$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft File: 5668EE81C8705A595C00BF220C5BB48B38682B81.mft (raw, json) Hash identifier: a7zt0kfPUkVbxYBYkhy5rGt9OsTAMXSkQY3vDSey3fw= Subject key identifier: B5:DE:9D:8B:ED:0D:47:51:3D:77:D9:C6:69:FE:18:93:AD:DE:80:91 Authority key identifier: 56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81 Certificate issuer: /CN=5668EE81C8705A595C00BF220C5BB48B38682B81 Certificate serial: 13FBFE74DDD5F07BD8392B9E5BF268C57E936257 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer Subject info access: rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft Manifest number: 33 Signing time: Sat 26 Apr 2025 19:27:32 +0000 Manifest this update: Sat 26 Apr 2025 19:22:32 +0000 Manifest next update: Sun 27 Apr 2025 19:59:32 +0000 Files and hashes: 1: 3134332e3235352e3139362e302f32322d3332203d3e20323633353538.roa (hash: 4n22Tbe2fEYdOUmIisT+wAqG3uK1QIzJ8uF9ujZ4V4Q=) 2: 3138362e3233372e3231362e302f32312d3332203d3e20323633353538.roa (hash: devNyf5uV7e2XYzIjGzsi+jDNLJbab/FwbfxIAbLzaY=) 3: 323830343a6566303a3a2f33322d313238203d3e20323633353538.roa (hash: vnGyHnP1vADvHkg5AnUniHI5nPpVnePRmquRFZ1T/Rw=) 4: 5668EE81C8705A595C00BF220C5BB48B38682B81.crl (hash: UF/kdrlKqusHkv1cWH0YYp2/c73NDU92PAWCZv5Jdo0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.crl rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Apr 2025 19:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:fb:fe:74:dd:d5:f0:7b:d8:39:2b:9e:5b:f2:68:c5:7e:93:62:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5668EE81C8705A595C00BF220C5BB48B38682B81 Validity Not Before: Apr 26 19:22:32 2025 GMT Not After : Apr 27 19:59:32 2025 GMT Subject: CN=B5DE9D8BED0D47513D77D9C669FE1893ADDE8091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1a:23:69:1b:ca:75:5c:3e:95:2c:3c:c7:90: b8:1e:7f:d0:e0:86:ff:96:f0:49:08:aa:54:a9:c8: 7e:ec:09:46:44:1c:93:26:e7:c7:8d:21:fe:9c:fd: 9d:35:59:42:e4:40:03:a8:8f:d6:dc:55:09:ed:ca: 75:3f:d0:1c:0d:51:3f:78:97:3a:c3:8a:ff:5c:a3: c8:d0:06:59:96:18:a7:b3:b4:1b:d8:cf:06:88:25: f3:87:0c:71:eb:30:e7:e8:71:b9:7c:ed:f7:ff:7f: a8:c2:08:6a:06:b5:ea:24:42:ca:01:23:77:4e:b9: d5:53:ac:77:24:c7:8e:0e:14:28:52:65:bb:8b:18: 98:3e:cd:7f:87:a5:65:2e:36:c2:d7:d0:d0:a2:78: bf:cb:6d:ef:0a:cc:ae:3d:d0:32:5a:cd:3f:ef:d5: 2c:2e:66:0a:7e:bb:f6:32:ec:7c:d1:6a:b0:df:01: 28:1d:90:96:b1:be:92:5a:64:09:0b:69:5d:e2:7f: 14:81:98:6d:07:93:ff:bf:9e:f9:35:78:17:ee:30: e8:44:32:4c:f4:63:ed:df:d8:ec:68:69:71:a3:97: 4a:8d:f5:8e:0e:5d:e4:0d:4e:78:3c:a8:d1:f3:55: b9:e3:a8:82:5f:db:61:c0:14:5e:44:ff:f6:34:f1: f2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DE:9D:8B:ED:0D:47:51:3D:77:D9:C6:69:FE:18:93:AD:DE:80:91 X509v3 Authority Key Identifier: keyid:56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:38:8d:bb:da:aa:bc:22:d7:e3:27:6c:c0:41:89:6b:1f:58: 4c:a3:bf:ed:bb:4a:fa:19:d5:eb:da:19:62:53:c5:91:aa:dc: 9b:db:dd:4e:d8:6a:30:fe:fd:48:fe:77:e0:68:67:58:eb:31: 52:24:85:d3:1e:a2:60:e5:cf:b9:b9:c4:bb:f6:bf:7d:87:a8: 73:f6:92:59:08:ae:f1:8b:d3:73:09:1d:e9:85:1a:a2:72:06: 12:19:e6:5e:85:3b:69:c6:1e:c8:e4:bc:5d:d9:01:d7:5e:40: a7:68:88:f5:33:01:d3:cf:52:47:c0:25:17:07:e6:c5:16:15: 4e:3e:ae:6c:71:92:d1:33:28:c9:5d:b0:46:63:fa:91:a3:4e: 47:e9:d1:87:fd:c2:00:2c:80:9f:41:ca:33:cd:6a:64:45:82: 91:2b:3c:85:52:89:a4:68:e6:51:00:4b:95:2a:a9:ff:a4:b6: 0c:6f:b9:81:50:5c:b3:29:4e:b2:82:37:a6:4d:f6:63:32:4c: 35:7f:03:e1:1b:5e:d3:a8:ae:21:64:67:e9:13:9f:81:ad:89: 23:e2:9b:ec:da:7e:ec:ae:d8:ac:a7:4e:1b:34:3a:8c:e0:02: db:44:6e:9f:49:7c:4a:47:0a:d6:b1:8f:1f:48:4b:ff:98:53: 7b:6a:24:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUE/v+dN3V8HvYOSueW/JoxX6TYlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2OEVFODFDODcwNUE1OTVDMDBCRjIyMEM1QkI0OEIz ODY4MkI4MTAeFw0yNTA0MjYxOTIyMzJaFw0yNTA0MjcxOTU5MzJaMDMxMTAvBgNV BAMTKEI1REU5RDhCRUQwRDQ3NTEzRDc3RDlDNjY5RkUxODkzQURERTgwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeGiNpG8p1XD6VLDzHkLgef9Dg hv+W8EkIqlSpyH7sCUZEHJMm58eNIf6c/Z01WULkQAOoj9bcVQntynU/0BwNUT94 lzrDiv9co8jQBlmWGKeztBvYzwaIJfOHDHHrMOfocbl87ff/f6jCCGoGteokQsoB I3dOudVTrHckx44OFChSZbuLGJg+zX+HpWUuNsLX0NCieL/Lbe8KzK490DJazT/v 1SwuZgp+u/Yy7HzRarDfASgdkJaxvpJaZAkLaV3ifxSBmG0Hk/+/nvk1eBfuMOhE Mkz0Y+3f2OxoaXGjl0qN9Y4OXeQNTng8qNHzVbnjqIJf22HAFF5E//Y08fKZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtd6di+0NR1E9d9nGaf4Yk63egJEwHwYDVR0j BBgwFoAUVmjugchwWllcAL8iDFu0izhoK4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREFEWHFRbXB4RXNoQ2ZTNTZoWUNYNVR1R2ZGWmhjN1J6VzhDNlk5enVt YWcvMC81NjY4RUU4MUM4NzA1QTU5NUMwMEJGMjIwQzVCQjQ4QjM4NjgyQjgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2NjhFRTgxQzg3MDVBNTk1 QzAwQkYyMjBDNUJCNDhCMzg2ODJCODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REFEWHFRbXB4RXNoQ2ZTNTZoWUNYNVR1R2ZGWmhjN1J6VzhDNlk5enVtYWcvMC81 NjY4RUU4MUM4NzA1QTU5NUMwMEJGMjIwQzVCQjQ4QjM4NjgyQjgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwTiNu9qqvCLX4ydswEGJax9YTKO/7btK+hnV69oZYlPFkarcm9vdTthqMP79 SP534GhnWOsxUiSF0x6iYOXPubnEu/a/fYeoc/aSWQiu8YvTcwkd6YUaonIGEhnm XoU7acYeyOS8XdkB115Ap2iI9TMB089SR8AlFwfmxRYVTj6ubHGS0TMoyV2wRmP6 kaNOR+nRh/3CACyAn0HKM81qZEWCkSs8hVKJpGjmUQBLlSqp/6S2DG+5gVBcsylO soI3pk32YzJMNX8D4Rte06iuIWRn6ROfga2JI+Kb7Np+7K7YrKdOGzQ6jOAC20Ru n0l8SkcK1rGPH0hL/5hTe2okHg== -----END CERTIFICATE-----Generated at Sat Apr 26 21:00:15 2025 by rpki-client on console.sobornost.net