$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.mft File: 6F953373CAE106CAA73E59A84AFD822C6A2C1290.mft (raw, json) Hash identifier: bak6age1vQf4QQFfw6hdfuYzqHwOtHNbHRp04sRkh70= Subject key identifier: 9B:E7:23:A1:27:85:22:BC:F0:47:B8:FF:D0:AF:DA:90:F0:C7:3D:21 Authority key identifier: 6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90 Certificate issuer: /CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290 Certificate serial: 0863FC9A000ACAC87A0D774DAECEC0AFCB0FC74B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer Subject info access: rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.mft Manifest number: 0207 Signing time: Sun 27 Apr 2025 12:34:23 +0000 Manifest this update: Sun 27 Apr 2025 12:29:23 +0000 Manifest next update: Mon 28 Apr 2025 14:12:23 +0000 Files and hashes: 1: 3138362e3139342e342e302f32322d3234203d3e20323730383832.roa (hash: 25s6N1KpBbLtRNO9NkvIePdiu6t1K8NdGMTGruNx9T0=) 2: 6F953373CAE106CAA73E59A84AFD822C6A2C1290.crl (hash: tsw119S9NvO/GuOj2tQF5IlSZ3ZSzuqx3wLcXlc0ClQ=) 3: 323830343a373265343a3a2f33322d313238203d3e20323730383832.roa (hash: 0iLncwfCIL++avspvB9fj8KMXQp3cghayEA9d66DrVs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.crl rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 13:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:63:fc:9a:00:0a:ca:c8:7a:0d:77:4d:ae:ce:c0:af:cb:0f:c7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290 Validity Not Before: Apr 27 12:29:23 2025 GMT Not After : Apr 28 14:12:23 2025 GMT Subject: CN=9BE723A1278522BCF047B8FFD0AFDA90F0C73D21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:68:bb:2f:43:e2:00:f4:da:ae:f8:89:49:13: 29:19:d8:6d:e8:7c:42:d7:ef:cb:52:70:53:a8:9f: 42:ce:6e:d2:de:09:41:52:be:b4:75:d0:5f:44:26: 42:41:ce:bf:15:6c:9f:db:f4:9d:35:38:ab:d3:fc: b8:6b:d8:9b:ae:0f:d5:c7:d8:0e:69:28:9c:31:98: 8a:49:2c:57:44:5f:d2:0b:f1:05:1f:d8:0f:fc:ea: 4a:c4:eb:6a:c6:d8:5b:7b:c8:cd:c0:8f:7a:4a:fe: e9:49:35:50:57:74:e3:9a:db:4c:bf:a1:7e:1e:d2: cc:46:0f:9d:26:62:27:7a:5c:e9:b7:2a:98:d9:b9: 53:e1:3a:06:88:d7:d4:e3:24:6e:31:e9:22:01:86: 4d:b1:21:e3:9f:d3:e9:7e:e1:40:4c:db:b5:9e:ae: ec:95:14:a4:31:04:ea:d5:dd:c2:b6:45:81:ab:9a: d1:9a:bd:8a:df:46:84:2d:60:00:9e:24:74:ae:cc: 0e:91:94:b2:a7:05:58:5e:7f:88:06:7d:3f:0c:14: 16:66:57:0c:a5:af:e9:46:2d:78:64:69:49:f5:a1: 2e:b9:9d:b1:a3:4d:3e:74:a1:4c:e8:dc:3d:63:77: 20:77:e0:3d:69:20:43:4b:8c:ce:3e:52:40:95:77: 90:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E7:23:A1:27:85:22:BC:F0:47:B8:FF:D0:AF:DA:90:F0:C7:3D:21 X509v3 Authority Key Identifier: keyid:6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:14:c7:28:05:0b:a4:c3:d6:cc:74:93:66:c6:3a:fc:46:91: 32:02:9e:2b:f9:8b:f0:1f:9e:02:94:13:5f:cc:ca:fc:e4:81: cb:3b:a4:77:76:44:8d:3f:f4:b5:38:11:44:6d:48:9f:f1:59: a6:dc:04:79:1d:44:41:d1:95:26:92:77:8c:1b:dd:93:10:0c: 81:eb:d3:76:b3:ea:b7:f2:43:8a:d3:a8:4f:6e:28:51:bc:c1: 65:75:2b:6c:ae:00:09:1f:6a:2d:b1:f7:f0:22:35:2c:8c:e5: 62:9e:64:64:84:c1:08:b0:de:62:35:ed:16:59:54:f7:a2:29: cf:99:0d:f1:17:96:4a:18:aa:e8:ef:61:8b:48:6b:dc:18:d6: 58:c9:74:84:8e:39:4d:bf:56:8c:8a:28:8f:42:4d:7c:ff:cd: f7:cc:54:2c:bd:ad:30:81:d9:46:ab:0c:31:ad:f8:e6:e2:ea: 25:af:7b:51:4c:7b:19:d1:a1:c4:73:36:90:21:58:31:0e:bd: e7:b1:ec:d8:50:64:ae:4d:34:aa:80:de:96:55:08:d5:c2:33: d1:33:28:bd:7c:03:22:5b:3b:5e:78:fa:5c:22:cb:66:66:1e: c7:ef:24:0b:4c:a4:a7:03:ae:10:40:1d:61:70:52:00:85:5f: df:63:78:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCGP8mgAKysh6DXdNrs7Ar8sPx0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY5NTMzNzNDQUUxMDZDQUE3M0U1OUE4NEFGRDgyMkM2 QTJDMTI5MDAeFw0yNTA0MjcxMjI5MjNaFw0yNTA0MjgxNDEyMjNaMDMxMTAvBgNV BAMTKDlCRTcyM0ExMjc4NTIyQkNGMDQ3QjhGRkQwQUZEQTkwRjBDNzNEMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDaLsvQ+IA9Nqu+IlJEykZ2G3o fELX78tScFOon0LObtLeCUFSvrR10F9EJkJBzr8VbJ/b9J01OKvT/Lhr2JuuD9XH 2A5pKJwxmIpJLFdEX9IL8QUf2A/86krE62rG2Ft7yM3Aj3pK/ulJNVBXdOOa20y/ oX4e0sxGD50mYid6XOm3KpjZuVPhOgaI19TjJG4x6SIBhk2xIeOf0+l+4UBM27We ruyVFKQxBOrV3cK2RYGrmtGavYrfRoQtYACeJHSuzA6RlLKnBVhef4gGfT8MFBZm Vwylr+lGLXhkaUn1oS65nbGjTT50oUzo3D1jdyB34D1pIENLjM4+UkCVd5A5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUm+cjoSeFIrzwR7j/0K/akPDHPSEwHwYDVR0j BBgwFoAUb5Uzc8rhBsqnPlmoSv2CLGosEpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNW5qWDVaeXdTVVl0UlZUUXlya0FQYUNHa2preFRBYTdqalBLUWJVNUdi ZlAvMC82Rjk1MzM3M0NBRTEwNkNBQTczRTU5QTg0QUZEODIyQzZBMkMxMjkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGOTUzMzczQ0FFMTA2Q0FB NzNFNTlBODRBRkQ4MjJDNkEyQzEyOTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NW5qWDVaeXdTVVl0UlZUUXlya0FQYUNHa2preFRBYTdqalBLUWJVNUdiZlAvMC82 Rjk1MzM3M0NBRTEwNkNBQTczRTU5QTg0QUZEODIyQzZBMkMxMjkwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJxTHKAULpMPWzHSTZsY6/EaRMgKeK/mL8B+eApQTX8zK/OSByzukd3ZEjT/0 tTgRRG1In/FZptwEeR1EQdGVJpJ3jBvdkxAMgevTdrPqt/JDitOoT24oUbzBZXUr bK4ACR9qLbH38CI1LIzlYp5kZITBCLDeYjXtFllU96Ipz5kN8ReWShiq6O9hi0hr 3BjWWMl0hI45Tb9WjIooj0JNfP/N98xULL2tMIHZRqsMMa345uLqJa97UUx7GdGh xHM2kCFYMQ6957Hs2FBkrk00qoDellUI1cIz0TMovXwDIls7Xnj6XCLLZmYex+8k C0ykpwOuEEAdYXBSAIVf32N49w== -----END CERTIFICATE-----Generated at Sun Apr 27 14:50:42 2025 by rpki-client on console.sobornost.net