$ rpki-client -vvf rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft File: 66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft (raw, json) Hash identifier: XwwmtJ8ou2C1cjkeRI2+D5Y36dVWEAb5qtA9D3CnWwE= Subject key identifier: 7E:5F:4A:67:38:01:8C:A5:22:4F:90:E9:21:A7:C5:3F:F7:43:C0:D7 Authority key identifier: 66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A Certificate issuer: /CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A Certificate serial: 42C62B721917FD9AC98A0B1A4F8BFA253BB71A6B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer Subject info access: rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft Manifest number: 28 Signing time: Mon 28 Apr 2025 08:33:57 +0000 Manifest this update: Mon 28 Apr 2025 08:28:57 +0000 Manifest next update: Tue 29 Apr 2025 11:19:57 +0000 Files and hashes: 1: 34352e37312e3233372e302f32342d3234203d3e20323637363235.roa (hash: iUnbmlTouB10xnx8TOK+EWUlJuN+cWOIF6iqgO4OrK4=) 2: 66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl (hash: EJio93foQ19kQCjKPxJUqL1cROZEuDV6sehhlczwytc=) 3: 34352e37312e3233362e302f32342d3234203d3e20323637363235.roa (hash: VUTn+Y8YyzHneDvvRQcoyorG1q5ZDQSxPkSxk5vT2hY=) 4: 323830343a343435343a3a2f33322d3438203d3e20323637363235.roa (hash: /WjYyisieWtzaIuL75i3lmBc4NoZr/0fgfXNHo2u2Is=) 5: 34352e37312e3233382e302f32342d3234203d3e20323637363235.roa (hash: usuDM2FAYkWoIM3CCbZCOoUM273ijs0GyzSA6Jp+vII=) 6: 34352e37312e3233362e302f32322d3233203d3e20323637363235.roa (hash: 9Ayla/+sosVGnmtIxYAHJNLCvzWyM6XzIGWav1hvbBg=) 7: 34352e37312e3233392e302f32342d3234203d3e20323637363235.roa (hash: hPSaKo57ySusHDN0f4CdKQ0QS4fQ2++vIqAa8DQVylk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c6:2b:72:19:17:fd:9a:c9:8a:0b:1a:4f:8b:fa:25:3b:b7:1a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A Validity Not Before: Apr 28 08:28:57 2025 GMT Not After : Apr 29 11:19:57 2025 GMT Subject: CN=7E5F4A6738018CA5224F90E921A7C53FF743C0D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:cc:aa:a9:ec:fe:a7:ea:ca:65:f2:db:06: 6a:af:d1:71:ab:0e:d5:81:90:6b:c1:e1:f9:ff:dd: dc:5a:f8:af:55:06:82:2a:7e:28:a0:22:6c:c8:a7: bb:ba:ad:c5:c1:ab:9b:e2:6f:9f:dc:ce:ee:96:37: 95:bc:55:5b:11:e0:67:15:3c:78:74:c5:df:ec:73: 7d:08:e2:de:40:64:74:d9:3d:99:6d:f6:ee:ab:05: 7b:4b:6e:4e:37:87:e1:31:bf:4f:37:47:75:c3:e0: 19:97:8e:ad:a4:81:a9:b4:ff:a4:6d:4d:91:6c:5e: 12:f2:53:65:a6:28:41:8b:fd:cd:3f:00:15:94:3d: d4:05:4f:3b:0a:ca:c7:e3:5c:47:2c:72:3e:7d:52: df:1c:56:d4:d3:7e:6d:3e:4a:e0:95:24:d1:81:92: 7f:2f:32:55:38:d6:18:24:dd:cd:2a:6e:9f:76:e8: 6d:d1:56:eb:59:00:53:b6:fd:f5:84:fe:a5:2b:0e: 54:98:32:78:cc:98:f9:a4:4f:f1:2e:2b:bf:24:52: f7:e8:35:54:4a:4c:a8:54:92:f2:7a:ec:21:50:da: 3c:f6:2c:32:36:c4:0d:b5:dd:90:59:d0:9a:ba:25: 06:86:db:89:67:55:72:f2:79:1c:23:ad:f4:53:c9: cf:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5F:4A:67:38:01:8C:A5:22:4F:90:E9:21:A7:C5:3F:F7:43:C0:D7 X509v3 Authority Key Identifier: keyid:66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:9d:5d:f5:9f:d1:36:91:76:56:87:be:ed:9a:bb:06:a4:9f: ec:1f:32:07:92:a0:ca:6d:c0:69:59:59:3d:07:9b:29:04:5a: 28:dd:99:ae:35:fd:2b:6d:76:a9:44:18:a2:ac:4b:dc:93:46: ad:50:3e:48:02:2d:8d:42:07:2e:45:cc:0f:60:44:33:37:51: 5f:06:a6:26:93:0c:cc:f7:d5:f5:ad:4f:95:b8:ec:f0:34:b4: 78:61:74:6a:c9:f4:cf:89:71:29:25:8c:9c:fb:39:4d:fe:f5: 92:40:17:71:d5:e1:b1:8f:64:3c:fa:fd:5e:84:e1:be:93:ca: 47:42:3a:db:37:06:d7:b4:bb:57:ee:c1:f5:fb:07:ab:4f:23: 9e:d0:28:d3:57:78:ac:34:2f:a5:48:cb:8d:77:4f:ee:05:28: c6:66:9a:db:d2:7b:7c:cf:1b:6b:b5:44:33:54:8e:dd:f0:4a: 99:af:8a:26:10:af:83:d6:e1:6a:42:d1:5d:db:f8:2c:d8:ec: a9:84:7b:73:c1:d8:a7:7f:19:ba:7f:d2:20:ee:a3:eb:21:32: 90:52:63:49:1d:14:10:e8:cd:80:ca:ef:88:43:aa:00:90:9f: 21:eb:6e:40:05:81:3e:fb:64:52:39:a0:35:78:32:22:3f:02: 49:b2:60:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQsYrchkX/ZrJigsaT4v6JTu3GmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZENEZFNzlFRDhBOEUwRDE5NTA0MUMzMzVFRUIxQjc0 OEExMkYwQTAeFw0yNTA0MjgwODI4NTdaFw0yNTA0MjkxMTE5NTdaMDMxMTAvBgNV BAMTKDdFNUY0QTY3MzgwMThDQTUyMjRGOTBFOTIxQTdDNTNGRjc0M0MwRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Acyqqez+p+rKZfLbBmqv0XGr DtWBkGvB4fn/3dxa+K9VBoIqfiigImzIp7u6rcXBq5vib5/czu6WN5W8VVsR4GcV PHh0xd/sc30I4t5AZHTZPZlt9u6rBXtLbk43h+Exv083R3XD4BmXjq2kgam0/6Rt TZFsXhLyU2WmKEGL/c0/ABWUPdQFTzsKysfjXEcscj59Ut8cVtTTfm0+SuCVJNGB kn8vMlU41hgk3c0qbp926G3RVutZAFO2/fWE/qUrDlSYMnjMmPmkT/EuK78kUvfo NVRKTKhUkvJ67CFQ2jz2LDI2xA213ZBZ0Jq6JQaG24lnVXLyeRwjrfRTyc9PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfl9KZzgBjKUiT5DpIafFP/dDwNcwHwYDVR0j BBgwFoAUZtT+ee2Kjg0ZUEHDNe6xt0ihLwowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUNaakhwa0FlV0w3UVd6Ync1WXRCQ0FVcEdxTmpSeG1rRkpmRm1zNFU2 R0YvMC82NkQ0RkU3OUVEOEE4RTBEMTk1MDQxQzMzNUVFQjFCNzQ4QTEyRjBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RDRGRTc5RUQ4QThFMEQx OTUwNDFDMzM1RUVCMUI3NDhBMTJGMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUNaakhwa0FlV0w3UVd6Ync1WXRCQ0FVcEdxTmpSeG1rRkpmRm1zNFU2R0YvMC82 NkQ0RkU3OUVEOEE4RTBEMTk1MDQxQzMzNUVFQjFCNzQ4QTEyRjBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApJ1d9Z/RNpF2Voe+7Zq7BqSf7B8yB5Kgym3AaVlZPQebKQRaKN2ZrjX9K212 qUQYoqxL3JNGrVA+SAItjUIHLkXMD2BEMzdRXwamJpMMzPfV9a1Plbjs8DS0eGF0 asn0z4lxKSWMnPs5Tf71kkAXcdXhsY9kPPr9XoThvpPKR0I62zcG17S7V+7B9fsH q08jntAo01d4rDQvpUjLjXdP7gUoxmaa29J7fM8ba7VEM1SO3fBKma+KJhCvg9bh akLRXdv4LNjsqYR7c8HYp38Zun/SIO6j6yEykFJjSR0UEOjNgMrviEOqAJCfIetu QAWBPvtkUjmgNXgyIj8CSbJgTA== -----END CERTIFICATE-----Generated at Mon Apr 28 10:49:26 2025 by rpki-client on console.sobornost.net