$ rpki-client -vvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft File: DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft (raw, json) Hash identifier: yfD3dBNPiR7sWCi44VAkvB5RkyC+QB5sosEKPuwgTR0= Subject key identifier: 72:AE:BC:22:AD:0D:24:16:73:E3:D3:35:E1:50:70:B8:FF:B3:61:EE Authority key identifier: DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA Certificate issuer: /CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA Certificate serial: 09AFB1EE0A0231A55901E689BD1DA03278484F09 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer Subject info access: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft Manifest number: 0208 Signing time: Mon 28 Apr 2025 19:00:00 +0000 Manifest this update: Mon 28 Apr 2025 18:55:00 +0000 Manifest next update: Tue 29 Apr 2025 20:42:00 +0000 Files and hashes: 1: 34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa (hash: /UkhwqWZdTdeal6ugVixgVRqE4NRcTozr4bSrI9VJMk=) 2: DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl (hash: N9poEzRr3ykjfJxdrqhX6DIAGCiVHUDTuZfTI4CfrXo=) 3: 34352e3138372e3131382e302f32332d3233203d3e20323639343731.roa (hash: fMc8gzldryFUQ8IHHb0p6EJgGXlPn15thkQQ4FZHnmU=) 4: 34352e3138372e3131392e302f32342d3234203d3e20323639343731.roa (hash: 7YvaZPSSnSfIpvWLSuz5hoPkexAX+X5gsJzDtlBMvas=) 5: 323830343a363532343a3a2f33322d3332203d3e20323639343731.roa (hash: enBvjYbf1meZakj7o/v5LLd98daGE67Ofpb1+DdLfkU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 20:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:af:b1:ee:0a:02:31:a5:59:01:e6:89:bd:1d:a0:32:78:48:4f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA Validity Not Before: Apr 28 18:55:00 2025 GMT Not After : Apr 29 20:42:00 2025 GMT Subject: CN=72AEBC22AD0D241673E3D335E15070B8FFB361EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:84:5f:f8:f9:ce:c6:4f:a6:7b:7b:a1:47:d1: db:5f:cb:c7:41:25:26:9d:cb:60:d4:a3:0b:53:12: 0b:65:31:77:0d:b4:54:9c:ac:6d:eb:1a:0f:5b:69: da:1e:1d:aa:2c:66:f1:67:01:b2:ae:e5:f0:a1:3e: 76:d0:c6:ff:4d:2b:b7:cf:6f:34:92:e9:79:27:00: 75:f3:2b:20:2e:f2:c8:34:1c:98:7b:b5:97:db:76: 83:81:12:ec:4d:e9:5e:ca:3c:18:36:32:78:64:b0: 11:18:b3:58:59:8a:00:02:6d:3e:2b:ea:83:6f:e4: fc:58:d8:ca:e1:19:08:30:4b:d1:93:4e:f5:34:b1: 36:66:bb:b4:8d:2e:8f:1c:b7:a5:dc:b9:fb:41:82: 4b:09:0b:ee:c4:06:9f:5e:c8:39:98:f5:09:74:bc: ce:db:5c:23:72:b1:75:b3:49:82:99:0f:d9:e8:96: 2d:b4:bd:0f:3c:4e:7d:5c:3e:72:79:1d:84:92:30: b4:90:55:f0:e0:4d:99:48:93:fa:c3:2f:96:1a:e9: 6b:3b:5f:79:e0:26:7e:51:5d:7d:18:4d:bb:66:04: 6c:d6:5c:a1:ad:ec:3d:44:03:c4:0d:29:26:bd:c6: a9:61:53:38:18:06:d6:60:b2:74:95:ee:9f:0a:20: 4c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AE:BC:22:AD:0D:24:16:73:E3:D3:35:E1:50:70:B8:FF:B3:61:EE X509v3 Authority Key Identifier: keyid:DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:2a:0b:f0:e8:fa:56:7a:e5:04:1c:d3:64:77:9f:41:c9:d7: 7a:e4:3f:3d:71:43:40:3e:28:e7:c4:2d:56:72:e9:bd:3e:d1: c3:1c:be:92:53:24:40:9b:e2:18:b5:08:17:38:46:a4:ac:a7: 92:1d:7f:2d:f1:6a:db:d3:84:f9:59:b5:38:ed:c3:01:4c:a0: 85:c0:b8:3d:22:1f:70:0a:dd:99:06:ca:94:38:70:7e:c2:26: 7f:6d:39:6e:eb:81:78:bd:59:35:62:a9:f1:85:d1:88:d1:54: 50:97:e4:56:91:7a:04:4d:83:b3:e8:99:5a:8c:8f:e1:cd:d3: 80:e4:1c:34:be:1d:77:c8:a1:f3:ba:ac:98:7d:91:bf:b5:77: 5a:c0:24:0c:e4:a6:70:44:06:5b:1d:4d:35:4a:00:ed:5c:44: 9e:d2:38:6c:5b:05:4c:7e:50:32:ec:49:a4:eb:64:d4:fe:10: 85:63:c8:f7:50:8c:01:ee:56:bc:fe:ee:ad:c8:e7:14:71:af: 37:ae:9a:cb:5d:1e:74:a8:2f:cb:40:d4:a9:34:f1:19:97:90: 9e:d0:4b:31:90:53:eb:6f:d7:e0:cd:ef:7b:15:07:25:67:55: 52:f5:ea:51:f0:f3:ec:3a:e9:09:df:c3:ff:fc:44:8a:d7:4f: 10:46:97:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCa+x7goCMaVZAeaJvR2gMnhITwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzQkE0NDc4RkRCOEU0QTM3NTMyNEMwNDREODBDNTY1 NTA0RjVGQTAeFw0yNTA0MjgxODU1MDBaFw0yNTA0MjkyMDQyMDBaMDMxMTAvBgNV BAMTKDcyQUVCQzIyQUQwRDI0MTY3M0UzRDMzNUUxNTA3MEI4RkZCMzYxRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfhF/4+c7GT6Z7e6FH0dtfy8dB JSady2DUowtTEgtlMXcNtFScrG3rGg9badoeHaosZvFnAbKu5fChPnbQxv9NK7fP bzSS6XknAHXzKyAu8sg0HJh7tZfbdoOBEuxN6V7KPBg2MnhksBEYs1hZigACbT4r 6oNv5PxY2MrhGQgwS9GTTvU0sTZmu7SNLo8ct6XcuftBgksJC+7EBp9eyDmY9Ql0 vM7bXCNysXWzSYKZD9noli20vQ88Tn1cPnJ5HYSSMLSQVfDgTZlIk/rDL5Ya6Ws7 X3ngJn5RXX0YTbtmBGzWXKGt7D1EA8QNKSa9xqlhUzgYBtZgsnSV7p8KIEyTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcq68Iq0NJBZz49M14VBwuP+zYe4wHwYDVR0j BBgwFoAU3jukR4/bjko3UyTARNgMVlUE9fowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2hCWmRvUDI4eEZyYVVGcVBDVVR2NVRMV0ZDQUFReWE5Y3hQRktwRTI5 dzgvMS9ERTNCQTQ0NzhGREI4RTRBMzc1MzI0QzA0NEQ4MEM1NjU1MDRGNUZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFM0JBNDQ3OEZEQjhFNEEz NzUzMjRDMDQ0RDgwQzU2NTUwNEY1RkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2hCWmRvUDI4eEZyYVVGcVBDVVR2NVRMV0ZDQUFReWE5Y3hQRktwRTI5dzgvMS9E RTNCQTQ0NzhGREI4RTRBMzc1MzI0QzA0NEQ4MEM1NjU1MDRGNUZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARSoL8Oj6VnrlBBzTZHefQcnXeuQ/PXFDQD4o58QtVnLpvT7Rwxy+klMkQJvi GLUIFzhGpKynkh1/LfFq29OE+Vm1OO3DAUyghcC4PSIfcArdmQbKlDhwfsImf205 buuBeL1ZNWKp8YXRiNFUUJfkVpF6BE2Ds+iZWoyP4c3TgOQcNL4dd8ih87qsmH2R v7V3WsAkDOSmcEQGWx1NNUoA7VxEntI4bFsFTH5QMuxJpOtk1P4QhWPI91CMAe5W vP7urcjnFHGvN66ay10edKgvy0DUqTTxGZeQntBLMZBT62/X4M3vexUHJWdVUvXq UfDz7DrpCd/D//xEitdPEEaXvA== -----END CERTIFICATE-----Generated at Mon Apr 28 22:47:59 2025 by rpki-client on console.sobornost.net