$ rpki-client -vvf rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft File: 4856F1A3B30D5C7881DA87018005E5D420414FCA.mft (raw, json) Hash identifier: IRcAIpeNmInm1peVTOLQFkBH7mm+61/0XG6soV5D+og= Subject key identifier: E5:74:E6:C2:E4:45:58:EE:F5:AA:D0:A2:A1:AD:31:A9:96:44:71:F3 Authority key identifier: 48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA Certificate issuer: /CN=4856F1A3B30D5C7881DA87018005E5D420414FCA Certificate serial: 7F43DB1CD9DD854718CB978F17B57B0940C3E67C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer Subject info access: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft Manifest number: 2F Signing time: Mon 28 Apr 2025 06:20:46 +0000 Manifest this update: Mon 28 Apr 2025 06:15:46 +0000 Manifest next update: Tue 29 Apr 2025 06:40:46 +0000 Files and hashes: 1: 3137372e32312e38302e302f32302d3332203d3e203533303838.roa (hash: wXf/RK8DqR/CjpwFvOAppiNi0Tr5aa7oPUSPTknLvSQ=) 2: 323830343a3336303a3a2f33322d313238203d3e203533303838.roa (hash: VzHvYSqj1UpdHPrHiFGlX041xdryfjksMALlGnDnEN4=) 3: 4856F1A3B30D5C7881DA87018005E5D420414FCA.crl (hash: 5KoXm+o1Dki03FuYBQDk9FtmVYtF6lM4i2+85/Dh5xU=) 4: 3138372e33332e3230382e302f32302d3332203d3e203533303838.roa (hash: NBzUedd6ZxjbCTpvddwCofjpV/PLJrC91qO5bna3/S4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:43:db:1c:d9:dd:85:47:18:cb:97:8f:17:b5:7b:09:40:c3:e6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4856F1A3B30D5C7881DA87018005E5D420414FCA Validity Not Before: Apr 28 06:15:46 2025 GMT Not After : Apr 29 06:40:46 2025 GMT Subject: CN=E574E6C2E44558EEF5AAD0A2A1AD31A9964471F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:83:6e:1e:07:5a:fc:a6:17:3d:fb:d2:da:c0: c9:ff:88:db:0d:f9:4d:69:5f:d9:d3:05:6f:b9:13: 65:5a:13:83:10:52:f0:33:dc:a9:d7:77:66:5d:ec: aa:4f:39:ba:21:6f:0e:6e:96:da:14:99:44:1a:e1: ce:2b:6f:f4:9a:65:6f:a9:7e:8c:1c:33:ac:b5:bf: 49:be:7e:3f:02:ac:bf:17:39:62:c6:8d:51:4b:c6: a2:07:0e:22:4d:b7:a8:c3:9c:bd:c8:16:10:74:0d: 2a:06:63:91:62:8f:45:80:39:ec:95:9c:36:fe:f5: cb:48:01:ee:12:5c:91:65:8d:f0:cf:53:e0:00:77: 85:7e:8b:a3:c4:a2:fa:41:08:a6:35:a8:68:6c:24: 1e:5c:77:56:3b:0f:e6:11:bd:77:e4:23:58:e1:9f: 07:5b:b4:31:4e:fa:ac:7d:e5:58:c6:5f:23:d1:9c: 6c:f5:9b:4f:df:15:1a:39:21:6f:5a:21:5e:69:22: 20:81:58:30:2b:fc:b1:6e:71:d8:6a:dd:ba:a8:c5: 76:52:2f:91:7e:5d:54:db:eb:64:ab:8e:6f:c7:b2: 37:b5:7c:83:80:19:b5:61:cd:af:ed:4c:87:d1:6c: cb:fc:b1:84:04:14:46:6e:b3:c1:64:89:c5:82:3f: 43:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:74:E6:C2:E4:45:58:EE:F5:AA:D0:A2:A1:AD:31:A9:96:44:71:F3 X509v3 Authority Key Identifier: keyid:48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:6a:3e:46:0b:3e:8a:43:81:4f:21:c3:50:e6:00:7d:d2:b1: a0:6b:03:be:a0:04:cb:ae:2a:af:df:72:eb:9b:21:87:59:15: 12:d3:58:c8:02:db:c3:a5:ee:b4:17:44:f5:bd:03:98:a0:0e: 02:d2:ef:a9:92:bd:0a:5a:9d:9c:0f:11:4f:a5:55:d6:da:ac: b8:6d:19:30:61:96:7f:c4:27:f1:14:70:8a:51:2d:e0:05:2b: 7d:c0:ae:6d:62:80:c5:a2:f9:ca:8c:09:bc:40:33:0c:b0:22: 5e:9d:b3:11:0b:0e:50:bd:c3:f9:80:12:ad:fc:71:ff:4d:c5: 9e:5f:7b:96:ea:5a:d0:8b:1c:31:f7:f2:3c:1e:7a:e5:ed:91: da:28:fa:ae:00:b0:0e:a4:f4:a0:1f:1d:aa:30:cc:a2:18:9f: bd:f1:a3:8c:86:3c:c3:96:45:7e:24:14:35:e6:ea:fc:91:bd: c3:98:1a:3a:ac:5d:d5:a2:9e:1c:48:87:6f:68:0f:31:e9:ac: b0:bb:a0:6b:cf:be:4a:45:d2:81:b4:8d:98:01:c4:cd:18:64: 9c:a7:3a:35:76:ad:50:18:78:22:c7:2f:ee:60:29:7e:8e:ca: db:37:56:e8:5c:43:64:b0:9e:c5:13:24:0e:b5:a4:6e:d3:07: 8a:39:0f:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUf0PbHNndhUcYy5ePF7V7CUDD5nwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NkYxQTNCMzBENUM3ODgxREE4NzAxODAwNUU1RDQy MDQxNEZDQTAeFw0yNTA0MjgwNjE1NDZaFw0yNTA0MjkwNjQwNDZaMDMxMTAvBgNV BAMTKEU1NzRFNkMyRTQ0NTU4RUVGNUFBRDBBMkExQUQzMUE5OTY0NDcxRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNg24eB1r8phc9+9LawMn/iNsN +U1pX9nTBW+5E2VaE4MQUvAz3KnXd2Zd7KpPObohbw5ultoUmUQa4c4rb/SaZW+p fowcM6y1v0m+fj8CrL8XOWLGjVFLxqIHDiJNt6jDnL3IFhB0DSoGY5Fij0WAOeyV nDb+9ctIAe4SXJFljfDPU+AAd4V+i6PEovpBCKY1qGhsJB5cd1Y7D+YRvXfkI1jh nwdbtDFO+qx95VjGXyPRnGz1m0/fFRo5IW9aIV5pIiCBWDAr/LFucdhq3bqoxXZS L5F+XVTb62Srjm/Hsje1fIOAGbVhza/tTIfRbMv8sYQEFEZus8FkicWCP0OHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5XTmwuRFWO71qtCioa0xqZZEcfMwHwYDVR0j BBgwFoAUSFbxo7MNXHiB2ocBgAXl1CBBT8owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWNoZXl4VG5HRG52dXd6eE0zOEY0dG9ZQzczVUhaNlU2aXpVeW9Sckdz Z3QvMC80ODU2RjFBM0IzMEQ1Qzc4ODFEQTg3MDE4MDA1RTVENDIwNDE0RkNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4NTZGMUEzQjMwRDVDNzg4 MURBODcwMTgwMDVFNUQ0MjA0MTRGQ0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWNoZXl4VG5HRG52dXd6eE0zOEY0dG9ZQzczVUhaNlU2aXpVeW9SckdzZ3QvMC80 ODU2RjFBM0IzMEQ1Qzc4ODFEQTg3MDE4MDA1RTVENDIwNDE0RkNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhmo+Rgs+ikOBTyHDUOYAfdKxoGsDvqAEy64qr99y65shh1kVEtNYyALbw6Xu tBdE9b0DmKAOAtLvqZK9ClqdnA8RT6VV1tqsuG0ZMGGWf8Qn8RRwilEt4AUrfcCu bWKAxaL5yowJvEAzDLAiXp2zEQsOUL3D+YASrfxx/03Fnl97lupa0IscMffyPB56 5e2R2ij6rgCwDqT0oB8dqjDMohifvfGjjIY8w5ZFfiQUNebq/JG9w5gaOqxd1aKe HEiHb2gPMemssLuga8++SkXSgbSNmAHEzRhknKc6NXatUBh4Iscv7mApfo7K2zdW 6FxDZLCexRMkDrWkbtMHijkPdw== -----END CERTIFICATE-----Generated at Mon Apr 28 08:22:27 2025 by rpki-client on console.sobornost.net