$ rpki-client -vvf rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft File: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft (raw, json) Hash identifier: XCPMAxrKMQ5NjRpsa1dfMleJ6UsC2yjQ7NsrRErVirg= Subject key identifier: CE:61:56:48:19:B4:35:D1:B4:F8:AD:03:69:8D:7A:2C:3E:3B:A3:A1 Authority key identifier: 86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9 Certificate issuer: /CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9 Certificate serial: 213D3A34AF674479E895F3B465BA6D7465253761 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer Subject info access: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft Manifest number: 0206 Signing time: Sat 26 Apr 2025 06:18:54 +0000 Manifest this update: Sat 26 Apr 2025 06:13:54 +0000 Manifest next update: Sun 27 Apr 2025 07:10:54 +0000 Files and hashes: 1: 86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl (hash: h6ehmZ2M/svFuRVJYElxus63qLVufilbf/I68i4Wwxs=) 2: 3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa (hash: qVCWPsUBXgWtAHmD8XGCmeUMG5WOH75SlsNjlNdMjgg=) 3: 323830343a376263343a3a2f33322d3438203d3e20323731343533.roa (hash: vQ0dMTrCA6jpx16kB//vD14oqZm9i+cplJ6WKtUmRJA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Apr 2025 05:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:3d:3a:34:af:67:44:79:e8:95:f3:b4:65:ba:6d:74:65:25:37:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9 Validity Not Before: Apr 26 06:13:54 2025 GMT Not After : Apr 27 07:10:54 2025 GMT Subject: CN=CE61564819B435D1B4F8AD03698D7A2C3E3BA3A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:62:5c:05:6b:34:09:25:c5:b2:c7:5e:ff:7e: d9:49:ea:6e:c8:b4:6f:6f:b9:8f:ac:db:59:61:a2: f4:15:34:27:84:ee:55:ab:4d:62:c6:67:b4:2c:06: b6:9c:63:20:0f:17:19:5e:8d:9a:f8:d0:58:17:90: b8:57:e6:f8:99:a3:46:de:65:23:f9:9a:93:cc:43: 39:0a:89:9c:25:7d:65:47:6d:d6:43:8e:24:44:6f: e3:03:2d:88:d0:b2:18:0e:71:5c:7e:ad:47:e0:a4: 85:d3:fe:42:f4:5d:cf:a5:25:6f:73:c5:da:1a:da: 6a:01:66:5b:2d:d5:0e:3f:b9:07:5c:0b:d0:c2:82: ac:59:d9:0d:cf:8e:dd:24:08:98:d0:06:f7:2f:04: 06:18:ad:f7:a9:c3:c3:c4:0e:44:52:af:67:6d:32: 5c:7b:07:ee:73:64:28:ee:ff:37:5d:34:f0:ea:71: 92:11:e5:6e:a9:bd:2b:4f:73:52:e2:09:a3:55:db: bc:5d:b3:56:34:8c:fd:cc:7e:6e:70:f2:4c:46:10: c2:62:94:89:71:f6:05:aa:0f:ef:a2:18:c9:1d:31: 6c:50:ab:49:16:fe:77:67:93:5b:95:e2:d5:5a:99: a5:7b:ca:14:fc:2e:0e:14:b3:d7:15:91:86:fa:b2: c8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:61:56:48:19:B4:35:D1:B4:F8:AD:03:69:8D:7A:2C:3E:3B:A3:A1 X509v3 Authority Key Identifier: keyid:86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:49:36:bb:04:4c:84:a7:cb:d8:d2:6d:05:b4:d5:06:99:4b: 7a:57:f9:20:cc:a4:83:9e:5c:4f:d8:95:97:9b:5a:1c:90:58: 7d:51:af:54:c3:3f:e8:70:6d:e2:e5:39:50:b1:d6:9c:b7:f3: 53:2b:1b:99:72:e8:da:5f:45:4a:6b:fb:95:29:be:8e:d1:f6: 6d:cf:ae:e6:14:fa:cf:2c:6b:5a:98:18:64:52:fa:8e:40:f9: d3:e9:09:4a:80:67:17:a6:a6:b0:95:7f:5d:9e:b3:df:c8:9e: c2:27:62:2d:8f:73:76:e7:97:72:24:69:04:1f:b0:36:ea:8a: 44:12:c5:c6:77:0c:dd:e5:5c:8a:e1:d0:3e:81:69:9a:3c:1c: fe:93:e4:1c:49:de:ce:5f:9b:67:42:cd:f2:41:91:bd:59:41: 9b:35:72:bd:e6:a1:15:61:fc:86:03:77:21:fc:81:59:24:ad: 44:2d:56:f5:cf:54:86:34:b6:a1:b7:1b:05:b2:95:56:98:d6: 21:e8:db:05:e0:d9:7e:11:0c:f6:9c:51:b1:cc:54:25:e5:55: 73:54:bc:2c:8e:61:1a:3e:fa:f1:09:d5:6f:eb:5d:25:93:20: a0:03:9e:fc:48:09:10:a8:45:2c:7d:61:30:8c:51:3c:67:d2: d2:1c:1d:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIT06NK9nRHnolfO0ZbptdGUlN2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZCODY2QTU5NkU4RDFFNEY5RjQ1MENEMzZERTMyN0M5 NTFENkVCOTAeFw0yNTA0MjYwNjEzNTRaFw0yNTA0MjcwNzEwNTRaMDMxMTAvBgNV BAMTKENFNjE1NjQ4MTlCNDM1RDFCNEY4QUQwMzY5OEQ3QTJDM0UzQkEzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjYlwFazQJJcWyx17/ftlJ6m7I tG9vuY+s21lhovQVNCeE7lWrTWLGZ7QsBracYyAPFxlejZr40FgXkLhX5viZo0be ZSP5mpPMQzkKiZwlfWVHbdZDjiREb+MDLYjQshgOcVx+rUfgpIXT/kL0Xc+lJW9z xdoa2moBZlst1Q4/uQdcC9DCgqxZ2Q3Pjt0kCJjQBvcvBAYYrfepw8PEDkRSr2dt Mlx7B+5zZCju/zddNPDqcZIR5W6pvStPc1LiCaNV27xds1Y0jP3Mfm5w8kxGEMJi lIlx9gWqD++iGMkdMWxQq0kW/ndnk1uV4tVamaV7yhT8Lg4Us9cVkYb6ssgZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzmFWSBm0NdG0+K0DaY16LD47o6EwHwYDVR0j BBgwFoAUhrhmpZbo0eT59FDNNt4yfJUdbrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFV eksvMS84NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2NkE1OTZFOEQxRTRG OUY0NTBDRDM2REUzMjdDOTUxRDZFQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFVeksvMS84 NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAREk2uwRMhKfL2NJtBbTVBplLelf5IMykg55cT9iVl5taHJBYfVGvVMM/6HBt 4uU5ULHWnLfzUysbmXLo2l9FSmv7lSm+jtH2bc+u5hT6zyxrWpgYZFL6jkD50+kJ SoBnF6amsJV/XZ6z38iewidiLY9zdueXciRpBB+wNuqKRBLFxncM3eVciuHQPoFp mjwc/pPkHEnezl+bZ0LN8kGRvVlBmzVyveahFWH8hgN3IfyBWSStRC1W9c9UhjS2 obcbBbKVVpjWIejbBeDZfhEM9pxRscxUJeVVc1S8LI5hGj768QnVb+tdJZMgoAOe /EgJEKhFLH1hMIxRPGfS0hwdQA== -----END CERTIFICATE-----Generated at Sat Apr 26 08:46:22 2025 by rpki-client on console.sobornost.net