$ rpki-client -vvf rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft File: C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft (raw, json) Hash identifier: VvQGWlpk2ZSSJ1qJfJcs6YaGmH2psSCZJ239TjAXbTI= Subject key identifier: A9:33:1E:9B:70:52:CF:96:58:A9:C4:FA:07:B2:3F:43:E1:88:6E:B1 Authority key identifier: C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A Certificate issuer: /CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A Certificate serial: 5B63E59842570E4D0CE63AC0A10F45FFCA501340 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft Manifest number: 0200 Signing time: Mon 28 Apr 2025 06:33:06 +0000 Manifest this update: Mon 28 Apr 2025 06:28:06 +0000 Manifest next update: Tue 29 Apr 2025 08:26:06 +0000 Files and hashes: 1: 3134332e3133372e3138302e302f32322d3234203d3e203631383334.roa (hash: TybVhUEfgBREmL3NJsvdZgicXA/on5VwTBTGR0erAho=) 2: 3230312e3135302e3135322e302f32322d3234203d3e203631383334.roa (hash: bQb6OqUWfTVIWbNybHXXMLPCBzgY58GGYHDVLDz95Ug=) 3: 323830343a316131303a3a2f33322d3438203d3e203631383334.roa (hash: gkUxHP8r9+Fhu5QWQf9DujXsJaThMNFObjuKFQmBFk0=) 4: C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl (hash: PSxfHIB9TSF28kD8iIOZR9On9hgDGMkFFmQGEkrTJyg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:63:e5:98:42:57:0e:4d:0c:e6:3a:c0:a1:0f:45:ff:ca:50:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A Validity Not Before: Apr 28 06:28:06 2025 GMT Not After : Apr 29 08:26:06 2025 GMT Subject: CN=A9331E9B7052CF9658A9C4FA07B23F43E1886EB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bc:eb:4b:e6:57:8a:99:98:25:3b:d4:1e:a5: 1c:20:b7:3b:e5:d9:cc:f8:c4:cf:cf:db:a9:a6:84: a0:45:1e:d7:d5:85:48:d1:67:82:f8:55:3d:ca:fd: 38:96:cf:c0:ca:38:ae:e3:97:09:4b:7e:ef:21:d2: f7:7e:c0:36:65:1b:4f:f7:d3:24:6d:5f:68:58:89: 06:9e:59:c4:c8:15:59:5d:50:84:08:20:0d:08:5d: 26:36:81:ae:cb:8a:b3:72:49:39:d3:2f:a2:80:1f: 30:24:82:2b:e8:ce:ac:2e:4a:21:4a:43:12:30:3a: f7:d9:21:9d:64:d5:88:5f:04:dc:7c:68:f7:c4:73: 34:84:0d:f4:a7:2d:62:bc:09:73:08:b1:12:32:c9: 24:fc:1a:56:fa:16:74:d0:a1:a4:a3:99:bd:5e:a2: a0:c1:7a:44:da:7e:32:fc:f5:3b:57:14:03:68:e0: f4:53:c1:ea:72:1a:3c:39:7d:e5:fe:d2:00:35:b8: 71:70:ab:73:40:18:b4:6e:84:ff:58:2c:db:08:ac: f3:29:65:80:de:4c:c2:a1:93:de:46:14:55:72:c9: c8:3f:f1:ec:01:9f:47:56:87:cd:3d:10:ef:7a:48: 4b:68:08:47:0f:62:ab:87:23:40:59:81:e9:fd:06: 71:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:33:1E:9B:70:52:CF:96:58:A9:C4:FA:07:B2:3F:43:E1:88:6E:B1 X509v3 Authority Key Identifier: keyid:C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5b:bf:40:21:03:27:b0:52:93:f4:89:88:f2:d1:25:79:fc: b9:52:c1:bb:f2:8b:bc:ae:80:3e:9e:43:0e:72:cf:c1:97:13: 5b:13:bf:33:44:43:95:47:6f:ae:0b:42:fe:c9:2a:7b:b9:cd: 0a:3b:a2:7b:05:0b:68:40:dc:8f:58:64:e1:61:bf:5e:88:66: 5f:df:78:56:88:20:99:dc:f0:b9:f0:e4:60:7b:dc:a7:26:7c: 90:de:02:35:96:4e:85:4f:ba:30:25:af:bd:b2:dd:88:f5:53: f0:1b:1c:fa:f5:02:67:da:43:9a:d4:20:93:09:6b:7d:84:1e: 76:dc:a9:39:0a:66:34:bd:69:0c:4a:e1:92:37:4b:d3:38:c4: da:d9:4b:f1:28:9d:2e:13:f5:dc:c4:be:ce:f4:03:93:39:9b: 4f:cc:db:d4:d5:d2:99:57:ae:1f:ff:8f:5c:d4:ea:ed:e5:b6: 1e:43:c2:35:31:cb:3d:ed:0d:b0:9d:41:9b:37:5e:fe:a0:c6: c3:ba:15:a0:e1:74:11:af:e3:69:73:96:91:6e:76:85:8b:a2: c5:75:3b:16:d6:98:4c:fb:f2:88:9e:09:a8:24:51:1f:7a:17: 4e:35:de:12:7a:12:88:88:62:99:63:9c:60:51:5c:d1:2a:04: c9:64:0c:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUW2PlmEJXDk0M5jrAoQ9F/8pQE0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNkM2NUFBMEJBMzNDNjI2RkFCMEI5QzI2RTAyNkVC OTA4NDU0QTAeFw0yNTA0MjgwNjI4MDZaFw0yNTA0MjkwODI2MDZaMDMxMTAvBgNV BAMTKEE5MzMxRTlCNzA1MkNGOTY1OEE5QzRGQTA3QjIzRjQzRTE4ODZFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvOtL5leKmZglO9QepRwgtzvl 2cz4xM/P26mmhKBFHtfVhUjRZ4L4VT3K/TiWz8DKOK7jlwlLfu8h0vd+wDZlG0/3 0yRtX2hYiQaeWcTIFVldUIQIIA0IXSY2ga7LirNySTnTL6KAHzAkgivozqwuSiFK QxIwOvfZIZ1k1YhfBNx8aPfEczSEDfSnLWK8CXMIsRIyyST8Glb6FnTQoaSjmb1e oqDBekTafjL89TtXFANo4PRTwepyGjw5feX+0gA1uHFwq3NAGLRuhP9YLNsIrPMp ZYDeTMKhk95GFFVyycg/8ewBn0dWh809EO96SEtoCEcPYquHI0BZgen9BnFvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqTMem3BSz5ZYqcT6B7I/Q+GIbrEwHwYDVR0j BBgwFoAUwzbGWqC6M8Ym+rC5wm4CbrkIRUowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHBIQjFOV25iZVdBaEJLS1VvZFJrcDFVejFacjVQVDJBSlV4a21BMzFq b2svMS9DMzM2QzY1QUEwQkEzM0M2MjZGQUIwQjlDMjZFMDI2RUI5MDg0NTRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzMzZDNjVBQTBCQTMzQzYy NkZBQjBCOUMyNkUwMjZFQjkwODQ1NEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHBIQjFOV25iZVdBaEJLS1VvZFJrcDFVejFacjVQVDJBSlV4a21BMzFqb2svMS9D MzM2QzY1QUEwQkEzM0M2MjZGQUIwQjlDMjZFMDI2RUI5MDg0NTRBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATlu/QCEDJ7BSk/SJiPLRJXn8uVLBu/KLvK6APp5DDnLPwZcTWxO/M0RDlUdv rgtC/skqe7nNCjuiewULaEDcj1hk4WG/XohmX994VoggmdzwufDkYHvcpyZ8kN4C NZZOhU+6MCWvvbLdiPVT8Bsc+vUCZ9pDmtQgkwlrfYQedtypOQpmNL1pDErhkjdL 0zjE2tlL8SidLhP13MS+zvQDkzmbT8zb1NXSmVeuH/+PXNTq7eW2HkPCNTHLPe0N sJ1Bmzde/qDGw7oVoOF0Ea/jaXOWkW52hYuixXU7FtaYTPvyiJ4JqCRRH3oXTjXe EnoSiIhimWOcYFFc0SoEyWQMiw== -----END CERTIFICATE-----Generated at Mon Apr 28 08:22:27 2025 by rpki-client on console.sobornost.net