$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft File: C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft (raw, json) Hash identifier: 1afX+HdQUUEX/Gzaf8dxRAzOI1l5jjh86NuyWq188oo= Subject key identifier: D4:14:2C:43:57:48:EE:1C:C1:C1:AB:29:F6:E2:71:D5:99:C5:8F:AB Authority key identifier: C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7 Certificate issuer: /CN=C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7 Certificate serial: 5221C0BC7D33FAEACCCA69B8F4FF8CB793C0BE94 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer Subject info access: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft Manifest number: 016C Signing time: Mon 28 Apr 2025 11:25:45 +0000 Manifest this update: Mon 28 Apr 2025 11:20:45 +0000 Manifest next update: Tue 29 Apr 2025 12:47:45 +0000 Files and hashes: 1: 3137372e36372e32342e302f32322d3234203d3e203532363632.roa (hash: CaJ2YqX6hYjPow+L/+Ed8XjKqJ1iY+o5jqj7La4tRTg=) 2: C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.crl (hash: 4Qi4Cs7BebWj/M5Koy4eq8eRdXARZSETaiLw3/7w9ig=) 3: 3138392e3131332e3132382e302f32302d3234203d3e203532363632.roa (hash: q1DjdNr03vq3gtIeiumSp0kWWvZaHwOX0bMiVqb891s=) 4: 323830343a333362303a3a2f33322d3438203d3e203532363632.roa (hash: dKRcdpYQwGN4g/8SNRrmTcSy423QAHcOYImLbXn+XO4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.crl rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 12:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:21:c0:bc:7d:33:fa:ea:cc:ca:69:b8:f4:ff:8c:b7:93:c0:be:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7 Validity Not Before: Apr 28 11:20:45 2025 GMT Not After : Apr 29 12:47:45 2025 GMT Subject: CN=D4142C435748EE1CC1C1AB29F6E271D599C58FAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f6:9b:50:86:6c:50:f2:3a:75:db:21:f9:5a: 29:e4:ef:37:93:32:7d:7f:52:9e:10:1c:f0:aa:6a: ce:ae:c3:f9:4a:fe:e6:42:65:a4:eb:8c:fc:51:d1: df:58:ef:25:1c:c2:4d:f5:aa:18:c4:c9:6e:84:c3: 09:43:c3:04:d5:56:3d:94:50:81:e5:29:63:7e:67: 98:c8:4a:df:ba:b3:d1:9e:ed:ea:22:ae:bd:7a:56: ed:c0:5a:d2:be:91:91:29:0d:db:89:0e:51:c0:67: cf:5b:57:dd:b0:b7:a4:c5:3e:30:0b:93:f3:fd:27: 0a:96:cc:e7:a7:42:1c:94:a7:00:ec:b4:fc:b6:54: 4b:70:3e:82:3e:e4:06:c4:e7:50:f9:68:1d:a6:84: 27:09:d2:ad:d2:84:f4:9e:36:58:c4:ee:df:77:81: 0f:81:3e:d2:12:09:d6:54:78:ee:94:60:5b:31:66: 6e:f2:66:42:5e:b9:47:8a:b6:d0:28:25:ce:b7:e1: 68:24:8b:96:05:1e:ec:5f:59:a6:bd:b9:65:ad:9a: 8b:db:f5:36:71:73:d4:cd:2e:7a:10:fa:6f:e4:b4: 7a:6e:44:82:fe:6c:91:da:d5:3f:ac:8f:cb:7c:a4: 0e:c5:7c:73:12:ab:bb:11:c9:52:cc:2c:40:c0:99: 64:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:14:2C:43:57:48:EE:1C:C1:C1:AB:29:F6:E2:71:D5:99:C5:8F:AB X509v3 Authority Key Identifier: keyid:C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3b:e3:01:94:8c:2a:f7:2b:2b:a2:0d:1a:96:5b:e2:6e:9c: f9:ba:93:fa:ae:bd:df:e5:0e:a2:6a:5d:f3:22:a1:57:9a:3a: b7:4f:ec:e1:ac:03:9a:f1:e3:ef:3e:8f:d6:87:54:13:aa:fc: 01:6e:c7:7f:19:aa:3f:df:77:68:08:a0:bc:81:f3:f0:0c:33: fa:c2:24:c8:a6:27:b6:5d:3e:d3:45:01:18:cc:2d:4a:70:f8: cd:08:32:83:6c:68:2e:0a:9b:f6:14:3e:6c:fa:26:04:2b:ca: 93:d4:aa:d8:4d:0c:15:13:4f:e6:48:44:3b:e0:96:6b:be:86: ad:a9:df:ee:e5:7d:64:36:35:f9:65:99:3f:ce:2a:ec:ae:b6: 81:ac:90:9c:1f:a4:d1:16:cb:ac:17:0b:c5:ed:f0:0b:f1:5a: b6:e9:0b:78:12:65:af:46:62:9c:1d:88:45:ff:a1:82:76:10: 19:13:9d:b0:eb:dd:9f:55:a9:95:5a:04:84:79:c1:89:07:ae: 2a:f6:6f:e4:53:fc:a4:46:71:17:c3:7a:5e:79:04:f5:71:57: b7:da:ba:c1:1b:8f:82:3d:57:54:68:31:7e:a5:c6:15:06:78: bb:13:d8:39:9f:e2:4d:33:a1:ff:74:d6:0d:2f:66:c1:df:4d: d1:3b:f1:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUiHAvH0z+urMymm49P+Mt5PAvpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDMjk1RTZBNTgzRUU1QUZFRDY4OEJGNjdGQjVENjJE Q0UxNkZCNzAeFw0yNTA0MjgxMTIwNDVaFw0yNTA0MjkxMjQ3NDVaMDMxMTAvBgNV BAMTKEQ0MTQyQzQzNTc0OEVFMUNDMUMxQUIyOUY2RTI3MUQ1OTlDNThGQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9ptQhmxQ8jp12yH5Wink7zeT Mn1/Up4QHPCqas6uw/lK/uZCZaTrjPxR0d9Y7yUcwk31qhjEyW6EwwlDwwTVVj2U UIHlKWN+Z5jISt+6s9Ge7eoirr16Vu3AWtK+kZEpDduJDlHAZ89bV92wt6TFPjAL k/P9JwqWzOenQhyUpwDstPy2VEtwPoI+5AbE51D5aB2mhCcJ0q3ShPSeNljE7t93 gQ+BPtISCdZUeO6UYFsxZm7yZkJeuUeKttAoJc634Wgki5YFHuxfWaa9uWWtmovb 9TZxc9TNLnoQ+m/ktHpuRIL+bJHa1T+sj8t8pA7FfHMSq7sRyVLMLEDAmWR7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1BQsQ1dI7hzBwasp9uJx1ZnFj6swHwYDVR0j BBgwFoAUxcKV5qWD7lr+1oi/Z/tdYtzhb7cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWo4Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tD RFQvMC9DNUMyOTVFNkE1ODNFRTVBRkVENjg4QkY2N0ZCNUQ2MkRDRTE2RkI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1QzI5NUU2QTU4M0VFNUFG RUQ2ODhCRjY3RkI1RDYyRENFMTZGQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWo4Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tDRFQvMC9D NUMyOTVFNkE1ODNFRTVBRkVENjg4QkY2N0ZCNUQ2MkRDRTE2RkI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGzvjAZSMKvcrK6INGpZb4m6c+bqT+q693+UOompd8yKhV5o6t0/s4awDmvHj 7z6P1odUE6r8AW7HfxmqP993aAigvIHz8Awz+sIkyKYntl0+00UBGMwtSnD4zQgy g2xoLgqb9hQ+bPomBCvKk9Sq2E0MFRNP5khEO+CWa76Granf7uV9ZDY1+WWZP84q 7K62gayQnB+k0RbLrBcLxe3wC/FatukLeBJlr0ZinB2IRf+hgnYQGROdsOvdn1Wp lVoEhHnBiQeuKvZv5FP8pEZxF8N6XnkE9XFXt9q6wRuPgj1XVGgxfqXGFQZ4uxPY OZ/iTTOh/3TWDS9mwd9N0TvxUQ== -----END CERTIFICATE-----Generated at Mon Apr 28 13:04:55 2025 by rpki-client on console.sobornost.net