$ rpki-client -vvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft File: A1E6749C09E9E32D11C15678D45C1B936D525291.mft (raw, json) Hash identifier: VgMVaBlVPtIA9bkgY/3c2hDX+Xhr9N1Pv+WWyC0UVfM= Subject key identifier: B7:CB:57:52:BF:9C:66:C1:E4:9A:F5:D9:0E:B7:0C:E4:6D:A7:8A:64 Authority key identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91 Certificate issuer: /CN=A1E6749C09E9E32D11C15678D45C1B936D525291 Certificate serial: 5FE0DA4D0B42048C50D96F56C8E944063CB2F477 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft Manifest number: 01E2 Signing time: Mon 28 Apr 2025 02:29:27 +0000 Manifest this update: Mon 28 Apr 2025 02:24:27 +0000 Manifest next update: Tue 29 Apr 2025 05:20:27 +0000 Files and hashes: 1: A1E6749C09E9E32D11C15678D45C1B936D525291.crl (hash: JPIEl/JDtZSJhgNPm5d4tT6sU6ILMYp0n60O/gtKNhA=) 2: 323830343a313763343a3a2f33322d3438203d3e20323633323530.roa (hash: CYHN9rK1skgLKugPUzgZGszwHwGA3WFLBGl49tYzvoY=) 3: 3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa (hash: wlPnqD7qa81i/u0GABiCUaJGTeP2DvD2cJaBWTo4WcI=) 4: 34352e3138302e3235322e302f32322d3234203d3e20323633323530.roa (hash: ORMMmfGrpHZXNdiWY4NkF0L84UkSb+i4s3EBcHiCyW8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e0:da:4d:0b:42:04:8c:50:d9:6f:56:c8:e9:44:06:3c:b2:f4:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E6749C09E9E32D11C15678D45C1B936D525291 Validity Not Before: Apr 28 02:24:27 2025 GMT Not After : Apr 29 05:20:27 2025 GMT Subject: CN=B7CB5752BF9C66C1E49AF5D90EB70CE46DA78A64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e6:fc:80:9a:35:d6:2c:24:04:03:c9:00:32: 60:6f:0f:cf:17:75:33:03:cd:37:bb:01:7b:6b:63: 11:54:86:f2:ee:f5:18:5c:5a:29:b3:b3:62:13:5d: 3b:28:72:20:52:6a:f9:31:01:cb:a8:af:c3:47:e1: e6:ee:22:b9:b2:80:1e:1c:94:e8:47:c6:b7:7b:d0: 7c:be:a1:d0:97:b5:09:76:05:90:43:7e:7a:3c:b0: c0:5d:8c:9a:65:64:cc:0e:cd:37:88:51:d8:00:3b: b2:74:6b:26:82:53:73:02:b9:de:10:39:af:d3:5e: 0f:89:93:6b:a8:5e:63:39:f2:9f:1e:93:4d:f6:36: 70:92:1d:c9:cf:18:fb:d3:c7:33:b8:fa:dc:60:8c: c8:66:05:47:f2:9d:d1:f5:8e:9a:89:ad:4d:c0:45: b3:ef:00:50:a5:86:44:34:f6:8f:d1:3e:33:3d:ab: d8:5c:1e:b5:d0:c3:52:df:f0:86:fc:d7:ab:04:b4: 9d:dd:4c:37:64:83:28:c4:f2:01:59:b2:fe:70:51: 58:3a:a0:85:ec:97:c0:28:c9:37:5f:7e:cb:64:0a: 07:0b:70:6f:08:75:44:81:56:7f:9c:76:a6:04:c6: 0e:1f:f3:f3:e2:b5:df:ec:5b:e8:1b:98:24:08:bf: 90:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CB:57:52:BF:9C:66:C1:E4:9A:F5:D9:0E:B7:0C:E4:6D:A7:8A:64 X509v3 Authority Key Identifier: keyid:A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:06:cf:ec:86:bd:75:8c:a5:e1:f7:dd:13:60:cf:a7:8d:b3: cc:91:23:98:ec:60:f0:aa:3a:7b:d3:c6:05:08:f4:61:bd:3e: c6:32:9c:5e:60:27:4e:08:93:b3:ee:26:08:5e:34:0b:cf:39: 86:ed:7a:7e:bc:da:b8:23:0b:6f:70:e0:92:cf:76:2a:ac:9c: 96:c1:63:aa:c3:d8:4b:22:ef:67:75:d5:4f:87:d1:2b:49:99: 89:30:fc:90:8d:4d:ec:39:b7:23:71:ea:a9:d9:9f:21:ad:bb: 27:67:7f:db:c3:56:1a:b6:55:82:a8:72:f7:55:49:70:ea:5e: d6:e3:ce:62:e6:ed:da:9b:84:ac:f7:5e:d0:cc:5b:2b:12:3c: f1:71:c5:68:40:e2:8d:d9:38:6e:f6:22:73:dd:62:a2:16:2d: 9e:e8:7e:00:60:49:39:c5:7f:85:9d:5f:41:7e:fc:fa:d2:00: 02:7c:b2:ed:71:ac:fe:b8:1d:3f:c6:41:fa:f4:a5:43:83:3c: c7:36:ac:65:b4:80:65:ba:bf:79:e6:af:44:65:c5:4a:79:59: 94:b7:bb:63:3d:44:c1:73:24:40:6d:e6:d5:a4:8e:0a:cb:b0: 21:68:da:ab:cb:b3:9c:39:ff:18:7f:db:e9:5a:51:34:9f:2d: 1d:2a:2f:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX+DaTQtCBIxQ2W9WyOlEBjyy9HcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFNjc0OUMwOUU5RTMyRDExQzE1Njc4RDQ1QzFCOTM2 RDUyNTI5MTAeFw0yNTA0MjgwMjI0MjdaFw0yNTA0MjkwNTIwMjdaMDMxMTAvBgNV BAMTKEI3Q0I1NzUyQkY5QzY2QzFFNDlBRjVEOTBFQjcwQ0U0NkRBNzhBNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs5vyAmjXWLCQEA8kAMmBvD88X dTMDzTe7AXtrYxFUhvLu9RhcWimzs2ITXTsociBSavkxAcuor8NH4ebuIrmygB4c lOhHxrd70Hy+odCXtQl2BZBDfno8sMBdjJplZMwOzTeIUdgAO7J0ayaCU3MCud4Q Oa/TXg+Jk2uoXmM58p8ek032NnCSHcnPGPvTxzO4+txgjMhmBUfyndH1jpqJrU3A RbPvAFClhkQ09o/RPjM9q9hcHrXQw1Lf8Ib816sEtJ3dTDdkgyjE8gFZsv5wUVg6 oIXsl8AoyTdffstkCgcLcG8IdUSBVn+cdqYExg4f8/Pitd/sW+gbmCQIv5BVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUt8tXUr+cZsHkmvXZDrcM5G2nimQwHwYDVR0j BBgwFoAUoeZ0nAnp4y0RwVZ41Fwbk21SUpEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05B UFgvMC9BMUU2NzQ5QzA5RTlFMzJEMTFDMTU2NzhENDVDMUI5MzZENTI1MjkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExRTY3NDlDMDlFOUUzMkQx MUMxNTY3OEQ0NUMxQjkzNkQ1MjUyOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05BUFgvMC9B MUU2NzQ5QzA5RTlFMzJEMTFDMTU2NzhENDVDMUI5MzZENTI1MjkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAngbP7Ia9dYyl4ffdE2DPp42zzJEjmOxg8Ko6e9PGBQj0Yb0+xjKcXmAnTgiT s+4mCF40C885hu16frzauCMLb3Dgks92KqyclsFjqsPYSyLvZ3XVT4fRK0mZiTD8 kI1N7Dm3I3HqqdmfIa27J2d/28NWGrZVgqhy91VJcOpe1uPOYubt2puErPde0Mxb KxI88XHFaEDijdk4bvYic91iohYtnuh+AGBJOcV/hZ1fQX78+tIAAnyy7XGs/rgd P8ZB+vSlQ4M8xzasZbSAZbq/eeavRGXFSnlZlLe7Yz1EwXMkQG3m1aSOCsuwIWja q8uznDn/GH/b6VpRNJ8tHSovxQ== -----END CERTIFICATE-----Generated at Mon Apr 28 06:00:32 2025 by rpki-client on console.sobornost.net