$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/27310550B38DD3FF2221506599F0AD73C48542C0.mft File: 27310550B38DD3FF2221506599F0AD73C48542C0.mft (raw, json) Hash identifier: tn5jdnbj8BMUMEK0r87d9dxRlT5uUVtezmPUED4LyEY= Subject key identifier: BA:57:91:DA:26:B4:8C:2A:4A:0A:F9:65:CE:E1:65:38:28:B1:AF:29 Authority key identifier: 27:31:05:50:B3:8D:D3:FF:22:21:50:65:99:F0:AD:73:C4:85:42:C0 Certificate issuer: /CN=27310550B38DD3FF2221506599F0AD73C48542C0 Certificate serial: 22711A1D84B3619435880777CE4065D4CFA15123 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27310550B38DD3FF2221506599F0AD73C48542C0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/27310550B38DD3FF2221506599F0AD73C48542C0.mft Manifest number: 011E Signing time: Mon 28 Apr 2025 00:24:58 +0000 Manifest this update: Mon 28 Apr 2025 00:19:58 +0000 Manifest next update: Tue 29 Apr 2025 03:45:58 +0000 Files and hashes: 1: 3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa (hash: zeppCNW+d/nuS5ycesTJtO06DdBWPEiE2BYTAbAtOXg=) 2: 27310550B38DD3FF2221506599F0AD73C48542C0.crl (hash: JHJGrIIHVPjcJ4OA5KUWkVuexdUNKd/fcySD26dpzzY=) 3: 323830343a323738303a3a2f33322d3334203d3e20323633393035.roa (hash: ctSMcOn4HKLEtUf3GgJgzeIS8ZjsdWkRp1LIxPZhTeg=) 4: 3137302e38302e36382e302f32322d3234203d3e20323633393035.roa (hash: pmp4xdqBKSMzHClZmnMtqMDVZCylbdJupSRQW1mn6qM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/27310550B38DD3FF2221506599F0AD73C48542C0.crl rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/27310550B38DD3FF2221506599F0AD73C48542C0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27310550B38DD3FF2221506599F0AD73C48542C0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:71:1a:1d:84:b3:61:94:35:88:07:77:ce:40:65:d4:cf:a1:51:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27310550B38DD3FF2221506599F0AD73C48542C0 Validity Not Before: Apr 28 00:19:58 2025 GMT Not After : Apr 29 03:45:58 2025 GMT Subject: CN=BA5791DA26B48C2A4A0AF965CEE1653828B1AF29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5b:24:c7:18:c1:d9:06:a8:e1:5f:39:df:27: 29:4d:4d:71:45:67:ef:d1:a5:46:de:90:80:7f:af: eb:5f:38:c9:71:b6:7e:24:c4:58:88:30:20:c6:dc: 22:e4:26:e0:63:3b:d5:9a:1b:ab:2a:b3:d2:5b:95: 7d:5e:28:4a:f8:40:cb:b1:25:a2:1b:a1:df:c9:9b: 62:4e:4d:65:43:cd:0b:03:c2:30:ab:bb:db:40:44: d9:ec:9d:aa:ca:1a:54:1f:b2:c4:1d:7b:71:58:30: 77:9b:bf:2c:69:a5:1a:c8:1f:6b:fe:2a:14:f0:12: 67:ff:96:21:cf:83:fb:7a:40:21:9e:e0:4b:ea:82: 30:f5:43:cb:52:02:fe:2f:64:98:a7:3e:d7:41:59: 9c:dc:78:85:50:ec:37:e7:ae:28:48:43:1d:5e:bf: 03:b8:0c:81:c3:17:5f:e3:18:42:38:4f:58:8c:ff: 4a:5b:aa:c9:e1:09:33:f2:6c:48:98:5d:0b:77:ac: b6:c7:3a:de:12:82:16:fb:f8:8a:e4:ff:70:c8:00: 9f:2c:7c:39:b4:ef:61:a0:83:94:46:b2:75:a7:ee: 9c:02:22:9e:72:f2:43:22:13:c6:b8:e0:7a:0f:09: dd:c0:7b:93:56:e9:cc:f3:91:92:17:c7:80:96:82: 58:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:57:91:DA:26:B4:8C:2A:4A:0A:F9:65:CE:E1:65:38:28:B1:AF:29 X509v3 Authority Key Identifier: keyid:27:31:05:50:B3:8D:D3:FF:22:21:50:65:99:F0:AD:73:C4:85:42:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/27310550B38DD3FF2221506599F0AD73C48542C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27310550B38DD3FF2221506599F0AD73C48542C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/27310550B38DD3FF2221506599F0AD73C48542C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:60:1f:66:48:b0:11:6c:f8:05:91:f3:09:6c:5f:ac:84:24: 3e:c7:a9:56:65:af:40:c9:3b:e6:fc:04:7b:a1:b0:cd:48:78: 68:6d:fa:ae:a8:2f:88:fc:9b:06:53:a5:24:60:0e:5e:93:7a: 33:31:71:de:9b:16:67:74:7f:76:37:22:73:b0:48:5c:f1:0b: aa:e5:03:38:dc:41:4b:f0:7d:da:59:37:dd:86:53:29:8e:e0: df:99:65:85:c9:8f:b7:a1:fb:d2:18:f2:e8:b5:d2:23:6c:f3: 7e:3c:ea:5d:22:2d:cc:e9:e0:2d:63:d4:c1:73:81:c5:47:1a: 55:e5:21:cf:19:01:03:17:57:c9:f9:57:d0:db:ca:ef:2d:00: 85:b6:29:e6:6a:04:26:8c:e7:87:8c:64:5d:4f:df:9d:28:72: 83:f0:38:9c:60:bd:ab:5a:11:83:eb:52:12:f5:ec:3e:26:cd: d3:fe:d2:ba:ef:65:a7:01:21:84:03:76:5b:0a:ce:05:1b:bb: dd:33:13:8b:89:9d:41:8c:4c:4a:68:32:fc:db:7f:f7:e8:3e: 4b:6d:c7:95:7d:61:b2:06:ea:bd:f4:2e:e3:79:71:13:b5:3c: 1b:3f:64:59:a0:c3:07:d7:12:5f:9f:72:d5:4c:04:d0:e0:9f: 59:d1:96:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUInEaHYSzYZQ1iAd3zkBl1M+hUSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjczMTA1NTBCMzhERDNGRjIyMjE1MDY1OTlGMEFENzND NDg1NDJDMDAeFw0yNTA0MjgwMDE5NThaFw0yNTA0MjkwMzQ1NThaMDMxMTAvBgNV BAMTKEJBNTc5MURBMjZCNDhDMkE0QTBBRjk2NUNFRTE2NTM4MjhCMUFGMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoWyTHGMHZBqjhXznfJylNTXFF Z+/RpUbekIB/r+tfOMlxtn4kxFiIMCDG3CLkJuBjO9WaG6sqs9JblX1eKEr4QMux JaIbod/Jm2JOTWVDzQsDwjCru9tARNnsnarKGlQfssQde3FYMHebvyxppRrIH2v+ KhTwEmf/liHPg/t6QCGe4EvqgjD1Q8tSAv4vZJinPtdBWZzceIVQ7DfnrihIQx1e vwO4DIHDF1/jGEI4T1iM/0pbqsnhCTPybEiYXQt3rLbHOt4Sghb7+Irk/3DIAJ8s fDm072Ggg5RGsnWn7pwCIp5y8kMiE8a44HoPCd3Ae5NW6czzkZIXx4CWglh1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuleR2ia0jCpKCvllzuFlOCixrykwHwYDVR0j BBgwFoAUJzEFULON0/8iIVBlmfCtc8SFQsAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBj eUYvMC8yNzMxMDU1MEIzOEREM0ZGMjIyMTUwNjU5OUYwQUQ3M0M0ODU0MkMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3MzEwNTUwQjM4REQzRkYy MjIxNTA2NTk5RjBBRDczQzQ4NTQyQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBjeUYvMC8y NzMxMDU1MEIzOEREM0ZGMjIyMTUwNjU5OUYwQUQ3M0M0ODU0MkMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlmAfZkiwEWz4BZHzCWxfrIQkPsepVmWvQMk75vwEe6GwzUh4aG36rqgviPyb BlOlJGAOXpN6MzFx3psWZ3R/djcic7BIXPELquUDONxBS/B92lk33YZTKY7g35ll hcmPt6H70hjy6LXSI2zzfjzqXSItzOngLWPUwXOBxUcaVeUhzxkBAxdXyflX0NvK 7y0AhbYp5moEJoznh4xkXU/fnShyg/A4nGC9q1oRg+tSEvXsPibN0/7Suu9lpwEh hAN2WwrOBRu73TMTi4mdQYxMSmgy/Nt/9+g+S23HlX1hsgbqvfQu43lxE7U8Gz9k WaDDB9cSX59y1UwE0OCfWdGWtQ== -----END CERTIFICATE-----Generated at Mon Apr 28 05:59:58 2025 by rpki-client on console.sobornost.net