$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.mft File: 9C7E4020A3FE6A17C349B27BF2790BF977A2E619.mft (raw, json) Hash identifier: XcIzk/mlqKtLhlNFiCRSzIkVbDCSZ3WhdAWzIK/+eHY= Subject key identifier: 87:32:50:AB:46:39:0F:09:06:03:66:F4:08:7F:F2:6E:F8:DB:0A:DF Authority key identifier: 9C:7E:40:20:A3:FE:6A:17:C3:49:B2:7B:F2:79:0B:F9:77:A2:E6:19 Certificate issuer: /CN=9C7E4020A3FE6A17C349B27BF2790BF977A2E619 Certificate serial: 4A48327CA09B66233E458DF6CE88C7E29937DFC0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.cer Subject info access: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.mft Manifest number: 4A Signing time: Thu 24 Apr 2025 19:06:37 +0000 Manifest this update: Thu 24 Apr 2025 19:01:37 +0000 Manifest next update: Fri 25 Apr 2025 21:16:37 +0000 Files and hashes: 1: 3138362e3233332e3232382e302f32322d3234203d3e20323632363735.roa (hash: mINQcu3+a18r29P2stfpXBkhmbKAwWWSTw/Prna/efg=) 2: 9C7E4020A3FE6A17C349B27BF2790BF977A2E619.crl (hash: WL5wLCkLZ9VUFXN2Op7uBa4T7yuOj0rM1U1/rxqxwTU=) 3: 323830343a6134343a3a2f33322d3333203d3e20323632363735.roa (hash: NPHwC95tALb5DStY+0sk7WlWQJG7RwZO1MTsO+2oetE=) 4: 3133312e3235352e35322e302f32322d3234203d3e20323632363735.roa (hash: /S/aZrizx/Lfkhwu3IYOLdn++jotFaUpbUFQ5/AZLUo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.crl rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:48:32:7c:a0:9b:66:23:3e:45:8d:f6:ce:88:c7:e2:99:37:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C7E4020A3FE6A17C349B27BF2790BF977A2E619 Validity Not Before: Apr 24 19:01:37 2025 GMT Not After : Apr 25 21:16:37 2025 GMT Subject: CN=873250AB46390F09060366F4087FF26EF8DB0ADF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:59:fa:62:21:91:b1:cd:ae:4a:9e:f3:f6: a8:0e:df:01:46:c5:68:57:d9:b3:62:11:3f:9f:79: 2b:28:f0:3d:4b:15:60:ac:3b:b9:14:0c:60:3a:15: 9e:1c:fe:0b:ed:79:b2:a7:d0:24:38:da:b7:4c:8c: d2:1d:13:4d:d3:df:2c:7f:7a:b6:39:45:cd:b7:0f: 2d:64:06:c0:2a:3c:4f:04:df:cf:65:f6:ea:11:84: 68:c6:a2:ae:dc:f5:d4:97:f4:91:c0:26:72:84:db: 2c:05:6e:f6:ec:7a:3d:55:9f:18:42:e4:3e:ce:ba: f3:2f:60:a3:ba:c0:0f:57:f1:8b:46:8f:55:3e:92: 35:2d:42:04:ab:19:89:42:ac:0f:fd:fd:59:84:ef: 89:a0:d8:64:8c:4f:3a:08:1f:25:dc:14:db:64:15: ef:c3:f1:c0:ca:7e:5d:62:2a:07:74:5a:96:b9:c7: bb:41:b4:86:32:22:30:de:10:ea:7c:72:2d:51:5a: 97:14:6f:90:68:7b:5f:9b:02:90:bb:d0:25:96:99: 36:a9:ab:4b:7a:a1:7c:7b:ab:42:4b:f9:b6:5a:5e: 61:5a:50:12:ae:b1:e9:e6:90:22:78:27:75:c0:71: 40:9d:dc:46:f0:77:b8:b4:96:48:b0:ec:48:56:42: aa:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:32:50:AB:46:39:0F:09:06:03:66:F4:08:7F:F2:6E:F8:DB:0A:DF X509v3 Authority Key Identifier: keyid:9C:7E:40:20:A3:FE:6A:17:C3:49:B2:7B:F2:79:0B:F9:77:A2:E6:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:1a:d7:df:da:75:78:a7:8e:16:67:20:79:bb:7a:03:e4:ec: a3:3d:d4:8b:d8:40:72:08:33:7c:2c:28:a9:50:9e:b3:df:95: f6:97:7e:5c:99:7e:6f:48:29:ce:19:c6:18:cf:40:92:cd:0c: e9:40:3c:81:19:8c:99:0c:8d:4e:d0:71:d8:41:7b:aa:ee:50: 58:a4:1e:49:70:d2:6c:fb:3c:2b:a2:e9:f4:56:2e:a3:64:db: 31:3c:3d:c7:8d:46:e9:ed:b8:11:a2:1d:49:a9:6c:62:b8:8b: c2:d2:df:af:d8:05:c2:05:6e:eb:68:d7:92:7a:7b:50:49:51: 3e:5b:b3:8a:bb:c7:35:84:55:79:7a:4b:3f:30:f6:e4:0b:05: 2f:12:de:cd:e6:f7:84:63:2d:4c:bf:7e:f5:99:44:25:db:d6: f0:78:6b:16:d2:c5:49:d0:85:69:85:e4:83:02:4d:a6:e6:e7: b8:1f:fa:bf:1b:6b:e2:f1:2e:e0:12:3c:1b:4f:7a:a8:d4:bd: 03:d3:28:59:e3:6a:fb:27:34:b0:7b:a8:43:a8:7c:1d:82:1f: 1e:d8:da:7f:1e:d7:99:06:13:48:e8:81:c7:fa:38:76:e0:9a: 5d:c4:93:b4:fd:ba:b4:a9:08:48:75:79:24:13:f1:b1:0d:eb: 4a:cd:46:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSkgyfKCbZiM+RY32zojH4pk338AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM3RTQwMjBBM0ZFNkExN0MzNDlCMjdCRjI3OTBCRjk3 N0EyRTYxOTAeFw0yNTA0MjQxOTAxMzdaFw0yNTA0MjUyMTE2MzdaMDMxMTAvBgNV BAMTKDg3MzI1MEFCNDYzOTBGMDkwNjAzNjZGNDA4N0ZGMjZFRjhEQjBBREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG4Fn6YiGRsc2uSp7z9qgO3wFG xWhX2bNiET+feSso8D1LFWCsO7kUDGA6FZ4c/gvtebKn0CQ42rdMjNIdE03T3yx/ erY5Rc23Dy1kBsAqPE8E389l9uoRhGjGoq7c9dSX9JHAJnKE2ywFbvbsej1VnxhC 5D7OuvMvYKO6wA9X8YtGj1U+kjUtQgSrGYlCrA/9/VmE74mg2GSMTzoIHyXcFNtk Fe/D8cDKfl1iKgd0Wpa5x7tBtIYyIjDeEOp8ci1RWpcUb5Boe1+bApC70CWWmTap q0t6oXx7q0JL+bZaXmFaUBKusenmkCJ4J3XAcUCd3Ebwd7i0lkiw7EhWQqo/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhzJQq0Y5DwkGA2b0CH/ybvjbCt8wHwYDVR0j BBgwFoAUnH5AIKP+ahfDSbJ78nkL+Xei5hkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzVMa2R0OVNkTEVaOXY1c1VFWnp2a0dNd1JUNHhCOW5NVkxmZ2lyakdr dzIvMC85QzdFNDAyMEEzRkU2QTE3QzM0OUIyN0JGMjc5MEJGOTc3QTJFNjE5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDN0U0MDIwQTNGRTZBMTdD MzQ5QjI3QkYyNzkwQkY5NzdBMkU2MTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzVMa2R0OVNkTEVaOXY1c1VFWnp2a0dNd1JUNHhCOW5NVkxmZ2lyakdrdzIvMC85 QzdFNDAyMEEzRkU2QTE3QzM0OUIyN0JGMjc5MEJGOTc3QTJFNjE5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOxrX39p1eKeOFmcgebt6A+Tsoz3Ui9hAcggzfCwoqVCes9+V9pd+XJl+b0gp zhnGGM9Aks0M6UA8gRmMmQyNTtBx2EF7qu5QWKQeSXDSbPs8K6Lp9FYuo2TbMTw9 x41G6e24EaIdSalsYriLwtLfr9gFwgVu62jXknp7UElRPluzirvHNYRVeXpLPzD2 5AsFLxLezeb3hGMtTL9+9ZlEJdvW8HhrFtLFSdCFaYXkgwJNpubnuB/6vxtr4vEu 4BI8G096qNS9A9MoWeNq+yc0sHuoQ6h8HYIfHtjafx7XmQYTSOiBx/o4duCaXcST tP26tKkISHV5JBPxsQ3rSs1GjA== -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:39 2025 by rpki-client on console.sobornost.net