$ rpki-client -vvf rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft File: 9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft (raw, json) Hash identifier: tG7MZsC+Ko7VCZ38xTgMIEdBgxP8ElGyVTc9ItE3/I4= Subject key identifier: 93:0A:C4:1B:5B:94:11:C8:E7:EE:DD:F0:BE:03:DB:3D:79:95:EE:A0 Authority key identifier: 9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C Certificate issuer: /CN=9A88287F0DA67C74CC2430138C9E699A8D9BC30C Certificate serial: 45F4E26F625C67723D14E664CA1BD31B4B8119C3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer Subject info access: rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft Manifest number: 0208 Signing time: Mon 28 Apr 2025 13:50:28 +0000 Manifest this update: Mon 28 Apr 2025 13:45:28 +0000 Manifest next update: Tue 29 Apr 2025 16:44:28 +0000 Files and hashes: 1: 3137372e35332e3136382e302f32312d3332203d3e20323632343734.roa (hash: aGKmgf4Q37YTxb2naQ2Aw7TO+rtm4/O1Gt+ec54VYCM=) 2: 3137372e3135342e32302e302f32322d3332203d3e20323632343734.roa (hash: H4KK/IfCeQYkBhQvfas6h5MTpKMxJTrKibFC05W8fuY=) 3: 9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl (hash: 5+HTa3W2edHFprj7Yz1GJKQQIEkvpO/j0i75svzhx5M=) 4: 323830343a3464633a3a2f33322d313238203d3e20323632343734.roa (hash: tLinHUpDx5XtKM/wXIJIMXEa7cIJplW8c1o8b2SFJ1U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 15:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f4:e2:6f:62:5c:67:72:3d:14:e6:64:ca:1b:d3:1b:4b:81:19:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A88287F0DA67C74CC2430138C9E699A8D9BC30C Validity Not Before: Apr 28 13:45:28 2025 GMT Not After : Apr 29 16:44:28 2025 GMT Subject: CN=930AC41B5B9411C8E7EEDDF0BE03DB3D7995EEA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:59:b9:31:7a:81:aa:2b:2d:03:db:33:96:43: 9f:2b:29:da:f9:3d:1f:13:c5:b6:0f:3c:7e:9e:1b: aa:ab:0e:2e:21:38:be:84:37:27:e4:da:ea:8d:79: 22:56:89:59:49:d5:8d:f0:b9:41:fc:ef:fe:7f:e5: 83:66:c4:39:50:11:a4:3e:da:90:0c:e0:5d:39:15: 4a:16:e3:f3:5d:2a:17:81:52:34:b2:40:ee:6c:ce: 60:8d:96:c9:22:aa:a8:55:e8:1b:c4:df:3b:68:c0: af:2a:b4:35:7b:6b:7e:1b:5a:96:4c:22:69:9e:b9: b8:88:45:bf:81:31:68:48:66:03:00:ce:ea:58:53: 8e:1c:16:f4:2a:85:82:63:a8:65:c7:33:30:5c:3c: 99:cf:8c:05:7e:69:b4:e4:24:7a:03:7f:3e:49:d5: 93:28:b8:a3:dc:35:6d:a0:64:49:ed:97:59:8a:a5: 14:52:9a:ac:4c:2d:09:91:5f:e6:51:a7:90:ae:f4: a7:2a:7f:36:cc:ab:72:dc:e3:f6:8e:b1:b3:0e:b7: af:fb:7c:01:e0:47:dd:4a:82:a2:c3:21:5f:4f:2d: 6e:45:36:d9:43:43:f9:8c:70:9b:5b:5a:3d:a1:43: 04:b7:4b:df:48:c9:1c:db:28:73:e1:a0:32:10:42: ea:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0A:C4:1B:5B:94:11:C8:E7:EE:DD:F0:BE:03:DB:3D:79:95:EE:A0 X509v3 Authority Key Identifier: keyid:9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1d:e9:fe:13:99:db:92:7c:71:ad:82:fc:49:19:cd:bc:1d: 6a:11:67:ec:05:09:0f:fe:64:d8:4c:49:6f:75:05:d6:91:23: 48:05:8c:0f:48:83:5d:6f:83:b4:ed:fb:6d:66:9e:74:c9:3e: f6:41:9b:3d:c9:09:8c:50:a2:e5:eb:70:e5:7f:8c:32:33:a0: 93:6c:39:d7:03:19:59:85:3d:53:61:7e:69:ef:47:33:2f:ec: 9e:96:8b:d7:66:ac:6b:31:a3:85:ee:ae:f6:b6:03:16:19:eb: c2:02:34:84:4d:a6:85:92:ac:21:6d:3e:31:95:92:df:f3:11: dd:f8:bc:b3:cd:88:34:1e:66:02:02:ab:1c:52:e3:46:a9:5a: 49:63:3e:6a:a7:97:1c:a3:2c:36:64:e9:9f:a4:b7:7e:13:a9: 84:73:61:56:ca:9d:39:7d:3f:fd:18:4c:b2:c0:a0:b6:f3:c2: 40:06:7d:47:ba:a2:0f:30:ed:e7:cb:fa:fc:47:d5:79:09:99: fa:cd:e4:ff:08:9e:42:40:87:1a:54:29:47:c0:11:b2:b7:41: 6a:56:49:42:bb:c3:ec:02:1e:06:70:f3:75:c3:b0:89:70:86: 8a:93:ba:80:53:e2:3f:e0:a5:5c:a0:a0:c3:e6:3f:3b:05:81: 09:ad:ce:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURfTib2JcZ3I9FOZkyhvTG0uBGcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4ODI4N0YwREE2N0M3NENDMjQzMDEzOEM5RTY5OUE4 RDlCQzMwQzAeFw0yNTA0MjgxMzQ1MjhaFw0yNTA0MjkxNjQ0MjhaMDMxMTAvBgNV BAMTKDkzMEFDNDFCNUI5NDExQzhFN0VFRERGMEJFMDNEQjNENzk5NUVFQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmWbkxeoGqKy0D2zOWQ58rKdr5 PR8TxbYPPH6eG6qrDi4hOL6ENyfk2uqNeSJWiVlJ1Y3wuUH87/5/5YNmxDlQEaQ+ 2pAM4F05FUoW4/NdKheBUjSyQO5szmCNlskiqqhV6BvE3ztowK8qtDV7a34bWpZM ImmeubiIRb+BMWhIZgMAzupYU44cFvQqhYJjqGXHMzBcPJnPjAV+abTkJHoDfz5J 1ZMouKPcNW2gZEntl1mKpRRSmqxMLQmRX+ZRp5Cu9KcqfzbMq3Lc4/aOsbMOt6/7 fAHgR91KgqLDIV9PLW5FNtlDQ/mMcJtbWj2hQwS3S99IyRzbKHPhoDIQQupFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkwrEG1uUEcjn7t3wvgPbPXmV7qAwHwYDVR0j BBgwFoAUmogofw2mfHTMJDATjJ5pmo2bwwwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMld3dkRHYkdUQWlUZFFwdUoyVXNoNDh6SEJDNXdXOUtvUnM4a3RDOGtD eFQvMS85QTg4Mjg3RjBEQTY3Qzc0Q0MyNDMwMTM4QzlFNjk5QThEOUJDMzBDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBODgyODdGMERBNjdDNzRD QzI0MzAxMzhDOUU2OTlBOEQ5QkMzMEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mld3dkRHYkdUQWlUZFFwdUoyVXNoNDh6SEJDNXdXOUtvUnM4a3RDOGtDeFQvMS85 QTg4Mjg3RjBEQTY3Qzc0Q0MyNDMwMTM4QzlFNjk5QThEOUJDMzBDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKh3p/hOZ25J8ca2C/EkZzbwdahFn7AUJD/5k2ExJb3UF1pEjSAWMD0iDXW+D tO37bWaedMk+9kGbPckJjFCi5etw5X+MMjOgk2w51wMZWYU9U2F+ae9HMy/snpaL 12asazGjhe6u9rYDFhnrwgI0hE2mhZKsIW0+MZWS3/MR3fi8s82INB5mAgKrHFLj RqlaSWM+aqeXHKMsNmTpn6S3fhOphHNhVsqdOX0//RhMssCgtvPCQAZ9R7qiDzDt 58v6/EfVeQmZ+s3k/wieQkCHGlQpR8ARsrdBalZJQrvD7AIeBnDzdcOwiXCGipO6 gFPiP+ClXKCgw+Y/OwWBCa3Oyg== -----END CERTIFICATE-----Generated at Mon Apr 28 15:23:59 2025 by rpki-client on console.sobornost.net