$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft File: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft (raw, json) Hash identifier: 8Z9kTk0KzhlnCdBXVCZFdHosrdNJM4lZF6nkx6YVokg= Subject key identifier: FA:06:B3:ED:8F:63:E4:B6:6B:60:07:81:2D:5C:D7:42:18:59:F6:37 Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 Certificate issuer: /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Certificate serial: 5FF312148DC0B2521809649680F3B9233475E500 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject info access: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft Manifest number: 46 Signing time: Fri 25 Apr 2025 19:22:48 +0000 Manifest this update: Fri 25 Apr 2025 19:17:48 +0000 Manifest next update: Sat 26 Apr 2025 22:07:48 +0000 Files and hashes: 1: 3137372e37332e33362e302f32322d3332203d3e203532363934.roa (hash: OGK41uRpAQwllRubLCRfh+WKpYG39IFoFH08wloP1PA=) 2: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl (hash: OiO96viEA87tqF6Rx1U0FnvfIiezQ1/Vf4yiEDYL3wE=) 3: 3230302e362e3132382e302f32322d3332203d3e203532363934.roa (hash: cmMBAa8apGKZWHWfvXo7rXbYWd2EI5yW46+IKqeCJjo=) 4: 323830343a6335383a3a2f33322d313238203d3e203532363934.roa (hash: 9O2EZ1ZOA5SxIxzwzkyeRpvslbdGVqnJeJ0v8OoeGGs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 22:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f3:12:14:8d:c0:b2:52:18:09:64:96:80:f3:b9:23:34:75:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Validity Not Before: Apr 25 19:17:48 2025 GMT Not After : Apr 26 22:07:48 2025 GMT Subject: CN=FA06B3ED8F63E4B66B6007812D5CD7421859F637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:1a:7d:87:58:f5:81:01:b0:7c:51:e7:4e: d4:0f:1b:24:f1:a9:e5:34:9d:48:3b:26:9e:a5:2e: ba:49:d2:54:b1:8c:82:0e:5e:43:d6:3d:e7:cc:ec: 3f:09:8d:dc:6b:62:45:06:99:f8:72:6b:3f:48:6d: cb:09:ad:9f:88:41:8a:fe:ee:53:80:66:e1:d0:07: a9:d5:02:fe:57:0a:c9:69:f8:f8:8a:81:04:40:fc: 85:8d:ec:4a:f1:ad:20:7b:87:8d:d4:a9:03:3e:c9: 73:a1:c7:81:15:c3:4f:dd:69:47:6d:3c:d5:5d:ec: 60:84:bd:81:e9:5b:5a:93:3f:11:c6:6c:49:a0:ba: 0f:96:59:93:1d:9a:a3:2e:84:8c:be:36:36:4e:2d: c8:e3:45:38:74:21:5d:dd:de:ee:40:08:2e:9c:5f: d1:44:62:3e:0d:25:78:e9:d5:9d:74:42:f5:8f:6b: c7:89:84:88:ac:74:3f:70:53:64:10:af:e8:65:f2: bf:d2:ff:41:62:41:97:19:a9:71:68:44:0f:ec:41: 43:6a:3a:98:fc:b6:50:3c:03:cf:7c:e1:12:db:fc: 56:ac:d3:13:58:68:7d:3a:3a:d1:32:57:33:a9:8b: 9b:72:01:1d:7c:52:66:fe:cd:02:df:cf:66:24:1a: 83:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:06:B3:ED:8F:63:E4:B6:6B:60:07:81:2D:5C:D7:42:18:59:F6:37 X509v3 Authority Key Identifier: keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:81:4c:f7:ad:20:7e:77:45:fc:45:e6:c0:08:7b:fd:0e:e6: 88:42:b0:9b:b5:0f:65:26:6b:20:d2:dc:76:ec:73:1e:9e:f0: 90:33:e9:6f:6d:11:a5:2b:20:f7:e0:2f:44:2f:4f:1d:b2:f8: 23:2e:0c:90:6e:9c:13:db:0e:ca:da:e0:43:fb:8c:eb:ba:7f: 40:3d:4d:a0:51:af:22:65:c4:a3:5a:02:41:d0:32:51:a3:d9: 81:b0:c4:d1:d6:02:1f:ac:18:26:98:fd:83:2e:a0:eb:13:4b: 6a:7e:3d:96:23:7f:e6:84:f2:23:dc:45:26:85:9f:df:11:f6: a0:8a:e3:1f:bc:fa:11:e2:1a:92:34:68:d1:74:19:b6:de:a5: 1e:73:31:4c:5c:1b:bd:99:f8:22:50:99:83:d7:6b:02:68:fa: fb:ca:77:2b:e8:5e:ef:3b:c5:2b:97:33:16:cc:93:c2:99:1d: a5:d7:d2:d5:ef:3d:99:54:ef:87:30:af:00:1f:02:0c:54:1e: 92:6a:90:78:05:d4:f5:f5:c4:65:7d:09:91:9f:da:91:29:21: dc:98:07:f0:57:9e:3e:ce:61:6d:c8:24:1f:eb:85:4e:aa:92: ba:03:97:c8:91:1a:9a:29:da:ac:a8:70:a0:2d:5d:58:5d:9b: 8a:d1:eb:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX/MSFI3AslIYCWSWgPO5IzR15QAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RBRjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURB NzNENzAwNzAeFw0yNTA0MjUxOTE3NDhaFw0yNTA0MjYyMjA3NDhaMDMxMTAvBgNV BAMTKEZBMDZCM0VEOEY2M0U0QjY2QjYwMDc4MTJENUNENzQyMTg1OUY2MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvpxp9h1j1gQGwfFHnTtQPGyTx qeU0nUg7Jp6lLrpJ0lSxjIIOXkPWPefM7D8JjdxrYkUGmfhyaz9IbcsJrZ+IQYr+ 7lOAZuHQB6nVAv5XCslp+PiKgQRA/IWN7ErxrSB7h43UqQM+yXOhx4EVw0/daUdt PNVd7GCEvYHpW1qTPxHGbEmgug+WWZMdmqMuhIy+NjZOLcjjRTh0IV3d3u5ACC6c X9FEYj4NJXjp1Z10QvWPa8eJhIisdD9wU2QQr+hl8r/S/0FiQZcZqXFoRA/sQUNq Opj8tlA8A8984RLb/Fas0xNYaH06OtEyVzOpi5tyAR18Umb+zQLfz2YkGoMDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+gaz7Y9j5LZrYAeBLVzXQhhZ9jcwHwYDVR0j BBgwFoAUPa8cpIYz1C84lVxHyLoPrac9cAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3 cGQvMC8zREFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEQUYxQ0E0ODYzM0Q0MkYz ODk1NUM0N0M4QkEwRkFEQTczRDcwMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3cGQvMC8z REFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWYFM960gfndF/EXmwAh7/Q7miEKwm7UPZSZrINLcduxzHp7wkDPpb20RpSsg 9+AvRC9PHbL4Iy4MkG6cE9sOytrgQ/uM67p/QD1NoFGvImXEo1oCQdAyUaPZgbDE 0dYCH6wYJpj9gy6g6xNLan49liN/5oTyI9xFJoWf3xH2oIrjH7z6EeIakjRo0XQZ tt6lHnMxTFwbvZn4IlCZg9drAmj6+8p3K+he7zvFK5czFsyTwpkdpdfS1e89mVTv hzCvAB8CDFQekmqQeAXU9fXEZX0JkZ/akSkh3JgH8FeePs5hbcgkH+uFTqqSugOX yJEaminarKhwoC1dWF2bitHr0A== -----END CERTIFICATE-----Generated at Fri Apr 25 22:07:45 2025 by rpki-client on console.sobornost.net