$ rpki-client -vvf rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.mft File: CC8086D196E8A5C61982081F90E17B277D50F224.mft (raw, json) Hash identifier: RjiBQGMJMqCBsXRyY2Gq71LXzo2QnXwQxzWmMwCqgj8= Subject key identifier: 09:3A:F9:D7:06:DA:12:6F:40:5D:D4:DD:82:E2:DA:B4:25:B5:3A:EC Authority key identifier: CC:80:86:D1:96:E8:A5:C6:19:82:08:1F:90:E1:7B:27:7D:50:F2:24 Certificate issuer: /CN=CC8086D196E8A5C61982081F90E17B277D50F224 Certificate serial: 0C0D6CD16020F009178C119C9D955D9081A48C66 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8086D196E8A5C61982081F90E17B277D50F224.cer Subject info access: rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.mft Manifest number: 020A Signing time: Mon 28 Apr 2025 11:30:00 +0000 Manifest this update: Mon 28 Apr 2025 11:25:00 +0000 Manifest next update: Tue 29 Apr 2025 13:25:00 +0000 Files and hashes: 1: 34352e3136312e3139362e302f32322d3234203d3e20323635393035.roa (hash: vLmdo9KQ58nXNGaKvn9M76mAb5Rkp6osL4lr4pCuSjQ=) 2: 3133312e3139362e3130302e302f32322d3234203d3e20323635393035.roa (hash: 7rU9aTdzNPtasJu1My8RTNY/tWo9mK2SMy8Pd77r0+I=) 3: 323830343a336661383a3a2f33322d3334203d3e20323635393035.roa (hash: qgrx0B2fzRiY47gXpq+yGna7KKXinyEb5ugH1d9L0GA=) 4: CC8086D196E8A5C61982081F90E17B277D50F224.crl (hash: O8tecf6eSdiRjEPC7X1Qn+6cl8cHjYdvbXNzdnb9ws4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.crl rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8086D196E8A5C61982081F90E17B277D50F224.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 13:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:0d:6c:d1:60:20:f0:09:17:8c:11:9c:9d:95:5d:90:81:a4:8c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8086D196E8A5C61982081F90E17B277D50F224 Validity Not Before: Apr 28 11:25:00 2025 GMT Not After : Apr 29 13:25:00 2025 GMT Subject: CN=093AF9D706DA126F405DD4DD82E2DAB425B53AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d5:67:14:4f:d6:55:74:5c:66:09:f5:ac:c7: fb:7f:15:4a:2c:3c:bb:7e:de:0f:f1:2f:14:88:f7: 56:d2:06:12:32:9b:51:b4:68:cb:80:46:31:63:0b: 00:08:b5:fe:da:0d:1c:0c:1e:41:2e:c1:4d:cd:ee: e4:41:97:81:29:46:2c:f5:eb:b6:b4:e3:88:5f:30: 08:00:82:95:3d:0c:73:8b:31:cd:95:58:df:2a:71: bc:31:09:25:89:b1:88:3d:94:be:df:e1:61:a2:2d: 94:54:23:b5:0c:8b:67:e7:61:f7:c8:d2:91:a7:a7: 41:b8:e1:86:95:3f:bb:48:06:4b:43:d9:49:f6:6c: 19:9f:35:8e:94:e8:69:68:25:2a:60:40:a6:e1:c5: d1:a9:82:8b:17:de:7a:11:00:6f:64:27:21:50:32: 46:97:2c:32:bc:c0:f7:5d:a7:fd:0e:27:f3:43:67: 80:9a:63:67:fa:57:ce:5c:c4:be:df:a1:c4:67:7a: 1a:19:97:85:5e:a2:89:4a:f8:34:28:e5:58:95:db: 3d:14:f8:d8:19:72:8a:1f:bf:5b:19:52:da:c5:7b: 23:aa:a1:3f:04:ed:17:ad:40:d2:75:60:71:b4:90: f4:a3:24:20:1d:92:74:e3:92:a0:85:e0:7a:39:22: cf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3A:F9:D7:06:DA:12:6F:40:5D:D4:DD:82:E2:DA:B4:25:B5:3A:EC X509v3 Authority Key Identifier: keyid:CC:80:86:D1:96:E8:A5:C6:19:82:08:1F:90:E1:7B:27:7D:50:F2:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8086D196E8A5C61982081F90E17B277D50F224.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:34:60:d4:f9:04:91:85:b1:d0:24:91:af:63:e1:6e:67:80: af:38:d5:9a:6b:4c:49:9f:67:47:65:07:e2:01:6e:4f:20:ea: 63:a6:9e:1e:93:c3:2c:c5:6b:34:8d:47:a3:3b:b7:54:86:3b: 4f:f2:40:1d:03:84:a7:49:0a:3a:a5:94:cd:bc:ae:a6:b9:01: 9b:5e:16:d0:45:c9:94:f9:e9:58:5e:1d:7a:7b:2f:c2:6f:1a: a8:4e:4a:f9:4c:b4:1c:52:d8:e8:03:6c:5a:e5:96:ad:4f:89: c4:99:16:96:38:03:27:34:90:3c:1b:ba:64:ae:e0:01:9b:23: 88:0a:2c:9a:d8:50:3e:53:01:be:51:50:7d:80:08:7d:b4:db: f4:fb:1f:69:bf:e1:0b:bd:39:a8:02:97:24:78:33:8d:6d:6f: 78:1c:55:82:cb:dc:c9:39:83:03:6d:77:06:96:a1:67:ae:0d: 95:c4:21:7d:76:90:09:2b:a3:91:09:7f:55:52:b7:53:23:58: b9:96:7a:af:05:0d:ae:87:02:9c:60:5e:86:88:35:a2:6d:81: f3:79:56:ac:cb:e2:87:93:c3:17:4f:92:72:65:48:5b:8e:25: e6:d1:db:76:23:0b:82:bf:a2:8e:75:f8:8e:37:5a:8b:49:12: 11:c3:0a:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDA1s0WAg8AkXjBGcnZVdkIGkjGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4MDg2RDE5NkU4QTVDNjE5ODIwODFGOTBFMTdCMjc3 RDUwRjIyNDAeFw0yNTA0MjgxMTI1MDBaFw0yNTA0MjkxMzI1MDBaMDMxMTAvBgNV BAMTKDA5M0FGOUQ3MDZEQTEyNkY0MDVERDRERDgyRTJEQUI0MjVCNTNBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS1WcUT9ZVdFxmCfWsx/t/FUos PLt+3g/xLxSI91bSBhIym1G0aMuARjFjCwAItf7aDRwMHkEuwU3N7uRBl4EpRiz1 67a044hfMAgAgpU9DHOLMc2VWN8qcbwxCSWJsYg9lL7f4WGiLZRUI7UMi2fnYffI 0pGnp0G44YaVP7tIBktD2Un2bBmfNY6U6GloJSpgQKbhxdGpgosX3noRAG9kJyFQ MkaXLDK8wPddp/0OJ/NDZ4CaY2f6V85cxL7focRnehoZl4VeoolK+DQo5ViV2z0U +NgZcoofv1sZUtrFeyOqoT8E7RetQNJ1YHG0kPSjJCAdknTjkqCF4Ho5Is9jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCTr51wbaEm9AXdTdguLatCW1OuwwHwYDVR0j BBgwFoAUzICG0ZbopcYZgggfkOF7J31Q8iQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWZDMVlVUHY1ajhFOGtuYzdDWXREd3BudlgzNW5Ld0VTUGZEbXhTdUN1 RkovMS9DQzgwODZEMTk2RThBNUM2MTk4MjA4MUY5MEUxN0IyNzdENTBGMjI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDODA4NkQxOTZFOEE1QzYx OTgyMDgxRjkwRTE3QjI3N0Q1MEYyMjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWZDMVlVUHY1ajhFOGtuYzdDWXREd3BudlgzNW5Ld0VTUGZEbXhTdUN1RkovMS9D QzgwODZEMTk2RThBNUM2MTk4MjA4MUY5MEUxN0IyNzdENTBGMjI0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAazRg1PkEkYWx0CSRr2PhbmeArzjVmmtMSZ9nR2UH4gFuTyDqY6aeHpPDLMVr NI1Hozu3VIY7T/JAHQOEp0kKOqWUzbyuprkBm14W0EXJlPnpWF4densvwm8aqE5K +Uy0HFLY6ANsWuWWrU+JxJkWljgDJzSQPBu6ZK7gAZsjiAosmthQPlMBvlFQfYAI fbTb9Psfab/hC705qAKXJHgzjW1veBxVgsvcyTmDA213BpahZ64NlcQhfXaQCSuj kQl/VVK3UyNYuZZ6rwUNrocCnGBehog1om2B83lWrMvih5PDF0+ScmVIW44l5tHb diMLgr+ijnX4jjdai0kSEcMKgg== -----END CERTIFICATE-----Generated at Mon Apr 28 13:04:58 2025 by rpki-client on console.sobornost.net