$ rpki-client -vvf rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft File: E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft (raw, json) Hash identifier: HbOy4LiQnjjFlfKkSW8oR+c48zqqbx5WLi8b5FOPvSM= Subject key identifier: AC:19:C3:23:52:AA:B9:25:9C:39:6A:77:33:1B:B3:9B:83:FD:48:F6 Authority key identifier: E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4 Certificate issuer: /CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4 Certificate serial: 775B4497F649310110B99DE6B7E78C337B6DD90A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer Subject info access: rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft Manifest number: 0202 Signing time: Thu 24 Apr 2025 11:58:57 +0000 Manifest this update: Thu 24 Apr 2025 11:53:57 +0000 Manifest next update: Fri 25 Apr 2025 13:33:57 +0000 Files and hashes: 1: 323830343a363331343a3a2f33322d3438203d3e20323639333337.roa (hash: 8rIADCc1IMBXHDjsfVNZY3xX+m3yox+H7e16XbvP0l4=) 2: 34352e3138332e3138302e302f32322d3234203d3e20323639333337.roa (hash: ht/LU548z0DQ9qyd/CXKzpoxrH9NqeBOqRLrPd+T36Y=) 3: E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl (hash: uqZrM3ZhTWSxkrzBceuubu8mMWyCoUU5cEdLH4CoCTQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 13:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:5b:44:97:f6:49:31:01:10:b9:9d:e6:b7:e7:8c:33:7b:6d:d9:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4 Validity Not Before: Apr 24 11:53:57 2025 GMT Not After : Apr 25 13:33:57 2025 GMT Subject: CN=AC19C32352AAB9259C396A77331BB39B83FD48F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:77:ea:99:6a:b9:cb:d5:ad:90:ae:e0:a6:b3: 7f:d8:a6:4f:c7:71:a5:c6:ad:fa:45:e3:62:36:d7: d9:8e:ae:cf:30:34:68:ab:54:7f:a1:d6:df:6f:fa: 05:2a:9e:ed:4a:5b:27:14:c3:19:e1:ab:fd:0a:32: 5d:36:e6:f0:0b:22:20:74:29:40:17:ee:f9:6d:72: 96:50:c7:54:54:2c:72:9e:22:85:a9:4e:96:c1:3c: e1:93:dd:fd:81:bc:e3:32:4c:a4:ca:4a:75:44:89: b6:6b:05:a6:d7:da:8c:3b:97:c7:fe:8a:29:d4:41: 3f:cb:5a:9b:77:ee:53:db:1b:a3:42:78:8b:a8:ff: 69:ba:c1:b7:59:d1:a5:dc:32:20:99:39:ac:4c:fb: 0f:c3:15:77:88:4d:9d:92:fb:81:69:49:3d:65:78: ed:d3:55:d8:51:ac:50:16:ff:37:f6:d6:ef:2b:f8: d8:28:7a:a4:fa:22:9d:0c:00:cc:3e:50:a7:2d:16: 6a:54:95:d2:10:b7:6f:ba:87:1a:cc:60:df:a6:89: b4:15:f9:b2:72:67:42:e2:c6:fa:35:34:99:06:b3: 0b:b6:be:28:db:5e:78:d3:50:03:81:04:a4:d6:d0: d5:37:8c:92:12:6f:f5:9b:ee:58:01:a5:ed:48:81: 89:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:19:C3:23:52:AA:B9:25:9C:39:6A:77:33:1B:B3:9B:83:FD:48:F6 X509v3 Authority Key Identifier: keyid:E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:21:fc:c5:50:84:86:e6:ef:39:e2:c5:3d:66:a1:f7:51:42: c3:d0:20:8d:2f:1c:69:b5:42:cf:fa:41:f5:1e:72:13:1c:4f: f3:1d:7f:8e:62:b4:70:79:24:57:65:9a:45:e9:98:2e:dd:21: a4:52:4f:9d:85:97:6c:6d:bf:ba:c9:b6:32:74:06:46:04:e9: 39:e3:34:3b:3a:06:d7:64:59:6f:5d:7b:4c:ce:5d:dd:2c:3d: 4f:5f:60:d8:0b:f7:6e:10:69:ea:04:25:36:b5:5b:13:81:f2: a2:4c:40:9f:4a:c9:4c:b5:ba:7f:41:6d:07:fe:b8:6f:31:3c: f9:b7:55:f8:67:9a:1c:32:67:e2:02:a7:d9:1d:1c:73:92:39: e7:f6:33:ff:f7:66:e1:31:1a:f0:c3:bd:4b:95:4b:16:f3:bc: 34:20:08:a2:2f:70:8e:03:14:3e:98:96:e9:b8:f5:de:76:36: fd:9a:54:f0:12:af:c1:4a:15:7b:1b:e0:98:cc:35:0b:3e:3c: 29:4a:bd:ce:91:f2:21:17:ca:be:6c:51:b4:86:c8:4d:47:49: 4d:a3:a2:f1:c7:d0:1e:42:37:d0:1d:39:ae:83:23:77:05:e9: 8b:ef:29:fe:f3:8b:b2:68:f2:8b:3a:9c:85:21:fe:89:ef:14: 87:ff:05:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUd1tEl/ZJMQEQuZ3mt+eMM3tt2QowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEFCRjAzOUIxRkYyMEY5REU1RkY2Q0UxREUzRENC QkFGRDZCNDAeFw0yNTA0MjQxMTUzNTdaFw0yNTA0MjUxMzMzNTdaMDMxMTAvBgNV BAMTKEFDMTlDMzIzNTJBQUI5MjU5QzM5NkE3NzMzMUJCMzlCODNGRDQ4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQd+qZarnL1a2QruCms3/Ypk/H caXGrfpF42I219mOrs8wNGirVH+h1t9v+gUqnu1KWycUwxnhq/0KMl025vALIiB0 KUAX7vltcpZQx1RULHKeIoWpTpbBPOGT3f2BvOMyTKTKSnVEibZrBabX2ow7l8f+ iinUQT/LWpt37lPbG6NCeIuo/2m6wbdZ0aXcMiCZOaxM+w/DFXeITZ2S+4FpST1l eO3TVdhRrFAW/zf21u8r+NgoeqT6Ip0MAMw+UKctFmpUldIQt2+6hxrMYN+mibQV +bJyZ0Lixvo1NJkGswu2vijbXnjTUAOBBKTW0NU3jJISb/Wb7lgBpe1IgYnzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrBnDI1KquSWcOWp3Mxuzm4P9SPYwHwYDVR0j BBgwFoAU5wir8Dmx/yD53l/2zh3j3Luv1rQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0g0NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVq SEUvMS9FNzA4QUJGMDM5QjFGRjIwRjlERTVGRjZDRTFERTNEQ0JCQUZENkI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3MDhBQkYwMzlCMUZGMjBG OURFNUZGNkNFMURFM0RDQkJBRkQ2QjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0g0NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVqSEUvMS9F NzA4QUJGMDM5QjFGRjIwRjlERTVGRjZDRTFERTNEQ0JCQUZENkI0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfyH8xVCEhubvOeLFPWah91FCw9AgjS8cabVCz/pB9R5yExxP8x1/jmK0cHkk V2WaRemYLt0hpFJPnYWXbG2/usm2MnQGRgTpOeM0OzoG12RZb117TM5d3Sw9T19g 2Av3bhBp6gQlNrVbE4HyokxAn0rJTLW6f0FtB/64bzE8+bdV+GeaHDJn4gKn2R0c c5I55/Yz//dm4TEa8MO9S5VLFvO8NCAIoi9wjgMUPpiW6bj13nY2/ZpU8BKvwUoV exvgmMw1Cz48KUq9zpHyIRfKvmxRtIbITUdJTaOi8cfQHkI30B05roMjdwXpi+8p /vOLsmjyizqchSH+ie8Uh/8FYQ== -----END CERTIFICATE-----Generated at Thu Apr 24 13:39:15 2025 by rpki-client on console.sobornost.net