$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.mft File: 1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.mft (raw, json) Hash identifier: NrQgp+MUhHsvhLcIniOoSmnKYVmvNDsgA9W94VOEGgE= Subject key identifier: D1:88:C3:B6:10:96:45:67:A3:A9:CF:01:C3:F1:6D:4A:DF:D8:92:C2 Authority key identifier: 1B:09:EB:B6:7C:9B:35:E1:95:84:F3:CF:38:01:F0:C7:FA:94:19:4F Certificate issuer: /CN=1B09EBB67C9B35E19584F3CF3801F0C7FA94194F Certificate serial: 5B0AB19B70ACECAB99F48F617325561207B928D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.mft Manifest number: 013A Signing time: Mon 28 Apr 2025 08:50:18 +0000 Manifest this update: Mon 28 Apr 2025 08:45:18 +0000 Manifest next update: Tue 29 Apr 2025 09:00:18 +0000 Files and hashes: 1: 323830343a343763633a3a2f33322d313238203d3e20323637303737.roa (hash: 5WnVwzHmnHzJ489Kb5IHXwg3EpsZRZa2lwHb+mc1UxI=) 2: 34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa (hash: NydpSSGwHYwR6tRDXWYNNtUDsqDtW7qP/wQ6Jndj65U=) 3: 1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.crl (hash: Lo0WmQS6uWRqUwFCBzTYFnSdS8tR7zukk/nOPE42VHU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.crl rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:0a:b1:9b:70:ac:ec:ab:99:f4:8f:61:73:25:56:12:07:b9:28:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B09EBB67C9B35E19584F3CF3801F0C7FA94194F Validity Not Before: Apr 28 08:45:18 2025 GMT Not After : Apr 29 09:00:18 2025 GMT Subject: CN=D188C3B610964567A3A9CF01C3F16D4ADFD892C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:21:da:83:c8:4e:53:ba:f9:c4:54:b6:f0:72: ba:1f:6a:76:91:6e:61:39:08:03:a6:7e:31:2e:e3: a7:ee:cf:74:1a:e1:d6:ed:af:30:ad:6b:1b:b7:3b: 68:bd:37:04:58:8f:9e:6f:6d:24:3d:f5:30:8a:a3: 4b:90:d8:41:e9:d9:0d:27:bc:ac:38:e6:1e:31:b7: 1f:fd:ca:0d:b5:f9:f2:a5:45:81:a3:e0:8f:60:40: ec:77:ec:35:3f:3d:64:20:df:12:f3:5d:c0:cc:02: a8:78:3e:49:b0:bc:77:28:a5:1d:fc:93:2d:47:e1: 37:e7:d7:12:99:6d:b7:18:c0:20:71:b9:45:f0:b0: db:aa:ac:9b:78:74:75:79:f5:50:7c:df:d2:d4:e3: 12:19:1e:cc:fd:5e:1a:0e:35:b9:9e:94:09:ad:5a: 7a:16:0f:5b:a8:17:99:fe:f3:3d:a5:26:5e:24:d6: 38:fd:e3:93:6a:53:06:e6:52:36:e7:d5:60:ff:d3: 9f:e7:fd:57:69:a7:72:19:36:ab:36:92:a9:02:1b: ed:76:8d:16:35:28:43:7a:ff:27:bd:b9:8b:71:1d: f4:06:1a:ac:53:a2:fd:2f:93:73:58:54:de:44:81: 40:48:ad:70:58:8b:73:ba:87:42:3f:4d:1b:9d:de: 1e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:88:C3:B6:10:96:45:67:A3:A9:CF:01:C3:F1:6D:4A:DF:D8:92:C2 X509v3 Authority Key Identifier: keyid:1B:09:EB:B6:7C:9B:35:E1:95:84:F3:CF:38:01:F0:C7:FA:94:19:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/1B09EBB67C9B35E19584F3CF3801F0C7FA94194F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ee:05:1b:02:47:64:82:33:29:53:ee:1e:f4:d8:70:60:68: 59:01:54:e2:0b:ae:00:5e:fe:db:e0:7e:95:e1:30:44:9c:26: ef:9f:cf:db:8a:fe:c2:4b:06:c9:9b:a9:38:7d:dc:c0:0c:df: 38:36:70:6e:4d:c5:95:4a:82:27:c2:51:91:12:b0:8d:75:47: 84:a1:75:8e:f3:51:f0:be:38:7a:fa:ba:c5:1e:41:aa:d3:2d: cf:c6:bb:0e:b6:e4:72:6e:7a:98:f2:64:53:4d:5a:bd:2e:30: ab:ad:23:76:1d:c1:71:c8:09:0d:50:ea:39:4f:e5:95:8f:52: fd:6b:f8:57:23:42:ea:eb:e2:3e:d2:f4:29:dd:37:ee:76:9b: 08:d0:4a:f7:dc:61:92:e7:9a:26:07:d4:24:43:b3:e9:89:31: bb:0d:78:fd:5e:81:ec:5e:e2:a3:30:4e:af:12:e1:03:75:a8: a6:f8:1c:7b:6e:99:04:dc:4a:d7:b5:ba:a2:a7:94:fd:ef:7f: 6d:03:c2:54:6f:93:1b:1f:c5:01:84:f4:aa:b8:22:f3:69:58: 56:5b:9f:c9:4f:e2:43:cf:e3:18:a8:ed:d7:33:37:cc:6d:a8: aa:41:de:82:98:0c:34:43:89:a1:3c:5f:e1:c2:6b:cf:0b:9d: 1b:b9:53:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWwqxm3Cs7KuZ9I9hcyVWEge5KNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIwOUVCQjY3QzlCMzVFMTk1ODRGM0NGMzgwMUYwQzdG QTk0MTk0RjAeFw0yNTA0MjgwODQ1MThaFw0yNTA0MjkwOTAwMThaMDMxMTAvBgNV BAMTKEQxODhDM0I2MTA5NjQ1NjdBM0E5Q0YwMUMzRjE2RDRBREZEODkyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5IdqDyE5TuvnEVLbwcrofanaR bmE5CAOmfjEu46fuz3Qa4dbtrzCtaxu3O2i9NwRYj55vbSQ99TCKo0uQ2EHp2Q0n vKw45h4xtx/9yg21+fKlRYGj4I9gQOx37DU/PWQg3xLzXcDMAqh4PkmwvHcopR38 ky1H4Tfn1xKZbbcYwCBxuUXwsNuqrJt4dHV59VB839LU4xIZHsz9XhoONbmelAmt WnoWD1uoF5n+8z2lJl4k1jj945NqUwbmUjbn1WD/05/n/Vdpp3IZNqs2kqkCG+12 jRY1KEN6/ye9uYtxHfQGGqxTov0vk3NYVN5EgUBIrXBYi3O6h0I/TRud3h7/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0YjDthCWRWejqc8Bw/FtSt/YksIwHwYDVR0j BBgwFoAUGwnrtnybNeGVhPPPOAHwx/qUGU8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNL MUovMC8xQjA5RUJCNjdDOUIzNUUxOTU4NEYzQ0YzODAxRjBDN0ZBOTQxOTRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCMDlFQkI2N0M5QjM1RTE5 NTg0RjNDRjM4MDFGMEM3RkE5NDE5NEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNLMUovMC8x QjA5RUJCNjdDOUIzNUUxOTU4NEYzQ0YzODAxRjBDN0ZBOTQxOTRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXe4FGwJHZIIzKVPuHvTYcGBoWQFU4guuAF7+2+B+leEwRJwm75/P24r+wksG yZupOH3cwAzfODZwbk3FlUqCJ8JRkRKwjXVHhKF1jvNR8L44evq6xR5BqtMtz8a7 Drbkcm56mPJkU01avS4wq60jdh3BccgJDVDqOU/llY9S/Wv4VyNC6uviPtL0Kd03 7nabCNBK99xhkueaJgfUJEOz6Ykxuw14/V6B7F7iozBOrxLhA3Wopvgce26ZBNxK 17W6oqeU/e9/bQPCVG+TGx/FAYT0qrgi82lYVlufyU/iQ8/jGKjt1zM3zG2oqkHe gpgMNEOJoTxf4cJrzwudG7lT9A== -----END CERTIFICATE-----Generated at Mon Apr 28 10:49:25 2025 by rpki-client on console.sobornost.net