$ rpki-client -vvf rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft File: 314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft (raw, json) Hash identifier: UJIzRWJKsUATxsKYed3vDHIUt9Scc+BY7iF+1BhwSaA= Subject key identifier: 9A:7E:76:8F:FE:74:BC:58:B7:C5:FA:4E:D9:09:43:56:87:3D:39:3D Authority key identifier: 31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB Certificate issuer: /CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB Certificate serial: 4D0FBA0F59D53D624AE98FB77F5146FB6997FE52 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft Manifest number: 01FE Signing time: Thu 24 Apr 2025 09:19:17 +0000 Manifest this update: Thu 24 Apr 2025 09:14:17 +0000 Manifest next update: Fri 25 Apr 2025 10:37:17 +0000 Files and hashes: 1: 323830343a3561343a3a2f33322d3430203d3e20323632353331.roa (hash: gm33hy7PVx4pt79hAwr1MSkvUr+W0fBAGRIORciWQ/U=) 2: 3137372e35352e3230382e302f32302d3234203d3e20323632353331.roa (hash: URz6JtOdk6yC4FUu3xELECMy9Zk+mnCtQPhECGH9DrU=) 3: 314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl (hash: GIikZvfPQUGb6kLpSOjvunIx3zshCgO8sS6elJfRmAA=) 4: 3137372e35352e3232332e312f33322d3332203d3e20323632353331.roa (hash: aZFVOMgpGQ5J4rg1azWk8+K2uFFGkeiysjVEOiSdFkY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 10:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:0f:ba:0f:59:d5:3d:62:4a:e9:8f:b7:7f:51:46:fb:69:97:fe:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB Validity Not Before: Apr 24 09:14:17 2025 GMT Not After : Apr 25 10:37:17 2025 GMT Subject: CN=9A7E768FFE74BC58B7C5FA4ED9094356873D393D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fe:0a:d3:a8:2c:f6:ec:16:d1:56:0d:03:9e: 60:a5:35:98:4b:89:ff:97:b3:37:f7:60:ff:38:74: 32:99:4a:1e:c1:8b:04:e4:30:3a:8c:d2:99:5f:11: fa:85:1e:68:d9:77:37:9f:64:6c:f6:2c:7c:8e:79: db:4d:d1:39:c0:3d:91:8a:b5:3f:b2:5b:ff:e8:c3: 98:be:64:7c:f8:54:ba:5f:8f:f5:60:15:fa:52:85: 2e:64:18:0e:2b:f2:ec:5c:a3:a4:4c:f5:f4:51:37: f0:5f:ea:39:99:7e:38:ee:5c:80:2d:9c:a2:75:35: 01:0c:87:06:dd:72:11:a3:76:72:dc:0d:d5:12:2f: b6:c1:18:78:8d:6f:20:68:0c:7d:d7:3f:fe:89:69: fa:93:a6:5e:8a:0c:06:5e:5c:eb:8d:b7:7f:0b:05: 31:b0:33:60:04:42:a3:dc:04:24:3e:55:6d:ea:dd: 92:9a:67:35:c1:7b:6f:7d:2a:4e:37:34:5b:85:e4: 79:b0:30:9f:ee:2b:e2:ae:c3:00:c1:0d:b9:6f:92: 5b:47:20:d7:45:3e:1c:c2:fc:a0:3f:61:fa:c6:4a: 62:aa:91:93:bd:6e:32:92:1a:e5:75:2a:08:d0:6d: 3b:f2:09:47:46:75:74:40:c0:1a:57:19:3f:c9:0c: 26:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7E:76:8F:FE:74:BC:58:B7:C5:FA:4E:D9:09:43:56:87:3D:39:3D X509v3 Authority Key Identifier: keyid:31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:33:85:07:5e:88:8b:5f:41:68:d8:33:d7:80:4b:94:b6:bf: 8f:43:f1:33:89:93:58:fa:a2:91:24:1b:34:ca:82:66:a9:22: bf:e3:82:ab:3e:bf:47:b8:9b:e7:36:10:96:d8:93:c8:73:fa: 07:3f:a8:63:15:ad:d7:51:2a:5a:50:89:0c:77:57:c9:c8:97: f0:b4:60:c2:18:fa:21:1a:26:72:0b:4d:64:8c:fc:1b:2c:9c: 63:df:cd:02:1d:63:b1:fc:84:ba:dd:27:46:a8:ca:f0:7d:be: d6:eb:3e:ec:6b:ec:6e:4b:00:11:9a:63:31:55:56:d8:92:8f: 37:ce:f6:46:88:9f:f9:c0:06:ea:c4:bc:e9:41:89:58:dc:4c: 0b:74:79:2c:20:bc:33:f6:1a:45:0a:9a:c3:3c:ec:f3:95:55: 82:1f:b0:0e:2d:38:df:1e:c3:64:5d:e6:21:ba:32:ad:13:77: bc:d7:06:14:b4:28:20:d6:f5:ef:53:04:97:d2:8c:7e:e8:2b: 7f:8e:96:b7:b4:49:e3:bc:41:b2:48:04:ff:13:f0:be:cc:65: 00:41:35:f3:3e:fb:90:c0:e2:41:47:c8:cc:e7:78:6f:66:4b: be:8b:be:61:c9:d9:44:1b:50:df:9d:00:4a:9e:f8:d1:9c:29: 9e:d3:c8:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTQ+6D1nVPWJK6Y+3f1FG+2mX/lIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0QTg2MDkzNTRDMkUzQzE3MjU4OTNENTIxRDM1Q0M1 RkM0QUZEQjAeFw0yNTA0MjQwOTE0MTdaFw0yNTA0MjUxMDM3MTdaMDMxMTAvBgNV BAMTKDlBN0U3NjhGRkU3NEJDNThCN0M1RkE0RUQ5MDk0MzU2ODczRDM5M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/grTqCz27BbRVg0DnmClNZhL if+Xszf3YP84dDKZSh7BiwTkMDqM0plfEfqFHmjZdzefZGz2LHyOedtN0TnAPZGK tT+yW//ow5i+ZHz4VLpfj/VgFfpShS5kGA4r8uxco6RM9fRRN/Bf6jmZfjjuXIAt nKJ1NQEMhwbdchGjdnLcDdUSL7bBGHiNbyBoDH3XP/6JafqTpl6KDAZeXOuNt38L BTGwM2AEQqPcBCQ+VW3q3ZKaZzXBe299Kk43NFuF5HmwMJ/uK+KuwwDBDblvkltH INdFPhzC/KA/YfrGSmKqkZO9bjKSGuV1KgjQbTvyCUdGdXRAwBpXGT/JDCZBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmn52j/50vFi3xfpO2QlDVoc9OT0wHwYDVR0j BBgwFoAUMUqGCTVMLjwXJYk9Uh01zF/Er9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHVNSlFwaGZYZGE4RjhNbTRySzZUc296Z2pkOExnWG42QWMzN3NaYkxY S20vMS8zMTRBODYwOTM1NEMyRTNDMTcyNTg5M0Q1MjFEMzVDQzVGQzRBRkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNEE4NjA5MzU0QzJFM0Mx NzI1ODkzRDUyMUQzNUNDNUZDNEFGREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHVNSlFwaGZYZGE4RjhNbTRySzZUc296Z2pkOExnWG42QWMzN3NaYkxYS20vMS8z MTRBODYwOTM1NEMyRTNDMTcyNTg5M0Q1MjFEMzVDQzVGQzRBRkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAADOFB16Ii19BaNgz14BLlLa/j0PxM4mTWPqikSQbNMqCZqkiv+OCqz6/R7ib 5zYQltiTyHP6Bz+oYxWt11EqWlCJDHdXyciX8LRgwhj6IRomcgtNZIz8GyycY9/N Ah1jsfyEut0nRqjK8H2+1us+7GvsbksAEZpjMVVW2JKPN872Roif+cAG6sS86UGJ WNxMC3R5LCC8M/YaRQqawzzs85VVgh+wDi043x7DZF3mIboyrRN3vNcGFLQoINb1 71MEl9KMfugrf46Wt7RJ47xBskgE/xPwvsxlAEE18z77kMDiQUfIzOd4b2ZLvou+ YcnZRBtQ350ASp740ZwpntPISg== -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:31 2025 by rpki-client on console.sobornost.net