$ rpki-client -vvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft File: 5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft (raw, json) Hash identifier: L8xs6pEvEvsNSN8eIFwUupbV5/ZHChXcM8xBtuR6VQs= Subject key identifier: D7:E3:8F:16:6A:DE:6F:4A:35:3C:36:FF:1A:47:C6:24:6E:66:86:7A Authority key identifier: 5A:68:B8:8E:02:7E:5A:12:DC:69:EA:EA:AC:20:11:ED:1D:28:25:A2 Certificate issuer: /CN=5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2 Certificate serial: 2AFD2B42E280DF6C1AFBD4ABD79AD5440BFF54A8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft Manifest number: 020C Signing time: Mon 28 Apr 2025 17:42:55 +0000 Manifest this update: Mon 28 Apr 2025 17:37:55 +0000 Manifest next update: Tue 29 Apr 2025 19:52:55 +0000 Files and hashes: 1: 5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.crl (hash: BpTXl+YjNvDHhWTgoTNm94IMzC3p7aOXKycTLu5qMDw=) 2: 3138372e38372e32382e302f32322d3234203d3e203631363130.roa (hash: yPua/Ofud6POhXVBl+Vv3ibZEIZGIKOcu8JE11PZEDQ=) 3: 3230302e3232352e34382e302f32312d3234203d3e203631363130.roa (hash: elC9EAeygoRx2H+jiQPOuMLjKX/QJPWSaf/amaZZvrc=) 4: 323830343a386165303a3a2f33322d3332203d3e203631363130.roa (hash: xmmz9LTZttl2Xfzv5kWiCmHEssTo7PK1z0cqHjKY0mE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.crl rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 19:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:fd:2b:42:e2:80:df:6c:1a:fb:d4:ab:d7:9a:d5:44:0b:ff:54:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2 Validity Not Before: Apr 28 17:37:55 2025 GMT Not After : Apr 29 19:52:55 2025 GMT Subject: CN=D7E38F166ADE6F4A353C36FF1A47C6246E66867A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e0:14:64:28:d5:41:d1:9b:22:1e:da:17:74: 17:6c:d4:a5:93:5a:ca:8a:43:9f:49:ec:1e:17:50: e4:48:af:0b:f1:36:fd:7c:52:d9:8d:d9:8f:ac:f0: 75:4e:07:3f:e7:17:7e:c6:df:a1:83:81:c6:10:8e: a9:18:d6:c4:5d:6c:1b:d2:7d:6a:4d:e4:8d:fa:9e: 35:72:ec:ce:fa:45:8f:21:3e:cf:7b:99:d0:64:a5: aa:47:8d:0d:1c:a4:2f:23:95:4b:92:4c:14:65:a7: 76:e9:26:34:12:b1:b4:39:4d:78:fd:17:6d:e7:51: 43:17:3a:da:e2:29:a9:34:01:17:c8:ad:57:da:e3: 29:c6:66:2a:c3:45:f2:b5:8d:9b:be:8a:48:37:5c: 43:22:2d:5f:d5:3e:f2:f3:d2:d9:07:14:a2:51:f6: 2f:ea:87:fc:bb:11:aa:28:6c:52:58:55:a3:89:1b: dd:48:db:80:16:fc:3f:94:40:a3:4b:11:d7:67:e6: 8a:c1:2d:88:dc:45:be:6a:d5:11:32:94:e8:71:4e: e8:f5:39:3e:79:66:f0:86:dd:72:5f:28:2b:52:c5: 89:28:9e:61:bc:d9:9b:f5:2d:01:46:66:46:82:ca: b8:54:e7:54:ae:c0:32:4d:23:5b:ea:85:9f:c3:4a: 4f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E3:8F:16:6A:DE:6F:4A:35:3C:36:FF:1A:47:C6:24:6E:66:86:7A X509v3 Authority Key Identifier: keyid:5A:68:B8:8E:02:7E:5A:12:DC:69:EA:EA:AC:20:11:ED:1D:28:25:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:06:01:1c:f7:2b:ef:23:f2:da:ed:e5:07:46:a1:11:ab:65: 5e:61:b0:99:76:ea:cf:12:09:bb:80:11:09:8f:2b:8d:f8:a4: 3b:1c:b6:8f:dc:83:c2:bb:ad:df:51:d3:94:bb:e7:ae:4a:a0: 02:38:fe:12:d1:66:4f:6a:2b:69:49:21:17:75:ba:22:79:64: 81:60:ea:b0:21:8c:aa:8e:f3:4b:c6:dc:a0:d9:34:18:35:60: 22:4b:26:39:da:a1:2d:94:3b:ff:fc:53:ef:b8:de:34:75:64: 6b:eb:64:37:7d:9d:3d:db:4e:90:23:99:f0:45:78:86:c1:28: 2d:f3:8a:08:5a:ed:54:db:8a:a3:82:83:4e:c2:3e:92:66:80: 13:8b:e4:08:b7:87:ed:41:c8:2e:49:4e:96:4d:c1:23:3a:ec: 53:70:72:05:6c:00:1c:49:fc:34:5c:d5:68:ea:83:37:f0:86: 97:e0:77:da:85:2f:81:61:a0:eb:bd:4e:f7:94:94:e8:9b:c8: 7e:44:e1:e7:d0:77:a7:28:52:b8:14:cd:5b:84:c7:dd:f3:87: 69:b1:fa:c1:bd:64:b5:53:29:d2:4e:18:b3:c1:bb:66:ca:12: 02:d1:9b:19:bf:f8:a9:50:2b:09:f5:85:5e:4a:0a:77:f1:15: be:66:59:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKv0rQuKA32wa+9Sr15rVRAv/VKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE2OEI4OEUwMjdFNUExMkRDNjlFQUVBQUMyMDExRUQx RDI4MjVBMjAeFw0yNTA0MjgxNzM3NTVaFw0yNTA0MjkxOTUyNTVaMDMxMTAvBgNV BAMTKEQ3RTM4RjE2NkFERTZGNEEzNTNDMzZGRjFBNDdDNjI0NkU2Njg2N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ4BRkKNVB0ZsiHtoXdBds1KWT WsqKQ59J7B4XUORIrwvxNv18UtmN2Y+s8HVOBz/nF37G36GDgcYQjqkY1sRdbBvS fWpN5I36njVy7M76RY8hPs97mdBkpapHjQ0cpC8jlUuSTBRlp3bpJjQSsbQ5TXj9 F23nUUMXOtriKak0ARfIrVfa4ynGZirDRfK1jZu+ikg3XEMiLV/VPvLz0tkHFKJR 9i/qh/y7EaoobFJYVaOJG91I24AW/D+UQKNLEddn5orBLYjcRb5q1REylOhxTuj1 OT55ZvCG3XJfKCtSxYkonmG82Zv1LQFGZkaCyrhU51SuwDJNI1vqhZ/DSk/1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1+OPFmreb0o1PDb/GkfGJG5mhnowHwYDVR0j BBgwFoAUWmi4jgJ+WhLcaerqrCAR7R0oJaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODV0QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51 RlcvMS81QTY4Qjg4RTAyN0U1QTEyREM2OUVBRUFBQzIwMTFFRDFEMjgyNUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBNjhCODhFMDI3RTVBMTJE QzY5RUFFQUFDMjAxMUVEMUQyODI1QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODV0QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51RlcvMS81 QTY4Qjg4RTAyN0U1QTEyREM2OUVBRUFBQzIwMTFFRDFEMjgyNUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJgYBHPcr7yPy2u3lB0ahEatlXmGwmXbqzxIJu4ARCY8rjfikOxy2j9yDwrut 31HTlLvnrkqgAjj+EtFmT2oraUkhF3W6InlkgWDqsCGMqo7zS8bcoNk0GDVgIksm OdqhLZQ7//xT77jeNHVka+tkN32dPdtOkCOZ8EV4hsEoLfOKCFrtVNuKo4KDTsI+ kmaAE4vkCLeH7UHILklOlk3BIzrsU3ByBWwAHEn8NFzVaOqDN/CGl+B32oUvgWGg 671O95SU6JvIfkTh59B3pyhSuBTNW4TH3fOHabH6wb1ktVMp0k4Ys8G7ZsoSAtGb Gb/4qVArCfWFXkoKd/EVvmZZxg== -----END CERTIFICATE-----Generated at Mon Apr 28 20:06:40 2025 by rpki-client on console.sobornost.net