$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft File: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft (raw, json) Hash identifier: 3GuAPeJOXz9dXbUvT80I4WpVZ1PNK1N7Li123bLU7ww= Subject key identifier: 60:B7:FE:E3:21:C8:9B:1E:B5:57:E2:C9:EF:C0:FD:50:8D:0D:06:96 Authority key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED Certificate issuer: /CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Certificate serial: 370EC0FC836699595C419BF5C18162E42AF38BFC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject info access: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft Manifest number: 0200 Signing time: Fri 25 Apr 2025 09:52:42 +0000 Manifest this update: Fri 25 Apr 2025 09:47:42 +0000 Manifest next update: Sat 26 Apr 2025 12:54:42 +0000 Files and hashes: 1: 3139312e372e37322e302f32312d3234203d3e203533313330.roa (hash: uXdeuicJG1GO+GJKUORCb4DqvhzxPyQ2Z5ORNJJFr7Q=) 2: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl (hash: 3BNcpiNt9E+ULIUppGmf9HSza7wm8vItR/f1T6d1FEM=) 3: 3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa (hash: BzoyXL30Xsaxt5/GzA+mLV5q6XBxznhdO2qisUbseRg=) 4: 323830343a313431633a3a2f33322d313238203d3e203533313330.roa (hash: cjsfM81trhoZs+Ib78YBfAQ97ux0mFDSEJNG8MM4Pa8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 12:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0e:c0:fc:83:66:99:59:5c:41:9b:f5:c1:81:62:e4:2a:f3:8b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Validity Not Before: Apr 25 09:47:42 2025 GMT Not After : Apr 26 12:54:42 2025 GMT Subject: CN=60B7FEE321C89B1EB557E2C9EFC0FD508D0D0696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f5:e8:2d:04:87:aa:36:b2:72:fd:5e:5d:32: b6:39:4c:5c:8e:c3:a0:b0:e3:00:a7:96:41:02:ad: 04:aa:66:e4:82:06:a8:86:4f:3f:86:9a:e9:a4:dc: 2e:83:f8:15:c2:5d:04:73:95:9b:a6:27:32:b8:1c: 49:2f:e1:99:80:a0:c6:ad:27:83:de:f2:3b:6a:47: e1:43:2d:07:81:96:a5:2e:f1:47:91:b5:16:22:b5: bc:77:b9:e7:24:9b:c8:43:6b:a6:5b:6c:bd:72:6b: 7f:3c:95:b7:38:96:71:fb:8f:ff:8f:51:4c:72:54: 4b:45:c9:dc:ae:f1:37:b9:49:7b:8e:75:ce:7e:e1: 97:70:09:03:96:f1:84:b9:18:a4:84:9c:57:1e:b5: 5e:ab:9c:73:c1:e4:9b:fc:d6:63:05:cf:00:11:41: a9:b9:88:e9:e4:45:48:05:9e:34:a1:a9:ef:69:1b: 32:ca:b2:ad:a4:34:07:34:06:80:28:9b:61:9b:bc: 1f:ff:6c:48:53:dd:71:ff:40:64:48:f4:92:6b:be: 84:7a:93:bb:25:f2:2e:4b:df:8e:6a:2b:27:1e:cc: 1d:51:09:7d:c1:54:74:f3:68:28:d5:92:b3:c4:10: 75:e1:16:63:17:d0:7b:54:56:b0:98:d3:5e:d7:a2: a6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B7:FE:E3:21:C8:9B:1E:B5:57:E2:C9:EF:C0:FD:50:8D:0D:06:96 X509v3 Authority Key Identifier: keyid:02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:32:16:62:74:c6:83:f8:da:ab:a4:5f:3f:51:0f:92:51:f5: ba:3b:a9:0c:21:69:ca:36:17:ec:e0:61:dd:30:51:2a:2b:31: 76:1d:ea:d2:43:de:86:a1:f7:a2:1b:93:36:32:2b:7f:8a:ec: e6:f6:73:08:1d:01:57:3c:2a:60:7d:86:c6:55:28:e0:3e:b4: ac:d4:05:e7:5a:b8:aa:99:87:e4:a4:1b:49:74:d1:91:b1:4a: 1b:a1:c8:b2:82:4b:18:80:bc:f3:8e:a0:aa:a4:85:be:55:e7: 99:e1:24:db:b8:f0:5c:11:e1:3a:a1:33:df:5e:6c:39:31:95: 66:da:6d:b3:0f:2c:45:71:0e:22:fe:21:8d:ce:31:43:de:ef: 88:21:86:57:29:27:f2:66:4e:8d:5f:4c:87:b4:b7:54:67:4b: 31:95:f9:ea:f8:b1:3c:d9:2b:6c:c6:27:83:6e:de:47:45:31: c3:a6:13:a8:5e:bc:1f:ab:ce:fe:39:6d:0a:74:db:87:f4:a4: 26:a7:1f:7c:c8:2f:31:41:2a:27:20:ae:d1:ab:c6:fa:82:7d: d2:e5:51:ee:42:b5:25:8d:f0:7f:4f:13:81:f5:f0:27:ab:67: 05:6b:cf:37:06:3b:55:62:58:af:7a:eb:8d:f2:e2:14:ec:20: ad:8d:2e:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNw7A/INmmVlcQZv1wYFi5Crzi/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQjk5M0U5NTg1QTUzRkM2QjQwREE3NjJBNzNFQjI4 MjFCRjZFRDAeFw0yNTA0MjUwOTQ3NDJaFw0yNTA0MjYxMjU0NDJaMDMxMTAvBgNV BAMTKDYwQjdGRUUzMjFDODlCMUVCNTU3RTJDOUVGQzBGRDUwOEQwRDA2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL9egtBIeqNrJy/V5dMrY5TFyO w6Cw4wCnlkECrQSqZuSCBqiGTz+Gmumk3C6D+BXCXQRzlZumJzK4HEkv4ZmAoMat J4Pe8jtqR+FDLQeBlqUu8UeRtRYitbx3ueckm8hDa6ZbbL1ya388lbc4lnH7j/+P UUxyVEtFydyu8Te5SXuOdc5+4ZdwCQOW8YS5GKSEnFcetV6rnHPB5Jv81mMFzwAR Qam5iOnkRUgFnjShqe9pGzLKsq2kNAc0BoAom2GbvB//bEhT3XH/QGRI9JJrvoR6 k7sl8i5L345qKycezB1RCX3BVHTzaCjVkrPEEHXhFmMX0HtUVrCY017XoqZzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYLf+4yHImx61V+LJ78D9UI0NBpYwHwYDVR0j BBgwFoAUAsuZPpWFpT/GtA2nYqc+soIb9u0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtM NlovMS8wMkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQ0I5OTNFOTU4NUE1M0ZD NkI0MERBNzYyQTczRUIyODIxQkY2RUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtMNlovMS8w MkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXzIWYnTGg/jaq6RfP1EPklH1ujupDCFpyjYX7OBh3TBRKisxdh3q0kPehqH3 ohuTNjIrf4rs5vZzCB0BVzwqYH2GxlUo4D60rNQF51q4qpmH5KQbSXTRkbFKG6HI soJLGIC8846gqqSFvlXnmeEk27jwXBHhOqEz315sOTGVZtptsw8sRXEOIv4hjc4x Q97viCGGVykn8mZOjV9Mh7S3VGdLMZX56vixPNkrbMYng27eR0Uxw6YTqF68H6vO /jltCnTbh/SkJqcffMgvMUEqJyCu0avG+oJ90uVR7kK1JY3wf08TgfXwJ6tnBWvP NwY7VWJYr3rrjfLiFOwgrY0ueg== -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:26 2025 by rpki-client on console.sobornost.net