$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft File: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft (raw, json) Hash identifier: +IjcRuUD8MmoGjh+geG0uFx9K9Gkn9YYMvKb/c1egPM= Subject key identifier: A5:F2:24:C1:A4:FA:02:7D:46:8F:57:F4:4D:73:D8:24:1F:DF:7E:64 Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A Certificate issuer: /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Certificate serial: 3E02AFD7C004C69AFCD45E2D7F1B49BF6843371E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject info access: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft Manifest number: AF Signing time: Mon 28 Apr 2025 15:11:14 +0000 Manifest this update: Mon 28 Apr 2025 15:06:14 +0000 Manifest next update: Tue 29 Apr 2025 15:57:14 +0000 Files and hashes: 1: 34352e3136352e38302e302f32322d3234203d3e203631353935.roa (hash: P3iRqeK3Yv57QU7Bwadb2mGTtOHbUHSsYSW0mi15khA=) 2: 34352e3136352e38302e302f32322d3234203d3e203533343237.roa (hash: W6Il1nJqq5qqLa4TPlQ/OzjTUK08KOF0OrC0Ec1PXjE=) 3: 323830343a353463383a3a2f33322d3438203d3e203631353935.roa (hash: Ae2efMgnwM2PCNT7dU75s66Sccj5kzLKU0a/b++2GsQ=) 4: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl (hash: 58lPWxTBiPdePMN+woHg2oZQPgFnB5zDbEl4Bk/ZPwQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 15:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:02:af:d7:c0:04:c6:9a:fc:d4:5e:2d:7f:1b:49:bf:68:43:37:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Validity Not Before: Apr 28 15:06:14 2025 GMT Not After : Apr 29 15:57:14 2025 GMT Subject: CN=A5F224C1A4FA027D468F57F44D73D8241FDF7E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:a3:bf:23:a2:cc:28:66:dd:52:71:8a:9b:b1: 0e:03:16:b5:5a:c7:dc:34:3d:b8:f8:5b:c5:71:11: ff:58:62:d3:c9:70:0b:20:f4:52:61:72:36:e1:02: 78:db:aa:cd:9d:32:64:61:e9:d7:9f:9d:ea:b4:1f: b7:11:28:d6:fe:48:e0:ea:03:8a:da:f3:b6:3b:8c: 8c:79:4a:fc:ea:1d:28:76:bb:26:b9:e9:ec:17:39: 7a:7e:b4:a2:1e:2d:db:54:bf:19:ea:61:5b:0c:a5: f0:bc:03:26:82:61:31:55:4d:79:ff:6c:7e:62:19: 3a:d8:64:43:5c:5b:1e:00:81:98:b4:d0:04:37:19: 9e:78:ec:4e:ec:17:bc:55:14:60:a8:9f:02:31:e9: 56:d9:31:70:29:c0:a9:dc:fa:30:19:f9:81:dd:89: ea:f0:5c:f1:16:10:19:ea:33:ad:3d:0e:14:d4:e9: 11:12:f6:68:6b:68:01:b9:77:f9:77:16:2c:91:51: c4:38:bd:aa:80:8c:fc:84:5e:8c:18:02:69:26:e2: a0:bd:77:57:2d:9c:85:db:56:91:9d:ed:4e:7f:17: 84:ce:b1:ec:cb:ba:bf:9f:19:b4:8a:39:1b:8c:92: c6:a8:c5:09:34:2b:4d:03:5c:48:93:1d:a4:36:87: c5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F2:24:C1:A4:FA:02:7D:46:8F:57:F4:4D:73:D8:24:1F:DF:7E:64 X509v3 Authority Key Identifier: keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b6:e0:b5:bf:6d:d1:b0:a9:d4:a0:71:12:cc:29:67:af:77: b8:3d:d1:dc:d6:18:c4:8a:1a:1f:e5:b9:dc:a0:96:2f:0c:aa: e9:d5:3e:c4:39:65:7f:66:07:2b:ff:53:4b:b0:66:6e:1b:59: c6:b7:6e:f8:1b:2b:20:d1:da:e4:b4:52:88:19:63:9a:9d:b5: e0:77:2c:65:7b:c1:96:5c:ec:a1:6e:66:33:13:38:0d:1c:e9: 2b:40:da:17:f9:ea:6e:a0:84:4e:31:fc:b5:67:31:f6:8b:25: c0:1b:c3:13:7d:9d:bb:cf:e0:9a:f9:34:91:1c:59:7b:6f:2b: e5:d3:d2:42:33:72:23:4a:e7:ba:d1:e1:78:c9:3c:ac:7a:61: ad:cc:ee:92:47:49:8b:4f:36:6e:d3:e7:b7:d4:95:93:85:c3: 29:89:d7:40:ff:6f:fb:64:57:56:95:5c:10:f8:5e:0b:5d:8f: 94:c4:a2:61:58:fb:ae:bc:40:75:8c:fd:ad:8a:c1:12:52:b5: ae:3f:13:8e:21:03:73:82:3b:79:4a:26:f7:34:80:70:77:65: f1:e7:eb:52:7f:73:79:a8:df:04:cb:7a:a0:f5:f8:7a:6c:2e: f1:eb:88:d2:26:45:2b:96:49:ff:2b:52:63:ac:20:5e:34:92: 1f:68:ed:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPgKv18AExpr81F4tfxtJv2hDNx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1OEVFRDIwQ0VBMDQwMUJERUJERTRDQTI5Q0MyREI1 OUQ3MTEzQTAeFw0yNTA0MjgxNTA2MTRaFw0yNTA0MjkxNTU3MTRaMDMxMTAvBgNV BAMTKEE1RjIyNEMxQTRGQTAyN0Q0NjhGNTdGNDRENzNEODI0MUZERjdFNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9o78joswoZt1ScYqbsQ4DFrVa x9w0Pbj4W8VxEf9YYtPJcAsg9FJhcjbhAnjbqs2dMmRh6defneq0H7cRKNb+SODq A4ra87Y7jIx5SvzqHSh2uya56ewXOXp+tKIeLdtUvxnqYVsMpfC8AyaCYTFVTXn/ bH5iGTrYZENcWx4AgZi00AQ3GZ547E7sF7xVFGConwIx6VbZMXApwKnc+jAZ+YHd ierwXPEWEBnqM609DhTU6RES9mhraAG5d/l3FiyRUcQ4vaqAjPyEXowYAmkm4qC9 d1ctnIXbVpGd7U5/F4TOsezLur+fGbSKORuMksaoxQk0K00DXEiTHaQ2h8XPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpfIkwaT6An1Gj1f0TXPYJB/ffmQwHwYDVR0j BBgwFoAUrVju0gzqBAG9695MopzC21nXETowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBi eUYvMC9BRDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENThFRUQyMENFQTA0MDFC REVCREU0Q0EyOUNDMkRCNTlENzExM0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBieUYvMC9B RDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApbbgtb9t0bCp1KBxEswpZ693uD3R3NYYxIoaH+W53KCWLwyq6dU+xDllf2YH K/9TS7BmbhtZxrdu+BsrINHa5LRSiBljmp214HcsZXvBllzsoW5mMxM4DRzpK0Da F/nqbqCETjH8tWcx9oslwBvDE32du8/gmvk0kRxZe28r5dPSQjNyI0rnutHheMk8 rHphrczukkdJi082btPnt9SVk4XDKYnXQP9v+2RXVpVcEPheC12PlMSiYVj7rrxA dYz9rYrBElK1rj8TjiEDc4I7eUom9zSAcHdl8efrUn9zeajfBMt6oPX4emwu8euI 0iZFK5ZJ/ytSY6wgXjSSH2jt1w== -----END CERTIFICATE-----Generated at Mon Apr 28 17:37:59 2025 by rpki-client on console.sobornost.net