$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft File: BAA91B8729924B4E8155B81952688BEC004DD0B7.mft (raw, json) Hash identifier: O65D+SgAfW82R2NewgQ/lg57rXf/SJGallIEj+LnKJE= Subject key identifier: 64:D3:43:F9:DE:48:3A:1C:9F:4B:EB:8C:B9:65:2E:34:5F:B0:B2:9B Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7 Certificate issuer: /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7 Certificate serial: 3EF2367C146F015150DF8BA4684873CD2112E229 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer Subject info access: rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft Manifest number: 0211 Signing time: Mon 28 Apr 2025 09:33:21 +0000 Manifest this update: Mon 28 Apr 2025 09:28:21 +0000 Manifest next update: Tue 29 Apr 2025 12:45:21 +0000 Files and hashes: 1: 34352e3138372e3136382e302f32322d3232203d3e20323639343733.roa (hash: g3tpRV4ipD+pD9t97FwbrLz/pp3VpuHES5NV9MPlsS8=) 2: 34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa (hash: DoIheMfS2BngMQ+JdTJaqcKZM72QCyWpqlcxhcNcg/8=) 3: 323830343a363532633a633030303a3a2f33342d3334203d3e20323639343733.roa (hash: 1tj7f6UEdSuSX+xzAfE3glMzsuwy0R2doswMaI5qeZM=) 4: 323830343a363532633a3a2f33342d3334203d3e20323639343733.roa (hash: X5MXmZvX84QOjHDMm5hGtXTanpvg6jMd48H1sof9q60=) 5: 323830343a363532633a383030303a3a2f33342d3334203d3e20323639343733.roa (hash: pO92ZTA6JgI7SZJqWBqtXgNp8h8anIZBL3tkPi+xJ8U=) 6: 323830343a363532633a343030303a3a2f33342d3334203d3e20323639343733.roa (hash: cq+TY6RGuTPnXqe6GmwhfS349yibSTDnBR9W+e3J9uo=) 7: BAA91B8729924B4E8155B81952688BEC004DD0B7.crl (hash: TlR4wXAJAGnzq8XORQwWAz3SQJDTkRTu29raoA43pzo=) 8: 34352e3138372e3137302e302f32332d3233203d3e20323639343733.roa (hash: Lx7nSCgj5dOCOPrurXvE2HW2gQpQataNP9dJX4pXSJY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 12:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f2:36:7c:14:6f:01:51:50:df:8b:a4:68:48:73:cd:21:12:e2:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7 Validity Not Before: Apr 28 09:28:21 2025 GMT Not After : Apr 29 12:45:21 2025 GMT Subject: CN=64D343F9DE483A1C9F4BEB8CB9652E345FB0B29B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:8e:a8:5f:61:53:1e:fe:a2:0c:40:83:30: 53:f2:c6:62:86:b0:c3:3d:cc:e2:df:01:63:bf:f0: e8:d9:85:53:e8:e7:58:71:f6:f8:bf:24:0c:1e:bc: b0:20:e4:e1:39:36:4d:b4:04:3c:4a:b6:59:25:db: e8:93:5d:b0:60:32:96:b4:32:0e:9e:49:a6:a2:58: c7:d5:2a:0f:04:18:ab:e1:6c:1d:ca:8b:63:15:e2: 16:fb:36:20:96:fc:2c:90:db:6e:d5:06:09:a4:3b: 30:e5:2f:4e:cb:19:7b:f6:26:3c:41:a6:62:0d:10: 58:71:a4:98:68:31:80:9c:71:69:84:20:42:7c:a6: 0e:de:b2:ba:b2:6f:04:df:1b:cd:91:f0:37:56:29: d0:21:92:01:19:36:ed:b6:84:37:6b:5d:d9:d7:39: 8a:54:96:c0:17:73:b6:94:67:40:9a:4d:04:4c:21: 3a:5e:04:1e:d5:cd:df:f6:6f:1c:c9:25:03:17:1b: 51:91:c7:4f:5e:b1:00:e0:74:9e:50:99:b5:a9:ec: 40:c9:6e:0a:d1:2c:b3:1c:e8:c7:54:a7:de:01:91: fa:d4:1d:9a:32:89:89:41:87:f0:a4:89:58:08:d7: 60:fb:5a:80:7d:54:fd:52:4a:bb:c0:fb:24:96:71: e1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D3:43:F9:DE:48:3A:1C:9F:4B:EB:8C:B9:65:2E:34:5F:B0:B2:9B X509v3 Authority Key Identifier: keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:bd:a5:9c:54:6a:75:25:df:f6:91:3a:0d:ba:2d:50:34:95: f1:63:87:61:ae:9d:04:84:81:94:e5:11:6d:7c:3f:17:1a:42: fc:71:fe:d3:a5:40:5e:e3:42:2e:5a:2f:3b:9e:22:e6:86:dd: cb:62:8e:50:c0:ea:10:ef:2f:b1:02:4f:34:77:22:3e:8b:b1: 7d:a3:d2:f1:12:92:ba:ad:74:32:ce:2b:3c:68:ad:5b:f5:f6: d9:88:d3:d7:1d:33:57:a7:9c:61:a3:14:66:5f:5b:5f:24:a9: ca:1d:cc:d4:09:75:f0:a7:da:0f:3b:da:06:90:4a:3f:ff:90: 25:6a:c4:ab:b5:86:9d:79:f5:fb:cb:ba:f8:f4:75:d6:aa:63: 46:7b:68:a2:ce:45:a1:87:a5:d2:e2:92:ba:c8:41:ee:79:0f: d4:cd:3b:36:25:8b:da:71:c1:6f:8c:92:46:f4:4a:03:7e:83: 7b:da:fb:8c:d6:b0:44:b6:9a:a9:fd:69:3c:ec:2f:c3:b1:7c: 47:81:d0:3b:08:e5:aa:b2:28:8c:8a:59:8c:82:7b:2d:70:a2: 94:48:32:c3:1e:dd:9d:63:f9:23:e7:50:27:ad:4d:3d:4a:67: 0f:b5:2d:72:e3:7c:6a:cc:71:70:35:48:2a:d0:39:8c:2f:78: f0:1c:18:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPvI2fBRvAVFQ34ukaEhzzSES4ikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBOTFCODcyOTkyNEI0RTgxNTVCODE5NTI2ODhCRUMw MDRERDBCNzAeFw0yNTA0MjgwOTI4MjFaFw0yNTA0MjkxMjQ1MjFaMDMxMTAvBgNV BAMTKDY0RDM0M0Y5REU0ODNBMUM5RjRCRUI4Q0I5NjUyRTM0NUZCMEIyOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSY6oX2FTHv6iDECDMFPyxmKG sMM9zOLfAWO/8OjZhVPo51hx9vi/JAwevLAg5OE5Nk20BDxKtlkl2+iTXbBgMpa0 Mg6eSaaiWMfVKg8EGKvhbB3Ki2MV4hb7NiCW/CyQ227VBgmkOzDlL07LGXv2JjxB pmINEFhxpJhoMYCccWmEIEJ8pg7esrqybwTfG82R8DdWKdAhkgEZNu22hDdrXdnX OYpUlsAXc7aUZ0CaTQRMITpeBB7Vzd/2bxzJJQMXG1GRx09esQDgdJ5QmbWp7EDJ bgrRLLMc6MdUp94BkfrUHZoyiYlBh/CkiVgI12D7WoB9VP1SSrvA+ySWceHVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZNND+d5IOhyfS+uMuWUuNF+wspswHwYDVR0j BBgwFoAUuqkbhymSS06BVbgZUmiL7ABN0LcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHJ2VHhhMllOeFl5UHAzYzVQcTUxdW8zV0duanhNaG5NakhzQnZkN2VY RjkvMS9CQUE5MUI4NzI5OTI0QjRFODE1NUI4MTk1MjY4OEJFQzAwNEREMEI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBQTkxQjg3Mjk5MjRCNEU4 MTU1QjgxOTUyNjg4QkVDMDA0REQwQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHJ2VHhhMllOeFl5UHAzYzVQcTUxdW8zV0duanhNaG5NakhzQnZkN2VYRjkvMS9C QUE5MUI4NzI5OTI0QjRFODE1NUI4MTk1MjY4OEJFQzAwNEREMEI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEb2lnFRqdSXf9pE6DbotUDSV8WOHYa6dBISBlOURbXw/FxpC/HH+06VAXuNC LlovO54i5obdy2KOUMDqEO8vsQJPNHciPouxfaPS8RKSuq10Ms4rPGitW/X22YjT 1x0zV6ecYaMUZl9bXySpyh3M1Al18KfaDzvaBpBKP/+QJWrEq7WGnXn1+8u6+PR1 1qpjRntoos5FoYel0uKSushB7nkP1M07NiWL2nHBb4ySRvRKA36De9r7jNawRLaa qf1pPOwvw7F8R4HQOwjlqrIojIpZjIJ7LXCilEgywx7dnWP5I+dQJ61NPUpnD7Ut cuN8asxxcDVIKtA5jC948BwYww== -----END CERTIFICATE-----Generated at Mon Apr 28 13:05:04 2025 by rpki-client on console.sobornost.net