$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft File: 19260CFDC65E0274748EF44AA37858B8E34F0C25.mft (raw, json) Hash identifier: QmSn/AJXJfhtov3opDBlyHwHiC+cdW81yenqpBG770s= Subject key identifier: 3C:EE:6B:61:5E:A2:0F:76:4B:66:91:D3:C3:5D:C2:DE:BE:AE:31:EC Authority key identifier: 19:26:0C:FD:C6:5E:02:74:74:8E:F4:4A:A3:78:58:B8:E3:4F:0C:25 Certificate issuer: /CN=19260CFDC65E0274748EF44AA37858B8E34F0C25 Certificate serial: 12569445FDB4307BA552DD5BBF4D3BBE349EE680 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft Manifest number: AE Signing time: Mon 28 Apr 2025 18:21:16 +0000 Manifest this update: Mon 28 Apr 2025 18:16:16 +0000 Manifest next update: Tue 29 Apr 2025 18:59:16 +0000 Files and hashes: 1: 19260CFDC65E0274748EF44AA37858B8E34F0C25.crl (hash: 5hBLQzC9pGvvlQRQKwnEkEE9uqQ+TRmwclqZsYDaIso=) 2: 323830343a6339343a3a2f33322d3438203d3e20323632373230.roa (hash: p+GTiuuAWFu/8S3EJbQPooQG4K6WnOklzedG1N3D0sA=) 3: 3137372e382e3139322e302f32302d3234203d3e20323632373230.roa (hash: ZoJKSec6k6riogUVp0cHV/6gr5piXlvNZBydTk1teNw=) 4: 3138362e3139352e39362e302f32302d3234203d3e20323632373230.roa (hash: syT/Sbgem75/2+FPj7DQALiSeFmma+ew6V2XqT7gzqc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.crl rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 18:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:56:94:45:fd:b4:30:7b:a5:52:dd:5b:bf:4d:3b:be:34:9e:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19260CFDC65E0274748EF44AA37858B8E34F0C25 Validity Not Before: Apr 28 18:16:16 2025 GMT Not After : Apr 29 18:59:16 2025 GMT Subject: CN=3CEE6B615EA20F764B6691D3C35DC2DEBEAE31EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8b:1c:43:82:3a:0e:fc:e2:d1:08:c1:d9:f7: 72:a2:97:e6:d1:70:9e:1c:a7:31:89:17:dd:8e:f8: d5:38:68:96:d1:fb:b2:e0:d6:91:98:20:a3:d6:ff: 4c:25:55:7a:ee:8e:3b:b9:d6:b0:86:1f:a4:96:2f: 5d:94:f2:34:40:9d:fc:df:4b:14:21:d6:ec:0c:cc: ec:08:64:a3:36:92:3d:cc:c5:41:3e:1c:38:fe:da: 60:61:25:da:14:c5:63:d6:cf:7c:69:8d:3b:4a:38: b9:7d:e8:56:71:50:a7:1d:e0:2a:66:3e:41:25:ea: cc:a6:b6:85:5f:6e:d1:a8:86:ad:85:c5:35:44:f2: a3:43:9c:ba:8b:77:13:b0:95:80:d0:1a:0d:c1:02: 06:74:2c:7e:c9:79:e4:5b:80:e9:1e:2b:e8:42:b6: 36:2b:cd:9e:82:fd:24:87:60:80:27:64:b2:9e:d2: 5f:aa:e2:c5:4c:04:86:1a:ab:92:d3:31:e4:bc:36: 08:91:29:47:91:ab:5c:64:af:51:21:68:1e:25:e6: b4:ac:75:c9:50:9a:8b:60:ff:49:c1:d1:3e:64:2f: 67:da:14:cc:4f:c0:f5:5a:48:92:ba:70:65:1c:c5: c6:c0:0e:3a:32:60:f4:56:df:04:e9:74:8b:8d:9d: f8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EE:6B:61:5E:A2:0F:76:4B:66:91:D3:C3:5D:C2:DE:BE:AE:31:EC X509v3 Authority Key Identifier: keyid:19:26:0C:FD:C6:5E:02:74:74:8E:F4:4A:A3:78:58:B8:E3:4F:0C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:60:c5:db:0a:d2:65:71:ac:85:66:66:25:2d:0c:dd:c8:05: 7c:b3:07:90:65:67:d8:6b:35:95:cb:ef:fe:26:3a:1d:3a:25: ca:7e:64:42:32:4f:e2:18:76:fe:17:1e:ba:6b:a0:79:9e:c1: 8d:f2:84:07:fa:71:0f:64:e5:cd:16:1d:d8:0a:90:dc:a9:6a: 49:c2:e1:9b:8b:69:77:2b:29:8e:7f:5c:a1:e8:47:a0:17:8d: fd:c4:9a:9b:49:3a:83:52:ac:ec:37:05:e8:3a:70:f3:8f:21: 3a:aa:b6:0e:65:49:1d:98:53:08:9a:aa:04:4d:0f:ef:a3:2a: 8e:0a:9d:04:29:47:ec:e9:b2:80:89:e2:b3:2e:dc:bc:e9:a5: 26:c0:87:04:24:b1:44:ce:5d:ea:d8:e3:57:42:dd:ba:8a:0d: d5:a4:72:bf:ce:b3:f0:fa:70:56:29:90:2a:43:15:8b:01:90: cc:7d:5e:ea:72:d0:da:c9:fb:26:49:ba:72:4c:9d:85:f6:d5: a7:02:8d:fc:21:2f:c7:05:27:bd:68:8a:c8:70:d0:02:75:f2: ff:ca:b6:cd:b7:38:0a:bf:aa:c5:71:5a:59:12:53:49:80:d5: 6f:a2:e7:23:9f:36:f8:4d:c7:39:bb:37:bd:cb:60:d9:4e:db: 46:e5:06:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUElaURf20MHulUt1bv007vjSe5oAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkyNjBDRkRDNjVFMDI3NDc0OEVGNDRBQTM3ODU4QjhF MzRGMEMyNTAeFw0yNTA0MjgxODE2MTZaFw0yNTA0MjkxODU5MTZaMDMxMTAvBgNV BAMTKDNDRUU2QjYxNUVBMjBGNzY0QjY2OTFEM0MzNURDMkRFQkVBRTMxRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYixxDgjoO/OLRCMHZ93Kil+bR cJ4cpzGJF92O+NU4aJbR+7Lg1pGYIKPW/0wlVXrujju51rCGH6SWL12U8jRAnfzf SxQh1uwMzOwIZKM2kj3MxUE+HDj+2mBhJdoUxWPWz3xpjTtKOLl96FZxUKcd4Cpm PkEl6symtoVfbtGohq2FxTVE8qNDnLqLdxOwlYDQGg3BAgZ0LH7JeeRbgOkeK+hC tjYrzZ6C/SSHYIAnZLKe0l+q4sVMBIYaq5LTMeS8NgiRKUeRq1xkr1EhaB4l5rSs dclQmotg/0nB0T5kL2faFMxPwPVaSJK6cGUcxcbADjoyYPRW3wTpdIuNnfiXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPO5rYV6iD3ZLZpHTw13C3r6uMewwHwYDVR0j BBgwFoAUGSYM/cZeAnR0jvRKo3hYuONPDCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFEyVG9xUDJyR0t0M3pIZ1RHNldQTnRDNm5pMUMyZlNmbmUxS0xqRWF4 S2gvMC8xOTI2MENGREM2NUUwMjc0NzQ4RUY0NEFBMzc4NThCOEUzNEYwQzI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MjYwQ0ZEQzY1RTAyNzQ3 NDhFRjQ0QUEzNzg1OEI4RTM0RjBDMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFEyVG9xUDJyR0t0M3pIZ1RHNldQTnRDNm5pMUMyZlNmbmUxS0xqRWF4S2gvMC8x OTI2MENGREM2NUUwMjc0NzQ4RUY0NEFBMzc4NThCOEUzNEYwQzI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnWDF2wrSZXGshWZmJS0M3cgFfLMHkGVn2Gs1lcvv/iY6HTolyn5kQjJP4hh2 /hceumugeZ7BjfKEB/pxD2TlzRYd2AqQ3KlqScLhm4tpdyspjn9coehHoBeN/cSa m0k6g1Ks7DcF6Dpw848hOqq2DmVJHZhTCJqqBE0P76MqjgqdBClH7OmygInisy7c vOmlJsCHBCSxRM5d6tjjV0LduooN1aRyv86z8PpwVimQKkMViwGQzH1e6nLQ2sn7 Jkm6ckydhfbVpwKN/CEvxwUnvWiKyHDQAnXy/8q2zbc4Cr+qxXFaWRJTSYDVb6Ln I582+E3HObs3vctg2U7bRuUG6w== -----END CERTIFICATE-----Generated at Mon Apr 28 20:06:37 2025 by rpki-client on console.sobornost.net