$ rpki-client -vvf rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft File: 0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft (raw, json) Hash identifier: TGEG8zW/wzdlQ6cDCAuOMnIzsrWHVuWcsNgduqNI5YA= Subject key identifier: 25:60:86:17:32:B2:E3:5D:B9:08:3E:AE:CD:AD:9C:48:E9:06:F6:B1 Authority key identifier: 0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08 Certificate issuer: /CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08 Certificate serial: 099483FCD3DA9C4C895D112BDF33909BF5720CFC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft Manifest number: 0209 Signing time: Mon 28 Apr 2025 07:37:04 +0000 Manifest this update: Mon 28 Apr 2025 07:32:04 +0000 Manifest next update: Tue 29 Apr 2025 11:29:04 +0000 Files and hashes: 1: 323830343a356363303a3a2f33322d3438203d3e20323638393238.roa (hash: k92FdWEorNxKTyarjpxwu6x7nUdmTkLXLHku6hKnTFU=) 2: 34352e3137362e31322e302f32322d3234203d3e20323638393238.roa (hash: 6BQGyRfWPoyBSQCgM4C6Jq/eSUg3l4bDaxyZgDl3HcQ=) 3: 0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl (hash: oLEb2/e9CP1JSua1TwxxUZcO9o/DnSgW/jF9p7W8e6c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:94:83:fc:d3:da:9c:4c:89:5d:11:2b:df:33:90:9b:f5:72:0c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08 Validity Not Before: Apr 28 07:32:04 2025 GMT Not After : Apr 29 11:29:04 2025 GMT Subject: CN=2560861732B2E35DB9083EAECDAD9C48E906F6B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:10:90:aa:ac:f0:66:ac:f2:ea:60:83:ba:88: cd:89:a5:54:30:3f:61:5b:7b:0e:ed:bc:61:51:0f: 38:79:8a:14:e6:c0:b3:bd:61:f3:a3:ef:4e:2c:3c: a0:04:90:0b:c9:fe:1c:b5:a4:31:96:69:41:5a:0d: 30:4c:4b:74:a4:8c:15:ff:a1:8e:dc:46:a1:40:03: 36:18:e2:40:05:d2:b6:73:3b:0e:06:16:05:38:af: e8:fe:98:4e:dd:2c:9f:c7:56:23:84:26:f5:d3:cc: 59:d8:70:9c:82:2d:8a:40:e0:d9:8c:59:2a:17:57: cc:b7:9c:a7:31:75:d7:73:54:19:a0:91:27:b0:ad: f3:76:8f:e7:73:03:9d:67:e6:6d:84:71:67:94:3a: 0e:79:1c:bb:9b:7f:77:49:4c:7d:eb:97:c0:e0:7b: 32:e0:93:90:db:61:fc:37:55:94:77:7c:5d:ab:3e: 21:6b:e0:95:d0:42:af:db:68:30:9b:ea:87:3f:5d: e0:e0:b4:5a:85:7a:fd:69:2c:14:43:79:d6:8b:07: 8f:c8:4d:73:83:9f:c1:30:85:a8:3c:6f:26:ad:55: fa:00:41:14:01:16:7f:6c:78:0f:1c:e0:85:44:64: 9a:9d:9a:db:93:b7:ba:ec:ea:fe:01:09:63:fb:ff: ac:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:60:86:17:32:B2:E3:5D:B9:08:3E:AE:CD:AD:9C:48:E9:06:F6:B1 X509v3 Authority Key Identifier: keyid:0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:5e:2a:14:74:fe:81:4e:ff:67:d9:28:ba:20:c0:9a:66:62: ac:8d:5b:1e:3a:fd:ea:6c:bf:ea:4e:3f:1d:e0:54:64:2f:d4: ce:e0:04:3c:43:ff:11:7c:42:36:bf:69:b4:aa:43:17:ea:28: b4:ee:5e:2f:b0:65:68:65:bf:19:a7:cd:60:e1:c7:5a:b0:55: 63:d0:13:f9:cd:0d:e9:7d:a7:e6:76:72:e0:dc:be:6b:31:72: 06:d8:15:eb:f0:82:07:ca:b6:73:b1:ef:7a:2a:df:a8:9c:6a: 72:85:73:3e:17:3c:14:a7:64:25:c7:05:ae:6b:ed:08:dc:23: 13:67:83:c7:56:99:26:49:23:38:3f:8d:40:f6:77:17:23:fe: 12:37:35:d8:f0:8a:98:dc:30:c9:06:f6:3c:66:2f:5d:c0:3e: ac:9d:42:f6:e7:49:36:55:ab:c9:4b:49:6e:2f:0b:70:60:66: 4d:bf:d8:4f:7e:53:45:c3:db:1f:f7:af:72:39:8d:7d:47:ef: e5:f9:31:57:ad:46:02:d5:c8:16:db:ad:f2:b9:d0:32:1a:7d: 35:c0:dc:53:9a:ec:51:b4:b7:c5:07:89:19:2c:43:bc:ea:af: e9:b3:7d:0b:9c:0e:2a:22:87:5b:b5:f2:cc:ce:9c:96:99:43: 48:38:59:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCZSD/NPanEyJXREr3zOQm/VyDPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzRUIwMEUwMUZEREVDREQwRDIwQUM3QTEzODlFOUUx MzUwREUwODAeFw0yNTA0MjgwNzMyMDRaFw0yNTA0MjkxMTI5MDRaMDMxMTAvBgNV BAMTKDI1NjA4NjE3MzJCMkUzNURCOTA4M0VBRUNEQUQ5QzQ4RTkwNkY2QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEEJCqrPBmrPLqYIO6iM2JpVQw P2Fbew7tvGFRDzh5ihTmwLO9YfOj704sPKAEkAvJ/hy1pDGWaUFaDTBMS3SkjBX/ oY7cRqFAAzYY4kAF0rZzOw4GFgU4r+j+mE7dLJ/HViOEJvXTzFnYcJyCLYpA4NmM WSoXV8y3nKcxdddzVBmgkSewrfN2j+dzA51n5m2EcWeUOg55HLubf3dJTH3rl8Dg ezLgk5DbYfw3VZR3fF2rPiFr4JXQQq/baDCb6oc/XeDgtFqFev1pLBRDedaLB4/I TXODn8Ewhag8byatVfoAQRQBFn9seA8c4IVEZJqdmtuTt7rs6v4BCWP7/6yNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJWCGFzKy4125CD6uza2cSOkG9rEwHwYDVR0j BBgwFoAUDz6wDgH93s3Q0grHoTienhNQ3ggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREtyVEtqU0FMeDh2N0Zwb0YzdldhNVhIZ2t3TTdiVUZKemVxclFqcnJ6 UmsvMS8wRjNFQjAwRTAxRkRERUNERDBEMjBBQzdBMTM4OUU5RTEzNTBERTA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGM0VCMDBFMDFGRERFQ0RE MEQyMEFDN0ExMzg5RTlFMTM1MERFMDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REtyVEtqU0FMeDh2N0Zwb0YzdldhNVhIZ2t3TTdiVUZKemVxclFqcnJ6UmsvMS8w RjNFQjAwRTAxRkRERUNERDBEMjBBQzdBMTM4OUU5RTEzNTBERTA4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAF4qFHT+gU7/Z9kouiDAmmZirI1bHjr96my/6k4/HeBUZC/UzuAEPEP/EXxC Nr9ptKpDF+ootO5eL7BlaGW/GafNYOHHWrBVY9AT+c0N6X2n5nZy4Ny+azFyBtgV 6/CCB8q2c7HveirfqJxqcoVzPhc8FKdkJccFrmvtCNwjE2eDx1aZJkkjOD+NQPZ3 FyP+Ejc12PCKmNwwyQb2PGYvXcA+rJ1C9udJNlWryUtJbi8LcGBmTb/YT35TRcPb H/evcjmNfUfv5fkxV61GAtXIFtut8rnQMhp9NcDcU5rsUbS3xQeJGSxDvOqv6bN9 C5wOKiKHW7XyzM6clplDSDhZlQ== -----END CERTIFICATE-----Generated at Mon Apr 28 10:49:29 2025 by rpki-client on console.sobornost.net