$ rpki-client -vvf rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft File: BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft (raw, json) Hash identifier: +0w8OjSpz93Jt/wj/wzET4deoab4+ToIIkmqF1ARyuM= Subject key identifier: 2D:C7:70:82:75:F8:3A:55:71:03:79:01:45:87:17:E6:35:F6:EA:30 Authority key identifier: BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA Certificate issuer: /CN=BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA Certificate serial: 68A3A21B7F04F48B28D0AD359E94908E82D50407 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer Subject info access: rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft Manifest number: 0208 Signing time: Mon 28 Apr 2025 16:11:30 +0000 Manifest this update: Mon 28 Apr 2025 16:06:30 +0000 Manifest next update: Tue 29 Apr 2025 16:55:30 +0000 Files and hashes: 1: 3137372e34342e3232302e302f32322d3234203d3e20323633313339.roa (hash: EVYKNMzZueEXwMh0DNayOzxCcx1T14jUI+HXcRE6y5A=) 2: 323830343a313735383a3a2f33322d3438203d3e20323633313339.roa (hash: 925kYNTdkMQU1jDagxfrlmc7XsHPeFb8XeYPOjT/YJs=) 3: BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl (hash: n9qD8afHcUs6ExnirvfEty8M6afN3HweOGc6EHpPFIU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 16:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a3:a2:1b:7f:04:f4:8b:28:d0:ad:35:9e:94:90:8e:82:d5:04:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA Validity Not Before: Apr 28 16:06:30 2025 GMT Not After : Apr 29 16:55:30 2025 GMT Subject: CN=2DC7708275F83A5571037901458717E635F6EA30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:08:21:ab:54:00:e3:ee:23:e3:0d:65:a0:39: 37:a5:e9:da:73:8d:2e:94:d2:a3:25:f0:04:69:a7: 31:e3:cd:e7:d1:76:f1:32:a8:04:7e:64:83:00:f1: 6a:6a:d3:db:d3:42:1e:5e:69:d1:ff:e9:bc:f6:76: 26:06:e3:f1:0c:b3:4a:61:d0:c4:96:2f:7a:b8:3e: 85:4c:e6:dd:05:31:08:e5:16:68:57:91:a5:f2:db: a9:17:ff:47:d0:8d:60:12:e9:70:76:d7:8d:1f:48: b3:c2:93:78:4a:c9:2d:4e:2f:5c:0c:19:ab:f8:b2: 88:80:5c:73:12:9c:6d:52:c4:e3:53:5f:90:ab:9e: 1a:ba:1d:7a:f8:ec:24:7d:08:a6:e6:6b:55:34:c6: bb:cc:86:89:67:ae:61:da:32:97:04:76:cf:9f:99: 89:06:7a:67:ed:48:09:5a:63:ec:9e:62:fe:79:64: af:e8:e8:bd:1d:1d:32:70:d7:29:e2:7d:d3:e0:60: 8f:e4:14:01:30:ce:38:52:11:bc:d6:6b:24:8b:1b: fb:f1:2c:4a:fa:ad:ad:4e:86:2a:66:11:63:57:c5: 3e:a6:b0:e3:7d:a3:af:70:41:5f:bc:c2:dc:b4:c9: db:02:17:66:8e:2b:7e:67:00:8d:32:1c:b7:94:f7: dd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C7:70:82:75:F8:3A:55:71:03:79:01:45:87:17:E6:35:F6:EA:30 X509v3 Authority Key Identifier: keyid:BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:72:36:92:12:f6:80:2a:6c:39:6b:9a:83:97:cd:fa:0f:88: 50:81:22:ab:bf:62:5f:9f:49:6e:80:52:37:d2:89:c8:10:d9: 61:8a:fa:b3:cb:55:06:41:b3:3f:90:dc:b5:87:c8:3d:8d:a1: 0e:16:73:b3:c4:29:92:bb:80:30:6a:8f:ab:27:72:72:38:f1: 6d:f1:e5:63:0d:a9:cc:43:cd:19:8e:5c:44:a5:e9:0a:34:fc: d1:33:bf:21:d6:33:22:7d:03:82:d4:ea:98:35:67:c1:4c:02: 4b:ca:7e:36:7b:8c:2d:34:d9:39:41:56:79:1c:39:bc:61:6d: 10:87:4b:bf:66:84:f3:51:bf:17:8b:55:92:82:70:09:de:13: e3:20:9b:6a:b6:5c:b1:1f:3c:f6:07:24:66:c6:3a:8b:60:21: 34:8a:74:64:f9:c3:76:5e:0d:61:31:7c:ed:a2:3d:ba:ed:97: cb:a0:5a:e2:4a:0c:fc:55:5c:18:c0:6c:d2:97:8f:a3:e2:9b: 5a:31:c0:ea:96:d1:26:4f:e5:72:bc:6a:5c:51:05:e0:33:b2: 6c:2f:32:8f:39:d0:8a:e0:ff:da:50:41:09:75:a9:31:ad:83: 43:be:d1:e9:5f:9d:85:94:3c:da:4b:f6:db:1e:cc:57:2e:2c: 51:9a:96:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaKOiG38E9Iso0K01npSQjoLVBAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRFNkUwQ0RDREQ3QzMzN0Q2NDUxQTZCRTk0QjMyMUMy MkNGMDhFQTAeFw0yNTA0MjgxNjA2MzBaFw0yNTA0MjkxNjU1MzBaMDMxMTAvBgNV BAMTKDJEQzc3MDgyNzVGODNBNTU3MTAzNzkwMTQ1ODcxN0U2MzVGNkVBMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2CCGrVADj7iPjDWWgOTel6dpz jS6U0qMl8ARppzHjzefRdvEyqAR+ZIMA8Wpq09vTQh5eadH/6bz2diYG4/EMs0ph 0MSWL3q4PoVM5t0FMQjlFmhXkaXy26kX/0fQjWAS6XB2140fSLPCk3hKyS1OL1wM Gav4soiAXHMSnG1SxONTX5Crnhq6HXr47CR9CKbma1U0xrvMholnrmHaMpcEds+f mYkGemftSAlaY+yeYv55ZK/o6L0dHTJw1ynifdPgYI/kFAEwzjhSEbzWaySLG/vx LEr6ra1OhipmEWNXxT6msON9o69wQV+8wty0ydsCF2aOK35nAI0yHLeU990LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULcdwgnX4OlVxA3kBRYcX5jX26jAwHwYDVR0j BBgwFoAUvebgzc3XwzfWRRpr6UsyHCLPCOowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDFKY0VBR3dVdkVCbThEYzRqQXRZZFBjYkdEZXVNWmhHUEh2eGZSbjRU blMvMS9CREU2RTBDRENERDdDMzM3RDY0NTFBNkJFOTRCMzIxQzIyQ0YwOEVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERTZFMENEQ0REN0MzMzdE NjQ1MUE2QkU5NEIzMjFDMjJDRjA4RUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDFKY0VBR3dVdkVCbThEYzRqQXRZZFBjYkdEZXVNWmhHUEh2eGZSbjRUblMvMS9C REU2RTBDRENERDdDMzM3RDY0NTFBNkJFOTRCMzIxQzIyQ0YwOEVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAHI2khL2gCpsOWuag5fN+g+IUIEiq79iX59JboBSN9KJyBDZYYr6s8tVBkGz P5DctYfIPY2hDhZzs8QpkruAMGqPqydycjjxbfHlYw2pzEPNGY5cRKXpCjT80TO/ IdYzIn0DgtTqmDVnwUwCS8p+NnuMLTTZOUFWeRw5vGFtEIdLv2aE81G/F4tVkoJw Cd4T4yCbarZcsR889gckZsY6i2AhNIp0ZPnDdl4NYTF87aI9uu2Xy6Ba4koM/FVc GMBs0pePo+KbWjHA6pbRJk/lcrxqXFEF4DOybC8yjznQiuD/2lBBCXWpMa2DQ77R 6V+dhZQ82kv22x7MVy4sUZqWGQ== -----END CERTIFICATE-----Generated at Mon Apr 28 17:38:00 2025 by rpki-client on console.sobornost.net