$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.mft File: 861E87488AE3835CA52A40FC3F26AB08171FAFDD.mft (raw, json) Hash identifier: EsYYZWPFyGx6MF0mpM9BKFM4l7qjX4pNeztipqWHdfs= Subject key identifier: 54:2C:C4:C3:D5:FE:29:16:2E:63:B1:CF:49:53:FE:B6:84:CC:2B:E9 Authority key identifier: 86:1E:87:48:8A:E3:83:5C:A5:2A:40:FC:3F:26:AB:08:17:1F:AF:DD Certificate issuer: /CN=861E87488AE3835CA52A40FC3F26AB08171FAFDD Certificate serial: 711E1CB561F8F975B4264F491EA14D4B7898F102 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.cer Subject info access: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.mft Manifest number: 0207 Signing time: Mon 28 Apr 2025 12:13:14 +0000 Manifest this update: Mon 28 Apr 2025 12:08:14 +0000 Manifest next update: Tue 29 Apr 2025 13:05:14 +0000 Files and hashes: 1: 34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa (hash: VOtxJ10zH5zpJE9PI2+E/kC2LhQ+eYZLKWlBr90BHC0=) 2: 861E87488AE3835CA52A40FC3F26AB08171FAFDD.crl (hash: VcQkaFAr70puuOZr2L7qcYxeq0WcCczuiVbCzada6Dw=) 3: 34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa (hash: jaNv2fV4mhnIdGMm/AT8dho4q8Mx61jU8wHoeKe2llk=) 4: 34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (hash: O5QSN1jbLmIGPs7ioqES0lmd/QqWdB/0zeylEL8fbuw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.crl rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 13:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:1e:1c:b5:61:f8:f9:75:b4:26:4f:49:1e:a1:4d:4b:78:98:f1:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861E87488AE3835CA52A40FC3F26AB08171FAFDD Validity Not Before: Apr 28 12:08:14 2025 GMT Not After : Apr 29 13:05:14 2025 GMT Subject: CN=542CC4C3D5FE29162E63B1CF4953FEB684CC2BE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0f:d9:79:a7:77:eb:4e:f5:13:07:24:f7:01: 43:8c:5d:fe:af:13:4a:b1:b1:2a:7b:44:52:ef:b2: 43:e7:de:fc:c9:09:e7:b7:a0:7d:f2:cb:39:0d:cb: 3c:05:46:ce:08:05:d0:48:31:6a:51:63:26:c9:8f: 29:ab:3d:82:22:b7:ca:c3:d7:8d:62:29:c1:22:ca: ed:a0:e2:04:de:cc:fd:16:fe:74:3c:ab:0a:ee:9f: ce:3e:5f:b1:8d:67:27:1a:12:30:7e:b1:77:35:01: 6f:1f:5c:ae:12:02:28:69:a1:7e:63:f4:71:ec:48: 89:eb:45:04:66:02:0e:dd:ab:6a:37:16:64:f0:6b: 93:35:c5:6c:4f:93:01:99:1f:4f:22:68:74:b9:8b: 17:3b:35:16:cd:c2:74:c4:64:fd:b0:8d:3d:cb:a9: 79:ea:75:14:72:4f:8f:99:51:c4:1e:5b:12:e1:4a: f6:8c:b5:c3:5b:75:a9:ce:6f:6d:63:ad:26:25:cd: 99:12:99:a9:ad:68:68:b7:2e:c0:58:a7:ac:b2:6a: 34:36:ff:0c:6f:88:1a:95:8b:63:49:af:8b:b3:9c: 6c:5e:2f:19:2c:a9:3b:47:61:d7:c8:3e:55:27:61: 4a:ea:6c:82:33:a3:e2:78:d3:35:58:69:0a:1b:e7: 95:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2C:C4:C3:D5:FE:29:16:2E:63:B1:CF:49:53:FE:B6:84:CC:2B:E9 X509v3 Authority Key Identifier: keyid:86:1E:87:48:8A:E3:83:5C:A5:2A:40:FC:3F:26:AB:08:17:1F:AF:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/1/861E87488AE3835CA52A40FC3F26AB08171FAFDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:24:f5:fe:26:58:44:41:98:e9:14:28:5e:7e:12:c2:0b:c7: 35:bf:37:51:f9:6e:e5:67:24:ef:ae:59:7e:34:f2:7c:2f:b6: 08:c0:a2:a6:17:29:fb:fc:70:06:f0:b8:2e:be:05:1f:cb:ab: 3a:3f:d3:32:b4:86:89:fd:0c:14:4e:df:51:04:bd:dc:eb:1c: 6c:b5:6c:e7:03:f3:ea:b0:87:84:6c:80:ee:28:15:eb:63:43: ff:dc:27:96:b1:c1:cc:99:56:0a:02:0d:7c:e2:f3:ef:39:0d: 09:c8:02:b3:46:9c:3d:87:ce:40:c2:f6:ee:7e:03:21:e4:2d: 97:47:bb:70:c7:61:91:b7:e3:d0:10:60:ac:a6:5a:8b:c4:c3: ff:82:71:d2:5d:d6:83:96:cd:e9:e6:d9:96:3b:7f:49:db:64: 9e:54:ee:95:8c:d3:d9:48:df:77:0d:a1:b8:14:66:9a:3b:74: fa:6a:a6:4c:65:75:a2:4b:c9:ca:30:39:2c:a1:50:52:03:17: 5a:9c:d7:07:39:f0:fc:55:a4:fd:46:63:2c:69:93:8b:41:e7: 2b:03:96:e4:44:20:41:e2:1c:70:4e:ae:57:c1:17:29:fe:88: db:f8:e5:c0:93:f6:6e:f2:ba:fe:be:33:b7:cd:df:c3:a1:66: 40:ac:cf:c2 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUcR4ctWH4+XW0Jk9JHqFNS3iY8QIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYxRTg3NDg4QUUzODM1Q0E1MkE0MEZDM0YyNkFCMDgx NzFGQUZERDAeFw0yNTA0MjgxMjA4MTRaFw0yNTA0MjkxMzA1MTRaMDMxMTAvBgNV BAMTKDU0MkNDNEMzRDVGRTI5MTYyRTYzQjFDRjQ5NTNGRUI2ODRDQzJCRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkD9l5p3frTvUTByT3AUOMXf6v E0qxsSp7RFLvskPn3vzJCee3oH3yyzkNyzwFRs4IBdBIMWpRYybJjymrPYIit8rD 141iKcEiyu2g4gTezP0W/nQ8qwrun84+X7GNZycaEjB+sXc1AW8fXK4SAihpoX5j 9HHsSInrRQRmAg7dq2o3FmTwa5M1xWxPkwGZH08iaHS5ixc7NRbNwnTEZP2wjT3L qXnqdRRyT4+ZUcQeWxLhSvaMtcNbdanOb21jrSYlzZkSmamtaGi3LsBYp6yyajQ2 /wxviBqVi2NJr4uznGxeLxksqTtHYdfIPlUnYUrqbIIzo+J40zVYaQob55XFAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUVCzEw9X+KRYuY7HPSVP+toTMK+kwHwYDVR0j BBgwFoAUhh6HSIrjg1ylKkD8PyarCBcfr90wDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9reVdwR0EydlA5VUVEWWZWTlh3RGt0QkNORGdzVFJySmt4elE1QmptMjM3 LzEvODYxRTg3NDg4QUUzODM1Q0E1MkE0MEZDM0YyNkFCMDgxNzFGQUZERC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84NjFFODc0ODhBRTM4MzVDQTUy QTQwRkMzRjI2QUIwODE3MUZBRkRELmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2t5 V3BHQTJ2UDlVRURZZlZOWHdEa3RCQ05EZ3NUUnJKa3h6UTVCam0yMzcvMS84NjFF ODc0ODhBRTM4MzVDQTUyQTQwRkMzRjI2QUIwODE3MUZBRkRELm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA UST1/iZYREGY6RQoXn4SwgvHNb83Uflu5Wck765ZfjTyfC+2CMCiphcp+/xwBvC4 Lr4FH8urOj/TMrSGif0MFE7fUQS93OscbLVs5wPz6rCHhGyA7igV62ND/9wnlrHB zJlWCgINfOLz7zkNCcgCs0acPYfOQML27n4DIeQtl0e7cMdhkbfj0BBgrKZai8TD /4Jx0l3Wg5bN6ebZljt/SdtknlTulYzT2Ujfdw2huBRmmjt0+mqmTGV1okvJyjA5 LKFQUgMXWpzXBznw/FWk/UZjLGmTi0HnKwOW5EQgQeIccE6uV8EXKf6I2/jlwJP2 bvK6/r4zt83fw6FmQKzPwg== -----END CERTIFICATE-----Generated at Mon Apr 28 15:24:18 2025 by rpki-client on console.sobornost.net