$ rpki-client -vvf rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft File: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft (raw, json) Hash identifier: XkPnmVqN344M6STYWiavV88axb2a+sPWi86RU/65JsM= Subject key identifier: 63:B5:C2:CB:41:33:8B:A9:CE:7C:EF:40:13:54:31:42:82:7E:E9:33 Authority key identifier: 00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 Certificate issuer: /CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Certificate serial: 0EEB193BF85F3E53A623C6EB9E44186494E9D26C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft Manifest number: 0208 Signing time: Mon 28 Apr 2025 19:45:22 +0000 Manifest this update: Mon 28 Apr 2025 19:40:22 +0000 Manifest next update: Tue 29 Apr 2025 19:59:22 +0000 Files and hashes: 1: 34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa (hash: CQkxTLpB0h8sw9f6HinJ/zgqW1tumRLs+pW63/RGxSA=) 2: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl (hash: wcY2Ukl3LVnzSyWNX9sd65c6nSvdnJc/dMtHtIJnolg=) 3: 323830343a356666383a3a2f33322d3438203d3e20323639313337.roa (hash: x6rW9jCCge7pgSikdO+N6Nk7UH7lwIZA6/UkvStSYRc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 19:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:eb:19:3b:f8:5f:3e:53:a6:23:c6:eb:9e:44:18:64:94:e9:d2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Validity Not Before: Apr 28 19:40:22 2025 GMT Not After : Apr 29 19:59:22 2025 GMT Subject: CN=63B5C2CB41338BA9CE7CEF4013543142827EE933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:35:ae:a0:07:03:61:42:ce:ee:ad:98:16:a2: a9:70:7a:d4:a8:fa:02:77:f5:8b:25:4b:ef:7c:81: 78:ea:db:11:8e:17:f0:03:5d:dd:5a:a5:b6:6a:a6: ed:98:e9:e3:4c:3b:35:43:b9:42:ac:c9:47:01:16: 4c:7d:35:0a:5e:af:7c:28:6e:39:4a:91:a6:77:68: 85:a4:14:bc:a9:05:9e:02:ef:00:f8:4c:bb:f1:da: de:5f:b2:3a:13:08:c3:b0:dd:bf:db:5b:e0:19:4f: 81:4b:eb:f0:bd:20:4a:2d:23:03:b0:43:99:a3:50: 5e:3b:85:9a:85:8e:60:49:85:d4:ca:34:22:01:ae: 5c:f6:4d:da:e6:b8:99:9e:62:8b:48:2d:69:fa:26: b8:fa:89:7e:bd:ad:3b:b7:2f:1e:da:2f:68:bb:95: 26:0d:34:1a:0c:89:63:8f:e5:f9:eb:1b:e2:bf:6f: 9a:68:31:fa:ac:b2:4f:c4:42:4c:39:44:ff:fa:ce: a6:f9:f2:c2:21:86:6a:26:89:17:6b:80:67:de:28: 69:8a:87:83:36:bb:5e:8a:e6:4f:37:e8:90:ca:98: 80:41:e9:64:41:59:a2:a0:21:21:fb:77:4b:50:0e: 27:8e:d8:d9:2f:28:e2:e8:f9:f4:cb:83:d2:70:ca: 3e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B5:C2:CB:41:33:8B:A9:CE:7C:EF:40:13:54:31:42:82:7E:E9:33 X509v3 Authority Key Identifier: keyid:00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:d0:50:92:56:1f:6c:0e:19:52:14:ef:44:82:f4:9d:8e:11: 7c:50:4f:04:ae:72:92:8f:ba:48:3b:db:55:fd:b9:6e:48:ed: 01:7a:4c:9e:8c:11:7f:bb:42:de:a3:1a:07:a6:5a:95:4c:91: b5:ff:1f:5f:37:42:9c:fa:99:8a:0f:9f:be:88:fd:ab:7e:ec: c1:eb:08:f9:8d:58:ea:44:8b:d0:2c:de:26:8f:0e:8d:d0:a9: e5:84:b9:53:08:d0:33:02:62:96:a1:d4:59:6d:03:2d:b4:48: b7:01:cf:e4:01:af:6a:89:04:eb:56:e5:88:1d:a0:26:3a:d2: bb:41:23:41:3c:55:48:4b:ae:a1:b4:04:46:ff:51:4a:d1:a8: 35:0b:05:60:05:fa:bf:ee:10:fa:22:16:11:21:30:f3:9d:5f: eb:a4:23:14:e3:f7:c6:26:f4:6f:db:23:f2:77:bf:b9:6f:37: 19:0d:25:20:d8:69:9c:49:31:cd:1c:4a:46:79:33:26:cc:29: b1:9c:57:ec:7f:92:cc:b2:a7:e2:d0:3b:c9:d9:67:f1:f3:88: 2e:41:3a:1e:ee:1d:7a:c8:f7:b1:45:4e:ff:f0:66:6e:d5:0b: 58:72:b2:c2:29:83:36:9e:67:78:ca:36:da:67:1b:86:23:7b: 44:e3:d1:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDusZO/hfPlOmI8brnkQYZJTp0mwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBEOTVBQUI0M0UwMzZEN0E2REUyMjI4RTlEQjEzRkZB Qjc5QkU3NDAeFw0yNTA0MjgxOTQwMjJaFw0yNTA0MjkxOTU5MjJaMDMxMTAvBgNV BAMTKDYzQjVDMkNCNDEzMzhCQTlDRTdDRUY0MDEzNTQzMTQyODI3RUU5MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCNa6gBwNhQs7urZgWoqlwetSo +gJ39YslS+98gXjq2xGOF/ADXd1apbZqpu2Y6eNMOzVDuUKsyUcBFkx9NQper3wo bjlKkaZ3aIWkFLypBZ4C7wD4TLvx2t5fsjoTCMOw3b/bW+AZT4FL6/C9IEotIwOw Q5mjUF47hZqFjmBJhdTKNCIBrlz2TdrmuJmeYotILWn6Jrj6iX69rTu3Lx7aL2i7 lSYNNBoMiWOP5fnrG+K/b5poMfqssk/EQkw5RP/6zqb58sIhhmomiRdrgGfeKGmK h4M2u16K5k836JDKmIBB6WRBWaKgISH7d0tQDieO2NkvKOLo+fTLg9Jwyj4bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUY7XCy0Ezi6nOfO9AE1QxQoJ+6TMwHwYDVR0j BBgwFoAUANlaq0PgNtem3iIo6dsT/6t5vnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5 Q0svMS8wMEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwRDk1QUFCNDNFMDM2RDdB NkRFMjIyOEU5REIxM0ZGQUI3OUJFNzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5Q0svMS8w MEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt9BQklYfbA4ZUhTvRIL0nY4RfFBPBK5yko+6SDvbVf25bkjtAXpMnowRf7tC 3qMaB6ZalUyRtf8fXzdCnPqZig+fvoj9q37swesI+Y1Y6kSL0CzeJo8OjdCp5YS5 UwjQMwJilqHUWW0DLbRItwHP5AGvaokE61bliB2gJjrSu0EjQTxVSEuuobQERv9R StGoNQsFYAX6v+4Q+iIWESEw851f66QjFOP3xib0b9sj8ne/uW83GQ0lINhpnEkx zRxKRnkzJswpsZxX7H+SzLKn4tA7ydln8fOILkE6Hu4desj3sUVO//BmbtULWHKy wimDNp5neMo22mcbhiN7ROPRag== -----END CERTIFICATE-----Generated at Mon Apr 28 22:47:59 2025 by rpki-client on console.sobornost.net