$ rpki-client -vvf rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft File: 37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft (raw, json) Hash identifier: Dx7kKkKEDImehP6cEO5h8jw6goGIFhl2vcwNyjL8bog= Subject key identifier: AC:7F:79:D4:DD:7E:45:AB:C4:99:56:23:24:57:E3:84:5F:1A:F9:C3 Authority key identifier: 37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87 Certificate issuer: /CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87 Certificate serial: 6809BE76B162BE93FE69024DCA2BF59B489C91FC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft Manifest number: 0210 Signing time: Mon 28 Apr 2025 10:24:20 +0000 Manifest this update: Mon 28 Apr 2025 10:19:20 +0000 Manifest next update: Tue 29 Apr 2025 11:15:20 +0000 Files and hashes: 1: 37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl (hash: EhYDxw1Xaby8HLjb6fzPGP3mzLm+WRsukLHR3EZx1Es=) 2: 323830343a323935383a3a2f33322d3430203d3e20323634303130.roa (hash: cLNURStJu5eQongcSd5F/uNBcK5qxK2dTs84ITmqdTY=) 3: 3134332e302e3139362e302f32322d3234203d3e20323634303130.roa (hash: wfuDZyzxxzfnOOIqzYL69wZq2lthDLjupE8Io4WDAqo=) 4: 3137372e35342e38302e302f32302d3234203d3e20323634303130.roa (hash: H+IBgnyrvLId3jMJF5jADUvdFmFLXsJ/4k9Cnr4cTrM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 11:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:09:be:76:b1:62:be:93:fe:69:02:4d:ca:2b:f5:9b:48:9c:91:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87 Validity Not Before: Apr 28 10:19:20 2025 GMT Not After : Apr 29 11:15:20 2025 GMT Subject: CN=AC7F79D4DD7E45ABC49956232457E3845F1AF9C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:c4:06:95:37:6e:70:47:61:43:e6:9f:7b: 31:dc:d2:ed:7f:ed:e4:7a:cb:30:ec:17:ac:81:6d: 18:0a:b6:36:77:50:6e:be:f5:29:1b:52:fa:01:39: 0a:f6:dc:ae:d0:b8:5c:af:c3:f8:c0:5e:b7:57:e1: 4e:a4:da:f9:d4:7c:91:d6:b4:8e:2e:6c:a5:a9:93: ea:5f:0d:74:c4:25:82:a4:e2:66:5f:a5:e7:69:1e: fc:e3:5c:37:52:28:19:e4:15:99:d6:a3:5d:5b:56: d9:52:97:ba:df:f9:5d:85:f6:a0:66:b5:7c:ca:41: cd:9e:f3:e9:ef:d7:f9:05:a8:9a:3e:1b:0c:09:3c: 32:0e:19:99:7e:3c:4e:fa:47:d7:3c:7d:c7:00:43: 13:93:df:59:ca:11:7e:82:af:34:b3:a6:be:19:48: 3a:68:9b:0c:fd:c4:67:af:ab:47:c8:46:34:c4:19: b5:72:89:68:a5:a4:a6:9a:62:d0:23:5c:36:9f:80: da:31:f3:a5:3c:93:25:ea:37:5c:cf:31:b6:33:f1: a1:5c:68:6b:19:4e:d6:ef:55:66:0a:e9:99:41:93: 77:13:7e:96:86:21:41:12:be:4c:7f:16:7e:53:ca: 6e:40:a3:fb:a6:6a:95:dc:14:d3:a3:11:9d:f5:23: a6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7F:79:D4:DD:7E:45:AB:C4:99:56:23:24:57:E3:84:5F:1A:F9:C3 X509v3 Authority Key Identifier: keyid:37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:53:25:5b:02:bb:3c:63:09:6f:e9:bc:70:b1:48:76:20:4a: 74:6b:83:08:ca:00:6f:62:a0:a9:5b:7b:37:a8:a2:84:07:c7: 70:fa:48:e8:44:2a:0c:6e:c8:17:a6:e2:2a:18:db:24:86:cf: 13:9c:3a:eb:d1:d8:fb:fb:1d:ff:54:c1:df:f3:e3:49:0a:a5: 4c:f6:95:0e:aa:65:30:f8:2c:33:e3:42:71:85:6c:16:55:da: 9d:02:bb:89:1e:78:2f:91:4f:15:63:94:67:2e:2e:85:07:8e: 02:36:64:6d:76:39:a3:39:88:b4:86:0c:2e:23:d2:2a:0d:35: 19:3b:48:e1:ca:85:e6:6a:99:bc:09:cc:61:a5:24:ae:01:ff: 6a:2c:a4:49:51:c9:30:eb:3d:40:69:9d:d2:53:1f:4c:64:9b: 98:bd:f7:89:8e:c7:12:2d:b5:cd:a6:3d:02:fe:81:9f:3e:3a: 41:ae:32:5b:7f:c8:e4:2d:ab:5d:41:3e:78:28:c3:43:f7:33: a2:b9:65:1f:c7:27:a1:dc:a2:0c:44:a8:46:1e:12:e0:54:d7: 36:81:99:91:82:fd:15:8e:00:f9:fe:f7:9e:22:0b:4a:af:ac: 24:63:b4:1b:3c:4e:22:20:19:37:a3:d2:bc:d4:af:6e:6e:2c: b9:eb:a8:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaAm+drFivpP+aQJNyiv1m0ickfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFQzY2RTZENTE1M0UzMzVDNEExMUI1MUM3REZCNDgx RTkxQ0I4NzAeFw0yNTA0MjgxMDE5MjBaFw0yNTA0MjkxMTE1MjBaMDMxMTAvBgNV BAMTKEFDN0Y3OUQ0REQ3RTQ1QUJDNDk5NTYyMzI0NTdFMzg0NUYxQUY5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63MQGlTducEdhQ+afezHc0u1/ 7eR6yzDsF6yBbRgKtjZ3UG6+9SkbUvoBOQr23K7QuFyvw/jAXrdX4U6k2vnUfJHW tI4ubKWpk+pfDXTEJYKk4mZfpedpHvzjXDdSKBnkFZnWo11bVtlSl7rf+V2F9qBm tXzKQc2e8+nv1/kFqJo+GwwJPDIOGZl+PE76R9c8fccAQxOT31nKEX6CrzSzpr4Z SDpomwz9xGevq0fIRjTEGbVyiWilpKaaYtAjXDafgNox86U8kyXqN1zPMbYz8aFc aGsZTtbvVWYK6ZlBk3cTfpaGIUESvkx/Fn5Tym5Ao/umapXcFNOjEZ31I6Z/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrH951N1+RavEmVYjJFfjhF8a+cMwHwYDVR0j BBgwFoAUN+xm5tUVPjNcShG1HH37SB6Ry4cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHd3MUNmRmFGeWRYdjNlMzdBaEVWSEYxRXpjTDlXNjJnTWIxUmp0ZXBj Mk0vMS8zN0VDNjZFNkQ1MTUzRTMzNUM0QTExQjUxQzdERkI0ODFFOTFDQjg3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3RUM2NkU2RDUxNTNFMzM1 QzRBMTFCNTFDN0RGQjQ4MUU5MUNCODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHd3MUNmRmFGeWRYdjNlMzdBaEVWSEYxRXpjTDlXNjJnTWIxUmp0ZXBjMk0vMS8z N0VDNjZFNkQ1MTUzRTMzNUM0QTExQjUxQzdERkI0ODFFOTFDQjg3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyVMlWwK7PGMJb+m8cLFIdiBKdGuDCMoAb2KgqVt7N6iihAfHcPpI6EQqDG7I F6biKhjbJIbPE5w669HY+/sd/1TB3/PjSQqlTPaVDqplMPgsM+NCcYVsFlXanQK7 iR54L5FPFWOUZy4uhQeOAjZkbXY5ozmItIYMLiPSKg01GTtI4cqF5mqZvAnMYaUk rgH/aiykSVHJMOs9QGmd0lMfTGSbmL33iY7HEi21zaY9Av6Bnz46Qa4yW3/I5C2r XUE+eCjDQ/czorllH8cnodyiDESoRh4S4FTXNoGZkYL9FY4A+f73niILSq+sJGO0 GzxOIiAZN6PSvNSvbm4sueuoxA== -----END CERTIFICATE-----Generated at Mon Apr 28 13:05:01 2025 by rpki-client on console.sobornost.net