$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft File: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft (raw, json) Hash identifier: jqwV/t4txnEgN+ajV3A47cziWT+fMzE9ZYgRvSyuTiY= Subject key identifier: A1:8A:B3:8B:B4:7E:91:E4:EA:33:52:7E:D4:F0:8F:69:97:A3:39:1B Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 Certificate issuer: /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Certificate serial: 1BF95420584430EB4F30CBAF307167BE4B7753AF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft Manifest number: 01CE Signing time: Sat 26 Apr 2025 11:43:49 +0000 Manifest this update: Sat 26 Apr 2025 11:38:49 +0000 Manifest next update: Sun 27 Apr 2025 12:51:49 +0000 Files and hashes: 1: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl (hash: Q05rn15jfksIbaLazrU1I1WkP4UjNPiPlYfjoJZxuVc=) 2: 3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (hash: WqEYa1LHKO/TdU02rXFXLwns464zC4VFuzHF7wOxsfA=) 3: 3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (hash: Bv6Lyj5+VhdPqvZ/TGH9M1sdk0ISaNwfb7BbI7c/FPE=) 4: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (hash: 0xs1tTdh2Qke0fip6d1TEfj28igzF6NdDvyXj3IPtmI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Apr 2025 12:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f9:54:20:58:44:30:eb:4f:30:cb:af:30:71:67:be:4b:77:53:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Validity Not Before: Apr 26 11:38:49 2025 GMT Not After : Apr 27 12:51:49 2025 GMT Subject: CN=A18AB38BB47E91E4EA33527ED4F08F6997A3391B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f4:ee:8c:40:0a:f4:7c:dd:ad:60:98:32:f2: 08:c3:d7:37:a6:47:d6:88:ad:2a:17:06:30:07:75: 8a:ef:ac:f9:f9:74:74:f6:c2:43:7d:a5:86:dc:e1: 79:45:fc:ee:4d:91:2f:0f:86:85:00:1c:b0:11:f2: cc:34:58:32:34:56:c6:1c:05:50:34:b1:ce:8b:d9: c8:0b:70:bf:9a:83:f1:62:c7:67:b8:1f:5f:f1:e3: b2:b9:19:8b:1d:86:62:27:a0:63:65:1a:e1:cf:a7: f0:85:32:a8:3b:c6:37:b1:96:ba:51:6e:25:e0:9c: 5e:f9:49:cf:1c:88:52:bd:a2:e4:c7:67:d4:f3:17: 50:f8:28:8c:50:dc:03:af:a7:c4:38:ce:b4:cc:e7: 3c:a9:53:b4:c8:d6:c4:e3:85:d9:c4:a9:c9:62:bf: 4a:d3:92:30:8f:ed:5b:40:28:b8:01:de:06:9e:fc: 15:ba:8e:a0:5b:d7:8f:23:ed:0b:3b:ea:21:15:dd: a8:1d:27:e0:ae:02:4b:cd:fd:3c:89:00:e7:02:20: 21:c8:c5:fd:b6:1e:0a:83:d1:a8:a3:95:a9:2c:9f: 06:b4:76:26:79:42:75:8c:fa:e8:25:17:8a:c8:f1: ed:d2:e9:4c:0b:e8:3e:78:66:f9:b4:74:51:c4:e4: 67:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8A:B3:8B:B4:7E:91:E4:EA:33:52:7E:D4:F0:8F:69:97:A3:39:1B X509v3 Authority Key Identifier: keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e0:b5:dd:d9:f5:8e:ab:58:de:74:5b:52:dc:c2:cc:36:5a: f3:9a:5a:bc:a0:ce:42:61:af:08:5d:45:ea:48:c6:43:17:4c: 60:26:5c:75:34:1a:c5:27:6d:12:93:d9:d7:73:7f:66:12:30: 9f:8c:b1:cd:4f:53:2c:6b:9b:af:ef:06:4c:bd:3c:08:3d:59: ae:85:c1:08:5e:2f:86:69:46:5b:34:62:d9:1e:b5:c7:fe:77: 66:39:7d:92:24:21:0d:ce:38:87:be:e5:45:a3:1f:92:b1:fd: 08:a6:8e:d6:a4:06:b1:8b:3c:c0:b8:2c:d5:4c:e5:88:9d:52: 9e:f4:e3:b0:74:18:62:cb:10:e1:34:20:2d:21:00:15:75:30: 94:18:1b:81:a3:90:21:52:5a:06:8d:c7:e5:df:00:98:7e:69: 1f:e1:e8:aa:24:f3:e9:c7:b1:db:c0:2e:23:b1:f7:93:ea:7a: 51:39:d2:d5:3a:b2:92:6e:64:b7:44:a1:1f:fe:39:9e:d1:07: d5:48:68:3c:d2:53:5b:7c:12:35:e3:c8:4b:f2:bf:14:66:d7: bd:d1:ca:ff:32:b8:f7:53:e8:89:c2:d7:32:03:a8:be:75:48: 75:c3:a8:cf:33:fe:9c:05:20:b2:e5:df:df:f4:f7:be:9a:ee: dc:6f:f1:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUG/lUIFhEMOtPMMuvMHFnvkt3U68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF MDZBMjdFMjAeFw0yNTA0MjYxMTM4NDlaFw0yNTA0MjcxMjUxNDlaMDMxMTAvBgNV BAMTKEExOEFCMzhCQjQ3RTkxRTRFQTMzNTI3RUQ0RjA4RjY5OTdBMzM5MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP9O6MQAr0fN2tYJgy8gjD1zem R9aIrSoXBjAHdYrvrPn5dHT2wkN9pYbc4XlF/O5NkS8PhoUAHLAR8sw0WDI0VsYc BVA0sc6L2cgLcL+ag/Fix2e4H1/x47K5GYsdhmInoGNlGuHPp/CFMqg7xjexlrpR biXgnF75Sc8ciFK9ouTHZ9TzF1D4KIxQ3AOvp8Q4zrTM5zypU7TI1sTjhdnEqcli v0rTkjCP7VtAKLgB3gae/BW6jqBb148j7Qs76iEV3agdJ+CuAkvN/TyJAOcCICHI xf22HgqD0aijlaksnwa0diZ5QnWM+uglF4rI8e3S6UwL6D54Zvm0dFHE5GclAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoYqzi7R+keTqM1J+1PCPaZejORswHwYDVR0j BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0 NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC82 NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATuC13dn1jqtY3nRbUtzCzDZa85pavKDOQmGvCF1F6kjGQxdMYCZcdTQaxSdt EpPZ13N/ZhIwn4yxzU9TLGubr+8GTL08CD1ZroXBCF4vhmlGWzRi2R61x/53Zjl9 kiQhDc44h77lRaMfkrH9CKaO1qQGsYs8wLgs1UzliJ1SnvTjsHQYYssQ4TQgLSEA FXUwlBgbgaOQIVJaBo3H5d8AmH5pH+HoqiTz6cex28AuI7H3k+p6UTnS1Tqykm5k t0ShH/45ntEH1UhoPNJTW3wSNePIS/K/FGbXvdHK/zK491PoicLXMgOovnVIdcOo zzP+nAUgsuXf3/T3vpru3G/xBA== -----END CERTIFICATE-----Generated at Sat Apr 26 13:37:13 2025 by rpki-client on console.sobornost.net