$ rpki-client -vvf rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft File: 32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft (raw, json) Hash identifier: 0FlaWXm400+XfqDrAY0Kbc60fKJ8P0DyMXch9G8AE3Y= Subject key identifier: BE:84:26:5D:EC:17:5A:EE:7D:8D:AD:F8:0B:25:83:55:14:F9:F1:92 Authority key identifier: 32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA Certificate issuer: /CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA Certificate serial: 7CCE8246FBD3DE1D1BA51F7EA1BB68B8DC9D0786 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft Manifest number: 0208 Signing time: Mon 28 Apr 2025 04:00:55 +0000 Manifest this update: Mon 28 Apr 2025 03:55:55 +0000 Manifest next update: Tue 29 Apr 2025 05:26:55 +0000 Files and hashes: 1: 323830343a336435633a3a2f33322d3336203d3e20323636353236.roa (hash: hG9C5493PGDbutLPKxkFc3n6WKuxTqsTbH82yybndLw=) 2: 34352e36352e3233362e302f32322d3234203d3e20323636353236.roa (hash: 6Tw1Qh3+7pbuMN+p/b0CjOJVcWYBSbeaPsx04md2eiM=) 3: 32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl (hash: NYa6OwKwc+4uycMbYNyvM0kIu9y2BAhJEXrex0DoTqI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ce:82:46:fb:d3:de:1d:1b:a5:1f:7e:a1:bb:68:b8:dc:9d:07:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA Validity Not Before: Apr 28 03:55:55 2025 GMT Not After : Apr 29 05:26:55 2025 GMT Subject: CN=BE84265DEC175AEE7D8DADF80B25835514F9F192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9e:74:f5:39:b5:c1:74:dd:5f:40:0d:e1:f5: 6b:75:30:b4:73:58:51:f0:60:77:e8:1b:ec:63:67: 0b:eb:30:04:14:40:14:72:38:24:8d:48:75:ab:e4: c9:34:8d:64:b4:8f:fb:19:ab:39:3d:bb:92:ce:a4: 59:57:8c:cc:6e:6c:e3:3c:14:28:4d:c8:28:64:86: 72:30:3c:38:05:20:82:b0:29:e1:47:d9:e8:f7:12: be:66:d4:c2:81:96:eb:0b:78:90:9e:6b:90:fe:48: 3f:0e:7c:f0:7b:9c:47:88:34:6a:5c:f9:e2:c3:d7: 50:70:8e:36:e7:03:dd:3f:d5:57:a0:45:f4:b4:0c: ec:94:fc:e8:87:31:7d:1c:70:54:c0:28:9c:01:7f: f0:52:b7:39:eb:b2:97:55:ba:1a:cb:f9:6d:f3:85: 08:31:ea:20:58:e2:0f:cf:1f:e9:d0:51:e8:42:87: 61:cb:54:eb:50:8f:4b:5f:11:38:b8:11:ea:cc:af: 1d:b8:1a:6c:de:cc:c7:d5:08:5e:f0:49:fe:2b:86: c3:3a:dd:8c:00:24:4c:da:80:9c:d9:7b:5b:b5:bf: 26:5b:d8:e5:d7:39:2e:a9:49:b8:b2:2c:63:00:dd: 1c:2a:5c:d9:9d:48:2a:20:1c:4f:9a:c7:75:b1:60: ca:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:84:26:5D:EC:17:5A:EE:7D:8D:AD:F8:0B:25:83:55:14:F9:F1:92 X509v3 Authority Key Identifier: keyid:32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5f:b9:46:96:7e:9b:c2:9b:3b:f1:4e:ea:32:fe:c1:a9:d3: f5:e6:9e:41:1d:b3:da:00:ae:8a:87:f6:d2:f1:ce:6d:97:8e: d2:83:83:fa:73:3a:9a:b6:ae:1f:4e:11:a3:5b:64:78:9a:2d: 1e:15:61:92:75:ca:09:84:16:17:b2:79:62:e2:6d:d6:23:d2: 10:fb:8a:d0:de:a1:a3:5c:38:ad:d1:b4:a7:fc:34:79:60:14: 5a:23:7b:17:fd:dc:dd:cc:84:57:e1:80:92:e3:30:11:eb:18: 94:dc:67:db:38:eb:e3:6d:be:5a:aa:78:19:92:84:f5:f4:41: 37:24:00:6b:6d:d3:de:45:51:e3:37:eb:0e:98:66:62:ae:62: 3a:a3:8a:36:fc:b7:e6:1d:08:fe:0f:21:96:37:8e:54:f1:ca: 4a:d4:3b:bc:33:59:9d:d8:30:25:d4:8c:e7:94:7e:15:4f:a7: c3:d8:aa:ab:6f:1a:1d:b0:a8:ce:52:5b:8c:8d:5e:60:49:9d: 96:d5:b0:26:1f:ce:7f:03:85:a8:7d:95:1e:e7:a8:ea:97:45: 81:0a:87:7e:70:fe:7b:1d:eb:0f:c8:d3:3f:55:7f:93:79:e7: 96:72:01:57:a2:b5:90:a9:1e:c0:2d:6c:27:80:a2:7c:9d:5a: 5b:7d:0d:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfM6CRvvT3h0bpR9+obtouNydB4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIwNjhDRUIxQjkzMTYxOEZCMjlBMEVDRDUyRjlEMjJG QjAzMDREQTAeFw0yNTA0MjgwMzU1NTVaFw0yNTA0MjkwNTI2NTVaMDMxMTAvBgNV BAMTKEJFODQyNjVERUMxNzVBRUU3RDhEQURGODBCMjU4MzU1MTRGOUYxOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNnnT1ObXBdN1fQA3h9Wt1MLRz WFHwYHfoG+xjZwvrMAQUQBRyOCSNSHWr5Mk0jWS0j/sZqzk9u5LOpFlXjMxubOM8 FChNyChkhnIwPDgFIIKwKeFH2ej3Er5m1MKBlusLeJCea5D+SD8OfPB7nEeINGpc +eLD11BwjjbnA90/1VegRfS0DOyU/OiHMX0ccFTAKJwBf/BStznrspdVuhrL+W3z hQgx6iBY4g/PH+nQUehCh2HLVOtQj0tfETi4EerMrx24GmzezMfVCF7wSf4rhsM6 3YwAJEzagJzZe1u1vyZb2OXXOS6pSbiyLGMA3RwqXNmdSCogHE+ax3WxYMqjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvoQmXewXWu59ja34CyWDVRT58ZIwHwYDVR0j BBgwFoAUMgaM6xuTFhj7KaDs1S+dIvsDBNowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHRoM2QycFVrOHJyN2N6YzhrM3VFMmVyTkF0UmlzcXBFMmpodnFZY2hG dFIvMS8zMjA2OENFQjFCOTMxNjE4RkIyOUEwRUNENTJGOUQyMkZCMDMwNERBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyMDY4Q0VCMUI5MzE2MThG QjI5QTBFQ0Q1MkY5RDIyRkIwMzA0REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHRoM2QycFVrOHJyN2N6YzhrM3VFMmVyTkF0UmlzcXBFMmpodnFZY2hGdFIvMS8z MjA2OENFQjFCOTMxNjE4RkIyOUEwRUNENTJGOUQyMkZCMDMwNERBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALF+5RpZ+m8KbO/FO6jL+wanT9eaeQR2z2gCuiof20vHObZeO0oOD+nM6mrau H04Ro1tkeJotHhVhknXKCYQWF7J5YuJt1iPSEPuK0N6ho1w4rdG0p/w0eWAUWiN7 F/3c3cyEV+GAkuMwEesYlNxn2zjr422+Wqp4GZKE9fRBNyQAa23T3kVR4zfrDphm Yq5iOqOKNvy35h0I/g8hljeOVPHKStQ7vDNZndgwJdSM55R+FU+nw9iqq28aHbCo zlJbjI1eYEmdltWwJh/OfwOFqH2VHueo6pdFgQqHfnD+ex3rD8jTP1V/k3nnlnIB V6K1kKkewC1sJ4CifJ1aW30NQQ== -----END CERTIFICATE-----Generated at Mon Apr 28 06:00:33 2025 by rpki-client on console.sobornost.net