$ rpki-client -vvf rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.mft File: AE4918B47F20CB240F597D2AFBC73EF5DA714C09.mft (raw, json) Hash identifier: 8XVTDvLj/G5hg4V/r+bNxvQLXBn7MosOGDH92fkOV0c= Subject key identifier: 92:4F:3F:25:B8:CB:B8:7E:7A:69:DF:D9:15:1B:27:DC:7D:3A:34:DC Authority key identifier: AE:49:18:B4:7F:20:CB:24:0F:59:7D:2A:FB:C7:3E:F5:DA:71:4C:09 Certificate issuer: /CN=AE4918B47F20CB240F597D2AFBC73EF5DA714C09 Certificate serial: 729BBDC8CEE7A0A5192277A084388AD9B9F523F4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.cer Subject info access: rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.mft Manifest number: 23 Signing time: Sun 27 Apr 2025 08:59:55 +0000 Manifest this update: Sun 27 Apr 2025 08:54:55 +0000 Manifest next update: Mon 28 Apr 2025 12:51:55 +0000 Files and hashes: 1: 3136372e3234392e3132332e302f32342d3234203d3e20323635313730.roa (hash: +cKQoYs5LyyWb4gOhSol6PefKtjBQmJwRnh0NAcBq34=) 2: 3136372e3234392e3132312e302f32342d3234203d3e20323635313730.roa (hash: NPfh8u8RVDUIAohXlRx+4N15yDYs+Ev+gvVWRaJZcaQ=) 3: 3136372e3234392e3132322e302f32342d3234203d3e20323635313730.roa (hash: uzzB7+YWS7F2Hjk+J6P50hWSoLAEmY3w4AXj2ZVKrsE=) 4: AE4918B47F20CB240F597D2AFBC73EF5DA714C09.crl (hash: h7CjjXviQVG684qHN1Ob2qjJyiIyU2p/pGOuwwpvBVA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.crl rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 06:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:9b:bd:c8:ce:e7:a0:a5:19:22:77:a0:84:38:8a:d9:b9:f5:23:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4918B47F20CB240F597D2AFBC73EF5DA714C09 Validity Not Before: Apr 27 08:54:55 2025 GMT Not After : Apr 28 12:51:55 2025 GMT Subject: CN=924F3F25B8CBB87E7A69DFD9151B27DC7D3A34DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9b:6c:9f:45:6d:1d:4e:6a:25:41:37:86:30: bf:69:53:dc:17:e8:e9:f1:de:09:47:b8:bf:08:05: fd:49:cd:a4:87:50:2a:64:aa:d7:b9:be:4a:7a:5d: ee:c0:75:e8:a3:1b:e2:93:53:3a:e3:65:3c:a9:99: 42:57:7d:aa:da:f6:00:cd:c2:ce:fa:e3:3f:2d:10: df:a9:a6:a7:49:54:ba:8e:be:3b:57:3a:65:f0:e7: 77:00:2a:87:f7:df:03:8d:60:db:a5:72:21:72:54: 12:69:da:2b:82:2c:37:d6:b6:ae:9c:c8:fe:32:01: c9:0a:66:85:de:48:b2:f8:3d:83:9c:1e:b1:5a:d0: e8:b3:fb:fd:13:e1:da:ef:6a:6f:fd:83:19:be:2c: 1c:87:30:75:d1:2a:23:35:05:53:44:66:39:68:d2: 4a:e0:ff:3f:ef:50:c3:5a:58:82:88:75:c4:e6:39: b3:a4:4f:76:c8:91:f6:5f:3b:88:92:f5:9b:f0:24: 60:fa:d8:4e:c7:50:29:b7:2a:9c:2a:ac:e4:bf:4b: db:1e:c8:f2:83:75:ec:88:95:ae:f3:89:55:68:15: 5d:85:79:21:85:fb:97:de:55:15:bc:77:85:88:31: 97:13:d7:b1:26:7e:67:e0:f0:1a:df:7d:c5:1b:bb: 6a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4F:3F:25:B8:CB:B8:7E:7A:69:DF:D9:15:1B:27:DC:7D:3A:34:DC X509v3 Authority Key Identifier: keyid:AE:49:18:B4:7F:20:CB:24:0F:59:7D:2A:FB:C7:3E:F5:DA:71:4C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/33UKvEp4wYrJRHbwSKgdu88cUFiMVm1GrVfWu1QzmCMZ/0/AE4918B47F20CB240F597D2AFBC73EF5DA714C09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c2:ec:a9:57:37:42:78:c8:64:a3:44:7a:fa:bf:f1:60:41: de:81:86:37:f5:c9:55:b7:19:11:d8:39:cd:dc:ad:05:33:4a: ed:28:be:2b:90:0c:93:b4:0b:3a:ba:04:8d:1a:09:c5:4f:c4: d8:59:a0:23:6c:45:35:b9:6c:4f:d2:c0:4c:99:85:24:fb:ec: d8:d7:b1:93:59:cd:67:ff:66:f9:6f:61:4d:c5:96:d6:c5:31: 6a:e4:c3:26:8d:41:43:be:d1:8a:18:22:cb:a9:b1:c2:53:4a: c8:68:3c:56:8c:5c:db:44:df:60:31:38:5a:41:bf:33:42:ad: f7:f3:60:23:49:c7:69:e6:6b:e7:92:37:06:d4:5a:aa:fa:c7: 12:cb:8d:78:43:64:ef:61:13:e1:0d:2e:a1:c2:f3:a5:78:4d: 25:fa:ab:66:20:d0:e3:69:ba:63:55:84:e8:a3:52:5e:a9:cc: a2:58:a2:c8:f5:7d:7f:1b:9e:21:db:66:5d:b2:e8:0d:5f:60: 1f:33:bc:be:79:3f:a6:34:e6:f5:fb:e0:a9:46:e3:1e:24:3a: 4b:d2:50:77:4b:b7:7a:77:e4:cb:0d:23:f0:29:53:ff:f9:57: 5f:2e:28:01:a9:d9:ff:33:7c:05:42:32:05:cc:7d:6c:73:51: 01:3f:3f:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcpu9yM7noKUZIneghDiK2bn1I/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0OTE4QjQ3RjIwQ0IyNDBGNTk3RDJBRkJDNzNFRjVE QTcxNEMwOTAeFw0yNTA0MjcwODU0NTVaFw0yNTA0MjgxMjUxNTVaMDMxMTAvBgNV BAMTKDkyNEYzRjI1QjhDQkI4N0U3QTY5REZEOTE1MUIyN0RDN0QzQTM0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIm2yfRW0dTmolQTeGML9pU9wX 6Onx3glHuL8IBf1JzaSHUCpkqte5vkp6Xe7AdeijG+KTUzrjZTypmUJXfara9gDN ws764z8tEN+ppqdJVLqOvjtXOmXw53cAKof33wONYNulciFyVBJp2iuCLDfWtq6c yP4yAckKZoXeSLL4PYOcHrFa0Oiz+/0T4drvam/9gxm+LByHMHXRKiM1BVNEZjlo 0krg/z/vUMNaWIKIdcTmObOkT3bIkfZfO4iS9ZvwJGD62E7HUCm3KpwqrOS/S9se yPKDdeyIla7ziVVoFV2FeSGF+5feVRW8d4WIMZcT17Emfmfg8BrffcUbu2plAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkk8/JbjLuH56ad/ZFRsn3H06NNwwHwYDVR0j BBgwFoAUrkkYtH8gyyQPWX0q+8c+9dpxTAkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzNVS3ZFcDR3WXJKUkhid1NLZ2R1ODhjVUZpTVZtMUdyVmZXdTFRem1D TVovMC9BRTQ5MThCNDdGMjBDQjI0MEY1OTdEMkFGQkM3M0VGNURBNzE0QzA5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFNDkxOEI0N0YyMENCMjQw RjU5N0QyQUZCQzczRUY1REE3MTRDMDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzNVS3ZFcDR3WXJKUkhid1NLZ2R1ODhjVUZpTVZtMUdyVmZXdTFRem1DTVovMC9B RTQ5MThCNDdGMjBDQjI0MEY1OTdEMkFGQkM3M0VGNURBNzE0QzA5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJsLsqVc3QnjIZKNEevq/8WBB3oGGN/XJVbcZEdg5zdytBTNK7Si+K5AMk7QL OroEjRoJxU/E2FmgI2xFNblsT9LATJmFJPvs2Nexk1nNZ/9m+W9hTcWW1sUxauTD Jo1BQ77Rihgiy6mxwlNKyGg8Voxc20TfYDE4WkG/M0Kt9/NgI0nHaeZr55I3BtRa qvrHEsuNeENk72ET4Q0uocLzpXhNJfqrZiDQ42m6Y1WE6KNSXqnMoliiyPV9fxue IdtmXbLoDV9gHzO8vnk/pjTm9fvgqUbjHiQ6S9JQd0u3enfkyw0j8ClT//lXXy4o AanZ/zN8BUIyBcx9bHNRAT8/fA== -----END CERTIFICATE-----Generated at Sun Apr 27 10:26:45 2025 by rpki-client on console.sobornost.net