$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft File: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json) Hash identifier: IiZUJIGg+gUBNAo5soUZbr0941VJo5tyodgQ89SGOXI= Subject key identifier: 1A:FB:F7:5D:CF:67:22:6E:44:71:62:DB:22:BE:59:B0:2A:8E:94:EB Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB Certificate issuer: /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Certificate serial: 1E1012E098DE556C5F964ABE0428D5EC7111018D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft Manifest number: 0207 Signing time: Mon 28 Apr 2025 12:49:02 +0000 Manifest this update: Mon 28 Apr 2025 12:44:02 +0000 Manifest next update: Tue 29 Apr 2025 15:15:02 +0000 Files and hashes: 1: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: AOEiMjPwvGQ2WWh1fjR8HS6XgJ2/wZLeqE4cnWeszyo=) 2: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: hA7z7gFEAl4e0Vd21ho9YyTZKrpOWO4ubNHsCDtD3CU=) 3: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: ltGU9TfadFSytyS3qZ3OpJbFMrYDtGE03CwrDtct9x0=) 4: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: 7S1LQDlLPO7JypZoHrh/QAaOsXwcULw9KoL6iUJFIO4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 15:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:10:12:e0:98:de:55:6c:5f:96:4a:be:04:28:d5:ec:71:11:01:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Validity Not Before: Apr 28 12:44:02 2025 GMT Not After : Apr 29 15:15:02 2025 GMT Subject: CN=1AFBF75DCF67226E447162DB22BE59B02A8E94EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:d6:e9:ec:4b:85:bb:0a:78:95:7d:c6:85: c0:d2:67:2b:2e:4a:4b:49:5f:4d:d5:bf:da:0d:8e: 7f:a3:52:38:32:ce:7f:6e:cd:4b:6a:58:77:34:b4: fa:ee:34:a1:0e:e7:34:9b:9a:c9:56:a5:94:78:ac: 31:cc:e3:7d:66:7a:52:22:41:91:8a:c7:00:cb:7e: d1:c0:61:e6:5d:d0:b7:e5:06:58:95:cc:f8:46:22: 97:1e:81:46:e0:07:da:02:f8:c9:45:b5:25:14:bd: cc:dc:99:51:a7:14:07:c8:5f:36:4f:51:4e:3e:ec: f0:00:b0:fc:6b:80:a9:00:4b:57:3f:44:d9:67:26: 32:a8:a5:6f:21:21:69:f2:12:5a:74:d2:6a:d9:4e: fe:f4:86:17:38:ae:2b:28:61:60:82:14:74:ce:a7: dd:f4:9d:5e:bf:f4:d0:4b:02:a3:ce:ae:45:6c:ee: 87:f8:8d:a7:fa:09:62:86:24:05:4d:33:7b:2c:a8: 9a:e5:ac:17:a1:ff:69:7d:a4:d7:30:6d:5e:e4:a9: 66:63:86:52:fa:c0:cd:c9:5a:14:fe:79:72:bc:01: d9:2f:81:d9:69:58:9c:61:7e:2d:08:f9:c3:42:29: 92:4e:6d:9a:8b:81:5e:84:f6:35:da:2a:cb:22:ae: bf:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FB:F7:5D:CF:67:22:6E:44:71:62:DB:22:BE:59:B0:2A:8E:94:EB X509v3 Authority Key Identifier: keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:df:e5:d4:0c:1b:71:5d:43:dd:bf:d1:3b:04:4a:f4:81:f5: 7f:8e:1a:ce:91:19:f0:be:d6:66:f9:dc:74:3e:7a:e1:dc:66: 35:fc:e5:8f:3b:01:7f:5e:31:27:fb:70:c7:a2:50:c0:e6:5d: 82:c8:d6:8c:44:58:ab:56:78:a7:de:45:29:2b:67:b1:6a:6f: 77:c2:18:d9:06:1b:8a:6d:61:fd:f5:df:10:2e:5c:28:ef:83: b3:b5:5f:8f:c6:30:45:35:87:3d:5d:5d:b4:47:cd:57:d9:4e: 3e:8b:84:d8:56:c5:cf:5e:6b:31:63:bd:f4:b3:11:78:79:4e: 25:b8:4c:4c:de:dd:29:ac:ee:bc:af:c9:d3:b0:09:2a:e2:dc: 14:13:a4:50:ae:97:2c:9c:a8:26:cd:93:8a:9a:5d:a2:e7:e0: 7c:1c:5b:b6:87:80:9f:24:bf:92:cb:18:4f:a6:81:17:f5:1c: 71:63:c5:20:bd:4a:4a:2a:52:0f:dc:fc:16:ad:03:00:ad:19: f2:ee:0a:91:3f:60:9a:c2:52:8c:6a:2b:7e:d3:bb:0f:2c:03: a8:e5:8e:03:bb:52:39:6d:40:b6:20:f2:51:57:3f:09:a7:03: d8:d4:de:02:c4:51:b0:ac:e7:d9:c1:09:10:8a:38:58:df:6d: c4:36:4e:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHhAS4JjeVWxflkq+BCjV7HERAY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzU5NEU5MzZFMUUyOEFENUFENzNBNkJGMjhBRTM4 QzAwMjhGQjAeFw0yNTA0MjgxMjQ0MDJaFw0yNTA0MjkxNTE1MDJaMDMxMTAvBgNV BAMTKDFBRkJGNzVEQ0Y2NzIyNkU0NDcxNjJEQjIyQkU1OUIwMkE4RTk0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOTNbp7EuFuwp4lX3GhcDSZysu SktJX03Vv9oNjn+jUjgyzn9uzUtqWHc0tPruNKEO5zSbmslWpZR4rDHM431melIi QZGKxwDLftHAYeZd0LflBliVzPhGIpcegUbgB9oC+MlFtSUUvczcmVGnFAfIXzZP UU4+7PAAsPxrgKkAS1c/RNlnJjKopW8hIWnyElp00mrZTv70hhc4risoYWCCFHTO p930nV6/9NBLAqPOrkVs7of4jaf6CWKGJAVNM3ssqJrlrBeh/2l9pNcwbV7kqWZj hlL6wM3JWhT+eXK8AdkvgdlpWJxhfi0I+cNCKZJObZqLgV6E9jXaKssirr+RAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGvv3Xc9nIm5EcWLbIr5ZsCqOlOswHwYDVR0j BBgwFoAULJxZTpNuHiitWtc6a/KK44wAKPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpy aEEvMS8yQzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDOUM1OTRFOTM2RTFFMjhB RDVBRDczQTZCRjI4QUUzOEMwMDI4RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpyaEEvMS8y QzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtN/l1AwbcV1D3b/ROwRK9IH1f44azpEZ8L7WZvncdD564dxmNfzljzsBf14x J/twx6JQwOZdgsjWjERYq1Z4p95FKStnsWpvd8IY2QYbim1h/fXfEC5cKO+Ds7Vf j8YwRTWHPV1dtEfNV9lOPouE2FbFz15rMWO99LMReHlOJbhMTN7dKazuvK/J07AJ KuLcFBOkUK6XLJyoJs2TippdoufgfBxbtoeAnyS/kssYT6aBF/UccWPFIL1KSipS D9z8Fq0DAK0Z8u4KkT9gmsJSjGorftO7DywDqOWOA7tSOW1AtiDyUVc/CacD2NTe AsRRsKzn2cEJEIo4WN9txDZOGA== -----END CERTIFICATE-----Generated at Mon Apr 28 15:24:00 2025 by rpki-client on console.sobornost.net