$ rpki-client -vvf rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft File: 1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft (raw, json) Hash identifier: STw+UNSd1P7edynpw/Wq9OsNejEjbRZdMWzpH2zHLYo= Subject key identifier: 3B:B4:1E:00:69:D7:C9:B3:F8:8E:06:1C:91:E6:50:26:58:28:F4:C2 Authority key identifier: 1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92 Certificate issuer: /CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92 Certificate serial: 4BDB0A65D9A782075D0B99B76121C183E27B0F42 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft Manifest number: 01F4 Signing time: Thu 24 Apr 2025 18:34:02 +0000 Manifest this update: Thu 24 Apr 2025 18:29:02 +0000 Manifest next update: Fri 25 Apr 2025 20:37:02 +0000 Files and hashes: 1: 1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl (hash: 9A11s0XpLqp+gS1PGU4ajNkW2rikB5K5iQVd3oGqFcc=) 2: 323830313a38303a313932303a3a2f34382d3438203d3e20323634393731.roa (hash: V4pr7EMRf7I7ElOQ2jaIag3WW0+6k23seAgpv3kqk1E=) 3: 3230302e3231392e3134392e302f32342d3234203d3e20323634393731.roa (hash: CtlsUAFWjImlwZWNz6P/jVFD3JBP5hLeswnSXTvh7E4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:db:0a:65:d9:a7:82:07:5d:0b:99:b7:61:21:c1:83:e2:7b:0f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92 Validity Not Before: Apr 24 18:29:02 2025 GMT Not After : Apr 25 20:37:02 2025 GMT Subject: CN=3BB41E0069D7C9B3F88E061C91E650265828F4C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4e:43:10:3c:bb:f1:93:be:19:14:ad:b9:99: 38:70:89:c2:dd:2c:ac:f6:39:56:e6:e2:83:bf:b2: ea:1c:ca:98:4e:eb:62:fa:05:a0:53:c5:b8:98:a5: ac:52:18:e2:71:f6:bb:ec:2b:da:21:68:e7:2e:d5: 94:16:ff:67:4b:43:3a:12:d3:87:43:26:e9:5d:ca: 4f:e1:dc:21:62:74:bc:12:8f:8b:89:e7:0f:9b:b9: 9f:b5:5a:60:4f:e8:78:8c:9e:c8:2d:ea:55:19:5f: c2:ef:c1:cb:e3:fb:da:69:f6:e9:06:0e:35:09:39: 49:d9:10:df:52:fe:4d:01:b2:8c:aa:dc:22:84:e0: 82:31:b3:c5:9a:94:8f:7c:30:80:f4:ac:c7:5d:0d: 53:87:ac:d6:7c:ec:c2:40:b3:88:00:5e:ba:ac:71: 51:e0:82:07:60:61:94:59:de:38:ec:dc:81:84:e7: b6:56:9a:98:d5:5f:12:c2:c4:89:1e:e8:b4:03:8d: 14:0a:05:d6:46:84:da:75:db:4e:7d:50:51:c1:57: f9:1c:6a:ae:9a:f1:b1:c7:03:a1:f7:10:85:9b:e2: c4:7f:b8:5c:10:7f:69:73:72:00:a4:ef:dd:18:c1: b5:9d:65:28:d1:c5:62:89:6f:85:15:23:ed:0c:2f: 3d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B4:1E:00:69:D7:C9:B3:F8:8E:06:1C:91:E6:50:26:58:28:F4:C2 X509v3 Authority Key Identifier: keyid:1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a5:c3:41:de:d4:18:03:31:93:b5:20:3c:7f:c5:74:0e:db: e1:70:b1:dc:8b:61:f0:ae:a5:65:e5:71:82:99:7c:66:be:34: 91:c2:2b:f1:c8:95:3f:94:1f:8f:e8:4e:2b:3d:01:56:15:32: 55:b2:cc:c0:b5:c1:19:13:6c:37:b3:e1:da:ec:4f:bc:98:74: 20:ce:57:17:e1:f3:cc:e1:c1:b9:7d:77:fb:7b:93:00:0e:94: 44:58:40:15:d7:8b:7a:55:d7:df:b5:d7:80:35:bc:0b:eb:ac: 4f:b3:54:3a:53:22:1a:9c:1c:73:79:bb:27:96:b9:4a:0a:be: 02:f1:3f:79:71:28:af:65:8d:3e:04:fc:79:54:6a:87:ac:e3: d7:3b:e3:2d:ea:cf:63:96:50:67:89:1e:49:a0:d4:d2:ee:58: 21:11:6a:8e:53:a2:f4:6c:af:34:ee:0d:16:34:c3:28:5d:e0: 60:ea:4e:26:74:7f:63:ff:91:12:cf:bc:c9:f4:47:10:c6:72: ef:2b:ed:e0:5e:fa:39:0c:3c:c5:75:eb:e7:47:2e:d1:fd:63: 0c:50:56:07:00:7a:96:2f:b1:b7:46:c0:31:90:57:ba:2c:f0: fe:7b:5c:64:c0:8c:c6:43:ba:bb:91:f5:93:bf:ae:a9:9f:c8: 14:48:94:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS9sKZdmnggddC5m3YSHBg+J7D0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTNCRUM5NzY2QzBCNEY4MTE1NTFFNzM4NUNFMkU0 RDQwRkU5MjAeFw0yNTA0MjQxODI5MDJaFw0yNTA0MjUyMDM3MDJaMDMxMTAvBgNV BAMTKDNCQjQxRTAwNjlEN0M5QjNGODhFMDYxQzkxRTY1MDI2NTgyOEY0QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbTkMQPLvxk74ZFK25mThwicLd LKz2OVbm4oO/suocyphO62L6BaBTxbiYpaxSGOJx9rvsK9ohaOcu1ZQW/2dLQzoS 04dDJuldyk/h3CFidLwSj4uJ5w+buZ+1WmBP6HiMnsgt6lUZX8Lvwcvj+9pp9ukG DjUJOUnZEN9S/k0Bsoyq3CKE4IIxs8WalI98MID0rMddDVOHrNZ87MJAs4gAXrqs cVHgggdgYZRZ3jjs3IGE57ZWmpjVXxLCxIke6LQDjRQKBdZGhNp12059UFHBV/kc aq6a8bHHA6H3EIWb4sR/uFwQf2lzcgCk790YwbWdZSjRxWKJb4UVI+0MLz37AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUO7QeAGnXybP4jgYckeZQJlgo9MIwHwYDVR0j BBgwFoAUH9U77JdmwLT4EVUec4XOLk1A/pIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFpQmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lN WUMvMC8xRkQ1M0JFQzk3NjZDMEI0RjgxMTU1MUU3Mzg1Q0UyRTRENDBGRTkyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGRDUzQkVDOTc2NkMwQjRG ODExNTUxRTczODVDRTJFNEQ0MEZFOTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGFpQmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lNWUMvMC8x RkQ1M0JFQzk3NjZDMEI0RjgxMTU1MUU3Mzg1Q0UyRTRENDBGRTkyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZqXDQd7UGAMxk7UgPH/FdA7b4XCx3Ith8K6lZeVxgpl8Zr40kcIr8ciVP5Qf j+hOKz0BVhUyVbLMwLXBGRNsN7Ph2uxPvJh0IM5XF+HzzOHBuX13+3uTAA6URFhA FdeLelXX37XXgDW8C+usT7NUOlMiGpwcc3m7J5a5Sgq+AvE/eXEor2WNPgT8eVRq h6zj1zvjLerPY5ZQZ4keSaDU0u5YIRFqjlOi9GyvNO4NFjTDKF3gYOpOJnR/Y/+R Es+8yfRHEMZy7yvt4F76OQw8xXXr50cu0f1jDFBWBwB6li+xt0bAMZBXuizw/ntc ZMCMxkO6u5H1k7+uqZ/IFEiUTA== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:32 2025 by rpki-client on console.sobornost.net