$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft File: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft (raw, json) Hash identifier: c3S15tpCLQx4Gz3qCIDTEjmBSTGwvBiewJLjyVTaotg= Subject key identifier: 4F:26:A2:EB:E0:20:40:72:AB:3B:7C:C6:B3:2E:9E:8E:46:F5:22:EF Authority key identifier: D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC Certificate issuer: /CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Certificate serial: 2E9D5B02F626BC627BD7121F6C198F43D16E7BCA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject info access: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft Manifest number: 6B Signing time: Mon 28 Apr 2025 08:43:34 +0000 Manifest this update: Mon 28 Apr 2025 08:38:34 +0000 Manifest next update: Tue 29 Apr 2025 10:56:34 +0000 Files and hashes: 1: 323830343a346565343a3a2f33322d3438203d3e20323638323839.roa (hash: 8QVrrPvDESPyLlcybwCmEcTLp6Hw5J3De08ADxJOVDg=) 2: 34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (hash: dGr5cTxS6sHO6LIXh/H72qtLHlSDxdG5hFZ+7Zrlor0=) 3: 3137302e3233332e32302e302f32322d3234203d3e20323638323839.roa (hash: 5XwCvfaoU64ymtIslXprTesI7aefy6dxcTH7KYUOQ3U=) 4: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl (hash: Im0B7t/hNW+VQnTA+i+lv0dV/pVRhinM1x1pt4KKtMU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9d:5b:02:f6:26:bc:62:7b:d7:12:1f:6c:19:8f:43:d1:6e:7b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Validity Not Before: Apr 28 08:38:34 2025 GMT Not After : Apr 29 10:56:34 2025 GMT Subject: CN=4F26A2EBE0204072AB3B7CC6B32E9E8E46F522EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:96:4a:e9:f5:3e:b5:2f:58:2e:8c:b3:f1:3a: 4a:85:4c:7a:03:2e:b5:cd:f5:24:32:f9:bb:50:30: bd:65:70:67:bc:d9:b9:85:52:78:5e:af:57:d4:5e: 42:19:00:3b:59:6b:70:2c:d1:90:86:fa:25:fc:05: b1:1b:3c:a5:7b:ec:d9:69:4d:60:75:1f:b8:e7:01: 1b:ea:71:66:a4:5e:39:1d:18:02:68:c1:12:b4:a1: 6b:0f:9f:a9:46:34:82:69:23:dd:eb:88:b7:a6:d7: f8:c0:5d:a6:96:0b:91:80:cf:3c:bf:89:8b:1f:30: 94:21:29:fb:4b:74:f2:fe:fe:04:22:99:3c:7b:e4: b3:1c:59:f1:ec:2e:24:5f:4d:9b:35:77:3f:4b:59: 09:11:63:80:a3:96:4d:84:6b:cc:e8:8f:2c:18:47: 5e:f8:b4:a3:98:e6:f7:12:8b:b8:37:6d:28:25:d0: cd:3a:c9:d8:a4:e9:2b:96:70:e9:11:20:63:96:3a: bf:cf:49:b6:7b:d1:d2:71:bb:c0:b9:be:5e:2c:03: d7:35:f0:9f:1e:f3:bc:51:52:5d:ad:d2:0d:c3:38: 1d:6f:18:49:47:24:cb:1a:22:40:83:d7:bd:f3:7b: ce:43:a3:2f:08:3a:64:37:8e:1a:cf:6a:c6:a4:6e: 02:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:26:A2:EB:E0:20:40:72:AB:3B:7C:C6:B3:2E:9E:8E:46:F5:22:EF X509v3 Authority Key Identifier: keyid:D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ea:1d:c2:cf:88:ca:a5:85:7f:a5:a0:65:5a:43:f8:02:94: 80:4e:6f:0a:ff:28:70:78:b3:1b:ae:eb:a0:3c:02:0d:ba:f2: f3:2b:9b:a6:2a:71:10:29:40:b8:a4:fb:9c:cb:f8:27:27:52: 32:2d:e3:fd:3e:e3:d6:15:62:95:4d:25:16:e6:0d:60:0f:10: bb:5b:28:58:ca:04:4f:e2:8f:1a:ac:ea:5e:e1:5e:4c:3d:ae: c7:c4:ea:32:87:99:f3:e8:74:f5:ec:7a:9b:9c:84:78:07:73: 16:bc:98:ef:fe:61:c2:70:f8:42:49:aa:1c:6a:02:fd:22:20: c8:79:b9:72:f9:3b:49:f7:3e:24:39:ae:07:95:75:89:b8:c4: 35:ca:34:eb:6f:bf:06:7c:8b:eb:12:53:55:40:fd:92:f5:14: 17:74:0c:a4:f3:e8:10:55:a9:a3:e5:ba:48:ca:74:ea:aa:f5: 44:5b:e9:a6:64:ff:39:72:2a:62:ab:20:e5:a7:67:c6:9e:d5: 07:c9:9c:80:d4:3c:0c:2f:6c:63:1d:4d:dc:3e:47:01:dd:cf: 40:0b:62:47:81:0c:6e:3c:ae:15:5e:49:e5:24:3c:47:43:7e: 95:37:4b:a4:3f:bc:3c:2a:b2:6e:6f:2b:60:cf:14:ca:b2:f2: 73:7c:5d:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULp1bAvYmvGJ71xIfbBmPQ9Fue8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCQTdDMzVBNUMyNDIwNTg5QjMwQzMzRDlDRjEzNzQ1 MDVGM0RCQzAeFw0yNTA0MjgwODM4MzRaFw0yNTA0MjkxMDU2MzRaMDMxMTAvBgNV BAMTKDRGMjZBMkVCRTAyMDQwNzJBQjNCN0NDNkIzMkU5RThFNDZGNTIyRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulkrp9T61L1gujLPxOkqFTHoD LrXN9SQy+btQML1lcGe82bmFUnher1fUXkIZADtZa3As0ZCG+iX8BbEbPKV77Nlp TWB1H7jnARvqcWakXjkdGAJowRK0oWsPn6lGNIJpI93riLem1/jAXaaWC5GAzzy/ iYsfMJQhKftLdPL+/gQimTx75LMcWfHsLiRfTZs1dz9LWQkRY4Cjlk2Ea8zojywY R174tKOY5vcSi7g3bSgl0M06ydik6SuWcOkRIGOWOr/PSbZ70dJxu8C5vl4sA9c1 8J8e87xRUl2t0g3DOB1vGElHJMsaIkCD173ze85Doy8IOmQ3jhrPasakbgILAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTyai6+AgQHKrO3zGsy6ejkb1Iu8wHwYDVR0j BBgwFoAU2Lp8NaXCQgWJswwz2c8TdFBfPbwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6 VnQvMC9EOEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QkE3QzM1QTVDMjQyMDU4 OUIzMEMzM0Q5Q0YxMzc0NTA1RjNEQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6VnQvMC9E OEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWuodws+IyqWFf6WgZVpD+AKUgE5vCv8ocHizG67roDwCDbry8yubpipxEClA uKT7nMv4JydSMi3j/T7j1hVilU0lFuYNYA8Qu1soWMoET+KPGqzqXuFeTD2ux8Tq MoeZ8+h09ex6m5yEeAdzFryY7/5hwnD4QkmqHGoC/SIgyHm5cvk7Sfc+JDmuB5V1 ibjENco062+/BnyL6xJTVUD9kvUUF3QMpPPoEFWpo+W6SMp06qr1RFvppmT/OXIq Yqsg5adnxp7VB8mcgNQ8DC9sYx1N3D5HAd3PQAtiR4EMbjyuFV5J5SQ8R0N+lTdL pD+8PCqybm8rYM8UyrLyc3xd4A== -----END CERTIFICATE-----Generated at Mon Apr 28 10:49:19 2025 by rpki-client on console.sobornost.net