$ rpki-client -vvf rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.mft File: D45EE207E811FF7831A3054740F4FC376DE9C473.mft (raw, json) Hash identifier: z9scyGD9jm8Np3CfhqY8HUsnFFi/Hje4JG4MwLMugC0= Subject key identifier: 70:B1:F3:17:ED:83:36:39:BD:C8:D5:42:6A:5A:A1:66:9F:A2:AE:EC Authority key identifier: D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73 Certificate issuer: /CN=D45EE207E811FF7831A3054740F4FC376DE9C473 Certificate serial: 5393E257359619507D7EA782BB7C9B092E39D6FA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer Subject info access: rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.mft Manifest number: CA Signing time: Sun 27 Apr 2025 03:41:13 +0000 Manifest this update: Sun 27 Apr 2025 03:36:13 +0000 Manifest next update: Mon 28 Apr 2025 06:59:13 +0000 Files and hashes: 1: 3230302e32342e38302e302f32322d3232203d3e203631373930.roa (hash: M2lNJNOo3QmEHp0Yb2W0NhzPTUamH5IA9BhxqbF6t7Q=) 2: D45EE207E811FF7831A3054740F4FC376DE9C473.crl (hash: StnIyQKOyWbWJl6+usvAUQ5b2O7czoRfDs4/bwngf/4=) 3: 323830343a313935633a3a2f33332d3333203d3e203631373930.roa (hash: zxoVB0/V+w47xzbIkuWqO0MNlAIMgniNQQdYXcRA3gs=) 4: 3230302e32342e38342e302f32322d3232203d3e203631373930.roa (hash: oWpT8s3eNAWGbVlR5gpPmlnfM5HqmKLYroWKrDnfVhA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.crl rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 06:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:93:e2:57:35:96:19:50:7d:7e:a7:82:bb:7c:9b:09:2e:39:d6:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D45EE207E811FF7831A3054740F4FC376DE9C473 Validity Not Before: Apr 27 03:36:13 2025 GMT Not After : Apr 28 06:59:13 2025 GMT Subject: CN=70B1F317ED833639BDC8D5426A5AA1669FA2AEEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8a:30:14:86:a4:6c:a8:4d:6b:4c:82:37:31: f9:b0:d3:a2:17:bd:1c:1e:47:8e:50:cc:24:ad:aa: af:60:5f:1f:3b:4e:c0:6a:84:65:eb:aa:62:36:3d: f6:cf:fd:b9:82:d1:1c:cf:6c:1b:a3:57:f0:74:f4: b6:79:0d:8b:a6:ed:ae:b8:a6:91:de:9c:eb:2c:68: 82:62:8c:b6:8d:10:f9:3f:e7:65:a2:c0:47:e3:31: d4:39:07:8d:1e:c8:15:d9:f9:f8:01:8f:f9:34:c7: 3d:c5:b9:51:42:b2:8d:cf:66:21:d9:ee:5c:86:78: 08:d1:92:4e:b7:e9:95:d0:9c:3e:56:30:d2:d3:82: 8e:91:79:9d:24:0f:67:88:cf:57:17:73:a9:5b:46: 30:ce:85:0c:f1:0a:52:96:56:1e:31:54:ec:3c:0a: 82:19:99:35:ad:a8:54:a2:8b:95:1a:4e:43:f1:1f: 7a:8c:b5:f7:38:d1:25:53:d4:ab:29:b9:02:da:58: 1e:aa:ea:82:89:5e:bf:b1:29:15:19:18:5e:b7:a8: 7f:e7:7b:b9:51:bd:fb:1f:90:dc:85:4c:65:8c:7a: 45:51:68:90:42:75:7e:66:b6:07:82:35:92:c6:06: 19:da:7d:f6:6d:5f:1e:84:fe:1b:1f:6c:6b:8e:ca: 4a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B1:F3:17:ED:83:36:39:BD:C8:D5:42:6A:5A:A1:66:9F:A2:AE:EC X509v3 Authority Key Identifier: keyid:D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a9:94:07:1e:ec:c8:4a:2a:e5:de:2e:d5:02:86:1b:60:64: f6:6f:25:c9:7b:a3:65:d9:b0:97:5f:4a:c1:f2:dc:27:a3:aa: b6:52:0d:17:b2:95:e1:e3:2d:9c:8a:6a:81:5b:d8:0c:60:50: 20:94:82:a3:d5:b8:63:a9:fe:66:31:85:69:e7:2c:ca:e9:81: 16:80:f1:06:b2:84:6d:b4:a0:25:5a:27:de:d6:1b:2f:c0:db: 84:7a:30:25:bf:44:b5:31:e2:1a:fa:56:3a:29:90:4b:4b:7f: 09:bb:6e:7c:fa:1d:1d:85:a7:96:63:54:80:8d:70:18:4e:26: e8:f3:af:7f:84:3b:62:97:3e:f4:ff:86:62:dd:f0:63:aa:14: a2:4d:be:70:31:0c:b1:cb:65:cf:15:13:c7:86:08:73:55:f5: e7:6c:a8:11:2f:7d:9f:6d:2f:90:0d:41:49:18:04:0b:a9:bb: 21:e4:f9:d9:74:f0:85:51:c1:71:13:e9:db:c5:30:62:7f:44: 9b:c5:bd:fe:09:81:ae:ae:41:e2:e7:65:b0:ea:03:e6:2f:d5: 17:09:41:b7:88:e3:8a:ba:cf:15:3a:4a:f2:63:0f:52:1a:79: 15:36:f9:24:9a:db:74:82:c5:f8:9f:57:f8:55:9c:77:5f:36: ee:64:37:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUU5PiVzWWGVB9fqeCu3ybCS451vowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1RUUyMDdFODExRkY3ODMxQTMwNTQ3NDBGNEZDMzc2 REU5QzQ3MzAeFw0yNTA0MjcwMzM2MTNaFw0yNTA0MjgwNjU5MTNaMDMxMTAvBgNV BAMTKDcwQjFGMzE3RUQ4MzM2MzlCREM4RDU0MjZBNUFBMTY2OUZBMkFFRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkijAUhqRsqE1rTII3Mfmw06IX vRweR45QzCStqq9gXx87TsBqhGXrqmI2PfbP/bmC0RzPbBujV/B09LZ5DYum7a64 ppHenOssaIJijLaNEPk/52WiwEfjMdQ5B40eyBXZ+fgBj/k0xz3FuVFCso3PZiHZ 7lyGeAjRkk636ZXQnD5WMNLTgo6ReZ0kD2eIz1cXc6lbRjDOhQzxClKWVh4xVOw8 CoIZmTWtqFSii5UaTkPxH3qMtfc40SVT1KspuQLaWB6q6oKJXr+xKRUZGF63qH/n e7lRvfsfkNyFTGWMekVRaJBCdX5mtgeCNZLGBhnaffZtXx6E/hsfbGuOykpTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcLHzF+2DNjm9yNVCalqhZp+iruwwHwYDVR0j BBgwFoAU1F7iB+gR/3gxowVHQPT8N23pxHMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEhQRVRtY2ZSMmhQYW91Z2ZRTXh5TEdTcEtYZWhYMzVqeEFwNHlkNGRR NWkvMC9ENDVFRTIwN0U4MTFGRjc4MzFBMzA1NDc0MEY0RkMzNzZERTlDNDczLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NUVFMjA3RTgxMUZGNzgz MUEzMDU0NzQwRjRGQzM3NkRFOUM0NzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEhQRVRtY2ZSMmhQYW91Z2ZRTXh5TEdTcEtYZWhYMzVqeEFwNHlkNGRRNWkvMC9E NDVFRTIwN0U4MTFGRjc4MzFBMzA1NDc0MEY0RkMzNzZERTlDNDczLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS6mUBx7syEoq5d4u1QKGG2Bk9m8lyXujZdmwl19KwfLcJ6OqtlINF7KV4eMt nIpqgVvYDGBQIJSCo9W4Y6n+ZjGFaecsyumBFoDxBrKEbbSgJVon3tYbL8DbhHow Jb9EtTHiGvpWOimQS0t/CbtufPodHYWnlmNUgI1wGE4m6POvf4Q7Ypc+9P+GYt3w Y6oUok2+cDEMsctlzxUTx4YIc1X152yoES99n20vkA1BSRgEC6m7IeT52XTwhVHB cRPp28UwYn9Em8W9/gmBrq5B4udlsOoD5i/VFwlBt4jjirrPFTpK8mMPUhp5FTb5 JJrbdILF+J9X+FWcd1827mQ3XQ== -----END CERTIFICATE-----Generated at Sun Apr 27 05:34:19 2025 by rpki-client on console.sobornost.net