$ rpki-client -vvf rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft File: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft (raw, json) Hash identifier: TuoqB9xFFyqFMn6wYUDykwNo00G7o4LofZzgruH1AtM= Subject key identifier: 39:43:ED:74:73:25:59:BE:67:B7:08:49:1A:46:6F:B0:F2:99:FC:C6 Authority key identifier: BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F Certificate issuer: /CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F Certificate serial: 5F54CAF26C27FC866B034DB31C5B5E08D7DBAC44 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft Manifest number: 0209 Signing time: Mon 28 Apr 2025 17:04:50 +0000 Manifest this update: Mon 28 Apr 2025 16:59:49 +0000 Manifest next update: Tue 29 Apr 2025 19:56:49 +0000 Files and hashes: 1: 323830343a333931383a3a2f33322d3438203d3e20323636353234.roa (hash: u8d0Mn98TtWyUrhUOqtNMrGLk1T6aCjOiYPcLYePCos=) 2: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl (hash: C0L/gvQQrP2zmnfNfJn2I4sUrbgc4iIT6fnCVuXTZCI=) 3: 3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa (hash: bkG6nRhuuAvtH28sET40mnQpqJfxK8Y3Bh3nGqC8fWQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 19:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:54:ca:f2:6c:27:fc:86:6b:03:4d:b3:1c:5b:5e:08:d7:db:ac:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F Validity Not Before: Apr 28 16:59:49 2025 GMT Not After : Apr 29 19:56:49 2025 GMT Subject: CN=3943ED74732559BE67B708491A466FB0F299FCC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c4:5b:86:f8:67:58:41:be:e0:d9:4f:06:73: 5f:3e:6f:2e:17:4d:2c:52:b8:13:e2:1e:f0:36:85: 64:1b:29:71:01:c7:69:04:f1:79:29:50:5a:5f:5b: 07:f1:3b:ce:6e:3d:49:ea:e8:c6:e8:dd:69:6f:a2: 55:64:b8:00:8a:c2:74:37:93:d4:fa:ed:96:4b:12: ef:90:0e:77:cf:ea:47:0a:d6:87:95:f4:7f:7f:c0: 3b:39:01:d0:0f:a9:6f:78:5a:c3:e3:f9:78:13:08: 48:93:0e:0b:5d:9e:18:56:ca:92:ac:1c:df:9e:0e: 9a:7f:23:3d:6a:b0:5e:ad:3b:24:04:fc:09:73:6b: 9d:96:e9:f8:49:df:33:19:4c:75:d1:2d:ef:01:ce: 32:1e:65:85:cd:eb:3c:f7:2f:81:9c:fe:93:16:4c: e5:2c:c7:d3:2a:7b:6c:d6:ae:3b:b4:82:65:23:8e: ef:df:99:41:5f:e7:3c:ad:8b:b0:c5:5b:51:ae:7e: 50:f1:36:15:af:ba:2a:19:84:ea:9c:e6:01:39:88: 48:68:7b:bb:8c:77:26:ba:c5:5d:97:3e:8f:46:2e: 07:de:45:5b:ed:45:aa:6c:bf:68:c0:61:1c:ca:c7: 55:13:8c:04:1e:d7:c7:df:09:05:2f:7d:a0:c2:cb: 18:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:43:ED:74:73:25:59:BE:67:B7:08:49:1A:46:6F:B0:F2:99:FC:C6 X509v3 Authority Key Identifier: keyid:BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:bd:15:8c:97:7c:78:cd:4e:fb:cc:76:79:66:77:18:fd:7e: de:77:20:5a:fd:99:05:ab:c5:37:66:c7:3f:5e:13:76:02:f9: 56:1e:67:7c:06:90:2e:e1:71:26:df:41:31:b0:67:a9:08:3a: c8:34:c2:0b:52:b7:cc:80:5f:b7:63:15:2e:70:d3:01:03:c8: 0f:83:71:31:c7:6d:d0:cf:73:b4:95:0a:d0:bc:b9:a1:af:7e: 09:2b:8b:33:1d:ed:0a:39:e2:4f:6d:1e:20:29:1e:27:ca:38: 8f:01:fc:8a:cb:20:e8:26:bc:e0:00:8c:25:f0:c4:70:9c:b2: 13:fa:e8:57:23:75:ee:7a:f3:fa:6d:15:29:96:64:bf:90:a8: 29:97:5f:f6:a6:df:77:45:16:b5:b7:87:c1:c2:cd:a3:44:3e: 55:52:24:48:7b:1a:38:73:af:0d:48:ca:c0:8b:aa:89:24:ab: 74:bd:fe:d2:e1:0d:26:92:d4:2e:05:a6:4f:e9:7c:f0:b4:f0: 17:64:51:b0:1f:5c:c8:34:8b:48:44:8c:ed:e5:f5:e0:c8:30: db:71:11:7c:70:4b:2e:25:e7:a9:a3:d4:11:34:d6:ac:12:54: 58:48:1b:36:cc:59:11:9e:f7:20:e9:af:57:4e:c5:60:4a:f3: 4e:1a:86:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX1TK8mwn/IZrA02zHFteCNfbrEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDBCRDc1Q0FEM0EzMDNFQzcyRjFBRDBCMjM2NUVF OTVEMzkwRjAeFw0yNTA0MjgxNjU5NDlaFw0yNTA0MjkxOTU2NDlaMDMxMTAvBgNV BAMTKDM5NDNFRDc0NzMyNTU5QkU2N0I3MDg0OTFBNDY2RkIwRjI5OUZDQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClxFuG+GdYQb7g2U8Gc18+by4X TSxSuBPiHvA2hWQbKXEBx2kE8XkpUFpfWwfxO85uPUnq6Mbo3WlvolVkuACKwnQ3 k9T67ZZLEu+QDnfP6kcK1oeV9H9/wDs5AdAPqW94WsPj+XgTCEiTDgtdnhhWypKs HN+eDpp/Iz1qsF6tOyQE/Alza52W6fhJ3zMZTHXRLe8BzjIeZYXN6zz3L4Gc/pMW TOUsx9Mqe2zWrju0gmUjju/fmUFf5zyti7DFW1GuflDxNhWvuioZhOqc5gE5iEho e7uMdya6xV2XPo9GLgfeRVvtRapsv2jAYRzKx1UTjAQe18ffCQUvfaDCyxizAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOUPtdHMlWb5ntwhJGkZvsPKZ/MYwHwYDVR0j BBgwFoAUu+0L11ytOjA+xy8a0LI2XuldOQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3pKYTRjYXN2aGNqRDJobkhtNWpBYXdjdFJrTmFnR25MQjY1M3VxOEhE Y04vMS9CQkVEMEJENzVDQUQzQTMwM0VDNzJGMUFEMEIyMzY1RUU5NUQzOTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCRUQwQkQ3NUNBRDNBMzAz RUM3MkYxQUQwQjIzNjVFRTk1RDM5MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3pKYTRjYXN2aGNqRDJobkhtNWpBYXdjdFJrTmFnR25MQjY1M3VxOEhEY04vMS9C QkVEMEJENzVDQUQzQTMwM0VDNzJGMUFEMEIyMzY1RUU5NUQzOTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA70VjJd8eM1O+8x2eWZ3GP1+3ncgWv2ZBavFN2bHP14TdgL5Vh5nfAaQLuFx Jt9BMbBnqQg6yDTCC1K3zIBft2MVLnDTAQPID4NxMcdt0M9ztJUK0Ly5oa9+CSuL Mx3tCjniT20eICkeJ8o4jwH8issg6Ca84ACMJfDEcJyyE/roVyN17nrz+m0VKZZk v5CoKZdf9qbfd0UWtbeHwcLNo0Q+VVIkSHsaOHOvDUjKwIuqiSSrdL3+0uENJpLU LgWmT+l88LTwF2RRsB9cyDSLSESM7eX14Mgw23ERfHBLLiXnqaPUETTWrBJUWEgb NsxZEZ73IOmvV07FYErzThqG/g== -----END CERTIFICATE-----Generated at Mon Apr 28 20:06:47 2025 by rpki-client on console.sobornost.net