$ rpki-client -vvf rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.mft File: 5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.mft (raw, json) Hash identifier: Yfn0emonkcCMrk5whez+FQhYKhrgm7KoP88gtPY4FeU= Subject key identifier: BC:61:CB:F9:23:F3:A4:96:4B:77:5F:AD:79:96:BE:8E:CE:77:39:E7 Authority key identifier: 5C:35:DB:6C:A2:0F:73:89:AD:DD:4A:37:D7:72:63:20:FB:7A:D5:45 Certificate issuer: /CN=5C35DB6CA20F7389ADDD4A37D7726320FB7AD545 Certificate serial: 22F6D40C661EEA381CCD0B9F94492F775CB3CAF1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.cer Subject info access: rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.mft Manifest number: DE Signing time: Thu 24 Apr 2025 07:32:52 +0000 Manifest this update: Thu 24 Apr 2025 07:27:52 +0000 Manifest next update: Fri 25 Apr 2025 11:02:52 +0000 Files and hashes: 1: 323830343a3233343a3a2f33322d3334203d3e20323632373331.roa (hash: pOMjUNV+EerCKuLPqyRXfXz4+Q3NqwseprPihjwMzGs=) 2: 3138362e3139332e3232342e302f32302d3234203d3e20323632373331.roa (hash: vUnp+yLsC3E3uD+kIB6BCAcdczh1woCKCWw071mBc1c=) 3: 3137372e3139302e3139322e302f32302d3234203d3e20323632373331.roa (hash: dQSaGkV7HtE7HtCGYbFprrudeqYn0mpwuU1MPvHRMD0=) 4: 5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.crl (hash: dK7+P9KsiE9SvZfe7CCDAr1wrNoIsT1yikEgdS/Lt+M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.crl rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 10:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f6:d4:0c:66:1e:ea:38:1c:cd:0b:9f:94:49:2f:77:5c:b3:ca:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C35DB6CA20F7389ADDD4A37D7726320FB7AD545 Validity Not Before: Apr 24 07:27:52 2025 GMT Not After : Apr 25 11:02:52 2025 GMT Subject: CN=BC61CBF923F3A4964B775FAD7996BE8ECE7739E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bc:1f:ae:76:d3:56:f3:e3:84:c7:b9:c1:f4: cf:8e:d7:ae:c5:f6:ec:5f:97:ab:41:b4:11:06:14: 35:9b:1f:1f:9c:be:c2:8a:40:55:3b:97:4d:a3:e0: 82:aa:1e:45:bf:ed:b8:93:73:cd:6b:2e:a2:ec:16: ca:8a:9c:3c:2a:09:37:c9:07:87:d9:9b:77:e8:93: 15:fe:de:0d:ba:fa:6a:7b:e5:20:c9:c4:c7:95:25: 75:8c:5e:c9:c6:ce:ca:a2:3a:65:90:a3:ef:2c:df: 9b:51:6b:b7:a1:dc:58:db:1c:da:20:92:7a:9f:77: 05:b5:66:21:f7:65:88:da:0c:73:ec:3e:26:47:5b: 3f:b9:cd:7a:e2:6c:f3:66:12:98:9d:90:9e:96:d5: f2:2d:fc:8e:ac:2a:57:c8:38:52:7c:71:00:81:43: c6:de:23:f6:b6:7d:f8:21:18:b9:63:19:48:53:6f: f6:ef:2a:39:ce:6a:b8:9f:f4:c0:b7:9a:a7:27:79: 19:23:7e:7c:ed:2a:37:58:e1:8a:b0:36:9b:a9:9f: fc:48:0f:f3:28:be:b6:42:63:60:cc:e0:12:68:ea: 55:ea:b7:4e:cb:ba:7f:02:34:09:ce:2a:15:d9:cc: 55:2b:45:01:f2:87:00:0d:d7:d7:75:eb:84:5d:f5: ba:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:61:CB:F9:23:F3:A4:96:4B:77:5F:AD:79:96:BE:8E:CE:77:39:E7 X509v3 Authority Key Identifier: keyid:5C:35:DB:6C:A2:0F:73:89:AD:DD:4A:37:D7:72:63:20:FB:7A:D5:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/62yZ4XeaHTNvCtRcrzpj75k5Uw87vPZJKxomqWiE4NFv/0/5C35DB6CA20F7389ADDD4A37D7726320FB7AD545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:37:6a:cd:da:6f:17:cc:14:4c:28:6c:93:47:5f:cb:b9:5e: 99:de:c5:07:eb:4f:b4:33:61:03:7a:09:ef:cf:c3:9a:d9:1b: 0b:db:e6:8a:5b:86:b6:72:f2:9c:0f:b3:6b:74:31:f6:be:aa: dc:43:d3:17:ba:02:1c:08:de:fe:0a:76:a9:09:60:41:54:20: e2:e6:fd:ec:9d:99:c5:53:43:7b:1d:42:31:75:7e:a3:1f:dd: 07:21:2e:cb:6e:5d:63:37:c7:14:c6:cc:1c:06:ec:b1:99:c8: 18:ed:16:01:e1:a8:ea:14:ea:8a:25:94:f5:fa:57:e4:f9:0f: 91:24:58:de:4e:7a:d5:97:e6:ef:55:b9:05:68:c6:9a:1f:af: 1f:38:ab:e7:10:e0:40:af:5f:18:82:5b:98:72:01:6b:a0:fb: 6c:2f:3f:cb:bf:f6:e0:f5:28:b2:15:8c:a2:94:b6:b9:52:4b: 67:28:38:13:bf:8c:41:2b:57:d8:21:57:fd:a8:d4:38:58:8e: 2b:02:11:dc:42:19:69:ba:3a:f5:75:e9:d4:27:88:69:6c:73: be:cf:7e:96:ee:f5:1b:7f:09:d9:35:11:62:7b:f0:c8:2e:65: 1e:01:cd:aa:7b:09:3d:bb:00:97:7d:61:17:ec:eb:b0:d5:62: 26:f3:db:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIvbUDGYe6jgczQuflEkvd1yzyvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMzNURCNkNBMjBGNzM4OUFEREQ0QTM3RDc3MjYzMjBG QjdBRDU0NTAeFw0yNTA0MjQwNzI3NTJaFw0yNTA0MjUxMTAyNTJaMDMxMTAvBgNV BAMTKEJDNjFDQkY5MjNGM0E0OTY0Qjc3NUZBRDc5OTZCRThFQ0U3NzM5RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbvB+udtNW8+OEx7nB9M+O167F 9uxfl6tBtBEGFDWbHx+cvsKKQFU7l02j4IKqHkW/7biTc81rLqLsFsqKnDwqCTfJ B4fZm3fokxX+3g26+mp75SDJxMeVJXWMXsnGzsqiOmWQo+8s35tRa7eh3FjbHNog knqfdwW1ZiH3ZYjaDHPsPiZHWz+5zXribPNmEpidkJ6W1fIt/I6sKlfIOFJ8cQCB Q8beI/a2ffghGLljGUhTb/bvKjnOarif9MC3mqcneRkjfnztKjdY4YqwNpupn/xI D/MovrZCY2DM4BJo6lXqt07Lun8CNAnOKhXZzFUrRQHyhwAN19d164Rd9brjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvGHL+SPzpJZLd1+teZa+js53OecwHwYDVR0j BBgwFoAUXDXbbKIPc4mt3Uo313JjIPt61UUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjJ5WjRYZWFIVE52Q3RSY3J6cGo3NWs1VXc4N3ZQWkpLeG9tcVdpRTRO RnYvMC81QzM1REI2Q0EyMEY3Mzg5QURERDRBMzdENzcyNjMyMEZCN0FENTQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDMzVEQjZDQTIwRjczODlB RERENEEzN0Q3NzI2MzIwRkI3QUQ1NDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NjJ5WjRYZWFIVE52Q3RSY3J6cGo3NWs1VXc4N3ZQWkpLeG9tcVdpRTRORnYvMC81 QzM1REI2Q0EyMEY3Mzg5QURERDRBMzdENzcyNjMyMEZCN0FENTQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWjdqzdpvF8wUTChsk0dfy7lemd7FB+tPtDNhA3oJ78/DmtkbC9vmiluGtnLy nA+za3Qx9r6q3EPTF7oCHAje/gp2qQlgQVQg4ub97J2ZxVNDex1CMXV+ox/dByEu y25dYzfHFMbMHAbssZnIGO0WAeGo6hTqiiWU9fpX5PkPkSRY3k561Zfm71W5BWjG mh+vHzir5xDgQK9fGIJbmHIBa6D7bC8/y7/24PUoshWMopS2uVJLZyg4E7+MQStX 2CFX/ajUOFiOKwIR3EIZabo69XXp1CeIaWxzvs9+lu71G38J2TURYnvwyC5lHgHN qnsJPbsAl31hF+zrsNViJvPbSA== -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:11 2025 by rpki-client on console.sobornost.net