$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft File: CDB34CF4AFC01721153990AE1A10D922F7507546.mft (raw, json) Hash identifier: +NQgXifC2nmLkM/epDoUUtijOcawb+oVmjq7YIls/nk= Subject key identifier: C5:0B:01:AD:E2:A9:C7:77:B0:55:64:D7:73:51:47:90:81:92:11:F2 Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 Certificate issuer: /CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Certificate serial: 4BECD32B5554CE241A576BA0BA73BFB279C31B63 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject info access: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft Manifest number: 020B Signing time: Mon 28 Apr 2025 16:14:31 +0000 Manifest this update: Mon 28 Apr 2025 16:09:31 +0000 Manifest next update: Tue 29 Apr 2025 19:00:31 +0000 Files and hashes: 1: CDB34CF4AFC01721153990AE1A10D922F7507546.crl (hash: x7my8SKU8d4EBICYYSmqPIQ/ok660BTjBNJiRiuHdZ8=) 2: 323830343a326639343a3a2f33322d3438203d3e20323634393030.roa (hash: IvYrnZ80rmvnk+f/ifQla6cK5O6B38hzT1CwtOxjX7M=) 3: 3136382e3232382e382e302f32322d3332203d3e20323634393030.roa (hash: y3lZCCq0IOFmfmrjbdteQ0GspT2lhf61PyVMBbr1S80=) 4: 3137302e38302e3233362e302f32322d3332203d3e20323634393030.roa (hash: fCiKWIGD8EL/QIyZTksmVx9NSqYYweXi5WC6tEAvyuA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 16:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ec:d3:2b:55:54:ce:24:1a:57:6b:a0:ba:73:bf:b2:79:c3:1b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Validity Not Before: Apr 28 16:09:31 2025 GMT Not After : Apr 29 19:00:31 2025 GMT Subject: CN=C50B01ADE2A9C777B05564D773514790819211F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:42:85:00:0e:49:f0:79:cd:44:64:fc:74:af: 48:a7:2f:f4:df:c4:64:d5:18:ff:64:77:06:72:13: b8:47:cf:c1:5c:63:d8:9d:28:57:af:67:97:ce:19: 65:b0:00:5f:6a:20:7e:1c:71:eb:ed:04:d3:eb:56: 0f:1a:d0:ed:86:ab:a7:20:63:81:79:4d:4b:07:64: e0:9d:57:d0:1f:a1:4e:fa:d0:ea:5b:31:5b:33:bf: 34:a0:46:a1:0c:d4:ea:84:e6:3e:9f:ee:b7:42:ad: f9:9c:dc:33:58:48:c6:a1:a6:69:5f:17:25:2c:47: d5:05:f3:00:91:4d:13:e3:fb:66:a3:15:95:64:93: ae:e6:db:09:9c:b1:24:70:71:cc:a0:3e:3a:01:61: 8d:3a:38:d5:98:7c:00:ba:2d:5e:32:5e:74:fb:f6: 27:fd:e9:95:57:cc:69:1c:a9:df:32:54:8f:3a:11: 9e:b2:58:bf:60:08:68:9b:50:3f:62:ff:75:2f:29: af:ff:34:db:64:83:ec:36:8d:26:02:07:99:dc:2d: 05:93:e3:ab:c5:4d:35:6c:36:3a:4f:cf:6f:f4:11: 81:22:36:73:d8:d6:c8:93:ac:a7:6a:15:7c:1d:30: e5:e9:a1:77:99:80:7e:0a:bf:5f:62:4f:57:f9:1e: a3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0B:01:AD:E2:A9:C7:77:B0:55:64:D7:73:51:47:90:81:92:11:F2 X509v3 Authority Key Identifier: keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ed:43:97:a3:da:ca:7f:36:91:79:33:f1:b7:d2:aa:a1:3b: 2a:a8:8f:71:a7:2b:a9:f0:60:42:85:f0:d5:37:fa:d3:e0:aa: c5:67:25:dc:62:9f:c2:e0:64:d7:c3:2a:74:1c:66:ea:d9:a6: b9:2e:9e:7b:fb:f9:2f:05:8b:23:81:c6:49:f2:ed:4e:94:71: fc:aa:6d:05:ca:c5:b2:14:7e:38:d7:56:b0:d2:48:71:07:94: 98:b3:76:ae:80:bb:47:24:ad:c3:44:4a:ee:1d:02:14:ed:96: ab:07:db:9a:db:97:85:42:0d:77:51:1b:f3:1a:1f:ac:ef:49: 86:c6:be:4a:93:87:a2:ae:56:3c:0f:57:5a:f1:02:6c:19:4a: 79:83:f0:d9:4e:7b:89:6b:97:e6:15:6e:9d:fc:b7:99:a5:3c: d6:af:1d:08:74:fc:51:80:24:e9:82:8f:9e:c3:33:83:d6:ec: 0d:85:df:7d:31:79:45:bd:49:af:3e:eb:e0:13:7a:fa:98:c2: 8a:d7:fb:5a:d8:4a:c2:9d:fb:8c:45:27:6d:18:8a:f5:93:48: 7f:5d:e4:0f:50:ab:b5:a5:a3:59:85:d3:71:c2:31:08:cd:80: 53:c2:5f:60:49:4c:67:3c:a1:e0:9d:ea:0b:b4:9a:e5:31:5e: 77:4c:13:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS+zTK1VUziQaV2ugunO/snnDG2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCMzRDRjRBRkMwMTcyMTE1Mzk5MEFFMUExMEQ5MjJG NzUwNzU0NjAeFw0yNTA0MjgxNjA5MzFaFw0yNTA0MjkxOTAwMzFaMDMxMTAvBgNV BAMTKEM1MEIwMUFERTJBOUM3NzdCMDU1NjRENzczNTE0NzkwODE5MjExRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjQoUADknwec1EZPx0r0inL/Tf xGTVGP9kdwZyE7hHz8FcY9idKFevZ5fOGWWwAF9qIH4ccevtBNPrVg8a0O2Gq6cg Y4F5TUsHZOCdV9AfoU760OpbMVszvzSgRqEM1OqE5j6f7rdCrfmc3DNYSMahpmlf FyUsR9UF8wCRTRPj+2ajFZVkk67m2wmcsSRwccygPjoBYY06ONWYfAC6LV4yXnT7 9if96ZVXzGkcqd8yVI86EZ6yWL9gCGibUD9i/3UvKa//NNtkg+w2jSYCB5ncLQWT 46vFTTVsNjpPz2/0EYEiNnPY1siTrKdqFXwdMOXpoXeZgH4Kv19iT1f5HqMBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxQsBreKpx3ewVWTXc1FHkIGSEfIwHwYDVR0j BBgwFoAUzbNM9K/AFyEVOZCuGhDZIvdQdUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhU RnEvMC9DREIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQjM0Q0Y0QUZDMDE3MjEx NTM5OTBBRTFBMTBEOTIyRjc1MDc1NDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhURnEvMC9D REIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm+1Dl6Payn82kXkz8bfSqqE7KqiPcacrqfBgQoXw1Tf60+CqxWcl3GKfwuBk 18MqdBxm6tmmuS6ee/v5LwWLI4HGSfLtTpRx/KptBcrFshR+ONdWsNJIcQeUmLN2 roC7RyStw0RK7h0CFO2WqwfbmtuXhUINd1Eb8xofrO9Jhsa+SpOHoq5WPA9XWvEC bBlKeYPw2U57iWuX5hVunfy3maU81q8dCHT8UYAk6YKPnsMzg9bsDYXffTF5Rb1J rz7r4BN6+pjCitf7WthKwp37jEUnbRiK9ZNIf13kD1CrtaWjWYXTccIxCM2AU8Jf YElMZzyh4J3qC7Sa5TFed0wTtg== -----END CERTIFICATE-----Generated at Mon Apr 28 17:37:53 2025 by rpki-client on console.sobornost.net