$ rpki-client -vvf rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.mft File: DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.mft (raw, json) Hash identifier: FbRjIhXm414KLq1kJ73CWDy4OYE7hMX7xafiZgj57wk= Subject key identifier: 0B:3D:7C:F0:27:96:8B:C5:36:0C:09:43:A0:82:74:8A:C4:DB:D8:E1 Authority key identifier: DD:01:CC:F1:8E:70:CF:C5:DB:5B:0F:2D:A0:98:EA:F5:31:96:CB:D1 Certificate issuer: /CN=DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1 Certificate serial: 1649C59B9D190320F44ECA9BE9675E44CB3E88 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.cer Subject info access: rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.mft Manifest number: 0207 Signing time: Thu 24 Apr 2025 17:14:19 +0000 Manifest this update: Thu 24 Apr 2025 17:09:19 +0000 Manifest next update: Fri 25 Apr 2025 17:30:19 +0000 Files and hashes: 1: 3138312e3233322e3133312e302f32342d3234203d3e20323634343836.roa (hash: wu2rIukYpI6JXTw6+o7YNH9kCjNCnuTFCbelp5PhknU=) 2: 323830343a376362303a3a2f33322d3438203d3e20323731353132.roa (hash: UrUr7rbe9wkQziBoOWgeil4dIzI7nybGvMG7GrySm0s=) 3: DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.crl (hash: QGKmHi6zD3wCyTvOPczzMDssuEWlL9jbTayd8IZA20o=) 4: 3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa (hash: Ca0ATQBtu2wwlGdbVP249fdllMV78XDACR45JyepW1s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.crl rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 17:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:49:c5:9b:9d:19:03:20:f4:4e:ca:9b:e9:67:5e:44:cb:3e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1 Validity Not Before: Apr 24 17:09:19 2025 GMT Not After : Apr 25 17:30:19 2025 GMT Subject: CN=0B3D7CF027968BC5360C0943A082748AC4DBD8E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e5:eb:2f:d3:5e:be:63:f4:6b:73:68:a6:e3: b9:91:18:51:27:b1:b9:5d:fc:57:6c:97:87:77:6a: c1:94:9c:92:a4:51:0f:37:8e:9c:08:e7:4a:34:67: 9b:d6:9c:78:c7:32:93:a5:d2:3c:2a:9d:fe:19:2f: 42:5e:1d:b6:12:d1:4e:25:5b:1d:dd:93:4c:40:08: a1:aa:eb:9f:17:f0:c0:8f:76:cc:3c:4c:15:db:de: ef:63:b0:2f:31:96:51:37:8c:5e:39:d6:ed:a7:e3: b4:40:6c:3b:08:51:ea:b0:98:4f:4a:26:8d:2b:92: 5a:7b:3e:9c:9b:30:f4:39:b0:a1:c8:37:aa:17:e9: 8c:55:6d:c4:ce:c9:d0:82:d2:3c:23:73:d0:a2:da: 48:44:18:19:82:d7:c0:97:80:e4:41:58:84:c9:52: f3:a0:1b:f1:d2:05:db:d5:d6:10:15:a5:7b:ae:77: 75:db:c6:e6:8a:44:fb:43:d7:7e:e3:bb:d1:01:89: 1c:5f:d6:a5:c8:30:7f:41:78:26:02:f0:be:df:fe: 1f:2d:37:9f:fb:49:d1:95:d4:09:41:7f:52:87:f5: e3:18:d7:76:20:76:6e:1d:ab:6f:b1:78:8a:23:44: 2d:88:1b:9c:65:10:ea:ba:7c:cd:5b:73:03:b5:d6: 86:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3D:7C:F0:27:96:8B:C5:36:0C:09:43:A0:82:74:8A:C4:DB:D8:E1 X509v3 Authority Key Identifier: keyid:DD:01:CC:F1:8E:70:CF:C5:DB:5B:0F:2D:A0:98:EA:F5:31:96:CB:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/1/DD01CCF18E70CFC5DB5B0F2DA098EAF53196CBD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:5d:4a:24:71:d2:83:cb:f7:16:56:7b:5e:eb:e9:24:63:e2: e6:a5:a3:25:cb:43:4b:a9:19:f0:3c:29:87:82:2b:b7:15:13: d3:4e:7e:1d:3d:1f:33:35:92:01:ba:83:52:f3:95:0e:6d:70: 3a:9d:ca:ea:92:b0:ef:16:90:af:3b:77:6d:1d:73:48:2c:d9: 7b:3f:b2:0c:ca:06:07:6f:3c:a2:d2:fb:7a:0c:d5:5b:49:88: e5:bc:06:b7:38:ba:f3:bb:59:a4:17:f3:ba:42:55:c5:79:f6: ad:f3:5a:09:c7:45:62:0c:2f:b6:53:4f:bb:dd:23:69:52:2c: bf:27:c5:2c:ca:75:8e:75:8d:1c:08:2c:de:db:77:97:2a:1f: 06:42:c4:8f:e8:72:16:08:69:94:90:1d:2f:91:ae:4b:63:0d: 09:19:f6:31:bf:24:05:ad:72:0e:84:cd:bb:59:30:02:1e:fb: 1f:2d:bc:ec:d7:04:1a:d7:f2:ab:6f:7b:b2:0d:5c:5c:0c:6d: d1:b9:5d:1f:1d:29:7f:39:1c:60:f6:70:3d:51:70:2c:97:55: 9a:68:85:05:28:c7:58:3c:5a:65:21:2b:49:6c:bf:95:c2:5e: f3:81:e2:ca:a4:75:32:31:be:b9:14:3b:a3:a7:9e:7c:cb:f7: 37:6c:36:56 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgITFknFm50ZAyD0Tsqb6WdeRMs+iDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhERDAxQ0NGMThFNzBDRkM1REI1QjBGMkRBMDk4RUFGNTMx OTZDQkQxMB4XDTI1MDQyNDE3MDkxOVoXDTI1MDQyNTE3MzAxOVowMzExMC8GA1UE AxMoMEIzRDdDRjAyNzk2OEJDNTM2MEMwOTQzQTA4Mjc0OEFDNERCRDhFMTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/l6y/TXr5j9GtzaKbjuZEYUSex uV38V2yXh3dqwZSckqRRDzeOnAjnSjRnm9aceMcyk6XSPCqd/hkvQl4dthLRTiVb Hd2TTEAIoarrnxfwwI92zDxMFdve72OwLzGWUTeMXjnW7afjtEBsOwhR6rCYT0om jSuSWns+nJsw9Dmwocg3qhfpjFVtxM7J0ILSPCNz0KLaSEQYGYLXwJeA5EFYhMlS 86Ab8dIF29XWEBWle653ddvG5opE+0PXfuO70QGJHF/Wpcgwf0F4JgLwvt/+Hy03 n/tJ0ZXUCUF/Uof14xjXdiB2bh2rb7F4iiNELYgbnGUQ6rp8zVtzA7XWhp8CAwEA AaOCAlYwggJSMB0GA1UdDgQWBBQLPXzwJ5aLxTYMCUOggnSKxNvY4TAfBgNVHSME GDAWgBTdAczxjnDPxdtbDy2gmOr1MZbL0TAOBgNVHQ8BAf8EBAMCB4AwgZIGA1Ud HwSBijCBhzCBhKCBgaB/hn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9y ZXBvL0o0cFpKY3d1dmhIZFo4NENjM0tFQ3BXWDFCcmZRamdVaENNbXVobjE5c00v MS9ERDAxQ0NGMThFNzBDRkM1REI1QjBGMkRBMDk4RUFGNTMxOTZDQkQxLmNybDB4 BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBvLnJl Z2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMDFDQ0YxOEU3MENGQzVEQjVC MEYyREEwOThFQUY1MzE5NkNCRDEuY2VyMIGcBggrBgEFBQcBCwSBjzCBjDCBiQYI KwYBBQUHMAuGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSjRw Wkpjd3V2aEhkWjg0Q2MzS0VDcFdYMUJyZlFqZ1VoQ01tdWhuMTlzTS8xL0REMDFD Q0YxOEU3MENGQzVEQjVCMEYyREEwOThFQUY1MzE5NkNCRDEubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBU XUokcdKDy/cWVnte6+kkY+LmpaMly0NLqRnwPCmHgiu3FRPTTn4dPR8zNZIBuoNS 85UObXA6ncrqkrDvFpCvO3dtHXNILNl7P7IMygYHbzyi0vt6DNVbSYjlvAa3OLrz u1mkF/O6QlXFefat81oJx0ViDC+2U0+73SNpUiy/J8UsynWOdY0cCCze23eXKh8G QsSP6HIWCGmUkB0vka5LYw0JGfYxvyQFrXIOhM27WTACHvsfLbzs1wQa1/Krb3uy DVxcDG3RuV0fHSl/ORxg9nA9UXAsl1WaaIUFKMdYPFplIStJbL+Vwl7zgeLKpHUy Mb65FDujp558y/c3bDZW -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:46 2025 by rpki-client on console.sobornost.net