$ rpki-client -vvf rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/ACA778A2C607C1D75246F6843808768228994515.mft File: ACA778A2C607C1D75246F6843808768228994515.mft (raw, json) Hash identifier: QBuFke3t9wbndRtSMEAGqqtUATbhOwAZnVOnob6imVg= Subject key identifier: 80:A9:2A:45:BF:75:9C:FA:94:7C:7C:81:DE:89:68:46:63:D8:A5:72 Authority key identifier: AC:A7:78:A2:C6:07:C1:D7:52:46:F6:84:38:08:76:82:28:99:45:15 Certificate issuer: /CN=ACA778A2C607C1D75246F6843808768228994515 Certificate serial: 2AA559337567BAD58AFE1A5305B54EC9B25D5ED8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACA778A2C607C1D75246F6843808768228994515.cer Subject info access: rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/ACA778A2C607C1D75246F6843808768228994515.mft Manifest number: 020C Signing time: Mon 28 Apr 2025 19:59:05 +0000 Manifest this update: Mon 28 Apr 2025 19:54:05 +0000 Manifest next update: Tue 29 Apr 2025 23:54:05 +0000 Files and hashes: 1: ACA778A2C607C1D75246F6843808768228994515.crl (hash: qBfmRb200zBQOODiUO0gxL8VqN7LoonZYz2UcwxSxzQ=) 2: 34352e3233332e3234342e302f32322d3332203d3e20323637333332.roa (hash: LdJbg+gowSGtzCchURrkc1qHF9bx9G1Bdus3L/kpU9w=) 3: 323830343a346264383a3a2f33322d313238203d3e20323637333332.roa (hash: sQDX4tHCaVbOfJNLvecye82n1Yp5a3DWaTywLJKojS0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/ACA778A2C607C1D75246F6843808768228994515.crl rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/ACA778A2C607C1D75246F6843808768228994515.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACA778A2C607C1D75246F6843808768228994515.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 22:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a5:59:33:75:67:ba:d5:8a:fe:1a:53:05:b5:4e:c9:b2:5d:5e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACA778A2C607C1D75246F6843808768228994515 Validity Not Before: Apr 28 19:54:05 2025 GMT Not After : Apr 29 23:54:05 2025 GMT Subject: CN=80A92A45BF759CFA947C7C81DE89684663D8A572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:a4:73:18:2c:47:09:de:01:39:a2:f0:a1: 84:60:fd:02:1b:a0:86:7a:c2:1a:50:25:4b:42:d3: 5c:f9:67:9b:c1:83:5f:62:42:84:5b:83:ac:e7:51: 1a:a3:f1:1f:59:ca:30:40:5a:69:d2:6f:9c:98:7b: 28:23:62:d3:d3:25:d5:8a:2d:87:3a:d5:1f:96:1d: e8:86:0f:43:77:d1:2d:09:3d:e4:f3:1e:8b:f7:ad: f4:98:d3:88:f4:da:2a:ba:23:fd:0e:58:ba:4e:81: f8:29:a6:c7:20:32:6d:5c:ab:9f:a9:e3:64:03:a6: 3f:c8:d8:94:67:70:f3:ee:11:0e:4e:ec:ad:c0:12: bb:5c:ed:3e:b0:9c:01:59:0b:1a:26:c5:ba:20:20: 3b:e5:b5:f7:1c:17:ed:06:b0:d3:bd:7e:8a:a5:b7: 64:8c:a2:a2:8f:8e:2a:9e:51:74:31:26:a1:5e:23: bb:f3:c3:b5:44:18:e2:ca:12:36:c0:f7:aa:a7:53: fb:07:e5:d5:02:12:57:25:a3:fd:0e:d2:de:ac:85: e6:d6:e6:00:ab:b2:60:24:26:cd:b6:02:e7:14:e4: 22:23:3d:78:10:8f:3a:e1:a9:66:e7:54:a3:a7:30: 80:af:f3:16:2c:26:c4:69:c1:ad:83:13:0f:65:7c: 06:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A9:2A:45:BF:75:9C:FA:94:7C:7C:81:DE:89:68:46:63:D8:A5:72 X509v3 Authority Key Identifier: keyid:AC:A7:78:A2:C6:07:C1:D7:52:46:F6:84:38:08:76:82:28:99:45:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/ACA778A2C607C1D75246F6843808768228994515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACA778A2C607C1D75246F6843808768228994515.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ofSrHcmncFnGPRsQ7DBxAsLzHxjjrSDA11hyZvqGQVZ/1/ACA778A2C607C1D75246F6843808768228994515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:79:1b:26:3b:9b:70:cd:66:20:6a:22:bd:4c:7d:13:92:d1: ed:b3:e8:95:01:29:ec:df:06:af:91:d1:81:c1:c3:e7:08:13: 5d:3e:a0:68:20:b9:9b:a4:7b:3d:33:9e:c6:61:9c:44:2a:53: ad:ff:a7:42:ea:8c:20:c6:d5:50:a6:8a:49:08:31:ba:61:f5: 60:a8:73:6c:44:a1:13:8e:9c:ef:c5:e0:6d:4f:14:a7:b1:c2: 99:6b:f5:a4:d0:03:d6:ae:fd:7b:b3:4a:72:e6:55:8f:06:9d: b1:37:69:e2:69:ba:e2:7d:46:22:68:c2:4f:72:2a:eb:f8:a4: b3:59:a6:94:bb:21:0f:ce:9f:79:a8:48:26:da:28:01:db:00: 0d:a3:6e:71:32:0c:a9:70:61:33:01:c1:da:d5:53:ec:a4:ee: bf:ec:80:88:74:4a:42:00:75:d1:72:76:36:8f:00:25:9e:0d: 2e:80:66:77:e7:da:50:0c:75:bf:ce:96:c1:01:78:b4:4a:3d: a7:b1:82:63:df:38:8f:bb:b6:4d:a3:f3:16:29:99:d6:fd:8d: 74:ad:6d:a3:55:9e:d3:99:e1:61:05:4b:d8:db:2a:35:c6:59: e2:a1:b0:fc:8e:74:14:16:dd:71:62:50:dc:14:3f:53:30:cf: 3c:3f:e6:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKqVZM3VnutWK/hpTBbVOybJdXtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNBNzc4QTJDNjA3QzFENzUyNDZGNjg0MzgwODc2ODIy ODk5NDUxNTAeFw0yNTA0MjgxOTU0MDVaFw0yNTA0MjkyMzU0MDVaMDMxMTAvBgNV BAMTKDgwQTkyQTQ1QkY3NTlDRkE5NDdDN0M4MURFODk2ODQ2NjNEOEE1NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDGqRzGCxHCd4BOaLwoYRg/QIb oIZ6whpQJUtC01z5Z5vBg19iQoRbg6znURqj8R9ZyjBAWmnSb5yYeygjYtPTJdWK LYc61R+WHeiGD0N30S0JPeTzHov3rfSY04j02iq6I/0OWLpOgfgppscgMm1cq5+p 42QDpj/I2JRncPPuEQ5O7K3AErtc7T6wnAFZCxomxbogIDvltfccF+0GsNO9foql t2SMoqKPjiqeUXQxJqFeI7vzw7VEGOLKEjbA96qnU/sH5dUCElclo/0O0t6shebW 5gCrsmAkJs22AucU5CIjPXgQjzrhqWbnVKOnMICv8xYsJsRpwa2DEw9lfAbXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgKkqRb91nPqUfHyB3oloRmPYpXIwHwYDVR0j BBgwFoAUrKd4osYHwddSRvaEOAh2giiZRRUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMm9mU3JIY21uY0ZuR1BSc1E3REJ4QXNMekh4ampyU0RBMTFoeVp2cUdR VlovMS9BQ0E3NzhBMkM2MDdDMUQ3NTI0NkY2ODQzODA4NzY4MjI4OTk0NTE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDQTc3OEEyQzYwN0MxRDc1 MjQ2RjY4NDM4MDg3NjgyMjg5OTQ1MTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mm9mU3JIY21uY0ZuR1BSc1E3REJ4QXNMekh4ampyU0RBMTFoeVp2cUdRVlovMS9B Q0E3NzhBMkM2MDdDMUQ3NTI0NkY2ODQzODA4NzY4MjI4OTk0NTE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE3kbJjubcM1mIGoivUx9E5LR7bPolQEp7N8Gr5HRgcHD5wgTXT6gaCC5m6R7 PTOexmGcRCpTrf+nQuqMIMbVUKaKSQgxumH1YKhzbEShE46c78XgbU8Up7HCmWv1 pNAD1q79e7NKcuZVjwadsTdp4mm64n1GImjCT3Iq6/iks1mmlLshD86feahIJtoo AdsADaNucTIMqXBhMwHB2tVT7KTuv+yAiHRKQgB10XJ2No8AJZ4NLoBmd+faUAx1 v86WwQF4tEo9p7GCY984j7u2TaPzFimZ1v2NdK1to1We05nhYQVL2NsqNcZZ4qGw /I50FBbdcWJQ3BQ/UzDPPD/mAg== -----END CERTIFICATE-----Generated at Mon Apr 28 22:47:43 2025 by rpki-client on console.sobornost.net