$ rpki-client -vvf rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft File: A653D5055FC338B089E2C732382682788F082F11.mft (raw, json) Hash identifier: Vbok/mzwT3sIVDOYxz0JnkPLWmwsWRrnfXyWPZILY4I= Subject key identifier: 07:65:BD:60:B9:BB:97:03:8F:77:64:2E:19:23:58:04:65:7A:BE:95 Authority key identifier: A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11 Certificate issuer: /CN=A653D5055FC338B089E2C732382682788F082F11 Certificate serial: 0988BB935A70AA4E22CB5E77485935DC7A4F0819 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer Subject info access: rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft Manifest number: 0204 Signing time: Fri 25 Apr 2025 15:58:02 +0000 Manifest this update: Fri 25 Apr 2025 15:53:02 +0000 Manifest next update: Sat 26 Apr 2025 19:31:02 +0000 Files and hashes: 1: 323830343a333734343a3a2f33322d313238203d3e20323636343030.roa (hash: 40WaVP8Svoxs+qZKP+igdLA9rTsAwD+SLbjFEI4LGxs=) 2: A653D5055FC338B089E2C732382682788F082F11.crl (hash: aYcf6epEAtOujjdpcZZDd+CsNJc9uMh19f3Lj0tWnu0=) 3: 3137302e38312e34302e302f32322d3234203d3e20323636343030.roa (hash: fnk6G+39Qn8k6OBmu2nwg3cM52nnrkQXQ11Kyh5Qn1o=) 4: 34352e3232342e3132382e302f32322d3234203d3e20323636343030.roa (hash: uvd4+Ma33hGXSlt80NtGV3afPFZnfl9FFnr+LvjlmzM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 18:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:88:bb:93:5a:70:aa:4e:22:cb:5e:77:48:59:35:dc:7a:4f:08:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A653D5055FC338B089E2C732382682788F082F11 Validity Not Before: Apr 25 15:53:02 2025 GMT Not After : Apr 26 19:31:02 2025 GMT Subject: CN=0765BD60B9BB97038F77642E19235804657ABE95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e1:82:94:97:1f:b8:da:09:cf:98:4b:d2:47: 62:c2:54:4b:05:4c:40:90:d9:c1:ae:da:4b:bf:e5: 97:01:02:0f:cf:f6:27:9b:ab:85:5b:36:4b:d9:6a: 78:ae:de:2d:26:68:f8:d8:67:91:6e:91:49:4b:ea: 87:df:93:13:0d:5b:e2:d8:e9:04:70:8f:e2:04:7f: ee:35:99:bf:95:91:d4:f1:33:cd:fb:f7:76:c9:12: b7:2f:b0:d1:33:07:34:5d:3a:60:91:da:a3:66:4a: 65:9f:b6:ae:64:87:e2:02:33:52:8f:0c:ae:7f:d4: 96:e6:a9:1f:52:9a:ee:9d:00:9b:1b:aa:6b:f3:3e: d1:ae:36:96:d0:95:99:71:fa:d0:4d:66:7a:af:35: 1c:e5:5a:a4:63:8f:2e:40:4a:26:50:77:c5:f5:af: 27:33:00:63:ed:af:b9:74:4b:94:b2:e0:62:44:01: da:9d:3a:ff:db:f7:ed:1f:f9:a6:ec:c7:0e:fb:b0: ad:7b:b3:33:7b:0f:bc:24:4b:6f:3d:8b:27:d3:ac: 3c:e3:19:6b:0a:e7:2a:71:64:e0:98:ac:1b:11:b6: ee:2c:3c:14:e3:28:b6:0d:f6:35:59:ca:1d:60:b3: 2f:16:ec:59:df:1e:b8:7f:61:8c:b2:20:b8:a4:66: 84:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:65:BD:60:B9:BB:97:03:8F:77:64:2E:19:23:58:04:65:7A:BE:95 X509v3 Authority Key Identifier: keyid:A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5a:89:1c:d8:73:37:64:d4:5c:a0:41:e6:15:bd:6d:0a:a3: a4:5c:fe:28:f8:4d:68:d2:13:26:2e:02:78:21:c4:7e:23:a1: 6c:5e:a0:62:e3:61:8e:81:7c:0f:54:15:0f:8c:00:31:85:0c: 53:a3:0a:3a:a7:d7:f7:02:33:f4:df:08:26:ab:c9:5e:25:8e: 1c:b1:9f:8d:4a:7f:ce:c9:9b:27:ca:1d:44:94:01:f1:2c:c2: 16:ee:5e:f8:45:1d:47:10:11:52:9c:92:2f:d3:b7:9b:58:58: d7:f7:b3:9a:e1:c7:9c:9f:68:55:94:fd:40:7e:9c:63:06:90: 55:75:d8:d6:32:ef:08:88:48:28:75:54:f7:c7:9e:1b:3b:ce: 93:f9:59:31:96:77:09:cd:b3:0f:bc:5e:05:a1:c5:51:f1:83: e0:4c:2c:38:e3:73:17:42:4b:08:88:f2:7c:24:a6:5f:82:43: 24:da:2b:8c:53:e2:d2:d9:30:7d:73:6c:57:29:9c:a6:34:a4: 93:60:79:18:a0:4d:67:14:5b:58:d7:95:0f:98:60:86:13:ce: d2:5d:8f:69:2d:6b:fc:f2:25:24:a4:b5:a5:53:70:1e:64:78: 6d:4e:00:88:14:c8:ce:a2:80:6c:03:80:fc:c9:b1:8c:ed:a8: 95:fa:ea:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCYi7k1pwqk4iy153SFk13HpPCBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1M0Q1MDU1RkMzMzhCMDg5RTJDNzMyMzgyNjgyNzg4 RjA4MkYxMTAeFw0yNTA0MjUxNTUzMDJaFw0yNTA0MjYxOTMxMDJaMDMxMTAvBgNV BAMTKDA3NjVCRDYwQjlCQjk3MDM4Rjc3NjQyRTE5MjM1ODA0NjU3QUJFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4YKUlx+42gnPmEvSR2LCVEsF TECQ2cGu2ku/5ZcBAg/P9iebq4VbNkvZaniu3i0maPjYZ5FukUlL6offkxMNW+LY 6QRwj+IEf+41mb+VkdTxM83793bJErcvsNEzBzRdOmCR2qNmSmWftq5kh+ICM1KP DK5/1JbmqR9Smu6dAJsbqmvzPtGuNpbQlZlx+tBNZnqvNRzlWqRjjy5ASiZQd8X1 ryczAGPtr7l0S5Sy4GJEAdqdOv/b9+0f+absxw77sK17szN7D7wkS289iyfTrDzj GWsK5ypxZOCYrBsRtu4sPBTjKLYN9jVZyh1gsy8W7FnfHrh/YYyyILikZoT9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUB2W9YLm7lwOPd2QuGSNYBGV6vpUwHwYDVR0j BBgwFoAUplPVBV/DOLCJ4scyOCaCeI8ILxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0J2QmNLODNqZkttdGVVWmhKS3FnN1B0a2R4N1h0TnFGZ0RqNGI0cmdv aXgvMS9BNjUzRDUwNTVGQzMzOEIwODlFMkM3MzIzODI2ODI3ODhGMDgyRjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2NTNENTA1NUZDMzM4QjA4 OUUyQzczMjM4MjY4Mjc4OEYwODJGMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0J2QmNLODNqZkttdGVVWmhKS3FnN1B0a2R4N1h0TnFGZ0RqNGI0cmdvaXgvMS9B NjUzRDUwNTVGQzMzOEIwODlFMkM3MzIzODI2ODI3ODhGMDgyRjExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW1qJHNhzN2TUXKBB5hW9bQqjpFz+KPhNaNITJi4CeCHEfiOhbF6gYuNhjoF8 D1QVD4wAMYUMU6MKOqfX9wIz9N8IJqvJXiWOHLGfjUp/zsmbJ8odRJQB8SzCFu5e +EUdRxARUpySL9O3m1hY1/ezmuHHnJ9oVZT9QH6cYwaQVXXY1jLvCIhIKHVU98ee GzvOk/lZMZZ3Cc2zD7xeBaHFUfGD4EwsOONzF0JLCIjyfCSmX4JDJNorjFPi0tkw fXNsVymcpjSkk2B5GKBNZxRbWNeVD5hghhPO0l2PaS1r/PIlJKS1pVNwHmR4bU4A iBTIzqKAbAOA/MmxjO2olfrqpA== -----END CERTIFICATE-----Generated at Fri Apr 25 19:24:49 2025 by rpki-client on console.sobornost.net