$ rpki-client -vvf rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft File: F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft (raw, json) Hash identifier: 2SfzjCa6E4U73ZGS7foIQdQuNW7o6NJXYuRkGxUhVNs= Subject key identifier: 56:5E:EF:A5:EB:15:4B:D5:03:C0:DE:12:70:02:A1:14:87:B9:22:97 Authority key identifier: F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2 Certificate issuer: /CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2 Certificate serial: 71C9837CAA40B0BE2AAD1C72D80D3932390E12F1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft Manifest number: 0113 Signing time: Sun 27 Apr 2025 13:22:49 +0000 Manifest this update: Sun 27 Apr 2025 13:17:49 +0000 Manifest next update: Mon 28 Apr 2025 16:55:49 +0000 Files and hashes: 1: 3138392e33392e39362e302f32302d3332203d3e203238333035.roa (hash: YG1K/ShgfdXloHQLk0pvW55EZVjg/llKx1Tuu6evW98=) 2: F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl (hash: o7BD+L7L0jnjG+i93mvtb1jwMRMPhZ8izwd3C3kOmBw=) 3: 323830343a323839383a3a2f33322d313238203d3e203238333035.roa (hash: XOZnUoacLdQhkw6zS/TgauzVEmit+11nBmmF+xAfHTw=) 4: 3138392e38352e3134342e302f32302d3332203d3e203238333035.roa (hash: UFI2Hj5+gnsvxuvuG9PgdFqnHIyMDPTGWkMjMAkRt5c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 13:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c9:83:7c:aa:40:b0:be:2a:ad:1c:72:d8:0d:39:32:39:0e:12:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2 Validity Not Before: Apr 27 13:17:49 2025 GMT Not After : Apr 28 16:55:49 2025 GMT Subject: CN=565EEFA5EB154BD503C0DE127002A11487B92297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ad:b2:4f:9c:33:dc:21:af:57:a3:e5:e7:7c: 0e:2f:7a:da:37:1f:58:8e:6d:b7:4f:7a:d0:c7:c5: 61:10:4e:f8:cd:cb:4e:34:f4:3e:b0:d8:57:e1:6e: e6:8c:7d:a9:35:ab:84:37:37:cb:b8:ad:e2:b7:ed: 5b:97:c1:dc:ec:ff:a4:df:05:a0:28:7b:a7:ec:9b: 6f:a7:51:a0:48:17:ea:8b:a8:86:29:67:4a:3a:9c: 41:fe:f4:90:3c:0c:4b:ec:2b:f1:e5:85:fd:f8:a5: 12:20:b4:38:ca:9b:4f:6d:c1:45:b5:2e:fe:26:45: 0c:6f:e8:87:da:01:aa:24:a7:31:bd:62:d2:07:86: 93:b8:8f:d3:56:fd:e4:ef:0c:c0:a9:d1:e3:27:d1: 21:5b:b0:51:bf:3d:19:24:5c:38:30:9b:6f:8e:7d: 1f:90:95:94:e0:01:df:1d:58:af:e0:4c:bb:2d:c3: 5a:cc:b4:eb:6d:d0:52:1e:fa:2d:6c:e3:77:d5:a0: a2:88:1f:d8:85:fa:95:c3:52:0b:9e:d0:21:a0:4c: ce:5e:01:0c:71:12:f8:a1:d7:29:ac:68:ff:02:97: 0a:eb:e5:ea:70:f8:87:0a:ed:48:fd:1a:8b:16:9b: 25:71:bf:79:b6:ae:5f:74:8d:9b:a9:a8:a5:b3:14: b9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5E:EF:A5:EB:15:4B:D5:03:C0:DE:12:70:02:A1:14:87:B9:22:97 X509v3 Authority Key Identifier: keyid:F6:85:5C:37:8F:9C:9C:A3:71:CE:AA:34:0A:9F:CB:F4:8F:C9:DF:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mWQDRXo6cd2x8KseddnkvKkhm3UAKzNzovCYE8Vzh5G/0/F6855C378F9C9CA371CEAA340A9FCBF48FC9DFA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2d:7d:41:01:e6:76:04:5c:08:30:80:42:96:bb:83:89:e1: 67:ab:7c:4a:01:ec:09:0a:cf:c8:4e:cd:f5:c8:da:61:3c:05: 4f:16:85:90:98:bb:e3:5e:c1:73:ba:85:90:c2:39:8f:47:a9: f3:6f:c4:4f:80:85:b4:d0:eb:1c:a3:a0:b0:80:d9:8b:2c:25: e9:6a:91:d7:ef:eb:69:a9:c6:5e:a9:ef:de:df:96:bf:d8:c3: 7b:04:04:64:fb:19:f0:1d:4a:81:c8:be:96:45:c0:22:70:c2: 01:13:fc:c3:6a:f5:00:de:4b:aa:37:a6:fe:d7:30:2d:1e:0f: a4:01:6b:b7:8f:5a:fa:c4:a3:8d:7f:fe:b9:c1:c0:ed:08:65: a3:b0:08:62:48:23:06:d7:48:7c:31:17:3f:16:3a:73:56:24: f3:fb:d5:7d:90:8d:20:0b:4b:da:a5:38:73:0c:b6:c3:a3:72: e1:fa:cc:69:b7:bd:ad:d3:11:b4:ea:c9:97:6a:f1:bc:04:4d: f2:be:c3:e6:16:6a:71:11:da:d9:36:0f:c6:dd:8d:1f:07:b6: 24:dd:77:6d:e3:c6:b2:1d:d5:86:a1:5b:b5:ba:79:2d:de:6b: f9:a6:a3:bd:89:47:9d:09:bc:37:b3:ec:a9:2c:22:34:17:70: 17:d4:13:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUccmDfKpAsL4qrRxy2A05MjkOEvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY4NTVDMzc4RjlDOUNBMzcxQ0VBQTM0MEE5RkNCRjQ4 RkM5REZBMjAeFw0yNTA0MjcxMzE3NDlaFw0yNTA0MjgxNjU1NDlaMDMxMTAvBgNV BAMTKDU2NUVFRkE1RUIxNTRCRDUwM0MwREUxMjcwMDJBMTE0ODdCOTIyOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcrbJPnDPcIa9Xo+XnfA4veto3 H1iObbdPetDHxWEQTvjNy0409D6w2FfhbuaMfak1q4Q3N8u4reK37VuXwdzs/6Tf BaAoe6fsm2+nUaBIF+qLqIYpZ0o6nEH+9JA8DEvsK/Hlhf34pRIgtDjKm09twUW1 Lv4mRQxv6IfaAaokpzG9YtIHhpO4j9NW/eTvDMCp0eMn0SFbsFG/PRkkXDgwm2+O fR+QlZTgAd8dWK/gTLstw1rMtOtt0FIe+i1s43fVoKKIH9iF+pXDUgue0CGgTM5e AQxxEvih1ymsaP8Clwrr5epw+IcK7Uj9GosWmyVxv3m2rl90jZupqKWzFLlXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVl7vpesVS9UDwN4ScAKhFIe5IpcwHwYDVR0j BBgwFoAU9oVcN4+cnKNxzqo0Cp/L9I/J36IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOW1XUURSWG82Y2QyeDhLc2VkZG5rdktraG0zVUFLek56b3ZDWUU4Vnpo NUcvMC9GNjg1NUMzNzhGOUM5Q0EzNzFDRUFBMzQwQTlGQ0JGNDhGQzlERkEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2ODU1QzM3OEY5QzlDQTM3 MUNFQUEzNDBBOUZDQkY0OEZDOURGQTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OW1XUURSWG82Y2QyeDhLc2VkZG5rdktraG0zVUFLek56b3ZDWUU4VnpoNUcvMC9G Njg1NUMzNzhGOUM5Q0EzNzFDRUFBMzQwQTlGQ0JGNDhGQzlERkEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXi19QQHmdgRcCDCAQpa7g4nhZ6t8SgHsCQrPyE7N9cjaYTwFTxaFkJi7417B c7qFkMI5j0ep82/ET4CFtNDrHKOgsIDZiywl6WqR1+/raanGXqnv3t+Wv9jDewQE ZPsZ8B1Kgci+lkXAInDCARP8w2r1AN5Lqjem/tcwLR4PpAFrt49a+sSjjX/+ucHA 7Qhlo7AIYkgjBtdIfDEXPxY6c1Yk8/vVfZCNIAtL2qU4cwy2w6Ny4frMabe9rdMR tOrJl2rxvARN8r7D5hZqcRHa2TYPxt2NHwe2JN13bePGsh3VhqFbtbp5Ld5r+aaj vYlHnQm8N7PsqSwiNBdwF9QTEw== -----END CERTIFICATE-----Generated at Sun Apr 27 14:50:45 2025 by rpki-client on console.sobornost.net