$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft File: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft (raw, json) Hash identifier: vZ8VR5f2xxK5peMkVIqgdgyW9Go5FkPE98c62aVRYKI= Subject key identifier: F5:D5:10:9C:5C:D1:81:DB:23:D1:67:D5:84:1F:81:BB:0C:C1:8E:F8 Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7 Certificate issuer: /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7 Certificate serial: 3A2C022C7A965DDBA909A30EE4F4D7BBCE4B571B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer Subject info access: rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft Manifest number: 0204 Signing time: Fri 25 Apr 2025 08:44:19 +0000 Manifest this update: Fri 25 Apr 2025 08:39:19 +0000 Manifest next update: Sat 26 Apr 2025 09:32:19 +0000 Files and hashes: 1: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl (hash: VE9ODHwHsyxpOh63iwPYFqNH+SKe/2biW699aFCfsHU=) 2: 3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa (hash: zzuAYXVxZSPy90ckTABafh3wBDFSIA6yCF8t1bKcPTw=) 3: 3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa (hash: J9JKS/uOVSTf4lxE2/X712ak1j9CChp3U8mi1+Az2NM=) 4: 323830343a6138633a3a2f33322d3438203d3e20323632323939.roa (hash: EeO9rj+ZkVIkb2Nu0/KE+IFQ8hNAOE0eB+Vu/g/K8/8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 09:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:2c:02:2c:7a:96:5d:db:a9:09:a3:0e:e4:f4:d7:bb:ce:4b:57:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7 Validity Not Before: Apr 25 08:39:19 2025 GMT Not After : Apr 26 09:32:19 2025 GMT Subject: CN=F5D5109C5CD181DB23D167D5841F81BB0CC18EF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:98:0f:18:f2:c6:26:94:3d:2e:29:26:73:59: b0:96:20:46:f5:b4:5a:ba:01:53:c1:7f:59:a6:af: c7:a2:f2:e5:6a:73:6b:52:d5:6a:2c:8f:7f:27:b2: 37:06:bd:d9:c5:c4:10:01:75:1f:4c:a9:f8:3c:e9: fd:ea:1b:73:89:dc:aa:a7:c5:8b:d9:c0:ba:b7:c4: 68:bd:b3:2c:66:e4:81:a2:f5:c9:0a:5c:4f:28:8c: 91:29:7b:2c:ce:ad:d7:d8:87:53:8c:e5:cd:76:97: 52:5b:96:32:d0:f8:92:e9:89:79:be:44:08:1f:e5: 7b:c8:ff:51:5a:e7:30:aa:5d:7c:8d:85:e3:62:f9: a5:77:e4:86:88:4e:d9:53:89:c0:c7:ae:1e:5d:64: a1:8e:26:cb:b7:d4:63:dc:2d:87:2e:53:87:ff:53: c9:33:8e:76:84:86:8e:cc:ee:4c:85:87:97:17:d1: 3d:3c:9e:7a:e1:76:c5:19:74:b8:ae:61:1a:d5:ab: bd:64:eb:c5:1e:19:5d:cc:48:1e:2c:cd:aa:b9:3f: dd:30:9e:90:8b:90:04:bf:eb:c2:9d:b0:7a:56:8a: c9:91:15:75:d1:dc:be:ff:3a:3c:e9:db:13:ab:5c: 71:a9:9a:ab:de:cf:d9:77:20:3f:25:1e:9b:29:8b: ce:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D5:10:9C:5C:D1:81:DB:23:D1:67:D5:84:1F:81:BB:0C:C1:8E:F8 X509v3 Authority Key Identifier: keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f5:2a:b9:ca:fe:25:63:3e:db:a3:68:d6:33:18:f2:4b:53: 90:8f:36:a5:e5:be:55:f2:6f:57:6d:db:30:f4:39:8b:dc:e5: 54:6f:d0:94:20:e1:25:18:f2:98:53:9d:a3:20:67:e2:8b:cd: 7e:5e:ee:b4:f8:25:62:29:c3:d3:f8:54:08:15:9f:0a:6f:d8: 3f:bf:d8:17:22:96:58:83:c9:e6:ca:ff:6e:33:ad:aa:12:63: cf:0d:ab:49:6a:87:e9:c5:e7:be:c8:6f:d1:57:67:c3:df:59: f2:87:2f:de:05:d7:56:ec:cd:4a:79:ea:90:45:48:81:d2:d6: 95:4f:1f:5a:f1:80:35:29:ae:18:e6:22:92:b9:bb:2f:6d:5b: b9:3a:d4:24:99:e1:75:ec:9f:02:16:95:96:1d:c6:63:73:6c: 91:a6:90:41:d0:54:f6:60:69:38:12:7f:4b:75:d7:f0:8f:e4: 01:4c:fd:22:e9:9d:af:85:f0:dc:4c:47:74:c5:eb:04:9f:c6: 9a:e0:42:92:89:ba:2d:0a:05:76:4b:67:bc:49:a3:74:9d:8c: a5:c7:d1:44:83:dd:fc:c3:2c:1e:bc:68:dc:f7:29:52:2c:35: b2:b7:86:20:39:34:43:98:b0:e5:ee:6e:4c:84:19:16:bc:f7: 1a:73:9d:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOiwCLHqWXdupCaMO5PTXu85LVxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAzRENDQTdERTc5QzhDNERBQkFBMTBBNkNBOUU5M0VB N0QzOURGNzAeFw0yNTA0MjUwODM5MTlaFw0yNTA0MjYwOTMyMTlaMDMxMTAvBgNV BAMTKEY1RDUxMDlDNUNEMTgxREIyM0QxNjdENTg0MUY4MUJCMENDMThFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmA8Y8sYmlD0uKSZzWbCWIEb1 tFq6AVPBf1mmr8ei8uVqc2tS1Wosj38nsjcGvdnFxBABdR9Mqfg86f3qG3OJ3Kqn xYvZwLq3xGi9syxm5IGi9ckKXE8ojJEpeyzOrdfYh1OM5c12l1JbljLQ+JLpiXm+ RAgf5XvI/1Fa5zCqXXyNheNi+aV35IaITtlTicDHrh5dZKGOJsu31GPcLYcuU4f/ U8kzjnaEho7M7kyFh5cX0T08nnrhdsUZdLiuYRrVq71k68UeGV3MSB4szaq5P90w npCLkAS/68KdsHpWismRFXXR3L7/Ojzp2xOrXHGpmqvez9l3ID8lHpspi84nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9dUQnFzRgdsj0WfVhB+BuwzBjvgwHwYDVR0j BBgwFoAUID3Mp955yMTauqEKbKnpPqfTnfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BH U0UvMS8yMDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwM0RDQ0E3REU3OUM4QzRE QUJBQTEwQTZDQTlFOTNFQTdEMzlERjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BHU0UvMS8y MDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN/Uqucr+JWM+26No1jMY8ktTkI82peW+VfJvV23bMPQ5i9zlVG/QlCDhJRjy mFOdoyBn4ovNfl7utPglYinD0/hUCBWfCm/YP7/YFyKWWIPJ5sr/bjOtqhJjzw2r SWqH6cXnvshv0Vdnw99Z8ocv3gXXVuzNSnnqkEVIgdLWlU8fWvGANSmuGOYikrm7 L21buTrUJJnhdeyfAhaVlh3GY3NskaaQQdBU9mBpOBJ/S3XX8I/kAUz9Iumdr4Xw 3ExHdMXrBJ/GmuBCkom6LQoFdktnvEmjdJ2MpcfRRIPd/MMsHrxo3PcpUiw1sreG IDk0Q5iw5e5uTIQZFrz3GnOd/Q== -----END CERTIFICATE-----Generated at Fri Apr 25 10:37:09 2025 by rpki-client on console.sobornost.net