$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft File: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft (raw, json) Hash identifier: 12PElnAzi8WPdJUmjfB3Y5KgG4wNwpq3KOfLRoIzUvE= Subject key identifier: 1A:03:E7:C5:E8:A9:17:EE:CB:11:AA:59:8B:A9:11:FF:8E:08:77:49 Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 Certificate issuer: /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Certificate serial: 153F4022238B7AE31D290C5F9311A7B4972ED3FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft Manifest number: 020B Signing time: Fri 25 Apr 2025 09:00:08 +0000 Manifest this update: Fri 25 Apr 2025 08:55:08 +0000 Manifest next update: Sat 26 Apr 2025 11:49:08 +0000 Files and hashes: 1: 323830343a336534343a3a2f33322d3336203d3e20323636353834.roa (hash: /XwYHZupa+FJTNO5XsovX8RlSGV6OfQ7o5Ml47Ou0qE=) 2: 33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl (hash: dTV4QOEUGaSUC5fPpNsF30k+oEZmxadkR3N/ZVzUbRM=) 3: 34352e372e3131362e302f32322d3234203d3e20323636353834.roa (hash: nFdRqFDzIu4P92HIBvjFRyju0x50HDwPMP1PnelSqMU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 11:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:3f:40:22:23:8b:7a:e3:1d:29:0c:5f:93:11:a7:b4:97:2e:d3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3 Validity Not Before: Apr 25 08:55:08 2025 GMT Not After : Apr 26 11:49:08 2025 GMT Subject: CN=1A03E7C5E8A917EECB11AA598BA911FF8E087749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d7:46:ff:a3:2d:3d:f5:92:78:64:12:6e:98: c7:cc:02:88:c4:67:1f:e4:13:72:f0:ff:14:2d:25: e4:e7:2e:72:59:74:85:ea:f3:a3:0b:f1:10:ca:c9: 35:2d:a8:96:84:c5:f5:9f:ec:5e:64:ff:0d:d6:b4: 41:11:b4:31:a2:41:8a:e6:03:2f:c8:bd:a6:1c:e1: 6a:62:cf:a4:3e:9c:e0:29:f0:42:d0:07:7d:77:d0: c5:6d:67:a1:42:96:9c:ad:db:16:80:4b:b9:f4:c1: 7a:64:e2:4d:4a:eb:05:e4:51:fd:f6:68:a2:b5:1a: f4:12:66:31:7c:77:94:59:31:19:c5:b6:77:ff:0d: 41:af:4f:5a:ba:f8:32:27:5d:84:a9:ef:a5:4d:4e: 16:f2:09:1a:7b:f7:04:09:0d:ae:b6:02:ff:01:7e: 1a:a0:21:12:59:51:a1:e0:43:ab:7d:bc:dd:fb:d8: 4a:8f:8e:c1:cb:c4:b1:78:5a:48:0f:1f:d7:89:4c: 55:65:29:7e:b1:f7:8a:e1:25:16:8c:a8:9e:e4:2a: 6a:11:65:80:44:f6:99:02:cb:0e:0f:b7:ec:0d:57: 59:2e:e9:5c:f9:01:a3:8a:17:13:99:13:15:fb:fa: 50:dd:47:cb:01:93:68:46:57:c9:65:a9:20:83:7b: 28:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:03:E7:C5:E8:A9:17:EE:CB:11:AA:59:8B:A9:11:FF:8E:08:77:49 X509v3 Authority Key Identifier: keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:12:ba:84:ec:a4:20:17:f4:24:07:3b:ec:0e:3c:73:0a:d3: 92:ed:93:08:1b:32:a0:56:5d:28:ba:4a:a0:7d:e5:82:99:62: cc:13:b3:70:17:6f:c6:e7:45:f4:6c:10:4f:39:55:a5:16:25: 55:a4:c4:af:ba:32:c9:fa:c1:52:58:55:0d:e1:03:b7:b8:0b: 06:dd:88:9b:5f:ab:66:f2:75:19:52:62:a7:6b:3d:f8:d3:e3: 18:fb:a2:34:32:75:21:7b:19:0f:f3:30:95:5d:c0:c3:15:27: da:56:54:9c:b8:56:f4:f5:d2:14:73:1b:8a:07:00:c3:1e:e7: 44:82:7e:75:ec:28:4b:8d:f6:50:df:3b:ad:07:dd:1b:83:ba: c0:b5:6f:8e:df:b8:3c:c8:8d:ee:f2:d3:b0:c6:2b:e8:5e:44: 2c:eb:9d:0f:ae:20:fc:77:a7:50:c9:df:a9:d9:71:26:84:d9: 6b:46:7a:3a:fc:15:a1:9a:eb:4d:d5:b7:2f:af:e0:e0:cf:d0: fc:36:87:40:5c:c1:b8:ad:6b:a5:b3:63:0f:e5:c8:25:88:f8: 7b:27:5f:0d:12:53:57:e5:c8:16:4e:9d:6c:f1:ff:6d:8e:60: 2e:7b:b7:87:89:cd:b2:02:ed:3a:49:f5:3a:87:9d:4d:ee:90: 17:86:f8:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFT9AIiOLeuMdKQxfkxGntJcu0/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNGNTA4RkVEQzI1QkI0QTA3RUFFOTMwNTAyNkM1QzZC NjE5NTJGMzAeFw0yNTA0MjUwODU1MDhaFw0yNTA0MjYxMTQ5MDhaMDMxMTAvBgNV BAMTKDFBMDNFN0M1RThBOTE3RUVDQjExQUE1OThCQTkxMUZGOEUwODc3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm10b/oy099ZJ4ZBJumMfMAojE Zx/kE3Lw/xQtJeTnLnJZdIXq86ML8RDKyTUtqJaExfWf7F5k/w3WtEERtDGiQYrm Ay/IvaYc4Wpiz6Q+nOAp8ELQB3130MVtZ6FClpyt2xaAS7n0wXpk4k1K6wXkUf32 aKK1GvQSZjF8d5RZMRnFtnf/DUGvT1q6+DInXYSp76VNThbyCRp79wQJDa62Av8B fhqgIRJZUaHgQ6t9vN372EqPjsHLxLF4WkgPH9eJTFVlKX6x94rhJRaMqJ7kKmoR ZYBE9pkCyw4Pt+wNV1ku6Vz5AaOKFxOZExX7+lDdR8sBk2hGV8llqSCDeyilAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGgPnxeipF+7LEapZi6kR/44Id0kwHwYDVR0j BBgwFoAUM/UI/twlu0oH6ukwUCbFxrYZUvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0 TWUvMS8zM0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRjUwOEZFREMyNUJCNEEw N0VBRTkzMDUwMjZDNUM2QjYxOTUyRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M21LYXpheTlYV283ZVpqVHRRVThvUVd2THNUSGFORmVhbk5XWjZUWnJ0TWUvMS8z M0Y1MDhGRURDMjVCQjRBMDdFQUU5MzA1MDI2QzVDNkI2MTk1MkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANRK6hOykIBf0JAc77A48cwrTku2TCBsyoFZdKLpKoH3lgplizBOzcBdvxudF 9GwQTzlVpRYlVaTEr7oyyfrBUlhVDeEDt7gLBt2Im1+rZvJ1GVJip2s9+NPjGPui NDJ1IXsZD/MwlV3AwxUn2lZUnLhW9PXSFHMbigcAwx7nRIJ+dewoS432UN87rQfd G4O6wLVvjt+4PMiN7vLTsMYr6F5ELOudD64g/HenUMnfqdlxJoTZa0Z6OvwVoZrr TdW3L6/g4M/Q/DaHQFzBuK1rpbNjD+XIJYj4eydfDRJTV+XIFk6dbPH/bY5gLnu3 h4nNsgLtOkn1OoedTe6QF4b48w== -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:58 2025 by rpki-client on console.sobornost.net