$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft File: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json) Hash identifier: 5asLJpKzdyF6ZGYvpdpSzH6QrKbteN93fIIc0JLgAIc= Subject key identifier: E5:91:28:F5:C8:D4:A2:92:21:10:1F:51:1A:5C:D1:A4:9F:BE:C6:72 Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF Certificate issuer: /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF Certificate serial: 178AF902D7C8F19F4B289450ADBD3F18B2DA7272 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer Subject info access: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft Manifest number: 0202 Signing time: Thu 24 Apr 2025 19:00:01 +0000 Manifest this update: Thu 24 Apr 2025 18:55:01 +0000 Manifest next update: Fri 25 Apr 2025 20:07:01 +0000 Files and hashes: 1: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: DVRW50QGSfKkCx0M1+VA9DFoSNRjF7ldfT0pmPw8n2A=) 2: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: 3KJaKxQH8BfvmqPdr0f3pk4VVvf9POaN3twm4TXLa3A=) 3: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: DnMTftbrwcjz8X3bw8h/ZXePWQcdkoF/dDNIoKgLFZ0=) 4: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: 40prK8ppN8vt4mijpoc2pjLbuuqUZaJ9Grs/fMA2kDg=) 5: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: gq23d3+kRAY4dWCEoVb03VA6J8a063C0N58YBiErots=) 6: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: d4RD2/KeG1YPHk0v9voZ54DgtjeHPBbE3WMduZTo2Tk=) 7: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: Em9nIZXC1XnJHHkeLO0Am9KIh2IHxIcFrayfBCdDiB4=) 8: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: lMncz++kvT6MHNunBcJ6oHQBvWwWSBFElu5ZGi2kkO0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8a:f9:02:d7:c8:f1:9f:4b:28:94:50:ad:bd:3f:18:b2:da:72:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF Validity Not Before: Apr 24 18:55:01 2025 GMT Not After : Apr 25 20:07:01 2025 GMT Subject: CN=E59128F5C8D4A29221101F511A5CD1A49FBEC672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:36:ca:cb:bc:e4:23:06:cf:b1:2f:a2:43: 40:06:e0:7f:07:bb:26:ca:5b:51:89:af:7c:82:0b: c4:17:3e:d6:de:b8:a9:46:4c:24:46:72:54:b9:b4: 4c:ac:dd:0a:6c:46:f0:c4:b5:d3:21:cf:d6:40:91: a8:17:3f:6b:56:b9:cf:ad:eb:ac:46:b0:f2:68:42: b8:36:c0:60:45:a7:e6:c1:2e:6e:6c:53:3a:49:bf: f4:b4:43:18:9b:ae:23:5b:d6:ec:bd:a1:74:48:a9: 96:ac:17:9f:fa:4a:fa:39:30:bc:46:2a:d4:04:75: 7e:e1:33:c5:6f:34:68:22:e2:d0:3e:aa:63:69:0e: c1:d0:17:44:6b:ee:df:a5:90:36:c5:7d:fb:c9:62: be:6a:c5:52:9b:0f:54:f1:8a:23:a4:7c:7d:61:a0: 19:c8:b2:6b:36:53:09:ac:09:aa:b1:b8:a8:1d:c4: 0a:93:97:a4:e4:84:32:d8:cc:3c:02:0e:bd:cb:36: 16:c6:b4:5e:7c:40:e7:5e:7a:7a:94:67:26:17:8b: 18:3f:d2:9a:92:65:cf:5b:3a:d1:fd:af:c8:4b:45: 66:db:be:5d:f0:67:3c:f6:89:4d:2b:15:57:d0:89: 88:39:78:73:c1:d5:81:92:7c:40:aa:18:9c:7c:56: 21:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:91:28:F5:C8:D4:A2:92:21:10:1F:51:1A:5C:D1:A4:9F:BE:C6:72 X509v3 Authority Key Identifier: keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:45:5c:81:78:af:52:36:25:ea:e2:91:5d:45:72:8f:e4:78: 52:37:55:a0:80:2d:8b:fb:63:6e:fb:3d:31:f2:e6:30:d8:9b: c8:43:12:2d:ae:30:1e:1b:2f:2c:4e:69:ee:7b:8b:9a:2a:28: be:aa:57:76:6b:68:db:2c:64:15:2f:f6:14:cb:51:54:26:89: 56:7d:18:82:e0:a2:e9:c9:f4:aa:e5:6e:ac:81:da:98:c7:9b: 25:d8:ab:bb:bf:3a:71:a8:30:ee:f1:9e:20:97:44:25:3c:b1: dd:ba:1b:5a:f6:96:eb:9f:55:52:c0:56:98:d0:85:f9:88:3c: 7c:ee:20:fe:4a:90:a9:a5:be:fe:19:09:9f:48:cd:08:77:f7: 30:be:ac:5c:de:80:c5:35:e3:e6:07:c8:8a:d4:84:e0:26:ff: d7:dd:68:9c:03:dc:98:16:04:05:de:04:51:90:84:5d:ab:33: 23:59:1f:16:0d:33:47:4c:ca:c0:da:c4:fe:ee:8c:e7:ea:f9: 5d:1f:2b:fd:d9:2d:6c:a3:f3:33:ad:08:e1:88:12:e3:4d:e5: 55:12:39:fa:1d:c3:7c:69:95:6c:12:98:70:38:74:75:47:93: c2:e0:83:48:bc:2d:f3:7f:6d:ac:c0:28:aa:cd:9c:bb:b1:6e: 4e:6f:95:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF4r5AtfI8Z9LKJRQrb0/GLLacnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZGRDM1NzNBQzQwNkI0RUZCMUY0NTgxNDlDRjczQzMx QTJGRjRFRjAeFw0yNTA0MjQxODU1MDFaFw0yNTA0MjUyMDA3MDFaMDMxMTAvBgNV BAMTKEU1OTEyOEY1QzhENEEyOTIyMTEwMUY1MTFBNUNEMUE0OUZCRUM2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnoDbKy7zkIwbPsS+iQ0AG4H8H uybKW1GJr3yCC8QXPtbeuKlGTCRGclS5tEys3QpsRvDEtdMhz9ZAkagXP2tWuc+t 66xGsPJoQrg2wGBFp+bBLm5sUzpJv/S0QxibriNb1uy9oXRIqZasF5/6Svo5MLxG KtQEdX7hM8VvNGgi4tA+qmNpDsHQF0Rr7t+lkDbFffvJYr5qxVKbD1TxiiOkfH1h oBnIsms2UwmsCaqxuKgdxAqTl6TkhDLYzDwCDr3LNhbGtF58QOdeenqUZyYXixg/ 0pqSZc9bOtH9r8hLRWbbvl3wZzz2iU0rFVfQiYg5eHPB1YGSfECqGJx8ViFhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5ZEo9cjUopIhEB9RGlzRpJ++xnIwHwYDVR0j BBgwFoAU3/01c6xAa077H0WBSc9zwxov9O8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwy a28vMS9ERkZEMzU3M0FDNDA2QjRFRkIxRjQ1ODE0OUNGNzNDMzFBMkZGNEVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGRkQzNTczQUM0MDZCNEVG QjFGNDU4MTQ5Q0Y3M0MzMUEyRkY0RUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwya28vMS9E RkZEMzU3M0FDNDA2QjRFRkIxRjQ1ODE0OUNGNzNDMzFBMkZGNEVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY0VcgXivUjYl6uKRXUVyj+R4UjdVoIAti/tjbvs9MfLmMNibyEMSLa4wHhsv LE5p7nuLmioovqpXdmto2yxkFS/2FMtRVCaJVn0YguCi6cn0quVurIHamMebJdir u786cagw7vGeIJdEJTyx3bobWvaW659VUsBWmNCF+Yg8fO4g/kqQqaW+/hkJn0jN CHf3ML6sXN6AxTXj5gfIitSE4Cb/191onAPcmBYEBd4EUZCEXaszI1kfFg0zR0zK wNrE/u6M5+r5XR8r/dktbKPzM60I4YgS403lVRI5+h3DfGmVbBKYcDh0dUeTwuCD SLwt839trMAoqs2cu7FuTm+VCA== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:46 2025 by rpki-client on console.sobornost.net