$ rpki-client -vvf rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.mft File: 688C4E450A1E9C4A430D25A4E2119AA4B53DD234.mft (raw, json) Hash identifier: A8oH3z1BkvHaorrLWyMsTUIBvMi35qg9hkHzWFS/ug8= Subject key identifier: 19:5B:B6:2D:5A:AD:52:DD:D1:17:DF:1C:81:7F:0E:27:9B:4C:00:DD Authority key identifier: 68:8C:4E:45:0A:1E:9C:4A:43:0D:25:A4:E2:11:9A:A4:B5:3D:D2:34 Certificate issuer: /CN=688C4E450A1E9C4A430D25A4E2119AA4B53DD234 Certificate serial: 77DCE1C870661FF1BE70414E938C1C4C7A9DFE5A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.cer Subject info access: rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.mft Manifest number: AC Signing time: Sat 26 Apr 2025 03:09:10 +0000 Manifest this update: Sat 26 Apr 2025 03:04:10 +0000 Manifest next update: Sun 27 Apr 2025 05:17:10 +0000 Files and hashes: 1: 688C4E450A1E9C4A430D25A4E2119AA4B53DD234.crl (hash: xaiLjvQIkOMH0pCPGnBA99QsVfFrVukg4zudI7HB4+8=) 2: 323830343a373466303a3a2f33322d3438203d3e20323731303133.roa (hash: hMFPPI8x0ZYN4CJCwq3IMtSDrKi/M1f+wsyRA+yTJcI=) 3: 3136382e3138312e3130302e302f32322d3234203d3e20323731303133.roa (hash: VUbkgjU98sebcr//E47MXUOCppMpLLyBzvFdh3Z4BYQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.crl rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Apr 2025 05:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:dc:e1:c8:70:66:1f:f1:be:70:41:4e:93:8c:1c:4c:7a:9d:fe:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688C4E450A1E9C4A430D25A4E2119AA4B53DD234 Validity Not Before: Apr 26 03:04:10 2025 GMT Not After : Apr 27 05:17:10 2025 GMT Subject: CN=195BB62D5AAD52DDD117DF1C817F0E279B4C00DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:44:cf:54:fe:27:67:7a:8c:d2:7f:52:3c:21: 8e:5f:40:27:61:2d:e1:9c:81:53:e9:29:88:4c:f6: 57:d3:50:66:f9:72:da:b8:33:3d:d9:c7:76:af:60: 01:bb:4f:8b:8f:23:2b:08:30:1b:99:85:6a:0e:cf: 76:14:71:15:e4:20:f7:3e:b6:20:01:42:f5:4d:ff: a0:68:e8:67:23:f3:c7:c9:52:71:5e:d9:04:7c:20: 72:9e:dc:68:54:4b:cc:41:af:98:65:9d:d0:ee:47: ab:74:50:b8:f1:f7:86:5c:e9:5e:ee:e8:e3:f8:f6: f7:07:8c:ac:e6:ff:44:79:20:01:f3:1e:92:aa:9b: 07:93:fc:14:5c:e4:c8:bc:6f:77:d4:86:f1:17:68: c4:2c:4f:b6:b2:92:a2:2f:8f:13:fe:88:c2:1d:0d: d0:2a:b4:0a:54:f2:e7:2d:b8:9e:9d:04:4f:47:98: 45:29:8c:00:ac:93:59:2f:5e:38:41:7c:72:e9:07: 39:27:87:a1:b4:5c:38:38:4c:81:a2:56:91:bd:03: f1:ae:c4:76:cf:80:5d:da:5f:f8:77:10:52:cb:74: bf:1d:1c:a0:2f:2a:fb:ce:59:53:e6:3d:5d:54:2b: c8:f8:ea:f8:82:20:e9:47:15:5e:9d:ee:15:c1:8c: 7e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5B:B6:2D:5A:AD:52:DD:D1:17:DF:1C:81:7F:0E:27:9B:4C:00:DD X509v3 Authority Key Identifier: keyid:68:8C:4E:45:0A:1E:9C:4A:43:0D:25:A4:E2:11:9A:A4:B5:3D:D2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2a:fc:91:ba:3c:66:76:f0:77:35:11:61:df:6b:e9:74:90: 37:dc:9d:c5:2f:cd:2b:e3:1b:c2:3c:ad:ad:43:7f:c2:ea:b1: 50:7c:de:5f:e0:8c:37:6c:81:19:34:1c:68:af:3a:ca:12:0f: 5d:ee:72:65:d8:28:aa:72:ec:99:0c:ed:5e:56:15:8d:8c:4f: 7f:6b:80:e1:51:dd:21:1b:7e:b3:07:cb:26:7a:ba:63:44:e7: f3:0d:e4:0d:70:e3:6f:3c:7f:8a:fe:f5:8d:47:4d:30:dd:50: bc:86:c0:df:44:8c:9b:24:1f:1c:94:5e:8f:9e:57:7f:f8:a2: 92:88:fe:e7:42:7b:05:66:a1:b5:1c:df:e6:d4:d8:8d:77:31: f1:b0:01:83:6c:71:e3:1a:3a:67:7e:f5:14:0c:da:92:4d:8a: fd:25:aa:cc:58:2b:a2:df:d0:7a:2c:af:0f:ae:d5:d9:07:c3: a6:f9:3b:a3:3d:f9:c7:6a:b3:11:18:32:35:aa:aa:b3:25:16: 6a:1a:b2:92:c7:d9:e5:23:2c:70:de:44:de:e8:6a:62:97:4f: 23:42:be:89:83:8d:cf:6f:ee:6c:8c:19:b4:2e:6e:90:b8:e0: 38:96:0f:e9:b2:30:fb:f3:49:ae:bc:84:b0:df:70:c1:da:ee: d1:19:f6:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUd9zhyHBmH/G+cEFOk4wcTHqd/lowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4QzRFNDUwQTFFOUM0QTQzMEQyNUE0RTIxMTlBQTRC NTNERDIzNDAeFw0yNTA0MjYwMzA0MTBaFw0yNTA0MjcwNTE3MTBaMDMxMTAvBgNV BAMTKDE5NUJCNjJENUFBRDUyREREMTE3REYxQzgxN0YwRTI3OUI0QzAwREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjRM9U/idneozSf1I8IY5fQCdh LeGcgVPpKYhM9lfTUGb5ctq4Mz3Zx3avYAG7T4uPIysIMBuZhWoOz3YUcRXkIPc+ tiABQvVN/6Bo6Gcj88fJUnFe2QR8IHKe3GhUS8xBr5hlndDuR6t0ULjx94Zc6V7u 6OP49vcHjKzm/0R5IAHzHpKqmweT/BRc5Mi8b3fUhvEXaMQsT7aykqIvjxP+iMId DdAqtApU8uctuJ6dBE9HmEUpjACsk1kvXjhBfHLpBzknh6G0XDg4TIGiVpG9A/Gu xHbPgF3aX/h3EFLLdL8dHKAvKvvOWVPmPV1UK8j46viCIOlHFV6d7hXBjH5tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGVu2LVqtUt3RF98cgX8OJ5tMAN0wHwYDVR0j BBgwFoAUaIxORQoenEpDDSWk4hGapLU90jQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXRKcjY0cGsxTnY3cFhLSGlwaTRmVEJCNFJzNWJtR2EzVkVRYTNOY21w QVgvMC82ODhDNEU0NTBBMUU5QzRBNDMwRDI1QTRFMjExOUFBNEI1M0REMjM0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4OEM0RTQ1MEExRTlDNEE0 MzBEMjVBNEUyMTE5QUE0QjUzREQyMzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXRKcjY0cGsxTnY3cFhLSGlwaTRmVEJCNFJzNWJtR2EzVkVRYTNOY21wQVgvMC82 ODhDNEU0NTBBMUU5QzRBNDMwRDI1QTRFMjExOUFBNEI1M0REMjM0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKCr8kbo8ZnbwdzURYd9r6XSQN9ydxS/NK+MbwjytrUN/wuqxUHzeX+CMN2yB GTQcaK86yhIPXe5yZdgoqnLsmQztXlYVjYxPf2uA4VHdIRt+swfLJnq6Y0Tn8w3k DXDjbzx/iv71jUdNMN1QvIbA30SMmyQfHJRej55Xf/iikoj+50J7BWahtRzf5tTY jXcx8bABg2xx4xo6Z371FAzakk2K/SWqzFgrot/QeiyvD67V2QfDpvk7oz35x2qz ERgyNaqqsyUWahqyksfZ5SMscN5E3uhqYpdPI0K+iYONz2/ubIwZtC5ukLjgOJYP 6bIw+/NJrryEsN9wwdru0Rn2Rg== -----END CERTIFICATE-----Generated at Sat Apr 26 06:14:45 2025 by rpki-client on console.sobornost.net