$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft File: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft (raw, json) Hash identifier: XbpInWMnYPginc1fkJAqHHzQjlmlXtUItp7x6AouyGo= Subject key identifier: A3:C1:F8:79:FB:97:DB:59:4D:CB:C8:E5:0E:67:0B:26:EF:AA:A5:A0 Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 Certificate issuer: /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Certificate serial: 5DF3CE2B1A525191EE11CA2D5DAA969AB543DEE6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject info access: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft Manifest number: 0213 Signing time: Mon 28 Apr 2025 04:54:27 +0000 Manifest this update: Mon 28 Apr 2025 04:49:27 +0000 Manifest next update: Tue 29 Apr 2025 08:31:27 +0000 Files and hashes: 1: 323830343a313335303a3a2f33322d3438203d3e20323633353238.roa (hash: 7pAcbuLrpIB62LfP66+E2nxWBNHiZ+nJQEK/Jwqg2Yk=) 2: 3137302e3235342e342e302f32322d3332203d3e20323633353238.roa (hash: wUe2gxXB9BzZElmcbKo0sOxC2T6UaUbTwkyXs+Wd33s=) 3: 33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl (hash: R+7I2LcXQAVU/oF9BTAN2oAC4IXOD9SkpJqB6U/0/5w=) 4: 3139312e3235332e36342e302f32322d3234203d3e20323633353238.roa (hash: QFeGo9z+xnDn9TfvQo7+CzLYmFi4mQOMZ53KXPIhFAs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f3:ce:2b:1a:52:51:91:ee:11:ca:2d:5d:aa:96:9a:b5:43:de:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780 Validity Not Before: Apr 28 04:49:27 2025 GMT Not After : Apr 29 08:31:27 2025 GMT Subject: CN=A3C1F879FB97DB594DCBC8E50E670B26EFAAA5A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:07:4e:ac:ab:f4:36:99:71:c8:73:51:78: 4d:24:e7:99:a2:11:c9:9b:0a:69:2a:41:cd:ba:77: 69:0e:f8:92:df:70:c2:6e:ee:18:1d:3d:80:ba:ed: e3:f6:37:9c:ee:0a:f1:3b:88:21:c7:af:93:02:54: 22:01:92:ed:ed:97:f0:3a:a2:5a:44:77:5b:ee:8d: 4f:87:55:32:8c:69:ba:e8:03:9e:4b:79:5d:d3:54: f0:2a:39:0c:e4:0e:88:bd:4e:c1:3e:9d:22:f8:46: da:dc:00:63:a4:91:cc:a8:e1:0d:4f:2c:f4:e2:fb: 73:b2:36:1c:d0:65:3e:bd:a3:a7:de:de:c7:5c:9e: 9b:a7:23:c8:15:54:7f:a4:bf:f2:26:6d:6d:58:e0: b4:9a:e7:1d:b5:aa:6e:bc:1f:c0:5a:65:28:e3:7e: 30:77:0d:7d:34:0b:d5:39:e4:e3:3d:d3:4a:14:3d: c7:0d:3f:29:65:b2:83:0f:36:2f:3a:7f:08:5f:d0: 67:22:f3:bb:88:49:92:27:d6:d2:ee:3c:ae:82:3e: 3b:5c:b8:93:c1:de:86:b2:42:a3:12:e3:51:c1:1e: 0b:0b:b7:6f:94:f6:86:41:cb:fd:f6:0c:69:92:5e: c6:c2:00:1e:75:c4:d1:a1:a9:c9:1e:eb:b6:d0:40: a5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C1:F8:79:FB:97:DB:59:4D:CB:C8:E5:0E:67:0B:26:EF:AA:A5:A0 X509v3 Authority Key Identifier: keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d5:fc:8f:2f:17:8b:b1:73:51:b3:fc:86:4d:e1:21:30:8e: 4e:9a:aa:c6:c1:1c:5c:3e:63:69:87:f7:44:cb:2b:5c:04:6a: 9b:f3:2c:e2:eb:74:1f:a0:2c:3f:b9:2a:12:21:96:b6:e9:87: 9c:f5:3d:b3:22:6b:4a:ec:20:e5:8f:39:b3:fe:7c:fc:68:61: dc:5f:dd:d9:5d:9b:19:f7:c9:a5:bf:96:f4:8c:77:91:22:d5: 86:e6:1e:ee:14:f4:e6:c0:ff:6a:90:ab:fe:ba:12:2a:45:52: e9:f3:f3:bc:10:65:99:d4:28:d9:2d:d5:8d:d6:5c:1f:26:5d: 7e:28:9c:77:e2:9c:73:41:c4:45:11:64:bb:a4:c2:92:97:18: 51:e4:ae:0c:c4:23:11:16:6a:c1:29:9f:1a:ff:5d:1b:3c:ff: 8c:17:58:3d:7f:e4:eb:c4:1f:fd:9e:f2:ed:db:76:a0:fb:e6: 71:39:73:fa:f4:b8:f1:72:c3:1e:28:19:33:cf:04:1b:1c:df: 5c:49:f5:43:e1:c7:de:1d:4b:50:66:a2:ac:dd:43:35:ca:4f: c3:49:e8:1b:49:55:21:f8:1f:11:76:72:23:bd:e3:35:73:25: 1a:7f:24:4b:04:b5:6f:c2:76:68:e2:b7:d4:c6:80:6e:d7:66: bf:5d:5d:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXfPOKxpSUZHuEcotXaqWmrVD3uYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlCOEVBRTFBQjhCRUU0MTk4Qjg3MDMxQ0ZFOEZF REJFNzc4MDAeFw0yNTA0MjgwNDQ5MjdaFw0yNTA0MjkwODMxMjdaMDMxMTAvBgNV BAMTKEEzQzFGODc5RkI5N0RCNTk0RENCQzhFNTBFNjcwQjI2RUZBQUE1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fgdOrKv0NplxyHNReE0k55mi EcmbCmkqQc26d2kO+JLfcMJu7hgdPYC67eP2N5zuCvE7iCHHr5MCVCIBku3tl/A6 olpEd1vujU+HVTKMabroA55LeV3TVPAqOQzkDoi9TsE+nSL4RtrcAGOkkcyo4Q1P LPTi+3OyNhzQZT69o6fe3sdcnpunI8gVVH+kv/ImbW1Y4LSa5x21qm68H8BaZSjj fjB3DX00C9U55OM900oUPccNPyllsoMPNi86fwhf0Gci87uISZIn1tLuPK6CPjtc uJPB3oayQqMS41HBHgsLt2+U9oZBy/32DGmSXsbCAB51xNGhqcke67bQQKVTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUo8H4efuX21lNy8jlDmcLJu+qpaAwHwYDVR0j BBgwFoAUM9mbjq4auL7kGYuHAxz+j+2+d4AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5 RnkvMC8zM0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5QjhFQUUxQUI4QkVF NDE5OEI4NzAzMUNGRThGRURCRTc3ODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG1pWm5RNUd1RkJWaHZvYkJoY2ZZN2FSOUduMTJzYUhzU2pnVHVTNWJ5RnkvMC8z M0Q5OUI4RUFFMUFCOEJFRTQxOThCODcwMzFDRkU4RkVEQkU3NzgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACdX8jy8Xi7FzUbP8hk3hITCOTpqqxsEcXD5jaYf3RMsrXARqm/Ms4ut0H6As P7kqEiGWtumHnPU9syJrSuwg5Y85s/58/Ghh3F/d2V2bGffJpb+W9Ix3kSLVhuYe 7hT05sD/apCr/roSKkVS6fPzvBBlmdQo2S3VjdZcHyZdfiicd+Kcc0HERRFku6TC kpcYUeSuDMQjERZqwSmfGv9dGzz/jBdYPX/k68Qf/Z7y7dt2oPvmcTlz+vS48XLD HigZM88EGxzfXEn1Q+HH3h1LUGairN1DNcpPw0noG0lVIfgfEXZyI73jNXMlGn8k SwS1b8J2aOK31MaAbtdmv11dnQ== -----END CERTIFICATE-----Generated at Mon Apr 28 08:22:27 2025 by rpki-client on console.sobornost.net