$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft File: A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft (raw, json) Hash identifier: jQGA2OSGqt4lEon0WYFJW2rK35HQFrVcTej9f6QcgxU= Subject key identifier: 72:95:E3:F9:0F:32:0B:02:3F:97:EE:2C:34:93:72:84:5A:C9:2C:B2 Authority key identifier: A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD Certificate issuer: /CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Certificate serial: 18EE978DCDA9406663C9A82DB0B3CA477C2235A2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft Manifest number: 0203 Signing time: Fri 25 Apr 2025 07:19:48 +0000 Manifest this update: Fri 25 Apr 2025 07:14:48 +0000 Manifest next update: Sat 26 Apr 2025 10:33:48 +0000 Files and hashes: 1: 323830343a313966633a3a2f33322d313238203d3e203631383330.roa (hash: 1fBqlheobXcBImZUSmBR8xZUu4CjVeNok+HYscqNMOw=) 2: 3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa (hash: 2GMI5l4Ze96BdW91sSpr2ML6DS2lIwQHnvz+4+faiFA=) 3: A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl (hash: KY1BMy4IBRmu8oDyg5KrUj7yuzwnitT4kWOgJQXBC6c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 10:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ee:97:8d:cd:a9:40:66:63:c9:a8:2d:b0:b3:ca:47:7c:22:35:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Validity Not Before: Apr 25 07:14:48 2025 GMT Not After : Apr 26 10:33:48 2025 GMT Subject: CN=7295E3F90F320B023F97EE2C349372845AC92CB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:a1:04:aa:38:0d:78:6b:6a:76:2b:94:23: 55:c5:3c:2d:ee:ac:c1:f1:6f:19:9f:4b:d1:45:c0: 56:2f:bc:af:e3:43:63:db:de:39:e2:8f:d0:77:09: ab:e0:5c:3d:0f:ef:eb:56:d5:dd:20:df:70:a9:50: 4e:41:f9:10:de:1e:fe:b1:a1:95:23:80:85:c9:4e: 78:88:24:ae:c9:be:11:cd:74:3f:aa:3e:96:4d:2a: 18:cf:98:fe:d2:a7:ad:e7:e6:85:5f:7d:73:c4:57: 10:f2:b5:21:fe:60:42:09:25:ab:ca:bf:d8:86:32: e5:a4:1c:c8:36:4a:a1:a3:a2:0a:f7:a6:9d:d5:c4: f0:68:d3:5c:fa:45:eb:b2:39:af:1d:71:55:6a:d0: 8b:1a:9f:3f:20:79:74:b8:5f:47:07:5d:f1:db:8e: 04:32:94:e0:be:1a:60:c7:3e:73:42:48:a3:9d:c2: b1:c2:81:8f:58:9f:72:70:24:41:d1:e4:ad:03:a1: d8:f6:a2:2a:ca:b9:db:65:f1:68:ef:ca:63:55:1f: 53:a4:dd:b5:7a:a7:e1:5f:cd:69:cd:65:d2:a8:be: 65:9f:f7:d1:4a:5b:5a:53:d9:e3:d1:1a:30:0a:16: e3:a8:4c:0d:84:f7:b7:a9:0d:2c:08:d0:34:9d:63: 40:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:95:E3:F9:0F:32:0B:02:3F:97:EE:2C:34:93:72:84:5A:C9:2C:B2 X509v3 Authority Key Identifier: keyid:A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2b:64:06:86:a2:f1:f4:d7:37:1a:fc:34:a0:ae:ea:9f:b1: e0:60:a4:53:48:bf:60:4c:eb:47:ac:c3:63:c8:d8:da:b0:01: 0c:06:de:b1:ac:13:d6:19:ae:cd:e5:d9:0b:c6:84:34:c0:0f: ab:fb:df:09:65:8a:b0:e9:d3:08:05:fe:96:8c:57:34:a2:fd: 36:de:87:53:5e:0a:93:1c:af:74:0e:35:e6:cd:9a:f5:c6:c3: fc:08:4d:90:ea:d4:4a:6d:67:b8:82:46:fe:bf:b8:e9:92:06: 48:a2:04:5b:68:08:f4:1d:e3:dd:17:b7:e1:a8:e2:21:0f:42: 81:53:fe:b5:1e:56:65:cc:42:71:6f:8b:a6:6b:ce:7b:6f:f6: 6f:11:11:5c:36:b2:dc:e2:20:fc:3e:91:17:ed:cc:99:dd:9c: ba:89:7e:59:28:a5:1c:15:2a:a7:91:b0:e1:39:a6:4a:1d:14: 2e:9a:15:21:22:f0:76:6e:74:7f:5b:ca:e4:0e:f3:4d:6e:66: 06:70:f4:ae:a1:84:05:ea:c8:df:9b:bd:3d:c7:f9:5e:6b:45: 2a:99:71:9f:bf:88:23:65:52:aa:0f:63:76:72:a4:c1:01:b5: bc:9c:36:c3:84:59:b4:1c:48:d0:8c:31:da:44:26:d4:44:cb: 0e:a8:c1:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGO6Xjc2pQGZjyagtsLPKR3wiNaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIxQzAzREQwOUNEQzJDMDA5OTc1OTRDMjA5ODM0NzNF RjVBREFGRDAeFw0yNTA0MjUwNzE0NDhaFw0yNTA0MjYxMDMzNDhaMDMxMTAvBgNV BAMTKDcyOTVFM0Y5MEYzMjBCMDIzRjk3RUUyQzM0OTM3Mjg0NUFDOTJDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82KEEqjgNeGtqdiuUI1XFPC3u rMHxbxmfS9FFwFYvvK/jQ2Pb3jnij9B3CavgXD0P7+tW1d0g33CpUE5B+RDeHv6x oZUjgIXJTniIJK7JvhHNdD+qPpZNKhjPmP7Sp63n5oVffXPEVxDytSH+YEIJJavK v9iGMuWkHMg2SqGjogr3pp3VxPBo01z6ReuyOa8dcVVq0Isanz8geXS4X0cHXfHb jgQylOC+GmDHPnNCSKOdwrHCgY9Yn3JwJEHR5K0Dodj2oirKudtl8WjvymNVH1Ok 3bV6p+FfzWnNZdKovmWf99FKW1pT2ePRGjAKFuOoTA2E97epDSwI0DSdY0DJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcpXj+Q8yCwI/l+4sNJNyhFrJLLIwHwYDVR0j BBgwFoAUohwD3QnNwsAJl1lMIJg0c+9a2v0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2 bksvMi9BMjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyMUMwM0REMDlDREMyQzAw OTk3NTk0QzIwOTgzNDczRUY1QURBRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2bksvMi9B MjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACitkBoai8fTXNxr8NKCu6p+x4GCkU0i/YEzrR6zDY8jY2rABDAbesawT1hmu zeXZC8aENMAPq/vfCWWKsOnTCAX+loxXNKL9Nt6HU14KkxyvdA415s2a9cbD/AhN kOrUSm1nuIJG/r+46ZIGSKIEW2gI9B3j3Re34ajiIQ9CgVP+tR5WZcxCcW+LpmvO e2/2bxERXDay3OIg/D6RF+3Mmd2cuol+WSilHBUqp5Gw4TmmSh0ULpoVISLwdm50 f1vK5A7zTW5mBnD0rqGEBerI35u9Pcf5XmtFKplxn7+II2VSqg9jdnKkwQG1vJw2 w4RZtBxI0Iwx2kQm1ETLDqjBIw== -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:58 2025 by rpki-client on console.sobornost.net