$ rpki-client -vvf rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft File: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft (raw, json) Hash identifier: 2j3oixSKSb0m2bqpG+sTtnQ4SHVOYvL5xq/OpnnQ75M= Subject key identifier: BA:28:DF:E6:F4:24:8E:BF:1F:AD:EF:47:8D:FF:ED:7B:2B:9F:96:1E Authority key identifier: 21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 Certificate issuer: /CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Certificate serial: 487BDA9E8A2447788F4425F8D1FA6E5D3E89DA9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject info access: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft Manifest number: 0140 Signing time: Sun 27 Apr 2025 01:59:20 +0000 Manifest this update: Sun 27 Apr 2025 01:54:20 +0000 Manifest next update: Mon 28 Apr 2025 04:42:20 +0000 Files and hashes: 1: 21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl (hash: UjURPUhgnZIkmtRCliUMWtXR/1HKO1PWH9CBjk6c7Zw=) 2: 323830343a343761383a3a2f33322d313238203d3e20323637303639.roa (hash: 7jDkrLp4ayTzOL5LqdZDvV5/Cuvygbg0upRrXyrXxkE=) 3: 34352e3232372e39362e302f32322d3332203d3e20323637303639.roa (hash: 6szg7DBeNfCDyyVjdS9beSfI5nbAK853VFa32L1aUlk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 04:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:7b:da:9e:8a:24:47:78:8f:44:25:f8:d1:fa:6e:5d:3e:89:da:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78 Validity Not Before: Apr 27 01:54:20 2025 GMT Not After : Apr 28 04:42:20 2025 GMT Subject: CN=BA28DFE6F4248EBF1FADEF478DFFED7B2B9F961E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b4:89:1d:77:eb:19:1b:98:8c:c8:d0:33:63: bb:16:84:96:7a:da:79:d1:4e:06:53:51:b7:b1:54: 3b:ae:ea:f8:96:a7:7c:0e:8a:e4:a3:43:66:25:0d: 62:f9:0f:00:ed:69:a4:67:11:9d:20:81:89:84:8c: 10:cf:85:3a:41:a7:3b:b8:36:ee:4c:af:ae:03:1f: b4:6e:42:48:e5:6a:6b:0c:cc:2f:51:0b:cd:a4:1e: 03:56:ba:58:0e:26:52:a3:05:96:ba:89:28:af:b4: b5:70:ed:1c:92:55:65:23:a6:e9:6f:96:41:7d:bd: 8d:a3:55:e7:b6:0f:b3:8d:52:1a:37:26:d8:dd:5d: c9:90:c4:92:11:25:af:d9:6b:b4:fa:67:67:f9:7e: d9:0f:2f:44:7d:1b:0b:f6:9b:fb:79:c8:fd:62:63: 2f:e7:c3:ba:d1:a9:73:b9:e8:81:8a:d1:f5:c0:e7: 5a:d2:f3:13:23:91:82:00:30:22:19:b7:ce:65:5b: 8b:35:92:83:27:49:c8:2a:33:79:77:4b:74:fd:1d: 73:89:f5:31:59:06:70:3c:bd:21:9f:df:35:f4:e8: 00:2c:98:22:53:74:08:42:54:52:1c:30:48:fa:cb: 31:bd:a3:dd:c9:e1:4a:c5:23:f5:3c:d2:27:21:df: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:28:DF:E6:F4:24:8E:BF:1F:AD:EF:47:8D:FF:ED:7B:2B:9F:96:1E X509v3 Authority Key Identifier: keyid:21:F9:CE:F6:E0:C3:03:7B:53:F9:4A:33:CE:0F:31:0F:9F:9A:1D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWKbGzrapBYxnXWwf5x4qwgYh7ezGGFLs7tu9UPPpYe/0/21F9CEF6E0C3037B53F94A33CE0F310F9F9A1D78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d4:66:ca:c1:fc:22:42:be:87:cc:fd:70:31:ba:92:dc:dc: fa:46:59:fd:94:87:0e:a3:41:87:73:47:ed:d1:6e:74:65:15: e9:fd:2b:70:a7:b3:a1:c3:e4:93:bc:29:08:1b:32:d1:70:7b: 98:bc:5d:a1:7c:27:87:35:93:64:f8:72:db:ae:b4:a6:7b:73: 55:8b:c7:ef:d2:5c:08:61:61:7b:b9:7b:c6:be:90:bb:6f:88: 5e:ce:ee:bd:bd:20:83:e7:cf:a3:ca:13:3d:13:bb:0f:09:ff: c0:0c:f8:21:0d:a9:00:95:32:29:3a:e1:47:14:84:09:1b:26: e1:9f:87:2b:bb:4a:df:61:e1:2f:e2:14:5a:e5:74:6e:47:4a: 89:98:78:07:f7:75:61:35:ba:2d:04:39:33:5e:91:be:04:4c: 3f:a6:1b:93:16:10:a5:75:f8:ea:e5:a6:bd:92:47:66:2a:14: 1d:76:8d:aa:f0:b9:77:c8:1b:89:3b:24:33:7c:71:32:bf:3d: af:dd:d5:30:7d:23:ad:45:a0:c8:02:16:11:ac:6a:b9:bc:dc: d5:b0:b1:af:2c:62:af:36:b7:32:95:d2:7b:74:d2:f4:ba:6b: aa:48:9a:e0:d8:d7:f5:1b:6f:61:79:4e:2b:cd:14:c5:eb:77: ac:3e:6a:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSHvanookR3iPRCX40fpuXT6J2p8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOUNFRjZFMEMzMDM3QjUzRjk0QTMzQ0UwRjMxMEY5 RjlBMUQ3ODAeFw0yNTA0MjcwMTU0MjBaFw0yNTA0MjgwNDQyMjBaMDMxMTAvBgNV BAMTKEJBMjhERkU2RjQyNDhFQkYxRkFERUY0NzhERkZFRDdCMkI5Rjk2MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6tIkdd+sZG5iMyNAzY7sWhJZ6 2nnRTgZTUbexVDuu6viWp3wOiuSjQ2YlDWL5DwDtaaRnEZ0ggYmEjBDPhTpBpzu4 Nu5Mr64DH7RuQkjlamsMzC9RC82kHgNWulgOJlKjBZa6iSivtLVw7RySVWUjpulv lkF9vY2jVee2D7ONUho3JtjdXcmQxJIRJa/Za7T6Z2f5ftkPL0R9Gwv2m/t5yP1i Yy/nw7rRqXO56IGK0fXA51rS8xMjkYIAMCIZt85lW4s1koMnScgqM3l3S3T9HXOJ 9TFZBnA8vSGf3zX06AAsmCJTdAhCVFIcMEj6yzG9o93J4UrFI/U80ich31ftAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuijf5vQkjr8fre9Hjf/teyuflh4wHwYDVR0j BBgwFoAUIfnO9uDDA3tT+Uozzg8xD5+aHXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBw WWUvMC8yMUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRjlDRUY2RTBDMzAzN0I1 M0Y5NEEzM0NFMEYzMTBGOUY5QTFENzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0NXS2JHenJhcEJZeG5YV3dmNXg0cXdnWWg3ZXpHR0ZMczd0dTlVUFBwWWUvMC8y MUY5Q0VGNkUwQzMwMzdCNTNGOTRBMzNDRTBGMzEwRjlGOUExRDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOtRmysH8IkK+h8z9cDG6ktzc+kZZ/ZSHDqNBh3NH7dFudGUV6f0rcKezocPk k7wpCBsy0XB7mLxdoXwnhzWTZPhy2660pntzVYvH79JcCGFhe7l7xr6Qu2+IXs7u vb0gg+fPo8oTPRO7Dwn/wAz4IQ2pAJUyKTrhRxSECRsm4Z+HK7tK32HhL+IUWuV0 bkdKiZh4B/d1YTW6LQQ5M16RvgRMP6YbkxYQpXX46uWmvZJHZioUHXaNqvC5d8gb iTskM3xxMr89r93VMH0jrUWgyAIWEaxqubzc1bCxryxirza3MpXSe3TS9Lprqkia 4NjX9RtvYXlOK80Uxet3rD5q6A== -----END CERTIFICATE-----Generated at Sun Apr 27 05:34:04 2025 by rpki-client on console.sobornost.net