$ rpki-client -vvf rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.mft File: 20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.mft (raw, json) Hash identifier: 1hJcpPFBrTU2Y9JWSSK6qdL9KD7qRwng8CG/CvIBdC0= Subject key identifier: 14:25:B4:70:C6:9D:5E:95:89:48:CC:E3:BE:E1:07:AF:02:80:2D:9F Authority key identifier: 20:BB:C4:8E:7B:60:C3:E5:05:5C:CB:F4:CC:72:A7:6B:D7:84:0A:6D Certificate issuer: /CN=20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D Certificate serial: 25FB905DBA1EC21591594A1872CF593B9CB73439 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.cer Subject info access: rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.mft Manifest number: 24 Signing time: Fri 25 Apr 2025 17:58:39 +0000 Manifest this update: Fri 25 Apr 2025 17:53:39 +0000 Manifest next update: Sat 26 Apr 2025 21:17:39 +0000 Files and hashes: 1: 34352e3137332e3136342e302f32322d3332203d3e20323638383137.roa (hash: ib74MGqkhFa48pYyfmC9Xa9p5tZdKnPnUjhd5qCgRqs=) 2: 323830343a356231343a3a2f33322d313238203d3e20323638383137.roa (hash: O8ukbNGx4djkBCy3iGT6HUif6vNq+V1guSg8DWecSgI=) 3: 20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.crl (hash: TezEiGoiqgAmkEoBb1n/46k6CrkwROppMRUaqLW/eLA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.crl rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 18:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:fb:90:5d:ba:1e:c2:15:91:59:4a:18:72:cf:59:3b:9c:b7:34:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D Validity Not Before: Apr 25 17:53:39 2025 GMT Not After : Apr 26 21:17:39 2025 GMT Subject: CN=1425B470C69D5E958948CCE3BEE107AF02802D9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7e:65:08:1f:29:30:28:6b:03:cd:d7:3e:35: 8e:2d:2e:a6:a5:f9:46:06:2f:d1:e2:71:80:a5:84: b7:5d:3b:64:8c:10:1f:06:9b:94:b6:3f:0b:f9:34: 0d:0e:f8:b1:fd:ad:59:18:81:3a:33:4a:d8:60:68: 42:e1:c5:c7:93:e5:d0:a6:8a:c2:05:98:26:89:70: fd:78:1e:ae:80:73:04:22:7a:85:f5:ef:79:db:f1: 51:43:36:30:d6:cd:dd:11:c1:81:81:1e:d7:72:fe: 2c:bd:0c:e7:2e:5c:d4:c0:7a:dd:69:3d:64:e3:6a: e1:71:66:f7:22:b4:3b:0a:30:9e:2b:6b:1c:ee:37: 57:4c:92:ad:e4:bc:9c:d0:cb:d6:cc:64:4b:2d:d2: c8:a2:17:57:02:79:4c:c9:15:01:05:47:c2:5b:d9: 3c:5d:7e:86:5b:c8:51:13:f6:02:e9:d5:b9:5b:d4: f5:66:b2:40:d0:ab:d0:3b:91:81:a1:65:1e:8e:09: d6:5d:5b:e3:d9:9c:8f:16:e6:97:66:02:82:3d:c7: 07:6c:f8:70:d7:2c:18:e8:33:91:23:39:c4:53:95: df:2e:c4:92:c3:90:f6:ed:f7:b9:c4:ab:ef:1f:0f: ff:9f:6e:34:ad:3f:49:21:3d:74:56:8a:0d:95:8e: ba:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:25:B4:70:C6:9D:5E:95:89:48:CC:E3:BE:E1:07:AF:02:80:2D:9F X509v3 Authority Key Identifier: keyid:20:BB:C4:8E:7B:60:C3:E5:05:5C:CB:F4:CC:72:A7:6B:D7:84:0A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/88MXg9Mqyufn1yT4TSGYSQBLvrFpP1ZUqpLrHgPnYnMF/0/20BBC48E7B60C3E5055CCBF4CC72A76BD7840A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:37:a5:f6:b1:8f:5b:f1:69:67:21:07:2e:67:8f:00:b3:0b: 4f:56:d3:16:ae:1c:1b:50:3c:f1:2f:fc:7b:43:e1:70:f2:eb: e4:e1:7e:f1:40:98:0d:b6:3e:f0:86:01:f6:9d:f9:41:7c:45: 96:6e:86:83:b4:7d:27:5e:d2:03:45:65:af:73:e1:c2:cc:f2: 2a:65:29:05:2d:bc:16:73:f3:82:24:32:d0:96:20:a0:62:65: f5:18:db:92:c3:87:ce:05:85:be:53:a3:81:14:69:48:0c:d4: c7:69:ef:33:20:31:50:52:0e:85:c1:02:b2:13:65:fa:01:7d: f2:f8:d3:b1:61:1c:6d:da:f0:4a:18:84:86:8d:91:b2:43:e0: b1:d0:d0:8f:bb:12:bd:d8:da:89:c3:da:5c:42:38:de:4a:e4: 84:bb:cb:4f:aa:1a:de:b9:0b:25:a2:cc:d8:09:27:06:77:92: 44:76:dc:17:43:c7:54:bc:3d:aa:8a:4c:dd:98:55:ed:f9:c9: a0:3e:b5:4e:e0:95:c9:ed:dd:34:86:74:03:2b:6e:a7:b6:65: 93:17:62:e1:24:2d:b3:f2:f3:67:eb:25:13:3b:ac:f5:bd:0c: ab:b4:e6:8d:0d:b5:30:cb:d1:8f:ab:56:3f:40:54:27:34:70: f7:6b:8c:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJfuQXboewhWRWUoYcs9ZO5y3NDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCQkM0OEU3QjYwQzNFNTA1NUNDQkY0Q0M3MkE3NkJE Nzg0MEE2RDAeFw0yNTA0MjUxNzUzMzlaFw0yNTA0MjYyMTE3MzlaMDMxMTAvBgNV BAMTKDE0MjVCNDcwQzY5RDVFOTU4OTQ4Q0NFM0JFRTEwN0FGMDI4MDJEOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXfmUIHykwKGsDzdc+NY4tLqal +UYGL9HicYClhLddO2SMEB8Gm5S2Pwv5NA0O+LH9rVkYgTozSthgaELhxceT5dCm isIFmCaJcP14Hq6AcwQieoX173nb8VFDNjDWzd0RwYGBHtdy/iy9DOcuXNTAet1p PWTjauFxZvcitDsKMJ4raxzuN1dMkq3kvJzQy9bMZEst0siiF1cCeUzJFQEFR8Jb 2TxdfoZbyFET9gLp1blb1PVmskDQq9A7kYGhZR6OCdZdW+PZnI8W5pdmAoI9xwds +HDXLBjoM5EjOcRTld8uxJLDkPbt97nEq+8fD/+fbjStP0khPXRWig2VjrrHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFCW0cMadXpWJSMzjvuEHrwKALZ8wHwYDVR0j BBgwFoAUILvEjntgw+UFXMv0zHKna9eECm0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODhNWGc5TXF5dWZuMXlUNFRTR1lTUUJMdnJGcFAxWlVxcExySGdQbllu TUYvMC8yMEJCQzQ4RTdCNjBDM0U1MDU1Q0NCRjRDQzcyQTc2QkQ3ODQwQTZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwQkJDNDhFN0I2MEMzRTUw NTVDQ0JGNENDNzJBNzZCRDc4NDBBNkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODhNWGc5TXF5dWZuMXlUNFRTR1lTUUJMdnJGcFAxWlVxcExySGdQblluTUYvMC8y MEJCQzQ4RTdCNjBDM0U1MDU1Q0NCRjRDQzcyQTc2QkQ3ODQwQTZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlTel9rGPW/FpZyEHLmePALMLT1bTFq4cG1A88S/8e0PhcPLr5OF+8UCYDbY+ 8IYB9p35QXxFlm6Gg7R9J17SA0Vlr3PhwszyKmUpBS28FnPzgiQy0JYgoGJl9Rjb ksOHzgWFvlOjgRRpSAzUx2nvMyAxUFIOhcECshNl+gF98vjTsWEcbdrwShiEho2R skPgsdDQj7sSvdjaicPaXEI43krkhLvLT6oa3rkLJaLM2AknBneSRHbcF0PHVLw9 qopM3ZhV7fnJoD61TuCVye3dNIZ0Aytup7Zlkxdi4SQts/LzZ+slEzus9b0Mq7Tm jQ21MMvRj6tWP0BUJzRw92uMJA== -----END CERTIFICATE-----Generated at Fri Apr 25 19:24:41 2025 by rpki-client on console.sobornost.net