$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.mft File: 8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.mft (raw, json) Hash identifier: pMoN5XRyd1mtRlnplFj1VjrYwzeCviEWTeHbQvfCnIk= Subject key identifier: 89:52:70:54:EB:5A:D7:62:CC:7F:A5:6A:13:51:B7:5D:03:1E:BD:4A Authority key identifier: 8E:52:C3:EE:0E:4E:14:82:F1:EC:B7:06:9F:3B:7A:34:4E:A0:DD:B2 Certificate issuer: /CN=8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2 Certificate serial: 1E6A58B99C745231EA8E735D4E70FAD01E7186F5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.cer Subject info access: rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.mft Manifest number: 07 Signing time: Mon 28 Apr 2025 17:50:58 +0000 Manifest this update: Mon 28 Apr 2025 17:45:58 +0000 Manifest next update: Tue 29 Apr 2025 20:09:58 +0000 Files and hashes: 1: 3136382e3138312e3133322e302f32322d3332203d3e20323634383632.roa (hash: jK4KZk9GpmyY6DV5imhyMSK8gnX/EJeWy4ICZUOtRSw=) 2: 323830343a326566303a3a2f33322d313238203d3e20323634383632.roa (hash: /yzgAnYbMJWj28/xRizqx8a9n9Vu4jaezShDbudLLKI=) 3: 8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.crl (hash: 56iEXpCpKuhfa1ZddslG/mNBL4C3GW8dedCyyqcnglc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.crl rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 20:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:6a:58:b9:9c:74:52:31:ea:8e:73:5d:4e:70:fa:d0:1e:71:86:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2 Validity Not Before: Apr 28 17:45:58 2025 GMT Not After : Apr 29 20:09:58 2025 GMT Subject: CN=89527054EB5AD762CC7FA56A1351B75D031EBD4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:c8:a0:a5:65:05:a8:f4:6d:e6:07:0a:94: eb:6a:58:3d:4c:57:cc:a5:a6:3d:79:02:27:47:32: 12:ac:e3:29:bc:1c:1a:77:9d:a8:bd:6c:94:b3:3b: 2f:da:1e:a0:4f:6a:9c:3d:08:7f:2f:ab:9c:8f:a1: 56:fd:11:00:19:45:8b:78:9d:12:8e:53:cf:56:2c: 38:86:4c:71:eb:b0:af:e9:f0:33:2a:ae:99:90:64: b8:b1:d8:a5:be:13:05:f5:67:2a:60:7e:f8:5d:ed: 2f:34:88:22:f8:62:89:45:15:d3:dd:70:47:59:b9: 96:01:b7:87:c9:b4:70:73:24:48:bf:be:1a:78:79: e4:ed:1a:91:30:66:1f:7f:db:aa:d5:a9:06:9b:9f: 33:30:b4:2a:c5:44:8c:a6:43:5e:ae:e2:0d:7c:15: b2:0e:a0:33:e3:f9:b5:c5:9e:1a:e4:18:ce:28:5b: 84:1e:d4:09:17:d5:f5:df:f3:e4:d7:c4:58:73:38: 89:a1:2b:8b:86:5d:38:43:44:60:1e:8e:c4:b4:72: 7a:3a:dc:f0:dc:06:f1:23:92:bc:dc:74:39:d8:a7: fe:ad:47:ca:2a:b4:c8:2c:88:dc:0a:e5:16:98:0b: ae:67:e8:df:e7:eb:72:f7:c5:0b:82:c2:04:35:fb: f1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:52:70:54:EB:5A:D7:62:CC:7F:A5:6A:13:51:B7:5D:03:1E:BD:4A X509v3 Authority Key Identifier: keyid:8E:52:C3:EE:0E:4E:14:82:F1:EC:B7:06:9F:3B:7A:34:4E:A0:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/8E52C3EE0E4E1482F1ECB7069F3B7A344EA0DDB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:03:6c:53:cd:04:37:e7:f5:c5:79:f1:58:7e:f8:c3:69:69: c1:61:8a:19:66:ad:b6:2f:f1:9d:a8:57:3c:50:4f:29:ca:82: f9:d2:14:71:dd:23:19:82:c4:d2:09:ee:29:57:6e:13:46:aa: 2b:62:fa:d1:69:ea:a7:34:b2:fa:39:b0:3f:4b:c0:3c:24:ad: eb:78:dd:a0:ec:81:59:4a:ad:fb:7b:af:e2:d4:54:da:bd:e1: 8b:58:f7:7d:f1:5e:f3:60:75:2a:eb:a7:33:14:1d:4f:11:97: ff:2d:b9:63:ff:b1:f1:69:f7:bc:66:6e:99:ec:d5:5e:69:fc: fa:db:bb:81:0f:36:db:a7:bb:a8:79:fb:35:c9:7d:1b:2b:f9: 00:3c:67:59:72:7a:64:88:c0:89:67:44:c7:19:01:1c:ff:3f: 8d:1f:77:3c:de:e4:96:44:0b:8d:5a:21:df:49:b4:98:14:64: 2f:88:63:b3:01:ca:c6:42:9e:6d:d6:0d:70:21:e6:1f:0c:59: 79:28:9c:16:ce:ac:7c:47:d0:8f:e3:83:46:d6:ec:70:82:8c: d8:19:18:30:f1:5a:02:b0:7c:37:94:31:81:a9:2f:7a:ba:18: 9b:97:b1:59:59:8d:15:d1:09:29:22:10:8b:75:5b:c1:fa:1a: 1c:f8:72:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHmpYuZx0UjHqjnNdTnD60B5xhvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU1MkMzRUUwRTRFMTQ4MkYxRUNCNzA2OUYzQjdBMzQ0 RUEwRERCMjAeFw0yNTA0MjgxNzQ1NThaFw0yNTA0MjkyMDA5NThaMDMxMTAvBgNV BAMTKDg5NTI3MDU0RUI1QUQ3NjJDQzdGQTU2QTEzNTFCNzVEMDMxRUJENEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHsigpWUFqPRt5gcKlOtqWD1M V8ylpj15AidHMhKs4ym8HBp3nai9bJSzOy/aHqBPapw9CH8vq5yPoVb9EQAZRYt4 nRKOU89WLDiGTHHrsK/p8DMqrpmQZLix2KW+EwX1Zypgfvhd7S80iCL4YolFFdPd cEdZuZYBt4fJtHBzJEi/vhp4eeTtGpEwZh9/26rVqQabnzMwtCrFRIymQ16u4g18 FbIOoDPj+bXFnhrkGM4oW4Qe1AkX1fXf8+TXxFhzOImhK4uGXThDRGAejsS0cno6 3PDcBvEjkrzcdDnYp/6tR8oqtMgsiNwK5RaYC65n6N/n63L3xQuCwgQ1+/EbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiVJwVOta12LMf6VqE1G3XQMevUowHwYDVR0j BBgwFoAUjlLD7g5OFILx7LcGnzt6NE6g3bIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEdYY2gybm9CZGtHa2poTk05bXVnUnNnYWtwSzlEcHRIZlFqY0g2RldX Y20vMC84RTUyQzNFRTBFNEUxNDgyRjFFQ0I3MDY5RjNCN0EzNDRFQTBEREIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNTJDM0VFMEU0RTE0ODJG MUVDQjcwNjlGM0I3QTM0NEVBMEREQjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OEdYY2gybm9CZGtHa2poTk05bXVnUnNnYWtwSzlEcHRIZlFqY0g2RldXY20vMC84 RTUyQzNFRTBFNEUxNDgyRjFFQ0I3MDY5RjNCN0EzNDRFQTBEREIyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALwNsU80EN+f1xXnxWH74w2lpwWGKGWatti/xnahXPFBPKcqC+dIUcd0jGYLE 0gnuKVduE0aqK2L60WnqpzSy+jmwP0vAPCSt63jdoOyBWUqt+3uv4tRU2r3hi1j3 ffFe82B1KuunMxQdTxGX/y25Y/+x8Wn3vGZumezVXmn8+tu7gQ8226e7qHn7Ncl9 Gyv5ADxnWXJ6ZIjAiWdExxkBHP8/jR93PN7klkQLjVoh30m0mBRkL4hjswHKxkKe bdYNcCHmHwxZeSicFs6sfEfQj+ODRtbscIKM2BkYMPFaArB8N5QxgakveroYm5ex WVmNFdEJKSIQi3VbwfoaHPhy9A== -----END CERTIFICATE-----Generated at Mon Apr 28 20:06:40 2025 by rpki-client on console.sobornost.net