$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft File: 7CD32787AF54793C40E640D59B41C4E38532BB54.mft (raw, json) Hash identifier: lavYAX83Srb9qdqNMhGVWR6EtkocSM5fDT7+nugNNac= Subject key identifier: CF:B3:5E:B9:45:3F:1C:6A:17:4C:ED:37:FF:D9:C9:78:49:6B:18:11 Authority key identifier: 7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54 Certificate issuer: /CN=7CD32787AF54793C40E640D59B41C4E38532BB54 Certificate serial: 74E861ACA2E8FA5411749D9F51F637E9061EF182 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer Subject info access: rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft Manifest number: 020D Signing time: Thu 24 Apr 2025 14:46:25 +0000 Manifest this update: Thu 24 Apr 2025 14:41:25 +0000 Manifest next update: Fri 25 Apr 2025 15:36:25 +0000 Files and hashes: 1: 323830343a353537343a3a2f33322d3332203d3e20323637393336.roa (hash: 8XSYoB39Y0V21Py1PqOLt26uTm3zHTz0l1jSAcCeCjU=) 2: 7CD32787AF54793C40E640D59B41C4E38532BB54.crl (hash: EOH9I8zhiR7cIVflh1J8vFe22hFWlKq50nBkRwxDTFw=) 3: 34352e3136362e35322e302f32322d3234203d3e20323637393336.roa (hash: j08b7Lyi0M6rP5QjxhHX5NPPT3Q8tdqjjK0kojb2T3k=) 4: 323830343a353537343a3a2f33362d3336203d3e20323637393336.roa (hash: w7wZe96H7YSaw3Skwe0LCCn+CzVc+AM8C58c7xts6EI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 15:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:e8:61:ac:a2:e8:fa:54:11:74:9d:9f:51:f6:37:e9:06:1e:f1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD32787AF54793C40E640D59B41C4E38532BB54 Validity Not Before: Apr 24 14:41:25 2025 GMT Not After : Apr 25 15:36:25 2025 GMT Subject: CN=CFB35EB9453F1C6A174CED37FFD9C978496B1811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0e:4d:f2:0d:8b:9a:76:d7:49:13:8d:cc:96: 44:a5:74:1d:dd:40:eb:d9:c6:0c:9f:3d:b4:a2:e9: dd:d1:25:0c:f3:d9:a0:8a:2f:23:4d:f5:4f:af:22: 35:e1:0c:d1:19:95:d8:fe:af:c2:59:b2:ef:7f:21: 5e:89:1a:51:b3:7d:b1:e4:c9:03:0b:93:ed:db:1f: c8:64:07:d5:a2:bb:89:29:7a:3b:4a:ce:e3:50:5a: bc:8a:2f:00:87:be:54:c4:bb:28:84:7e:e5:2c:5c: 3a:9e:11:18:29:51:57:07:aa:f2:a0:4d:fb:17:d8: ea:83:b3:ce:dd:db:e4:a2:d5:82:36:5e:f1:96:f0: a8:ec:5c:b8:ae:4f:bb:c3:05:d3:38:ae:b1:b6:16: 5a:45:79:24:14:f3:a4:31:56:22:07:4c:2a:0b:20: e1:c3:9e:1f:a6:a5:3c:db:8f:3b:36:64:27:07:1a: 23:e0:10:c5:35:9b:33:d0:35:4e:51:5c:1d:83:25: 3a:9b:22:38:15:25:2f:35:3c:66:d9:63:7e:99:10: 8a:3d:78:b3:d2:bd:f0:b8:f3:0a:a0:5a:dd:27:9b: 4d:24:7f:96:f1:46:c8:e5:e2:55:96:da:79:e7:8e: 86:56:6d:7a:10:8e:d7:a7:1d:c1:b1:2c:9e:9c:c7: 6e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B3:5E:B9:45:3F:1C:6A:17:4C:ED:37:FF:D9:C9:78:49:6B:18:11 X509v3 Authority Key Identifier: keyid:7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:f8:26:ff:bc:1c:f7:86:89:3d:ed:6f:e4:e5:50:6f:92:22: b8:08:05:7f:22:db:d5:91:2c:41:bd:ac:37:81:5b:b3:01:b3: 95:9c:92:33:76:f9:69:05:e7:70:cb:57:88:2d:a5:07:50:e0: 09:ab:26:8c:cf:f6:b2:82:ff:f4:4c:fa:28:10:d2:3d:b5:19: cc:49:72:39:05:c1:03:64:d7:b3:01:95:4e:c1:98:e5:75:08: 65:bc:53:bb:fc:9c:c9:43:c5:08:fc:0f:d4:e1:50:25:dd:9e: 3a:eb:77:eb:6e:9b:b5:66:11:30:a1:aa:ac:73:05:f7:05:94: 1e:45:90:10:a9:af:ad:e6:51:0c:4d:4a:b9:fe:74:26:73:16: 7f:4b:25:83:dc:ea:f9:40:47:46:8f:fd:9d:e2:93:79:a3:bd: 7f:57:fb:4c:ce:58:70:d8:49:7f:1f:14:20:f5:61:c8:11:a3: 0c:1a:5b:5c:9d:4c:d2:e9:29:01:bd:82:c8:c8:95:03:d8:e9: 0d:f8:c5:20:40:d7:25:dc:5f:c9:a7:dd:2a:6e:9b:aa:35:4a: e3:4c:04:45:f9:3c:12:55:3a:a8:2a:2e:23:e0:42:b0:ed:7e: 5e:4c:02:39:27:a1:0d:b1:15:dd:51:22:f3:55:9c:93:9b:39: 6a:fc:44:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdOhhrKLo+lQRdJ2fUfY36QYe8YIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NEMzI3ODdBRjU0NzkzQzQwRTY0MEQ1OUI0MUM0RTM4 NTMyQkI1NDAeFw0yNTA0MjQxNDQxMjVaFw0yNTA0MjUxNTM2MjVaMDMxMTAvBgNV BAMTKENGQjM1RUI5NDUzRjFDNkExNzRDRUQzN0ZGRDlDOTc4NDk2QjE4MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEDk3yDYuadtdJE43MlkSldB3d QOvZxgyfPbSi6d3RJQzz2aCKLyNN9U+vIjXhDNEZldj+r8JZsu9/IV6JGlGzfbHk yQMLk+3bH8hkB9Wiu4kpejtKzuNQWryKLwCHvlTEuyiEfuUsXDqeERgpUVcHqvKg TfsX2OqDs87d2+Si1YI2XvGW8KjsXLiuT7vDBdM4rrG2FlpFeSQU86QxViIHTCoL IOHDnh+mpTzbjzs2ZCcHGiPgEMU1mzPQNU5RXB2DJTqbIjgVJS81PGbZY36ZEIo9 eLPSvfC48wqgWt0nm00kf5bxRsjl4lWW2nnnjoZWbXoQjtenHcGxLJ6cx25rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUz7NeuUU/HGoXTO03/9nJeElrGBEwHwYDVR0j BBgwFoAUfNMnh69UeTxA5kDVm0HE44Uyu1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2tXTkIyTHVOb3hDZXhpMlVZclc2anprQzJVVUdEWm5XUDV4MTkxeW9X Y00vMS83Q0QzMjc4N0FGNTQ3OTNDNDBFNjQwRDU5QjQxQzRFMzg1MzJCQjU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDRDMyNzg3QUY1NDc5M0M0 MEU2NDBENTlCNDFDNEUzODUzMkJCNTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2tXTkIyTHVOb3hDZXhpMlVZclc2anprQzJVVUdEWm5XUDV4MTkxeW9XY00vMS83 Q0QzMjc4N0FGNTQ3OTNDNDBFNjQwRDU5QjQxQzRFMzg1MzJCQjU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk/gm/7wc94aJPe1v5OVQb5IiuAgFfyLb1ZEsQb2sN4FbswGzlZySM3b5aQXn cMtXiC2lB1DgCasmjM/2soL/9Ez6KBDSPbUZzElyOQXBA2TXswGVTsGY5XUIZbxT u/ycyUPFCPwP1OFQJd2eOut3626btWYRMKGqrHMF9wWUHkWQEKmvreZRDE1Kuf50 JnMWf0slg9zq+UBHRo/9neKTeaO9f1f7TM5YcNhJfx8UIPVhyBGjDBpbXJ1M0ukp Ab2CyMiVA9jpDfjFIEDXJdxfyafdKm6bqjVK40wERfk8ElU6qCouI+BCsO1+XkwC OSehDbEV3VEi81Wck5s5avxEEA== -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:57 2025 by rpki-client on console.sobornost.net