$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft File: 9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft (raw, json) Hash identifier: vVwon21R6B7/P+j4mejPHeN+6nfVibYV6XGeWagx3Rg= Subject key identifier: 16:AF:C9:0D:A2:7B:B0:24:E2:28:B2:41:6C:E5:90:0B:18:69:43:8C Authority key identifier: 9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9 Certificate issuer: /CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9 Certificate serial: 69744A59834EC3F8E8F97B0B17DB5466CD8047A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft Manifest number: 0106 Signing time: Mon 28 Apr 2025 07:09:16 +0000 Manifest this update: Mon 28 Apr 2025 07:04:16 +0000 Manifest next update: Tue 29 Apr 2025 09:27:16 +0000 Files and hashes: 1: 3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa (hash: PFf7r8NesetTZTWlwVJGodcacjgKx2YPuW6mqFlVgBA=) 2: 323830343a346163383a3a2f33322d3332203d3e20323637323633.roa (hash: C/JW/5+W67z3bHrJD4GBQa9VrsbU/o7KtfAav89CUFM=) 3: 9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl (hash: LA46RQYRoOje3hX4Jt+ylFRqKMgodsYfhAhmw9QGK7c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:74:4a:59:83:4e:c3:f8:e8:f9:7b:0b:17:db:54:66:cd:80:47:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9 Validity Not Before: Apr 28 07:04:16 2025 GMT Not After : Apr 29 09:27:16 2025 GMT Subject: CN=16AFC90DA27BB024E228B2416CE5900B1869438C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f1:67:16:86:d0:9b:cb:12:6b:63:73:dd:f0: 1e:08:5e:c2:8e:c5:ed:eb:6d:03:91:62:80:3e:c5: 46:24:54:3d:7c:cb:14:1d:14:8e:4b:96:90:bc:48: 3f:d0:65:c8:d6:9a:5e:f1:7d:2f:fd:88:0f:51:5b: b2:d3:b3:cd:ab:3b:4b:57:40:fc:27:db:76:76:22: b1:18:08:30:c3:ba:81:f0:68:b5:9a:47:78:4f:78: 5f:00:fe:f2:8e:76:a9:88:92:91:3a:5a:c4:e6:3c: d3:be:c0:22:0e:00:d2:cb:16:60:75:3c:c6:1c:a3: 7e:a3:fb:f4:0e:c4:72:e5:b8:50:f9:84:31:c8:07: d1:87:08:47:d5:03:fa:ab:a1:de:29:2d:92:11:42: 8e:e8:b6:e6:b7:47:10:45:7b:24:11:95:a0:83:ee: ed:96:e4:e0:c7:fa:9a:d2:64:e3:d5:55:ec:26:25: 0b:dc:63:bf:d9:ec:2a:d6:4e:b2:81:95:fe:41:29: 5a:a3:5e:60:d0:67:5a:fa:e5:cb:4a:ab:90:12:b9: be:8e:71:f1:74:7e:6d:a4:3b:ec:f2:2c:40:ab:da: 06:80:5f:33:6a:50:49:32:6f:5e:fd:db:29:03:17: d6:95:1c:87:47:a1:c7:91:e2:75:15:a4:b0:ea:d8: 37:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AF:C9:0D:A2:7B:B0:24:E2:28:B2:41:6C:E5:90:0B:18:69:43:8C X509v3 Authority Key Identifier: keyid:9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:4e:d3:38:51:93:f3:10:e1:56:dc:7b:25:f1:78:fd:43:35: 0d:9b:47:29:f1:f2:29:7b:6f:3d:bf:9e:be:12:ca:4e:21:b2: a3:76:c3:f4:8c:c7:94:92:0f:1f:8d:0a:fe:2f:96:53:cd:6d: be:59:d1:1e:3c:1b:50:08:30:10:74:9b:2c:e4:49:34:b6:85: b1:1d:51:e6:65:03:8b:25:27:55:8a:d3:18:4c:3c:89:73:06: b3:1e:87:5b:10:62:d7:01:77:d1:81:a5:93:3a:19:52:64:ac: d7:bb:af:b4:2c:3d:ec:a1:20:e9:54:7b:7e:a6:df:2b:71:48: 1c:90:c3:82:01:73:69:76:5a:9a:6a:e5:09:9b:1d:27:ee:48: ab:7b:45:70:f1:82:ba:a2:9b:68:33:0b:df:4f:bf:85:d1:88: 7b:0e:96:1a:cc:89:31:14:77:a2:21:64:b1:82:92:c4:c2:7d: 1e:26:38:f7:10:aa:19:db:bd:5d:5a:aa:52:85:28:7e:4f:1f: a4:b1:8c:15:82:0f:5d:4e:c7:7c:bd:0e:4d:d0:14:42:29:80: cf:84:06:05:ea:cf:bc:92:07:e9:d0:eb:a7:8b:76:f9:50:33: 10:3c:29:d6:88:61:d3:57:d0:36:44:85:d3:9b:30:38:82:7d: 2c:b6:11:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaXRKWYNOw/jo+XsLF9tUZs2AR6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU4RTFEQjVDMzNEM0ZDOEY4RTdDOTkzMDExNTgwQUEy OEYzMEJDOTAeFw0yNTA0MjgwNzA0MTZaFw0yNTA0MjkwOTI3MTZaMDMxMTAvBgNV BAMTKDE2QUZDOTBEQTI3QkIwMjRFMjI4QjI0MTZDRTU5MDBCMTg2OTQzOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd8WcWhtCbyxJrY3Pd8B4IXsKO xe3rbQORYoA+xUYkVD18yxQdFI5LlpC8SD/QZcjWml7xfS/9iA9RW7LTs82rO0tX QPwn23Z2IrEYCDDDuoHwaLWaR3hPeF8A/vKOdqmIkpE6WsTmPNO+wCIOANLLFmB1 PMYco36j+/QOxHLluFD5hDHIB9GHCEfVA/qrod4pLZIRQo7otua3RxBFeyQRlaCD 7u2W5ODH+prSZOPVVewmJQvcY7/Z7CrWTrKBlf5BKVqjXmDQZ1r65ctKq5ASub6O cfF0fm2kO+zyLECr2gaAXzNqUEkyb1792ykDF9aVHIdHoceR4nUVpLDq2DeVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFq/JDaJ7sCTiKLJBbOWQCxhpQ4wwHwYDVR0j BBgwFoAUno4dtcM9P8j458mTARWAqijzC8kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEpqZ0hEN2tIaFAxVWFnZlYxQ25MWWJKalVSQWlVY2lwcjk1UXpobm5F eWsvMC85RThFMURCNUMzM0QzRkM4RjhFN0M5OTMwMTE1ODBBQTI4RjMwQkM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFOEUxREI1QzMzRDNGQzhG OEU3Qzk5MzAxMTU4MEFBMjhGMzBCQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEpqZ0hEN2tIaFAxVWFnZlYxQ25MWWJKalVSQWlVY2lwcjk1UXpobm5FeWsvMC85 RThFMURCNUMzM0QzRkM4RjhFN0M5OTMwMTE1ODBBQTI4RjMwQkM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJU7TOFGT8xDhVtx7JfF4/UM1DZtHKfHyKXtvPb+evhLKTiGyo3bD9IzHlJIP H40K/i+WU81tvlnRHjwbUAgwEHSbLORJNLaFsR1R5mUDiyUnVYrTGEw8iXMGsx6H WxBi1wF30YGlkzoZUmSs17uvtCw97KEg6VR7fqbfK3FIHJDDggFzaXZammrlCZsd J+5Iq3tFcPGCuqKbaDML30+/hdGIew6WGsyJMRR3oiFksYKSxMJ9HiY49xCqGdu9 XVqqUoUofk8fpLGMFYIPXU7HfL0OTdAUQimAz4QGBerPvJIH6dDrp4t2+VAzEDwp 1ohh01fQNkSF05swOIJ9LLYR3A== -----END CERTIFICATE-----Generated at Mon Apr 28 10:49:32 2025 by rpki-client on console.sobornost.net