6432DAC4AF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/60A27F042B57F4E872855F5353E0A6432DAC4AF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c3:de:b6:ea:51:2b:5f:40:42:90:cf:31:e0:75:c1:4b:9d: e8:cf:42:f5:db:13:30:8c:ef:bb:2e:e3:4e:65:7f:77:d5:02: b3:bf:49:a9:c2:55:7e:af:3e:16:ea:bb:87:ba:4f:26:86:20: 3c:cc:f8:6f:9c:02:d3:20:1f:89:a6:02:49:fd:eb:3a:f3:fc: 4a:08:e8:45:fd:3d:fc:59:48:87:ae:ac:28:f5:a9:a0:ef:34: be:ed:21:53:07:0d:fc:7a:6d:63:3f:43:dd:80:4e:e8:4a:bf: a9:c6:25:51:01:ad:70:6f:46:7c:db:1d:5e:6f:29:8f:eb:0d: e6:d7:ba:84:d2:36:99:cb:0f:86:2d:13:96:1d:0e:f9:7a:ca: 55:58:00:46:32:82:3a:90:e7:8c:59:04:b4:aa:95:cd:cc:af: 8e:87:79:e1:8f:9f:2c:e4:f9:de:80:0d:18:cf:fa:78:72:35: 1d:ea:d0:88:e0:e3:c0:e5:93:d8:88:2c:40:d9:47:38:27:af: 27:e3:d6:2c:02:53:61:52:08:b7:79:a1:15:e3:3a:5d:46:9c: 56:69:63:e3:fb:0c:a8:e1:e8:73:cf:6a:26:ba:61:32:27:43: 87:05:7e:eb:10:bc:e7:1c:cb:3c:cf:e3:e7:06:d2:b1:4f:05: d4:66:27:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOZ25+J0koLOn4YOjFFKpALeo/GcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBMjdGMDQyQjU3RjRFODcyODU1RjUzNTNFMEE2NDMy REFDNEFGMjAeFw0yNTA0MjgwODU5NTJaFw0yNTA0MjkxMTU0NTJaMDMxMTAvBgNV BAMTKDIzMTI2NUY4NjM5ODk2MzgzMjE2MDRBQjQ5MUQyMDYyMkRDRjcxMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcgU6HZUcwUDiH6lEiaABpkUkP SEzFty4+Ks02l7TX81q15SX8At4eGjqWHNNslpa3eUqX2L2hZZcgtqf8gMQ9lMUJ YryEkXsLazc2ImReQauYcWNq91PblVVgwRVnysW0di0MR7nvxPkSuP9CmMdQOgBx pcqDpIlQRAA0sStKlub6bc4/v3QtcmXgpgMNpvUnb3sk1vkgJQIKbLQ+gGwzkcBT 68dOE+YiACYxkAgDYzWDdbqQu4Ttzd3Pe+OHP3D1aJ8BOIS5oB0ux4uB1jetxdHD Rz4mZ0Y9Y1RQruIx4ex2QWe0D8ShZqBBvkyTHyniINCGWsmL8jS+EjYJmCPnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIxJl+GOYljgyFgSrSR0gYi3PcSwwHwYDVR0j BBgwFoAUYKJ/BCtX9OhyhV9TU+CmQy2sSvIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlVXajdXTWFLUjdiR25pNWJvUnNiNjNvNlV4TDlDNzl1NXViNk5ua1Jn ZTIvMC82MEEyN0YwNDJCNTdGNEU4NzI4NTVGNTM1M0UwQTY0MzJEQUM0QUYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwQTI3RjA0MkI1N0Y0RTg3 Mjg1NUY1MzUzRTBBNjQzMkRBQzRBRjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlVXajdXTWFLUjdiR25pNWJvUnNiNjNvNlV4TDlDNzl1NXViNk5ua1JnZTIvMC82 MEEyN0YwNDJCNTdGNEU4NzI4NTVGNTM1M0UwQTY0MzJEQUM0QUYyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXsPetupRK19AQpDPMeB1wUud6M9C9dsTMIzvuy7jTmV/d9UCs79JqcJVfq8+ Fuq7h7pPJoYgPMz4b5wC0yAfiaYCSf3rOvP8SgjoRf09/FlIh66sKPWpoO80vu0h UwcN/HptYz9D3YBO6Eq/qcYlUQGtcG9GfNsdXm8pj+sN5te6hNI2mcsPhi0Tlh0O +XrKVVgARjKCOpDnjFkEtKqVzcyvjod54Y+fLOT53oANGM/6eHI1HerQiODjwOWT 2IgsQNlHOCevJ+PWLAJTYVIIt3mhFeM6XUacVmlj4/sMqOHoc89qJrphMidDhwV+ 6xC85xzLPM/j5wbSsU8F1GYnlg== -----END CERTIFICATE-----Generated at Mon Apr 28 10:49:17 2025 by rpki-client on console.sobornost.net