$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft File: 2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json) Hash identifier: PQH6i5TnmZyNV3hzOySrjyD1SECgzglPBnnd1NtZlac= Subject key identifier: 7F:28:EA:B3:23:AB:19:27:AC:71:3A:6E:5C:E7:78:0D:BE:1D:5D:8F Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A Certificate issuer: /CN=2AADFACED9C75E320914697A02E254A3D463839A Certificate serial: 2A55928EA34B257A6F613B882783AD2216CBC158 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft Manifest number: 0203 Signing time: Sun 27 Apr 2025 14:20:46 +0000 Manifest this update: Sun 27 Apr 2025 14:15:46 +0000 Manifest next update: Mon 28 Apr 2025 14:35:46 +0000 Files and hashes: 1: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: DuI4Mug1p6teJxzujuasFd0ujWIU2EvbfZhNpCjPypI=) 2: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: +Ru4pxRe+MIiNrfxPBn4hQlFzg7b6hoi8/CVRsrGe0k=) 3: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: olPEUYzQeXbpm2M5qdX3HUxqCDHC3YBr2Etr9x7gT/w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 13:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:55:92:8e:a3:4b:25:7a:6f:61:3b:88:27:83:ad:22:16:cb:c1:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A Validity Not Before: Apr 27 14:15:46 2025 GMT Not After : Apr 28 14:35:46 2025 GMT Subject: CN=7F28EAB323AB1927AC713A6E5CE7780DBE1D5D8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ef:11:b7:3f:a2:eb:8e:9d:7a:b6:58:97:cf: a5:98:bc:28:58:c9:68:e0:f4:dd:a6:cc:0f:02:9c: 96:03:c7:2f:8e:c4:12:08:28:01:e5:78:9c:4d:70: 02:e1:15:a6:82:03:43:3e:7d:db:bb:d5:ba:f2:54: 09:6a:12:fd:04:b5:30:ef:74:67:ca:6c:96:3a:c1: 42:c2:80:71:55:56:73:f4:61:a2:62:04:2d:96:7a: e3:1b:9d:99:43:8c:03:06:1f:12:17:1b:90:8e:12: a3:97:56:0e:ed:e7:95:14:d4:ce:24:50:ca:fb:db: f1:56:dc:c6:ad:ce:14:d5:2f:a2:bb:92:01:55:13: 93:f5:59:5a:9a:a6:47:49:7c:da:d0:c0:5c:c6:ff: 8d:87:76:b2:89:6e:5c:2f:00:d2:9c:1d:e0:4b:e2: d1:d7:5e:6e:39:1d:9d:1c:3b:1d:bb:b6:40:52:7b: 6d:79:ca:5a:54:46:83:76:e2:e8:cc:d8:a1:1c:64: 1f:d2:e7:70:10:be:51:6b:53:76:b2:01:27:3c:a8: c0:82:90:20:8b:58:3c:1e:10:25:66:c0:56:89:73: 61:26:a0:e5:f4:7f:90:aa:13:18:af:be:8d:cd:6c: 09:29:85:f9:b9:39:3a:54:86:81:d3:cc:a1:16:cd: 26:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:28:EA:B3:23:AB:19:27:AC:71:3A:6E:5C:E7:78:0D:BE:1D:5D:8F X509v3 Authority Key Identifier: keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:24:8b:95:38:0d:c1:c1:6f:d2:53:50:0b:8b:7b:29:e0:b7: 80:8a:ec:e4:08:19:d4:04:66:cf:d9:2e:3d:9b:88:38:3b:7c: a6:fe:30:a5:ca:40:2f:10:b5:a1:98:21:39:07:8a:c8:75:d4: 4f:65:aa:22:10:ff:24:62:b6:1c:4a:e3:eb:a4:da:ef:d2:43: 7a:3a:0e:38:de:67:b5:d0:b9:90:8f:cc:97:3c:90:ed:c9:af: 87:50:2c:fc:a2:7c:da:de:82:55:e8:b7:1b:e4:04:c8:7b:35: 70:4e:8c:63:96:90:6e:e4:3c:00:2b:ae:30:c1:10:1d:c4:ff: f9:3a:ed:df:58:4e:bb:8b:06:17:96:a6:68:cb:85:f6:6f:78: 5c:5b:dc:78:9d:75:c7:e5:6f:52:59:5a:cd:a5:f2:4b:71:4a: 94:26:df:52:b8:5b:61:74:3c:c0:79:cc:fc:52:b1:34:f7:55: 05:06:9e:d7:89:1e:a3:0e:0b:56:c3:33:85:26:76:bb:eb:76: eb:5c:c1:8d:2e:e4:ad:ae:56:81:b9:ab:81:ef:23:f0:dc:67: 25:d5:83:7a:05:d5:d9:47:ad:5c:73:db:c2:84:a5:6b:2c:c0: c4:a2:fd:cd:18:f6:21:d8:fd:de:f9:15:59:3b:f1:13:99:b1: 74:29:19:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKlWSjqNLJXpvYTuIJ4OtIhbLwVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBREZBQ0VEOUM3NUUzMjA5MTQ2OTdBMDJFMjU0QTNE NDYzODM5QTAeFw0yNTA0MjcxNDE1NDZaFw0yNTA0MjgxNDM1NDZaMDMxMTAvBgNV BAMTKDdGMjhFQUIzMjNBQjE5MjdBQzcxM0E2RTVDRTc3ODBEQkUxRDVEOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp7xG3P6Lrjp16tliXz6WYvChY yWjg9N2mzA8CnJYDxy+OxBIIKAHleJxNcALhFaaCA0M+fdu71bryVAlqEv0EtTDv dGfKbJY6wULCgHFVVnP0YaJiBC2WeuMbnZlDjAMGHxIXG5COEqOXVg7t55UU1M4k UMr72/FW3MatzhTVL6K7kgFVE5P1WVqapkdJfNrQwFzG/42HdrKJblwvANKcHeBL 4tHXXm45HZ0cOx27tkBSe215ylpURoN24ujM2KEcZB/S53AQvlFrU3ayASc8qMCC kCCLWDweECVmwFaJc2EmoOX0f5CqExivvo3NbAkphfm5OTpUhoHTzKEWzSY1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfyjqsyOrGSescTpuXOd4Db4dXY8wHwYDVR0j BBgwFoAUKq36ztnHXjIJFGl6AuJUo9Rjg5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0Ru eW8vMS8yQUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQURGQUNFRDlDNzVFMzIw OTE0Njk3QTAyRTI1NEEzRDQ2MzgzOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0RueW8vMS8y QUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALSSLlTgNwcFv0lNQC4t7KeC3gIrs5AgZ1ARmz9kuPZuIODt8pv4wpcpALxC1 oZghOQeKyHXUT2WqIhD/JGK2HErj66Ta79JDejoOON5ntdC5kI/MlzyQ7cmvh1As /KJ82t6CVei3G+QEyHs1cE6MY5aQbuQ8ACuuMMEQHcT/+Trt31hOu4sGF5amaMuF 9m94XFvceJ11x+VvUllazaXyS3FKlCbfUrhbYXQ8wHnM/FKxNPdVBQae14keow4L VsMzhSZ2u+t261zBjS7kra5Wgbmrge8j8NxnJdWDegXV2UetXHPbwoSlayzAxKL9 zRj2Idj93vkVWTvxE5mxdCkZBQ== -----END CERTIFICATE-----Generated at Sun Apr 27 17:04:12 2025 by rpki-client on console.sobornost.net