$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft File: 694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft (raw, json) Hash identifier: ZrL2aOFpxyVOsp9HcV+OIHcdFE2CReodlNaZ/BlpQRs= Subject key identifier: 3F:DE:1B:28:C8:0C:EB:14:1C:4A:5F:7F:25:D3:59:1E:A6:93:C2:F3 Authority key identifier: 69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53 Certificate issuer: /CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053 Certificate serial: 4D3523C224C1EC995B625E57925649FE04D0B2FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer Subject info access: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft Manifest number: 0217 Signing time: Sun 27 Apr 2025 00:04:22 +0000 Manifest this update: Sat 26 Apr 2025 23:59:22 +0000 Manifest next update: Mon 28 Apr 2025 03:21:22 +0000 Files and hashes: 1: 694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl (hash: QIHAKo8pWqPchVylBN7WS5jFHQkIqB5GAFglpjrdxY0=) 2: 3138362e3233332e3139322e302f32312d3332203d3e20323632373931.roa (hash: 2UpSecyAisRwwZmh8G4q0Q1cQ+fFBv72ScD9WoDX2YI=) 3: 3136382e302e3130382e302f32322d3234203d3e20323632373931.roa (hash: k8HqAus+J5kwU48rjZ1/nzMfEIyIGN1Y/R4QhgWjaa4=) 4: 323830343a3232303a3a2f33322d313238203d3e20323632373931.roa (hash: /tPSWICRQPSUfZn8DNklPz80ApasR9GTjDelvSXwHCc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 03:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:35:23:c2:24:c1:ec:99:5b:62:5e:57:92:56:49:fe:04:d0:b2:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053 Validity Not Before: Apr 26 23:59:22 2025 GMT Not After : Apr 28 03:21:22 2025 GMT Subject: CN=3FDE1B28C80CEB141C4A5F7F25D3591EA693C2F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:2e:e9:fb:a8:7d:71:24:84:05:a6:ec:03: 10:d6:72:6a:8c:84:7b:1a:87:e9:1c:e7:2b:89:7d: 74:7c:28:95:cd:9b:63:27:14:c7:60:d0:ef:de:9d: ed:dc:29:14:9f:63:ab:2b:3a:59:6d:56:0c:c7:62: c2:f1:5e:41:ee:9c:fe:41:8c:5c:1d:9f:1f:50:d1: 81:32:28:66:42:f1:36:fd:67:f3:4b:c5:76:8d:07: 20:19:36:0e:93:d0:06:fe:ff:f0:11:3c:33:e7:27: e1:f9:4f:66:99:2f:42:a4:1b:b5:f6:a3:c9:2a:ab: 5d:1d:2f:2e:25:39:f0:2a:d0:cd:b5:57:1d:da:c3: 2e:14:71:3f:d2:93:41:e1:97:18:ed:32:80:b6:34: 07:9e:18:11:fc:64:a3:1b:35:10:0d:dd:ca:b8:d8: 6d:22:cc:6e:35:eb:3e:0c:c8:94:40:12:48:8a:83: 19:21:46:c1:72:0f:b2:db:66:3f:33:e5:27:bb:15: 54:81:48:6f:1f:a7:81:92:7b:53:34:de:2a:b4:6f: be:15:a0:0b:bc:da:de:a5:48:2c:cc:ef:1c:8e:71: c7:c6:c1:b5:c2:23:a6:94:50:95:e2:29:41:9f:8e: 8e:7a:56:47:ac:23:dc:2f:03:87:5f:71:d9:f0:42: 49:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DE:1B:28:C8:0C:EB:14:1C:4A:5F:7F:25:D3:59:1E:A6:93:C2:F3 X509v3 Authority Key Identifier: keyid:69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:81:1f:b8:b6:f7:c9:2c:7d:76:8b:a4:d8:35:9e:4d:b5:e5: 19:ec:9b:0a:c3:7d:02:d5:33:42:90:26:0d:aa:b1:5e:f2:e6: ef:55:62:b1:47:9c:7d:dc:2d:35:43:ba:d5:01:01:f8:b6:ae: a4:d2:71:76:31:3c:f2:01:be:3d:d2:ce:59:79:19:fd:14:8e: 31:1e:35:8d:eb:8f:da:41:96:67:c6:85:47:39:3d:11:c9:c8: 60:35:b0:67:6a:84:c7:91:8a:59:71:76:7a:cc:58:44:03:5b: 9b:51:e6:78:26:f1:b9:e3:17:eb:44:2a:01:16:59:11:c8:ea: 61:b0:6d:6f:cc:3b:67:01:cd:26:8c:5b:b6:62:74:3e:67:3e: 8a:50:dd:23:fd:f1:1f:3e:13:63:79:06:fd:ef:9d:d3:31:1e: 36:d9:e7:62:0d:32:29:2d:e6:37:9a:50:79:72:dd:1d:bf:7a: f2:7a:57:53:3d:f1:01:b9:a8:08:e2:0d:af:f9:08:12:41:60: d2:77:3d:09:ed:e6:e3:58:74:8f:86:0d:47:06:19:34:d9:4d: 46:72:60:e7:51:d4:bd:86:80:ae:a2:f5:63:6f:e5:bf:1a:b6: 66:2d:61:a0:65:c8:83:79:1d:f3:2c:b8:be:dc:c1:55:06:8d: 59:2a:00:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTTUjwiTB7JlbYl5XklZJ/gTQsv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk0QkU0NTQ3OUIxMEJGQ0E3QkI0MEE0NEMwNkI1MUQx NUYyRDA1MzAeFw0yNTA0MjYyMzU5MjJaFw0yNTA0MjgwMzIxMjJaMDMxMTAvBgNV BAMTKDNGREUxQjI4QzgwQ0VCMTQxQzRBNUY3RjI1RDM1OTFFQTY5M0MyRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4pC7p+6h9cSSEBabsAxDWcmqM hHsah+kc5yuJfXR8KJXNm2MnFMdg0O/ene3cKRSfY6srOlltVgzHYsLxXkHunP5B jFwdnx9Q0YEyKGZC8Tb9Z/NLxXaNByAZNg6T0Ab+//ARPDPnJ+H5T2aZL0KkG7X2 o8kqq10dLy4lOfAq0M21Vx3awy4UcT/Sk0HhlxjtMoC2NAeeGBH8ZKMbNRAN3cq4 2G0izG416z4MyJRAEkiKgxkhRsFyD7LbZj8z5Se7FVSBSG8fp4GSe1M03iq0b74V oAu82t6lSCzM7xyOccfGwbXCI6aUUJXiKUGfjo56VkesI9wvA4dfcdnwQkmTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUP94bKMgM6xQcSl9/JdNZHqaTwvMwHwYDVR0j BBgwFoAUaUvkVHmxC/ynu0CkTAa1HRXy0FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM29tREIzenhKVzFlN25NWnRKWlZvZWVrMkpUTUwzNHgxeDJxMXRLbm1n WFEvMC82OTRCRTQ1NDc5QjEwQkZDQTdCQjQwQTQ0QzA2QjUxRDE1RjJEMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NEJFNDU0NzlCMTBCRkNB N0JCNDBBNDRDMDZCNTFEMTVGMkQwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M29tREIzenhKVzFlN25NWnRKWlZvZWVrMkpUTUwzNHgxeDJxMXRLbm1nWFEvMC82 OTRCRTQ1NDc5QjEwQkZDQTdCQjQwQTQ0QzA2QjUxRDE1RjJEMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhYEfuLb3ySx9douk2DWeTbXlGeybCsN9AtUzQpAmDaqxXvLm71VisUecfdwt NUO61QEB+LaupNJxdjE88gG+PdLOWXkZ/RSOMR41jeuP2kGWZ8aFRzk9EcnIYDWw Z2qEx5GKWXF2esxYRANbm1HmeCbxueMX60QqARZZEcjqYbBtb8w7ZwHNJoxbtmJ0 Pmc+ilDdI/3xHz4TY3kG/e+d0zEeNtnnYg0yKS3mN5pQeXLdHb968npXUz3xAbmo COINr/kIEkFg0nc9Ce3m41h0j4YNRwYZNNlNRnJg51HUvYaArqL1Y2/lvxq2Zi1h oGXIg3kd8yy4vtzBVQaNWSoAjA== -----END CERTIFICATE-----Generated at Sun Apr 27 05:33:39 2025 by rpki-client on console.sobornost.net