$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft File: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft (raw, json) Hash identifier: Mj4d3VwqrIW/hIDj1dCbOPMK/je258HOaj8fZAuVFuw= Subject key identifier: 6C:4F:51:21:12:A0:E1:0B:2F:7D:2B:11:62:64:E8:BB:F0:17:86:B1 Authority key identifier: 28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9 Certificate issuer: /CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9 Certificate serial: 11399CDE570D333725C61964404D8C8552EF2D44 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer Subject info access: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft Manifest number: 01EC Signing time: Thu 24 Apr 2025 15:20:42 +0000 Manifest this update: Thu 24 Apr 2025 15:15:42 +0000 Manifest next update: Fri 25 Apr 2025 15:22:42 +0000 Files and hashes: 1: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl (hash: jZfzqw7R6SE/qmHu5yylOsRMr3hwGpMHy+qurzYB1IA=) 2: 323830343a383863343a3a2f33322d3332203d3e20323732373932.roa (hash: EtesB69AQ6y4O933L4QCUQfBeeDeqAjblxt7W0bJGXA=) 3: 323830343a383863343a3a2f34382d3438203d3e20323732373932.roa (hash: pMsNE9PZdxPUZQ1ee0l8kve5nW5PLVXShE79wF6S0BA=) 4: 323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa (hash: uIquRLf1o2jdjOFSQRwCQgQeJopCGHlj6eVpPkoczCw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 15:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:39:9c:de:57:0d:33:37:25:c6:19:64:40:4d:8c:85:52:ef:2d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9 Validity Not Before: Apr 24 15:15:42 2025 GMT Not After : Apr 25 15:22:42 2025 GMT Subject: CN=6C4F512112A0E10B2F7D2B116264E8BBF01786B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6f:0e:7a:82:ec:30:84:13:0f:75:05:51:7f: a3:72:dd:d4:28:ea:23:84:42:f8:c0:cc:cb:29:39: 29:cd:ff:2c:27:2b:2b:c2:08:8d:05:fb:3d:aa:57: 5f:18:7d:20:29:48:18:ad:45:0a:59:07:4f:54:11: 8f:02:3a:4a:08:08:02:10:8f:76:80:03:07:03:af: bf:1e:d6:09:4a:7f:04:ac:a1:a1:62:7c:53:af:33: eb:95:14:41:1c:18:10:31:f4:36:b1:c1:16:07:32: 06:93:e4:86:5e:25:77:95:11:67:29:59:ed:60:40: fa:e9:77:66:d5:b2:98:bb:c7:e9:8b:c5:83:14:ff: b4:31:0e:69:87:58:15:62:c6:2b:cd:f3:5a:29:20: 5d:f2:d6:fa:9a:9e:48:b2:dc:ff:1c:8c:0a:e0:e5: ab:c7:72:19:e8:3b:69:78:0b:8b:34:6e:ed:d7:99: 53:be:ec:b2:62:75:71:e4:c9:7f:a5:83:7f:e2:e7: c0:74:85:a0:61:1b:19:77:49:ae:d6:bd:71:dc:2a: 85:70:f6:13:cc:ca:29:47:66:2f:85:f6:0c:c9:8d: 58:c9:cd:64:43:30:91:d4:83:80:5b:c2:7d:f8:bc: 5e:84:a0:68:46:78:99:2e:40:86:8a:b7:07:99:a6: ba:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4F:51:21:12:A0:E1:0B:2F:7D:2B:11:62:64:E8:BB:F0:17:86:B1 X509v3 Authority Key Identifier: keyid:28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:12:df:0d:eb:85:ac:8e:b9:87:eb:fd:2a:e4:25:af:00:20: df:ba:ce:02:18:59:aa:46:d7:0d:6d:e2:1a:09:7b:ad:96:a1: 5d:80:da:9e:d7:89:ea:bd:74:86:2a:c6:3f:d2:d1:61:65:90: ef:ed:44:12:ee:85:ac:71:9a:76:6c:1d:4d:d6:db:d7:86:14: 7a:53:15:ff:1b:e3:70:db:5b:43:54:47:d8:af:f7:5e:29:e8: f6:0e:9a:a4:bf:0d:27:fa:18:20:93:d9:2c:a1:04:77:3d:97: 15:a0:a9:d8:f7:19:f0:87:a4:ad:2d:8c:f3:41:d6:86:ab:03: af:23:85:24:a6:c4:a8:0b:ee:3f:c5:86:ca:ce:a7:62:09:cd: ff:6f:a2:25:b2:1f:1e:11:c0:a5:9e:52:41:61:a2:7c:1c:43: de:8b:33:91:4c:8b:9c:4c:db:e8:da:0c:db:15:61:52:7e:f3: d2:cb:6d:9d:9f:00:44:ae:fb:a4:d9:60:6d:b2:9a:fa:a4:81: b9:29:bf:93:6e:ac:b6:90:86:2a:8b:7e:2e:84:3b:b6:d6:7f: a4:f8:5c:79:f3:7a:b1:1e:89:1e:c1:20:49:30:16:7a:7d:7b: ab:11:7a:ce:87:a0:52:c3:9e:7b:d9:47:78:f2:69:18:63:57: b6:a4:71:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUETmc3lcNMzclxhlkQE2MhVLvLUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwMEFGOEU2NzJGNjRFMDJDRUM1RDA0N0VERUIyQUQ4 NkI0N0VEOTAeFw0yNTA0MjQxNTE1NDJaFw0yNTA0MjUxNTIyNDJaMDMxMTAvBgNV BAMTKDZDNEY1MTIxMTJBMEUxMEIyRjdEMkIxMTYyNjRFOEJCRjAxNzg2QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3bw56guwwhBMPdQVRf6Ny3dQo 6iOEQvjAzMspOSnN/ywnKyvCCI0F+z2qV18YfSApSBitRQpZB09UEY8COkoICAIQ j3aAAwcDr78e1glKfwSsoaFifFOvM+uVFEEcGBAx9DaxwRYHMgaT5IZeJXeVEWcp We1gQPrpd2bVspi7x+mLxYMU/7QxDmmHWBVixivN81opIF3y1vqankiy3P8cjArg 5avHchnoO2l4C4s0bu3XmVO+7LJidXHkyX+lg3/i58B0haBhGxl3Sa7WvXHcKoVw 9hPMyilHZi+F9gzJjVjJzWRDMJHUg4Bbwn34vF6EoGhGeJkuQIaKtweZpropAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUbE9RIRKg4QsvfSsRYmTou/AXhrEwHwYDVR0j BBgwFoAUKACvjmcvZOAs7F0Eft6yrYa0ftkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVZtczhUV2ZYYkdSdlFrQlBkQnV0S0RtbzRNZlFydDhNNUJNUzZKd2hw Zm8vMS8yODAwQUY4RTY3MkY2NEUwMkNFQzVEMDQ3RURFQjJBRDg2QjQ3RUQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MDBBRjhFNjcyRjY0RTAy Q0VDNUQwNDdFREVCMkFEODZCNDdFRDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVZtczhUV2ZYYkdSdlFrQlBkQnV0S0RtbzRNZlFydDhNNUJNUzZKd2hwZm8vMS8y ODAwQUY4RTY3MkY2NEUwMkNFQzVEMDQ3RURFQjJBRDg2QjQ3RUQ5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsxLfDeuFrI65h+v9KuQlrwAg37rOAhhZqkbXDW3iGgl7rZahXYDanteJ6r10 hirGP9LRYWWQ7+1EEu6FrHGadmwdTdbb14YUelMV/xvjcNtbQ1RH2K/3Xino9g6a pL8NJ/oYIJPZLKEEdz2XFaCp2PcZ8IekrS2M80HWhqsDryOFJKbEqAvuP8WGys6n YgnN/2+iJbIfHhHApZ5SQWGifBxD3oszkUyLnEzb6NoM2xVhUn7z0sttnZ8ARK77 pNlgbbKa+qSBuSm/k26stpCGKot+LoQ7ttZ/pPhcefN6sR6JHsEgSTAWen17qxF6 zoegUsOee9lHePJpGGNXtqRxDQ== -----END CERTIFICATE-----Generated at Thu Apr 24 18:01:46 2025 by rpki-client on console.sobornost.net