$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft File: CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft (raw, json) Hash identifier: 2341B8a4c29NgmNOpy/qzT5wRE0UxpMNpqZe2KoQZaA= Subject key identifier: 5B:61:C0:88:0E:3A:CC:4A:52:09:E4:A0:40:D0:7F:4F:DA:05:94:F1 Authority key identifier: CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38 Certificate issuer: /CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38 Certificate serial: 2845EDD5687DA82770C3790739E906E706561225 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer Subject info access: rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft Manifest number: 21 Signing time: Sat 26 Apr 2025 07:59:11 +0000 Manifest this update: Sat 26 Apr 2025 07:54:11 +0000 Manifest next update: Sun 27 Apr 2025 08:36:11 +0000 Files and hashes: 1: 34352e3136362e3230302e302f32322d3332203d3e20323638303333.roa (hash: amDeMX/BZEdOLpiY5eI+Syvf2w+HOessOzMCfITuWvo=) 2: CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl (hash: gIVQlBCXox/EA+qU/iEHR+rCCq1mUuQ1/K86YabD3Ic=) 3: 323830343a353666303a3a2f33322d313238203d3e20323638303333.roa (hash: mgsYCCjJSoJmcEEh/9mNABYK1PuWrIpDzusmWD7BpKk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Apr 2025 05:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:45:ed:d5:68:7d:a8:27:70:c3:79:07:39:e9:06:e7:06:56:12:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38 Validity Not Before: Apr 26 07:54:11 2025 GMT Not After : Apr 27 08:36:11 2025 GMT Subject: CN=5B61C0880E3ACC4A5209E4A040D07F4FDA0594F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:96:35:2f:27:80:c2:ee:06:6c:46:7c:1b:0d: ff:ee:58:97:70:14:4a:b6:80:d3:5b:78:1f:bc:08: 2e:61:0e:72:88:11:e7:76:c7:1d:e5:5e:20:d4:22: 15:06:18:87:4d:c2:ef:0b:27:34:1c:8a:ee:70:21: d5:f6:3a:d3:d6:87:ad:9a:47:4e:85:cc:14:70:b1: 03:4b:2a:a8:2c:f8:f6:be:f6:df:75:7e:c8:06:e1: ef:2c:64:b5:12:21:e2:ac:51:95:cc:45:30:f0:53: cb:f0:50:72:65:6f:b8:06:65:2a:ee:93:e1:b7:db: cf:43:b7:81:9b:f8:5f:64:ca:d1:74:b5:ec:de:90: 34:bd:b5:8d:f1:3d:ee:fc:05:9a:8e:b7:54:a3:4a: 7f:ab:a3:06:2a:68:ed:c0:0e:36:28:0a:cf:63:4f: 92:b9:64:32:ce:c8:2e:1a:ef:e5:b8:2c:c4:0e:38: be:8f:22:43:ec:1d:07:2b:a3:d7:da:e9:a3:d4:e3: fa:d4:d3:2a:4c:d9:49:2a:50:8a:ec:49:bc:0b:3d: 31:1f:1f:e6:a8:50:bd:1a:4e:53:7c:6c:09:11:1f: 37:fd:64:fe:91:c5:d5:1d:9d:bb:e0:db:9f:f4:58: b0:41:c0:a5:a6:0b:9f:b3:a6:94:42:e2:f2:f3:e2: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:61:C0:88:0E:3A:CC:4A:52:09:E4:A0:40:D0:7F:4F:DA:05:94:F1 X509v3 Authority Key Identifier: keyid:CE:6B:71:A4:B0:42:85:BB:0E:FE:A1:1B:40:BA:75:9B:C5:FD:1C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/CE6B71A4B04285BB0EFEA11B40BA759BC5FD1C38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0f:14:b1:f5:9a:a9:de:ab:20:c8:ca:03:4f:e8:33:8b:e1: 42:20:cc:62:66:72:0a:d3:e1:28:cf:95:d8:d2:f4:b0:e8:0b: a4:0e:2e:26:01:09:39:fd:cb:a4:e8:9e:98:e8:02:f1:82:97: ea:2a:cf:3a:0a:bc:22:16:0e:f2:d0:39:98:86:28:ae:89:c8: 5a:03:f1:e5:1f:a0:6a:38:59:d1:55:47:e6:38:8d:a3:eb:63: fb:75:00:b2:13:7a:b6:dc:41:81:72:41:f3:14:46:82:18:30: e4:b4:02:ce:99:32:02:9f:70:0b:0d:bb:15:33:cf:c6:f3:46: 38:0d:2e:27:bd:1a:1c:e6:d1:97:3d:d3:28:2f:21:bf:53:7c: a7:f8:e9:99:6d:4f:e5:4b:9f:90:3b:25:6d:75:18:4f:96:21: 45:84:d0:63:62:33:fb:c9:1f:40:10:7d:f9:b4:10:0c:f8:d6: 5f:c6:bb:7e:20:82:bf:87:dd:80:41:ac:67:e6:f3:3f:10:db: 3f:81:bc:a3:a3:1b:58:1a:93:64:be:2c:fb:2c:00:eb:2b:61: fa:c6:48:fb:79:62:2b:09:44:aa:07:ef:c8:49:a4:6d:0e:aa: 0b:1a:74:2f:30:01:0c:7c:09:ed:10:37:2c:42:56:78:e0:52: 29:87:1f:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKEXt1Wh9qCdww3kHOekG5wZWEiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U2QjcxQTRCMDQyODVCQjBFRkVBMTFCNDBCQTc1OUJD NUZEMUMzODAeFw0yNTA0MjYwNzU0MTFaFw0yNTA0MjcwODM2MTFaMDMxMTAvBgNV BAMTKDVCNjFDMDg4MEUzQUNDNEE1MjA5RTRBMDQwRDA3RjRGREEwNTk0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRljUvJ4DC7gZsRnwbDf/uWJdw FEq2gNNbeB+8CC5hDnKIEed2xx3lXiDUIhUGGIdNwu8LJzQciu5wIdX2OtPWh62a R06FzBRwsQNLKqgs+Pa+9t91fsgG4e8sZLUSIeKsUZXMRTDwU8vwUHJlb7gGZSru k+G3289Dt4Gb+F9kytF0tezekDS9tY3xPe78BZqOt1SjSn+rowYqaO3ADjYoCs9j T5K5ZDLOyC4a7+W4LMQOOL6PIkPsHQcro9fa6aPU4/rU0ypM2UkqUIrsSbwLPTEf H+aoUL0aTlN8bAkRHzf9ZP6RxdUdnbvg25/0WLBBwKWmC5+zppRC4vLz4n2tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUW2HAiA46zEpSCeSgQNB/T9oFlPEwHwYDVR0j BBgwFoAUzmtxpLBChbsO/qEbQLp1m8X9HDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUY0cU5rWFVrbjRHbm1LVWRuSGZKV2dFSHV0Z2Nnd0FkWEFOZjU5UHE2 ajIvMC9DRTZCNzFBNEIwNDI4NUJCMEVGRUExMUI0MEJBNzU5QkM1RkQxQzM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNkI3MUE0QjA0Mjg1QkIw RUZFQTExQjQwQkE3NTlCQzVGRDFDMzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUY0cU5rWFVrbjRHbm1LVWRuSGZKV2dFSHV0Z2Nnd0FkWEFOZjU5UHE2ajIvMC9D RTZCNzFBNEIwNDI4NUJCMEVGRUExMUI0MEJBNzU5QkM1RkQxQzM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXg8UsfWaqd6rIMjKA0/oM4vhQiDMYmZyCtPhKM+V2NL0sOgLpA4uJgEJOf3L pOiemOgC8YKX6irPOgq8IhYO8tA5mIYoronIWgPx5R+gajhZ0VVH5jiNo+tj+3UA shN6ttxBgXJB8xRGghgw5LQCzpkyAp9wCw27FTPPxvNGOA0uJ70aHObRlz3TKC8h v1N8p/jpmW1P5UufkDslbXUYT5YhRYTQY2Iz+8kfQBB9+bQQDPjWX8a7fiCCv4fd gEGsZ+bzPxDbP4G8o6MbWBqTZL4s+ywA6yth+sZI+3liKwlEqgfvyEmkbQ6qCxp0 LzABDHwJ7RA3LEJWeOBSKYcfBA== -----END CERTIFICATE-----Generated at Sat Apr 26 11:16:43 2025 by rpki-client on console.sobornost.net