$ rpki-client -vvf rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft File: 2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft (raw, json) Hash identifier: pFWJcKWniI4kcMA3Z6ry8u0dnO01HaacduRxd0UU8cg= Subject key identifier: 90:86:FF:F7:19:41:97:53:9A:81:84:4A:0E:9B:25:BB:C0:C5:B7:B8 Authority key identifier: 2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6 Certificate issuer: /CN=2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6 Certificate serial: 153489D7724CD1CD9625EF2FD9BD5DB067F57578 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer Subject info access: rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft Manifest number: 01CE Signing time: Thu 24 Apr 2025 18:27:10 +0000 Manifest this update: Thu 24 Apr 2025 18:22:10 +0000 Manifest next update: Fri 25 Apr 2025 21:13:10 +0000 Files and hashes: 1: 34352e3137362e3134342e302f32322d3234203d3e20323638393435.roa (hash: CP9ldpmrZM3i35/kE5teAIavB939Y4CnUaQ+d5/YMAQ=) 2: 323830343a356430303a3a2f33322d3438203d3e20323638393435.roa (hash: LBJ+J9efbbCyu+GoJQxXGqhM5RUqVhI0ZphhyC/q/ic=) 3: 2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl (hash: LB3W1Y73FvJIMEf0nJTiC9VfuJLAeO3TycYAqEMD9RI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 20:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:34:89:d7:72:4c:d1:cd:96:25:ef:2f:d9:bd:5d:b0:67:f5:75:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6 Validity Not Before: Apr 24 18:22:10 2025 GMT Not After : Apr 25 21:13:10 2025 GMT Subject: CN=9086FFF7194197539A81844A0E9B25BBC0C5B7B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c5:71:42:9f:d0:a3:3b:44:ee:8e:74:b5:06: 45:7e:30:18:af:6b:3c:04:12:2f:32:0b:45:ae:22: e0:85:1b:cd:43:86:5e:3d:71:fd:6f:99:a5:8c:97: 30:3d:21:57:d4:41:ff:fe:4e:dc:7c:0b:56:9c:5b: aa:b6:f6:c6:9b:56:d4:26:42:18:f7:8f:f4:b4:df: 4c:37:5c:b1:f4:98:14:0d:ce:09:7f:d0:ef:5a:92: 69:1b:4a:13:0a:5d:48:5f:e3:fb:c5:b5:d4:d0:43: 45:15:14:98:e2:0f:e9:8d:e3:6f:2b:11:df:bc:87: 57:ae:c2:37:b3:11:bc:3b:34:f0:ad:19:ba:ad:b6: 71:cb:1b:d9:9a:dc:57:82:68:b6:b7:d0:dd:56:86: 82:7c:c9:76:ad:61:9f:ea:34:70:0a:4e:40:10:86: 4d:0e:a0:bf:53:13:5a:78:59:5c:0a:f0:1c:c9:f9: 6e:5c:aa:87:b2:9e:bc:0a:5f:ff:58:79:da:04:2b: fe:a5:d8:0e:21:b8:0e:6c:25:38:b6:84:e1:c5:6d: 51:54:b3:da:13:60:10:39:d5:8d:51:b6:6b:c1:db: 65:58:f2:e1:77:84:4e:5f:38:c1:b0:28:13:56:38: 1e:d3:f9:14:05:67:a2:00:bf:7c:57:9a:fc:fd:20: 8e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:86:FF:F7:19:41:97:53:9A:81:84:4A:0E:9B:25:BB:C0:C5:B7:B8 X509v3 Authority Key Identifier: keyid:2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:de:4d:b5:db:88:4b:a1:4b:fe:da:1b:22:75:55:76:33:51: fe:a0:13:7a:24:b8:02:0f:74:a0:1d:d3:70:d0:a6:7d:81:db: 22:10:f3:8a:7b:bf:84:95:5a:5e:f3:0c:62:15:ca:11:56:67: 94:e9:49:84:ba:76:01:6b:4e:cc:d2:d1:66:df:50:71:3f:46: 9f:07:de:10:cf:a2:09:4d:c6:78:57:48:6b:85:c7:ba:3c:c0: f7:27:e3:a6:56:43:15:22:73:cf:8e:b2:c7:c7:68:6c:19:2e: e8:08:ad:8b:b7:6e:dc:8f:9f:0a:38:00:dd:73:84:84:f0:10: 14:a1:47:82:cf:4b:11:80:97:ba:08:42:69:a9:20:84:6c:84: 41:28:9b:0f:c4:4a:fa:2d:33:af:9b:04:59:4e:68:c7:8f:90: 67:ef:72:54:dd:57:7c:81:15:79:a9:a6:4a:e4:b6:aa:61:28: a5:9e:5c:a9:fe:80:1f:69:2e:7c:4f:f0:e4:48:c9:9b:ef:90: 95:28:e8:b5:00:3f:f7:bc:92:aa:1c:07:08:47:3d:e3:78:c8: 60:2e:86:79:95:62:dc:27:f6:ca:ae:fd:70:a7:ef:56:ef:1c: 0a:6f:34:f3:db:68:e5:fb:04:7e:2e:d3:b2:14:90:fe:87:48: ae:57:44:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFTSJ13JM0c2WJe8v2b1dsGf1dXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI1Rjg0RjM5Q0E2QTI4NDU1REU5NzRGMkNGNjE0N0E1 RTFEM0NFNjAeFw0yNTA0MjQxODIyMTBaFw0yNTA0MjUyMTEzMTBaMDMxMTAvBgNV BAMTKDkwODZGRkY3MTk0MTk3NTM5QTgxODQ0QTBFOUIyNUJCQzBDNUI3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xXFCn9CjO0TujnS1BkV+MBiv azwEEi8yC0WuIuCFG81Dhl49cf1vmaWMlzA9IVfUQf/+Ttx8C1acW6q29sabVtQm Qhj3j/S030w3XLH0mBQNzgl/0O9akmkbShMKXUhf4/vFtdTQQ0UVFJjiD+mN428r Ed+8h1euwjezEbw7NPCtGbqttnHLG9ma3FeCaLa30N1WhoJ8yXatYZ/qNHAKTkAQ hk0OoL9TE1p4WVwK8BzJ+W5cqoeynrwKX/9YedoEK/6l2A4huA5sJTi2hOHFbVFU s9oTYBA51Y1RtmvB22VY8uF3hE5fOMGwKBNWOB7T+RQFZ6IAv3xXmvz9II6tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkIb/9xlBl1OagYRKDpslu8DFt7gwHwYDVR0j BBgwFoAUK1+E85ymooRV3pdPLPYUel4dPOYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFZ5Q0RpWEhzUDFqRzloQVVLSmtKRTRqY3h5WkdKaFh1ajNzdmFQVjJ6 dWUvMC8yQjVGODRGMzlDQTZBMjg0NTVERTk3NEYyQ0Y2MTQ3QTVFMUQzQ0U2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNUY4NEYzOUNBNkEyODQ1 NURFOTc0RjJDRjYxNDdBNUUxRDNDRTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFZ5Q0RpWEhzUDFqRzloQVVLSmtKRTRqY3h5WkdKaFh1ajNzdmFQVjJ6dWUvMC8y QjVGODRGMzlDQTZBMjg0NTVERTk3NEYyQ0Y2MTQ3QTVFMUQzQ0U2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfN5NtduIS6FL/tobInVVdjNR/qATeiS4Ag90oB3TcNCmfYHbIhDzinu/hJVa XvMMYhXKEVZnlOlJhLp2AWtOzNLRZt9QcT9GnwfeEM+iCU3GeFdIa4XHujzA9yfj plZDFSJzz46yx8dobBku6Aiti7du3I+fCjgA3XOEhPAQFKFHgs9LEYCXughCaakg hGyEQSibD8RK+i0zr5sEWU5ox4+QZ+9yVN1XfIEVeammSuS2qmEopZ5cqf6AH2ku fE/w5EjJm++QlSjotQA/97ySqhwHCEc943jIYC6GeZVi3Cf2yq79cKfvVu8cCm80 89to5fsEfi7TshSQ/odIrldEdw== -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:28 2025 by rpki-client on console.sobornost.net