$ rpki-client -vvf rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft File: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft (raw, json) Hash identifier: /LoP+zYst6/xkMMRk9OGMfzw8dz6tICnx2JOA2epewY= Subject key identifier: EF:7F:3A:9B:74:83:44:01:4B:08:B8:3C:58:C6:3E:9D:60:B4:1D:AA Authority key identifier: 40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE Certificate issuer: /CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Certificate serial: 7B763B7B0916B21F0FB52D55D472893471ACA9A6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft Manifest number: 12 Signing time: Mon 28 Apr 2025 09:14:37 +0000 Manifest this update: Mon 28 Apr 2025 09:09:37 +0000 Manifest next update: Tue 29 Apr 2025 10:19:37 +0000 Files and hashes: 1: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl (hash: HAhlrD2Tl//ykqIrnMcUFO5vWpCKMUDiuj2WCZ1lzG8=) 2: 34352e3138392e33342e302f32342d3234203d3e20323734373633.roa (hash: +8SomA8CorpblFccJ5hAIRLE8zYsycHTpbXTAfqfp8w=) 3: 34352e3138392e33352e302f32342d3234203d3e20323734373633.roa (hash: 1p2OZ2GU51vARCDd2EzB05jBSXBxDQiaqictJ71WwZg=) 4: 34352e3138392e33322e302f32342d3234203d3e20323734373633.roa (hash: f9h0xJPe6EC4HPN8Q4Vq2DpTHhojeqACv3nqBQ14BsY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:76:3b:7b:09:16:b2:1f:0f:b5:2d:55:d4:72:89:34:71:ac:a9:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Validity Not Before: Apr 28 09:09:37 2025 GMT Not After : Apr 29 10:19:37 2025 GMT Subject: CN=EF7F3A9B748344014B08B83C58C63E9D60B41DAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:80:19:1f:71:b9:18:00:78:d0:ea:a3:29:e5: 58:5d:3b:8d:9c:40:81:00:57:45:64:e1:40:0f:b4: ad:d4:44:66:0e:24:75:ae:c6:d9:55:63:1e:ea:25: bf:d6:50:09:51:15:e0:e0:a9:8e:5f:86:d2:5e:b8: 82:cb:0d:da:33:52:a3:fc:80:49:c1:26:30:68:42: fb:b6:1b:65:d0:56:6a:f3:bb:24:72:1a:25:be:d9: f8:8b:8d:6c:c9:ba:23:82:7e:75:ee:eb:2a:1a:d9: 0e:f4:8a:22:f1:0a:9a:8c:47:ae:eb:77:52:98:10: ee:e5:9d:db:df:9f:f5:53:1c:76:2a:46:a9:99:1d: 2a:65:8f:0c:d5:65:d3:03:00:a5:8b:97:bf:32:11: 06:b7:f7:77:92:97:7e:f8:29:45:80:bb:b3:ae:5d: 72:d1:01:fc:1d:1c:01:14:30:16:3c:fa:f3:f2:cf: f2:42:69:73:c1:fe:b6:b8:9f:73:77:eb:69:c5:05: 9c:d6:3a:17:0e:33:32:01:7a:2f:48:99:c3:ee:83: 83:c5:c2:5a:e8:53:1b:86:69:56:b9:a2:58:21:bd: b5:ab:4c:05:ac:fc:c8:e6:fa:06:6e:e4:ae:b6:80: cb:ac:60:d0:86:68:c0:6c:c4:af:a3:be:85:6b:73: cd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7F:3A:9B:74:83:44:01:4B:08:B8:3C:58:C6:3E:9D:60:B4:1D:AA X509v3 Authority Key Identifier: keyid:40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5b:a0:82:b6:8a:57:06:d9:91:39:df:39:94:8f:f0:c5:ae: 20:a5:f6:b9:83:94:31:b2:17:57:d5:a2:29:1d:71:06:5a:ba: 40:45:31:fd:dc:bd:bc:03:fb:89:88:b0:28:5f:bc:4a:fe:97: 11:c8:7c:0c:3d:8f:5c:d7:fb:bb:07:97:ea:4c:fb:73:9d:c7: bb:a8:89:bf:7f:47:ba:d3:d7:18:6b:46:0c:e7:f6:7b:42:39: dc:2f:80:b4:84:97:82:ff:0c:78:cd:7c:e6:2e:3c:17:d1:96: 53:29:a3:20:c1:41:76:3f:56:00:05:31:c7:06:85:04:68:bc: 53:f1:34:44:42:72:cf:f3:ff:80:e6:58:34:1d:46:11:97:42: 40:21:67:d9:e2:c8:91:c6:c3:c9:ac:75:a4:ff:da:4a:9c:a4: be:c8:5b:c7:28:6d:ed:c7:ad:50:83:e2:b1:eb:40:49:9c:05: 4e:55:58:60:dc:b6:7b:00:3a:69:de:2e:56:d5:8f:c9:6b:a9: b5:26:3a:f1:72:5a:50:fb:17:7f:15:48:15:1f:a5:5c:5f:4b: 69:ab:0d:8e:b5:a3:4e:dc:28:27:82:b5:32:4c:de:e4:9d:08: 66:43:72:03:97:bb:d5:4c:c0:6f:e7:69:9f:2d:be:e5:e2:cc: ba:04:8a:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe3Y7ewkWsh8PtS1V1HKJNHGsqaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCQjE0QTJGRDhCODExMDMwNDJCRjMyRkFDOUIyRDkw QUNGOEFGRTAeFw0yNTA0MjgwOTA5MzdaFw0yNTA0MjkxMDE5MzdaMDMxMTAvBgNV BAMTKEVGN0YzQTlCNzQ4MzQ0MDE0QjA4QjgzQzU4QzYzRTlENjBCNDFEQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwgBkfcbkYAHjQ6qMp5VhdO42c QIEAV0Vk4UAPtK3URGYOJHWuxtlVYx7qJb/WUAlRFeDgqY5fhtJeuILLDdozUqP8 gEnBJjBoQvu2G2XQVmrzuyRyGiW+2fiLjWzJuiOCfnXu6yoa2Q70iiLxCpqMR67r d1KYEO7lndvfn/VTHHYqRqmZHSpljwzVZdMDAKWLl78yEQa393eSl374KUWAu7Ou XXLRAfwdHAEUMBY8+vPyz/JCaXPB/ra4n3N362nFBZzWOhcOMzIBei9ImcPug4PF wlroUxuGaVa5olghvbWrTAWs/Mjm+gZu5K62gMusYNCGaMBsxK+jvoVrc837AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7386m3SDRAFLCLg8WMY+nWC0HaowHwYDVR0j BBgwFoAUQLsUov2LgRAwQr8y+smy2QrPiv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2 NjIvMC80MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQkIxNEEyRkQ4QjgxMTAz MDQyQkYzMkZBQzlCMkQ5MEFDRjhBRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2NjIvMC80 MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADluggraKVwbZkTnfOZSP8MWuIKX2uYOUMbIXV9WiKR1xBlq6QEUx/dy9vAP7 iYiwKF+8Sv6XEch8DD2PXNf7uweX6kz7c53Hu6iJv39HutPXGGtGDOf2e0I53C+A tISXgv8MeM185i48F9GWUymjIMFBdj9WAAUxxwaFBGi8U/E0REJyz/P/gOZYNB1G EZdCQCFn2eLIkcbDyax1pP/aSpykvshbxyht7cetUIPisetASZwFTlVYYNy2ewA6 ad4uVtWPyWuptSY68XJaUPsXfxVIFR+lXF9LaasNjrWjTtwoJ4K1Mkze5J0IZkNy A5e71UzAb+dpny2+5eLMugSK8A== -----END CERTIFICATE-----Generated at Mon Apr 28 10:49:18 2025 by rpki-client on console.sobornost.net