$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft (raw, json) Hash identifier: CI5ci4bq+hDJb99AJnbaiVazCkq6NrygNP6kDKOPuiQ= Subject key identifier: 7C:1E:2B:D3:58:3A:9E:BA:5C:78:79:F6:34:EB:91:2D:7A:75:C8:CC Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Certificate serial: 09A466FFA7D3E6FF17755D831834E1E74C5C2DD3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft Manifest number: 0202 Signing time: Sat 26 Apr 2025 17:21:22 +0000 Manifest this update: Sat 26 Apr 2025 17:16:22 +0000 Manifest next update: Sun 27 Apr 2025 17:52:22 +0000 Files and hashes: 1: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: wSJhi1S05V7GQRNGEWnijrWNvzw3gRpbBV6Jq+msVUQ=) 2: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: yg/+CVjgu2k2RC6iZyS5wyy4SKTfUj/bl2VpXsl7RJA=) 3: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: otfkJ+39Wo2DP48qp0COa/OrUo7snPzB+Sul36LhuX0=) 4: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl (hash: MH/SZ7YG+Ell7Tw9A78IS1r+bRKN1VHZygmrS5hSfTc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Apr 2025 17:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a4:66:ff:a7:d3:e6:ff:17:75:5d:83:18:34:e1:e7:4c:5c:2d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Validity Not Before: Apr 26 17:16:22 2025 GMT Not After : Apr 27 17:52:22 2025 GMT Subject: CN=7C1E2BD3583A9EBA5C7879F634EB912D7A75C8CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:10:c7:bc:4b:4d:e3:16:6c:6d:72:10:b5:ff: c4:87:1d:35:df:d5:52:3f:1d:c4:6b:90:5d:67:4f: 30:98:75:91:b5:06:f5:79:fe:7f:f5:86:7c:a6:72: e5:7b:15:62:b7:45:db:b1:8a:da:54:fa:31:02:38: 5b:99:f1:84:b3:79:f6:e0:d4:69:2b:13:e2:65:9a: be:c1:82:30:40:fe:93:4e:b0:4c:d4:17:11:20:4a: 1e:3d:77:76:2e:7f:8f:4f:18:fa:28:8e:35:c9:a4: 58:8b:e9:1f:36:99:ac:94:a4:31:65:6f:6f:66:16: 5d:5a:8e:da:d4:d6:b9:48:7c:60:2f:bf:75:6c:84: d3:16:c3:48:ad:34:61:ab:33:48:be:cf:83:d9:68: 0b:d9:dc:f1:fc:3a:43:db:c1:4b:e2:86:57:8c:d9: 55:23:fb:70:e5:70:dc:8a:3b:7b:63:10:e4:e1:cc: c0:7e:dc:0c:1f:77:72:ff:96:dd:e0:f3:65:30:19: 7c:ce:71:aa:08:c6:20:22:c6:e8:61:b1:60:01:5d: b8:3a:e9:90:ca:0f:97:4f:65:b6:08:00:fc:83:93: 92:f6:79:0c:60:3c:c4:e0:80:ff:09:cd:89:f8:be: e1:26:16:04:51:a4:1f:61:9b:bf:6a:b3:87:fc:0f: d0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1E:2B:D3:58:3A:9E:BA:5C:78:79:F6:34:EB:91:2D:7A:75:C8:CC X509v3 Authority Key Identifier: keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:75:64:20:74:0c:15:cb:96:ad:12:5a:be:e4:17:29:5a:b4: 2b:c1:ca:0a:e4:f5:99:60:71:87:75:f4:6b:a3:9d:a8:96:da: ed:77:81:8c:f6:1b:d7:85:5d:fc:2c:b5:de:9e:2d:19:f2:23: c5:3b:ec:dc:a7:e4:1b:fd:5c:5e:b8:53:1d:09:27:0e:01:cc: 99:8d:3b:71:29:74:04:4c:fc:f5:73:43:b6:dd:ea:86:21:cc: e9:5f:5f:46:4e:fb:19:a7:11:5a:f3:c6:ea:89:32:b1:9f:57: 02:39:be:aa:23:bc:99:f6:25:aa:a1:e7:42:45:92:65:41:9a: aa:72:a0:3d:e2:fd:f8:59:dc:99:fc:35:d2:65:c5:36:a7:8c: ce:23:76:d7:b5:41:0d:35:f0:e8:db:e7:02:dd:2b:38:ae:42: cd:55:67:48:30:25:b2:d6:da:32:82:7f:15:a6:f9:f5:89:1b: c6:1b:5b:11:7b:f4:39:db:64:b6:c8:eb:33:ff:c1:96:71:bd: b2:39:ae:4a:d3:55:19:18:01:34:b9:de:f4:17:14:86:72:46: a1:24:6f:03:cd:92:59:74:50:61:86:b7:30:7c:84:52:72:00: 8e:e3:58:35:12:2f:ce:3b:fa:58:8b:ae:85:ef:8e:7f:d1:80: b8:e4:85:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCaRm/6fT5v8XdV2DGDTh50xcLdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2 MUJGODVDRTAeFw0yNTA0MjYxNzE2MjJaFw0yNTA0MjcxNzUyMjJaMDMxMTAvBgNV BAMTKDdDMUUyQkQzNTgzQTlFQkE1Qzc4NzlGNjM0RUI5MTJEN0E3NUM4Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCEMe8S03jFmxtchC1/8SHHTXf 1VI/HcRrkF1nTzCYdZG1BvV5/n/1hnymcuV7FWK3RduxitpU+jECOFuZ8YSzefbg 1GkrE+Jlmr7BgjBA/pNOsEzUFxEgSh49d3Yuf49PGPoojjXJpFiL6R82mayUpDFl b29mFl1ajtrU1rlIfGAvv3VshNMWw0itNGGrM0i+z4PZaAvZ3PH8OkPbwUvihleM 2VUj+3DlcNyKO3tjEOThzMB+3Awfd3L/lt3g82UwGXzOcaoIxiAixuhhsWABXbg6 6ZDKD5dPZbYIAPyDk5L2eQxgPMTggP8JzYn4vuEmFgRRpB9hm79qs4f8D9B7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfB4r01g6nrpceHn2NOuRLXp1yMwwHwYDVR0j BBgwFoAUi66ckOvFCC+AIFXvqmNgxmG/hc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNL ODUvMS84QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQUU5QzkwRUJDNTA4MkY4 MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS84 QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcnVkIHQMFcuWrRJavuQXKVq0K8HKCuT1mWBxh3X0a6OdqJba7XeBjPYb14Vd /Cy13p4tGfIjxTvs3KfkG/1cXrhTHQknDgHMmY07cSl0BEz89XNDtt3qhiHM6V9f Rk77GacRWvPG6okysZ9XAjm+qiO8mfYlqqHnQkWSZUGaqnKgPeL9+Fncmfw10mXF NqeMziN217VBDTXw6NvnAt0rOK5CzVVnSDAlstbaMoJ/Fab59YkbxhtbEXv0Odtk tsjrM//BlnG9sjmuStNVGRgBNLne9BcUhnJGoSRvA82SWXRQYYa3MHyEUnIAjuNY NRIvzjv6WIuuhe+Of9GAuOSF6w== -----END CERTIFICATE-----Generated at Sat Apr 26 21:00:05 2025 by rpki-client on console.sobornost.net