$ rpki-client -vvf rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft File: 1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft (raw, json) Hash identifier: 6shzF1wZGXy066yF2WWoABtpBBnCUXVKsA2jpsGfMXw= Subject key identifier: 1F:46:F9:1D:2F:0A:D5:7B:4B:1E:FD:96:35:B3:F9:D9:A0:23:F8:4B Authority key identifier: 1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55 Certificate issuer: /CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555 Certificate serial: 36EEC394B2F00FA0CB5F200E4CBED18F9A403AAD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft Manifest number: 0204 Signing time: Fri 25 Apr 2025 05:38:26 +0000 Manifest this update: Fri 25 Apr 2025 05:33:26 +0000 Manifest next update: Sat 26 Apr 2025 05:59:26 +0000 Files and hashes: 1: 3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa (hash: WWQDaPRjLqL6gxa8oKBNJP8aA85LM8dmmWOF68n+4eM=) 2: 3136382e302e3234302e302f32322d3234203d3e20323632343038.roa (hash: nc1KYLiIl6MQ2cB8LAaJ1Ei9pNJhoTR2e/w7ESX0VCI=) 3: 1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl (hash: 5vlZCJXoAgVAQ9TwT3cbgxV8daRye4JCgYk2l+l3iQ4=) 4: 323830343a326430633a3a2f33322d3332203d3e20323632343038.roa (hash: I/xjLRtE0sns2aDZvy2RT2f40WrXsCM4pXsxx+HtLKQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 05:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ee:c3:94:b2:f0:0f:a0:cb:5f:20:0e:4c:be:d1:8f:9a:40:3a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555 Validity Not Before: Apr 25 05:33:26 2025 GMT Not After : Apr 26 05:59:26 2025 GMT Subject: CN=1F46F91D2F0AD57B4B1EFD9635B3F9D9A023F84B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:82:5c:89:65:35:0e:7a:22:62:5c:51:81:dc: 42:42:08:b2:d1:35:09:c7:e1:90:f6:01:9d:e5:86: 12:5c:be:ce:95:a7:04:63:b3:63:97:23:5a:4c:01: 7f:e7:f8:39:65:18:38:d3:7a:42:ef:6c:d9:fa:8e: a9:c5:2d:09:77:11:db:b6:6a:44:d2:bd:b3:48:c0: fb:3a:fd:96:d0:b1:bc:aa:1c:15:0b:15:62:09:74: 2b:62:7b:98:5b:12:14:fe:e3:1c:45:b8:ed:17:3c: f1:a7:79:65:01:cb:e6:b5:21:65:6a:0f:d8:8d:a1: 5b:b5:28:55:6a:00:f8:70:8f:55:6f:e8:f9:4a:07: a1:a7:eb:09:38:e6:a7:f0:c4:3e:86:08:7c:bd:2e: 77:0a:21:d9:d1:84:22:25:1a:08:86:11:0e:14:b5: 44:b1:be:ae:aa:a7:4b:6b:8e:3e:26:79:bb:74:30: 2b:28:77:d1:e7:2c:91:c4:0a:7f:f4:db:b3:ee:04: a7:78:b9:29:bb:95:c6:50:2a:a1:fc:c6:72:37:4e: d0:a9:ae:96:e4:49:62:3d:10:c0:49:16:d1:cb:ee: f8:e0:56:57:eb:64:5e:8f:1a:4a:fd:fd:c6:b0:34: e1:f8:27:6a:53:0a:75:fa:1d:09:bd:0d:ab:22:69: a4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:46:F9:1D:2F:0A:D5:7B:4B:1E:FD:96:35:B3:F9:D9:A0:23:F8:4B X509v3 Authority Key Identifier: keyid:1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:aa:cc:fc:e3:18:b9:b1:9c:1c:bf:3d:98:c9:e9:58:a3:38: 60:b3:58:a8:4d:79:27:e4:f7:9f:f3:f2:36:c8:70:76:fa:1d: d6:0c:8b:e5:d4:aa:a9:18:b9:05:77:1e:21:a9:01:cb:33:19: 59:14:56:2c:26:77:16:b1:2a:e1:f1:e3:3f:c4:78:6b:21:7c: 18:7a:0d:b2:50:ba:38:a3:1f:3a:6b:22:f8:a7:02:99:e9:cc: e6:56:7e:bd:fc:66:ac:7d:c4:cc:b9:ff:40:8e:cf:8b:0a:e9: 08:8e:c4:3e:76:58:46:1f:ac:50:f3:d8:aa:8c:df:e1:ee:df: 22:c8:d1:b1:81:e5:c1:58:68:05:7c:58:55:67:3a:5b:9f:42: 4b:f9:02:c5:30:ee:02:b2:c0:d8:ce:10:95:8e:0d:ea:33:de: 83:5f:8b:80:18:83:35:55:1c:f4:dc:bd:38:06:dc:c7:73:11: 6b:00:7e:d1:c5:0e:a9:d7:c7:ac:31:ff:4c:3b:5d:fd:fa:b7: 68:bd:33:9e:45:fd:17:2f:d1:cf:a5:70:86:d0:98:d5:b1:75: 95:22:95:f2:8e:8b:ad:1a:37:ed:68:22:30:64:21:99:f9:3a: 07:cd:bb:2e:55:6c:54:ae:86:d0:21:3b:f8:0d:d3:a4:a0:9c: b1:9c:c6:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNu7DlLLwD6DLXyAOTL7Rj5pAOq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGRkZGMUUzM0VBQkYyOThFOUIwNUYxNzcxNjZDOTZG MkMzQjU1NTAeFw0yNTA0MjUwNTMzMjZaFw0yNTA0MjYwNTU5MjZaMDMxMTAvBgNV BAMTKDFGNDZGOTFEMkYwQUQ1N0I0QjFFRkQ5NjM1QjNGOUQ5QTAyM0Y4NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiglyJZTUOeiJiXFGB3EJCCLLR NQnH4ZD2AZ3lhhJcvs6VpwRjs2OXI1pMAX/n+DllGDjTekLvbNn6jqnFLQl3Edu2 akTSvbNIwPs6/ZbQsbyqHBULFWIJdCtie5hbEhT+4xxFuO0XPPGneWUBy+a1IWVq D9iNoVu1KFVqAPhwj1Vv6PlKB6Gn6wk45qfwxD6GCHy9LncKIdnRhCIlGgiGEQ4U tUSxvq6qp0trjj4mebt0MCsod9HnLJHECn/027PuBKd4uSm7lcZQKqH8xnI3TtCp rpbkSWI9EMBJFtHL7vjgVlfrZF6PGkr9/cawNOH4J2pTCnX6HQm9DasiaaQPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUH0b5HS8K1XtLHv2WNbP52aAj+EswHwYDVR0j BBgwFoAUGv//HjPqvymOmwXxdxZslvLDtVUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmQzU1p5cXhlc2pMTUQ1QTd5R3dYZlA0WHBiNDh0QmpRcEZwa2NiRWQx c0MvMS8xQUZGRkYxRTMzRUFCRjI5OEU5QjA1RjE3NzE2NkM5NkYyQzNCNTU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBRkZGRjFFMzNFQUJGMjk4 RTlCMDVGMTc3MTY2Qzk2RjJDM0I1NTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmQzU1p5cXhlc2pMTUQ1QTd5R3dYZlA0WHBiNDh0QmpRcEZwa2NiRWQxc0MvMS8x QUZGRkYxRTMzRUFCRjI5OEU5QjA1RjE3NzE2NkM5NkYyQzNCNTU1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbKrM/OMYubGcHL89mMnpWKM4YLNYqE15J+T3n/PyNshwdvod1gyL5dSqqRi5 BXceIakByzMZWRRWLCZ3FrEq4fHjP8R4ayF8GHoNslC6OKMfOmsi+KcCmenM5lZ+ vfxmrH3EzLn/QI7PiwrpCI7EPnZYRh+sUPPYqozf4e7fIsjRsYHlwVhoBXxYVWc6 W59CS/kCxTDuArLA2M4QlY4N6jPeg1+LgBiDNVUc9Ny9OAbcx3MRawB+0cUOqdfH rDH/TDtd/fq3aL0znkX9Fy/Rz6VwhtCY1bF1lSKV8o6LrRo37WgiMGQhmfk6B827 LlVsVK6G0CE7+A3TpKCcsZzGlg== -----END CERTIFICATE-----Generated at Fri Apr 25 08:22:03 2025 by rpki-client on console.sobornost.net