$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft File: CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft (raw, json) Hash identifier: iXVseARc4M9TSUQ8VlGe0NTdktQooNEjd0V3hUQWXbg= Subject key identifier: 41:58:AD:CC:5D:9F:01:BA:7B:AF:27:2D:3C:22:5E:63:BA:90:AC:2C Authority key identifier: CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96 Certificate issuer: /CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96 Certificate serial: 413DE73CF488515B50B0059FE38A5E2EBE60BB90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer Subject info access: rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft Manifest number: 0209 Signing time: Sun 27 Apr 2025 17:30:02 +0000 Manifest this update: Sun 27 Apr 2025 17:25:02 +0000 Manifest next update: Mon 28 Apr 2025 20:21:02 +0000 Files and hashes: 1: CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl (hash: lT0ztjBF4DyaS6wixKe98jqSNk1ypvDKomhT0DHZJVc=) 2: 3230302e3132342e3137332e302f32342d3234203d3e20323730323739.roa (hash: 01D5qhjJLkkhNf3Sz3aZcGRoiRACCWeyCYEQrfnlp+c=) 3: 3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa (hash: VHq8ZEyoowCZWXDzrootpXLcNjZPy/BNrxBkB8brJ5I=) 4: 323830343a363939343a3a2f33322d3332203d3e20323730323739.roa (hash: 8VEpB0xd0VX/j49eruyLM4U0ob1UYw5ULKbATLfjNDk=) 5: 3230302e3132342e3137342e302f32342d3234203d3e20323730323739.roa (hash: fVRhOOtcOeieEVXaAUm+KUqKVK9Kq80KJlnipzsXd8Y=) 6: 3230302e3132342e3137352e302f32342d3234203d3e20323730323739.roa (hash: 76In6FY6+iuAeEYRByeAicyXGMlVYFf2X3CYH3s/a1Y=) 7: 3230302e3132342e3137322e302f32322d3232203d3e20323730323739.roa (hash: G21rYQorQc2vMjNSJNaeitlhvIhWXGxuqhbE6L3iV9I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 20:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3d:e7:3c:f4:88:51:5b:50:b0:05:9f:e3:8a:5e:2e:be:60:bb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96 Validity Not Before: Apr 27 17:25:02 2025 GMT Not After : Apr 28 20:21:02 2025 GMT Subject: CN=4158ADCC5D9F01BA7BAF272D3C225E63BA90AC2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2f:93:4b:04:60:3b:61:a6:09:1e:44:5b:a7: a7:a6:82:e1:20:4d:52:ed:ac:78:bd:ff:c7:f7:09: 5e:81:4c:eb:fd:fd:a2:f7:c1:70:e3:92:d4:2a:aa: d9:da:af:4b:36:f2:11:24:a9:f0:45:f3:ba:b2:d7: 76:09:5a:f1:2a:49:94:68:d5:30:10:2c:fc:a3:04: 68:0b:e6:6d:a4:e5:a2:4e:1f:00:7c:93:d7:13:0a: a8:49:0d:09:1d:c0:ac:c2:c3:5d:53:ff:0f:0f:f5: c5:66:bb:c7:d5:f5:8d:a0:c5:fb:6e:eb:f7:86:dc: 90:38:12:7f:08:60:a6:51:ec:21:f9:4f:e6:d3:9b: 3f:cc:8d:3f:cf:38:d4:aa:ef:3f:ea:ac:de:84:a0: ea:81:d5:b6:71:3f:de:c1:6c:1c:05:6e:cc:fb:1b: c2:2d:fb:b9:4e:29:9d:e7:f3:28:5e:f9:02:11:d6: 8b:a7:e7:af:63:4d:03:71:51:4e:18:0f:05:6a:41: 45:d2:3b:94:ec:d7:f7:8f:d0:a4:06:3b:d5:03:9c: a2:5d:75:11:87:1f:5a:00:6b:20:de:b7:0b:24:09: 55:db:e9:ab:c9:3f:08:df:2a:f2:21:9b:df:6e:7e: 41:9f:60:6d:3c:a9:4d:b6:c4:37:08:81:78:17:55: 8d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:58:AD:CC:5D:9F:01:BA:7B:AF:27:2D:3C:22:5E:63:BA:90:AC:2C X509v3 Authority Key Identifier: keyid:CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:50:b7:92:84:b6:d3:f9:77:cd:4c:f6:15:58:5e:b0:c5:04: bd:14:99:a7:53:aa:24:3e:8f:91:c0:99:da:f1:c6:d1:05:fa: 48:67:f4:52:52:d6:14:88:f2:81:28:c1:f9:83:55:cc:0a:e1: 60:f8:07:0a:1a:8a:2e:88:01:fc:4c:e6:e0:fd:3b:6e:c4:60: b1:91:47:89:ff:43:56:01:af:c2:e7:b8:ed:29:80:19:a3:55: 0a:6b:a9:6e:6e:54:68:8d:e3:e0:27:e8:d2:10:2e:b4:f8:a4: f0:5d:1f:a3:39:5e:f6:a6:1d:78:b5:f4:14:18:ce:b8:e3:44: f8:c8:7a:6c:39:e6:a2:4e:2d:87:43:50:c9:be:3b:bf:1b:af: ff:65:f9:9b:0d:2f:a0:89:5b:8d:4a:28:9f:9e:5d:ef:e1:9d: 6d:5f:f3:c2:5a:3b:fe:2f:2a:f1:51:2e:35:a5:c1:21:8e:59: c2:66:13:45:78:e7:1d:86:c2:84:48:56:18:6a:26:ba:c6:f7: 24:8f:5e:aa:a8:ce:39:2b:44:72:1f:ce:10:75:36:31:5b:26: 71:77:83:e1:67:ab:67:ae:ca:f0:07:1c:75:81:b1:50:06:63: e9:1e:f0:71:13:78:55:3a:09:08:24:a7:39:e9:ce:97:3c:c7: f4:96:f2:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQT3nPPSIUVtQsAWf44peLr5gu5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0MDg2QzUzQTBFMUExOUFFNUFBMDBBOTg3NEFCQkQ3 ODU2M0E5NjAeFw0yNTA0MjcxNzI1MDJaFw0yNTA0MjgyMDIxMDJaMDMxMTAvBgNV BAMTKDQxNThBRENDNUQ5RjAxQkE3QkFGMjcyRDNDMjI1RTYzQkE5MEFDMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChL5NLBGA7YaYJHkRbp6emguEg TVLtrHi9/8f3CV6BTOv9/aL3wXDjktQqqtnar0s28hEkqfBF87qy13YJWvEqSZRo 1TAQLPyjBGgL5m2k5aJOHwB8k9cTCqhJDQkdwKzCw11T/w8P9cVmu8fV9Y2gxftu 6/eG3JA4En8IYKZR7CH5T+bTmz/MjT/PONSq7z/qrN6EoOqB1bZxP97BbBwFbsz7 G8It+7lOKZ3n8yhe+QIR1oun569jTQNxUU4YDwVqQUXSO5Ts1/eP0KQGO9UDnKJd dRGHH1oAayDetwskCVXb6avJPwjfKvIhm99ufkGfYG08qU22xDcIgXgXVY0/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQVitzF2fAbp7ryctPCJeY7qQrCwwHwYDVR0j BBgwFoAUzkCGxToOGhmuWqAKmHSrvXhWOpYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkt4ZVVXaVlLb3ZCQlZBVjU5Q2NRQXVDWVFaNHN6ZXFBRGNkM2hwUmZM Q1IvMS9DRTQwODZDNTNBMEUxQTE5QUU1QUEwMEE5ODc0QUJCRDc4NTYzQTk2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNDA4NkM1M0EwRTFBMTlB RTVBQTAwQTk4NzRBQkJENzg1NjNBOTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qkt4ZVVXaVlLb3ZCQlZBVjU5Q2NRQXVDWVFaNHN6ZXFBRGNkM2hwUmZMQ1IvMS9D RTQwODZDNTNBMEUxQTE5QUU1QUEwMEE5ODc0QUJCRDc4NTYzQTk2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVFC3koS20/l3zUz2FVhesMUEvRSZp1OqJD6PkcCZ2vHG0QX6SGf0UlLWFIjy gSjB+YNVzArhYPgHChqKLogB/Ezm4P07bsRgsZFHif9DVgGvwue47SmAGaNVCmup bm5UaI3j4Cfo0hAutPik8F0fozle9qYdeLX0FBjOuONE+Mh6bDnmok4th0NQyb47 vxuv/2X5mw0voIlbjUoon55d7+GdbV/zwlo7/i8q8VEuNaXBIY5ZwmYTRXjnHYbC hEhWGGomusb3JI9eqqjOOStEch/OEHU2MVsmcXeD4WerZ67K8AccdYGxUAZj6R7w cRN4VToJCCSnOenOlzzH9JbygA== -----END CERTIFICATE-----Generated at Sun Apr 27 19:12:14 2025 by rpki-client on console.sobornost.net