$ rpki-client -vvf rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft File: 1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft (raw, json) Hash identifier: WUep20Zdclmzr29Bx5gEPlLGpkMc7rMkw2lf5uiD574= Subject key identifier: 07:74:BE:F0:47:D8:77:E8:75:9F:D6:41:64:5F:E3:03:B5:13:AF:DF Authority key identifier: 1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14 Certificate issuer: /CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14 Certificate serial: 2C9041E60B11379DCA4FA22AB379365B0A60B757 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer Subject info access: rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft Manifest number: 14 Signing time: Mon 28 Apr 2025 11:27:10 +0000 Manifest this update: Mon 28 Apr 2025 11:22:10 +0000 Manifest next update: Tue 29 Apr 2025 14:26:10 +0000 Files and hashes: 1: 323830343a333137633a3a2f33322d3634203d3e20323635303138.roa (hash: ez+ajbN41gMQLCvCNkwbbF7k57+fkGAT5m28gVygc5E=) 2: 3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa (hash: hv7rV0YAjf7OIxTmW4CmSIfCjHYfqZrGrG5y4H2smTY=) 3: 1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl (hash: YzcDtAV+S7W/gdxRHdgaixAc+M3NxHRpHO4jt19BjtE=) 4: 3137302e38342e3139362e302f32322d3332203d3e20323635303138.roa (hash: GMqVz+pNv4jlVq8AM/MysXTepHhSdbVZyc7Np+Ty+wo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 13:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:90:41:e6:0b:11:37:9d:ca:4f:a2:2a:b3:79:36:5b:0a:60:b7:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14 Validity Not Before: Apr 28 11:22:10 2025 GMT Not After : Apr 29 14:26:10 2025 GMT Subject: CN=0774BEF047D877E8759FD641645FE303B513AFDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:95:19:18:24:91:e5:4e:8b:b7:f7:c7:db:1d: 1f:95:b3:c6:12:5b:5b:86:0d:55:36:d2:86:67:7f: a1:00:2d:6a:11:c4:c9:02:86:af:36:d5:f3:7c:4d: 42:02:95:54:8b:18:91:30:aa:c6:cd:5b:2a:48:9e: 29:60:19:2f:4c:c9:34:96:0b:be:4a:af:a6:51:ae: 54:7b:6f:c2:5d:61:dd:85:d3:d6:39:29:b2:14:68: 1f:68:c4:96:db:26:e7:b3:a9:5e:e8:ef:20:fd:34: 84:e5:5b:a6:37:ea:61:7f:9b:b8:ca:12:83:00:52: a1:79:1b:6f:54:95:88:d1:a1:3c:9f:0f:59:a2:bd: a4:37:a2:ee:41:bd:d8:fc:5b:64:0e:a8:85:24:80: ae:fa:fd:2f:4f:88:8b:b5:d5:41:37:a5:7f:6f:a0: 2b:a3:39:69:cb:f0:8e:6a:62:b5:65:c1:58:d9:cd: 42:4f:ac:22:a6:18:24:5b:04:9d:94:79:74:ba:09: 82:ea:4b:6e:ad:de:ea:fc:7e:ad:d9:ac:90:f3:cc: 8e:07:c4:eb:c7:33:5b:13:1d:aa:e8:7d:ab:43:80: f2:05:44:e9:d8:13:50:46:90:3d:9f:4b:13:0d:fe: 20:7f:ef:22:43:1f:6f:39:6f:ba:05:56:86:f0:cd: ab:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:74:BE:F0:47:D8:77:E8:75:9F:D6:41:64:5F:E3:03:B5:13:AF:DF X509v3 Authority Key Identifier: keyid:1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ec:c8:38:a0:68:86:ce:54:2a:85:e8:64:4e:65:7e:20:82: 4f:05:a0:3e:5f:00:76:86:23:cb:45:fe:75:90:7f:ca:27:d0: 7f:02:2d:0e:cc:6d:fd:02:d7:f2:16:b4:fd:9c:88:04:61:66: f2:84:21:e9:92:bf:7b:d4:dd:6f:62:87:5f:e1:c6:83:14:ad: bd:8b:94:53:23:6d:95:4e:ec:6a:c3:58:7b:46:ac:85:06:ca: b8:be:5a:63:f6:0a:cb:ca:0c:cd:39:75:85:2b:1c:ae:80:2b: 0e:10:cc:1f:b8:77:e1:d4:2a:e5:7a:d2:59:b9:44:3b:c8:45: 84:8d:95:82:c3:61:f1:9b:5c:97:ee:22:86:24:34:3f:b0:88: 06:bb:4a:23:a9:33:dd:1f:57:f7:19:7a:6e:02:0b:e6:02:3f: c5:8e:05:99:cc:e0:81:2b:65:ec:97:ce:e6:6f:ca:2b:90:41: b7:6e:0a:db:bb:80:c2:8f:ba:de:9b:86:c9:d5:4c:b5:63:57: e0:ab:02:68:59:32:35:06:bc:ef:e0:58:09:2b:60:f5:14:09: 82:70:d4:4f:58:63:09:ae:44:5c:db:97:95:d1:3e:13:be:19: 04:6f:da:aa:62:6e:01:87:d0:b6:d1:d6:13:9b:d9:44:89:32: dc:4e:01:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULJBB5gsRN53KT6Iqs3k2Wwpgt1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2MEZBNzY5MDUxOUE5M0RGNjlEQjhFQUNDOUVEQjAz ODBCMkIxNDAeFw0yNTA0MjgxMTIyMTBaFw0yNTA0MjkxNDI2MTBaMDMxMTAvBgNV BAMTKDA3NzRCRUYwNDdEODc3RTg3NTlGRDY0MTY0NUZFMzAzQjUxM0FGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lRkYJJHlTou398fbHR+Vs8YS W1uGDVU20oZnf6EALWoRxMkChq821fN8TUIClVSLGJEwqsbNWypInilgGS9MyTSW C75Kr6ZRrlR7b8JdYd2F09Y5KbIUaB9oxJbbJuezqV7o7yD9NITlW6Y36mF/m7jK EoMAUqF5G29UlYjRoTyfD1mivaQ3ou5Bvdj8W2QOqIUkgK76/S9PiIu11UE3pX9v oCujOWnL8I5qYrVlwVjZzUJPrCKmGCRbBJ2UeXS6CYLqS26t3ur8fq3ZrJDzzI4H xOvHM1sTHarofatDgPIFROnYE1BGkD2fSxMN/iB/7yJDH285b7oFVobwzavtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUB3S+8EfYd+h1n9ZBZF/jA7UTr98wHwYDVR0j BBgwFoAUHmD6dpBRmpPfaduOrMntsDgLKxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2p2WUFxOFlNN3JpUnR4bWJ6WVlzNVQ2MzY1aUVnOUFpZUVENmRVQTRH a1ovMC8xRTYwRkE3NjkwNTE5QTkzREY2OURCOEVBQ0M5RURCMDM4MEIyQjE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFNjBGQTc2OTA1MTlBOTNE RjY5REI4RUFDQzlFREIwMzgwQjJCMTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2p2WUFxOFlNN3JpUnR4bWJ6WVlzNVQ2MzY1aUVnOUFpZUVENmRVQTRHa1ovMC8x RTYwRkE3NjkwNTE5QTkzREY2OURCOEVBQ0M5RURCMDM4MEIyQjE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVuzIOKBohs5UKoXoZE5lfiCCTwWgPl8AdoYjy0X+dZB/yifQfwItDsxt/QLX 8ha0/ZyIBGFm8oQh6ZK/e9Tdb2KHX+HGgxStvYuUUyNtlU7sasNYe0ashQbKuL5a Y/YKy8oMzTl1hSscroArDhDMH7h34dQq5XrSWblEO8hFhI2VgsNh8Ztcl+4ihiQ0 P7CIBrtKI6kz3R9X9xl6bgIL5gI/xY4FmczggStl7JfO5m/KK5BBt24K27uAwo+6 3puGydVMtWNX4KsCaFkyNQa87+BYCStg9RQJgnDUT1hjCa5EXNuXldE+E74ZBG/a qmJuAYfQttHWE5vZRIky3E4B+g== -----END CERTIFICATE-----Generated at Mon Apr 28 13:04:54 2025 by rpki-client on console.sobornost.net