$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft File: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft (raw, json) Hash identifier: KWxraspjilQMAiYrH63cegt+qqcy35w8D49kyPV1ZNU= Subject key identifier: 1C:88:B5:BF:17:53:C2:F5:3F:DB:7C:A5:E1:02:7D:AC:E6:CB:71:B2 Authority key identifier: CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 Certificate issuer: /CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Certificate serial: 1257DA0B7079FCFC7EC2A145B26CC4544ECE018F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject info access: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft Manifest number: 0204 Signing time: Thu 24 Apr 2025 19:02:02 +0000 Manifest this update: Thu 24 Apr 2025 18:57:02 +0000 Manifest next update: Fri 25 Apr 2025 20:53:02 +0000 Files and hashes: 1: 34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa (hash: gE/DdB9YOblUsoK0HG9wnPd3YKHH2DbykTyw5B7/wBQ=) 2: 323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (hash: JKjEt0hETRYlcDbmWQLZvhZ9xRQwxepiQuRghmhAfoA=) 3: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl (hash: lTNLSAnQMJGYtIglZZvpwIFAPNg2RN+yz4igX9jer34=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:57:da:0b:70:79:fc:fc:7e:c2:a1:45:b2:6c:c4:54:4e:ce:01:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Validity Not Before: Apr 24 18:57:02 2025 GMT Not After : Apr 25 20:53:02 2025 GMT Subject: CN=1C88B5BF1753C2F53FDB7CA5E1027DACE6CB71B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ab:ae:07:d8:d3:16:d0:c2:12:dc:19:39:e5: 38:21:6f:28:8d:65:39:55:e2:e6:98:35:8d:bb:17: 27:17:d9:f6:15:4a:ab:c4:0d:d4:fb:1a:61:75:aa: 9f:33:96:e3:c4:2e:e0:2e:cf:29:af:e4:4b:a2:80: 23:e1:6a:c8:47:4a:40:ff:b8:37:10:a0:49:79:f3: ce:ba:bb:d8:6d:c6:44:2e:92:08:c6:96:ca:c1:c3: 34:08:be:3f:ac:71:32:83:c3:a0:3f:f0:3c:a5:eb: f0:08:0a:2e:ae:d0:13:f1:4e:cf:e9:e0:aa:86:65: 41:c0:08:43:54:7d:9f:5b:6c:49:44:b7:01:07:10: 29:12:6d:da:68:a4:4b:ca:31:2e:27:77:2f:94:74: 05:b1:ac:56:aa:e7:99:49:2b:71:bf:b3:e0:c4:15: 0c:28:91:bb:7f:52:24:0d:77:4b:df:53:94:f7:ab: 2c:47:a2:38:0c:14:e2:a1:13:43:46:e8:03:4f:0d: 1b:b7:26:30:15:95:c6:9c:27:86:f0:d5:d2:a3:67: ba:4a:c9:38:5a:19:bb:89:9a:d8:af:14:c5:ee:21: b9:6a:9b:54:5c:c5:19:a9:37:4c:0e:33:e7:d6:0e: 79:9a:57:ca:4a:6a:31:bb:4a:e5:d9:c2:54:ac:e5: 1c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:88:B5:BF:17:53:C2:F5:3F:DB:7C:A5:E1:02:7D:AC:E6:CB:71:B2 X509v3 Authority Key Identifier: keyid:CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d8:0f:3d:aa:97:0e:bd:f5:cf:30:03:6a:75:bc:db:00:32: 44:c7:28:2f:56:63:54:9c:62:e4:95:9c:da:ec:12:c1:09:3f: 60:30:a1:4e:d4:22:cd:cb:32:b7:fc:fe:8c:9f:5a:3c:35:10: 12:27:0a:c5:ac:eb:80:9c:b4:78:07:bd:23:e9:22:59:f8:7b: 63:42:a2:b1:a0:a2:5d:ee:0b:d2:f4:5b:be:df:f2:ed:66:75: be:98:b4:4a:97:fa:8d:fd:98:39:64:b1:cd:ab:2b:b2:86:97: 79:9f:ae:e5:97:ae:cd:4d:3b:35:94:8e:e5:24:ff:21:fa:43: 69:cd:5d:0c:07:7b:30:32:68:30:8c:2c:33:0a:7c:eb:dc:c6: 19:e0:2d:79:07:94:79:f9:50:44:a1:64:d4:c7:4b:3d:38:db: b8:4a:ac:e7:1c:e2:7f:2c:c1:9f:ed:5b:3b:6e:0c:c8:44:0e: 65:15:6e:fb:d4:25:d2:53:6e:e9:36:4d:02:1a:0a:73:0e:32: 46:a0:c3:19:9d:b1:7d:5f:cd:a3:b8:77:e5:67:f6:73:87:21: 75:f4:3e:f7:d1:78:bf:85:2a:8c:fa:58:06:73:d9:9b:18:0c: bc:51:12:c9:71:a7:60:f2:d6:4c:2e:c8:4d:24:46:b6:09:27: 64:da:64:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUElfaC3B5/Px+wqFFsmzEVE7OAY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQzNEMzg5RUU2QkFCN0NDRDVGNjYwRDYzMEE4QkU4 RTFBRTA1MzAeFw0yNTA0MjQxODU3MDJaFw0yNTA0MjUyMDUzMDJaMDMxMTAvBgNV BAMTKDFDODhCNUJGMTc1M0MyRjUzRkRCN0NBNUUxMDI3REFDRTZDQjcxQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgq64H2NMW0MIS3Bk55TghbyiN ZTlV4uaYNY27FycX2fYVSqvEDdT7GmF1qp8zluPELuAuzymv5EuigCPhashHSkD/ uDcQoEl58866u9htxkQukgjGlsrBwzQIvj+scTKDw6A/8Dyl6/AICi6u0BPxTs/p 4KqGZUHACENUfZ9bbElEtwEHECkSbdpopEvKMS4ndy+UdAWxrFaq55lJK3G/s+DE FQwokbt/UiQNd0vfU5T3qyxHojgMFOKhE0NG6ANPDRu3JjAVlcacJ4bw1dKjZ7pK yThaGbuJmtivFMXuIblqm1RcxRmpN0wOM+fWDnmaV8pKajG7SuXZwlSs5RxdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHIi1vxdTwvU/23yl4QJ9rObLcbIwHwYDVR0j BBgwFoAUz/w9OJ7murfM1fZg1jCovo4a4FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5 RFcvMS9DRkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRkMzRDM4OUVFNkJBQjdD Q0Q1RjY2MEQ2MzBBOEJFOEUxQUUwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5RFcvMS9D RkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAatgPPaqXDr31zzADanW82wAyRMcoL1ZjVJxi5JWc2uwSwQk/YDChTtQizcsy t/z+jJ9aPDUQEicKxazrgJy0eAe9I+kiWfh7Y0KisaCiXe4L0vRbvt/y7WZ1vpi0 Spf6jf2YOWSxzasrsoaXeZ+u5ZeuzU07NZSO5ST/IfpDac1dDAd7MDJoMIwsMwp8 69zGGeAteQeUeflQRKFk1MdLPTjbuEqs5xzifyzBn+1bO24MyEQOZRVu+9Ql0lNu 6TZNAhoKcw4yRqDDGZ2xfV/No7h35Wf2c4chdfQ+99F4v4UqjPpYBnPZmxgMvFES yXGnYPLWTC7ITSRGtgknZNpkdw== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:31 2025 by rpki-client on console.sobornost.net