$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft File: DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft (raw, json) Hash identifier: ZxhtG9Yu5SNst89aZMFvABZSJvcnQ2CqDAYH2mZaMLA= Subject key identifier: AF:6B:AF:53:59:3D:BE:BA:FD:20:AC:18:BE:AC:8E:C4:84:5D:23:1B Authority key identifier: DC:34:ED:8D:E5:4B:D2:FA:BE:03:A2:7A:E8:FF:76:59:60:6B:65:42 Certificate issuer: /CN=DC34ED8DE54BD2FABE03A27AE8FF7659606B6542 Certificate serial: 2FC49E680F15DFADF49635B3703843B386EC3073 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer Subject info access: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft Manifest number: AC Signing time: Thu 24 Apr 2025 23:48:25 +0000 Manifest this update: Thu 24 Apr 2025 23:43:25 +0000 Manifest next update: Fri 25 Apr 2025 23:52:25 +0000 Files and hashes: 1: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: zkubuxRpLG1gutEslbctXHKpEp2A7E4iQzNQuetKYz4=) 2: DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl (hash: zhqZ48+PEmb+POCY+wSguqDTIAyl4ctpx7Y8twXvr04=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 22:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c4:9e:68:0f:15:df:ad:f4:96:35:b3:70:38:43:b3:86:ec:30:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34ED8DE54BD2FABE03A27AE8FF7659606B6542 Validity Not Before: Apr 24 23:43:25 2025 GMT Not After : Apr 25 23:52:25 2025 GMT Subject: CN=AF6BAF53593DBEBAFD20AC18BEAC8EC4845D231B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:0e:56:14:01:94:17:e5:cc:e6:ae:6d:79: 70:2e:0b:66:92:6d:7b:7c:53:0a:ef:d8:03:84:12: 25:de:95:10:1b:c6:b1:46:05:b6:c7:2e:ec:9a:09: 5c:10:c0:ad:60:02:c9:8e:04:90:a7:3b:d7:65:b4: 58:70:66:3b:74:4c:58:0b:c7:cc:15:6a:8f:16:13: 2b:06:05:a5:5f:ba:1b:ba:d6:36:34:7f:be:fd:af: ad:42:04:53:e3:e1:db:75:51:5d:38:22:90:aa:4b: 32:5a:fb:47:8a:f3:74:7c:e4:e0:64:df:f2:ea:a2: f1:f4:66:c6:c6:b3:ad:35:ff:36:be:17:d4:31:a5: f7:a5:ba:70:7e:04:5b:83:96:96:a9:5d:09:35:21: 71:6b:a0:0f:34:7b:f4:47:03:f4:03:0f:2a:8b:97: 31:b3:1c:fe:03:6e:26:73:7d:cc:08:60:aa:3d:ca: 37:e8:79:7e:b8:7d:ae:da:6d:7d:46:23:7f:fe:23: 60:f1:4c:16:c6:98:f5:a3:01:58:74:ea:40:f8:aa: 50:1b:cc:4e:d1:43:51:d4:ae:07:69:f9:58:29:d6: 8b:ff:dc:8f:f7:70:db:59:0d:f8:75:b4:07:49:14: 69:97:af:51:96:43:e1:ea:b2:c8:86:72:ce:b0:af: 68:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6B:AF:53:59:3D:BE:BA:FD:20:AC:18:BE:AC:8E:C4:84:5D:23:1B X509v3 Authority Key Identifier: keyid:DC:34:ED:8D:E5:4B:D2:FA:BE:03:A2:7A:E8:FF:76:59:60:6B:65:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:86:58:f3:fb:ec:ff:bc:20:2a:cb:85:c0:57:56:ac:ba:0e: 09:0e:95:16:1c:b8:f3:44:11:a3:84:e4:34:f0:86:96:77:83: e8:ed:21:00:2f:c7:34:6b:2a:a7:ed:4b:7b:59:d1:ed:d3:19: 81:3c:67:2b:6c:d2:3c:af:2d:6d:bb:9f:01:6f:92:09:bb:21: ea:b8:60:e9:0a:ca:f7:29:c4:53:7c:04:b5:52:30:b6:b9:27: 8b:b6:54:b9:59:fc:9a:48:f5:64:6a:57:9b:79:c6:c3:20:3e: 81:68:58:7a:67:e5:5d:ed:39:cc:4f:2f:8b:8a:62:b6:5c:90: 03:e5:a4:f6:43:2e:98:63:06:28:ce:f9:c5:d2:cc:1b:49:bd: cd:9e:0b:1e:46:42:e4:84:a1:fa:67:d7:21:f2:44:ea:9f:73: e4:5c:d9:ce:d4:82:09:d5:34:18:7e:b7:8c:b6:c7:fb:82:83: 97:b0:6f:c9:f3:7b:74:a4:0d:da:af:4c:3b:34:bf:cc:2e:21: 04:c5:fa:d2:a5:54:9b:34:3f:07:2e:2a:9e:d2:bc:96:d0:a1: ff:2e:51:31:cd:83:0d:56:54:4e:bd:84:eb:e0:86:9a:3e:ec: a8:cd:bb:79:79:16:37:71:bf:d0:f0:37:8a:6f:8e:16:51:d3: 0d:93:47:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL8SeaA8V3630ljWzcDhDs4bsMHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEVEOERFNTRCRDJGQUJFMDNBMjdBRThGRjc2NTk2 MDZCNjU0MjAeFw0yNTA0MjQyMzQzMjVaFw0yNTA0MjUyMzUyMjVaMDMxMTAvBgNV BAMTKEFGNkJBRjUzNTkzREJFQkFGRDIwQUMxOEJFQUM4RUM0ODQ1RDIzMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZA5WFAGUF+XM5q5teXAuC2aS bXt8Uwrv2AOEEiXelRAbxrFGBbbHLuyaCVwQwK1gAsmOBJCnO9dltFhwZjt0TFgL x8wVao8WEysGBaVfuhu61jY0f779r61CBFPj4dt1UV04IpCqSzJa+0eK83R85OBk 3/LqovH0ZsbGs601/za+F9QxpfelunB+BFuDlpapXQk1IXFroA80e/RHA/QDDyqL lzGzHP4DbiZzfcwIYKo9yjfoeX64fa7abX1GI3/+I2DxTBbGmPWjAVh06kD4qlAb zE7RQ1HUrgdp+Vgp1ov/3I/3cNtZDfh1tAdJFGmXr1GWQ+HqssiGcs6wr2iZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUr2uvU1k9vrr9IKwYvqyOxIRdIxswHwYDVR0j BBgwFoAU3DTtjeVL0vq+A6J66P92WWBrZUIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkz Q2kvMS9EQzM0RUQ4REU1NEJEMkZBQkUwM0EyN0FFOEZGNzY1OTYwNkI2NTQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMzRFRDhERTU0QkQyRkFC RTAzQTI3QUU4RkY3NjU5NjA2QjY1NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkzQ2kvMS9E QzM0RUQ4REU1NEJEMkZBQkUwM0EyN0FFOEZGNzY1OTYwNkI2NTQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKoZY8/vs/7wgKsuFwFdWrLoOCQ6VFhy480QRo4TkNPCGlneD6O0hAC/HNGsq p+1Le1nR7dMZgTxnK2zSPK8tbbufAW+SCbsh6rhg6QrK9ynEU3wEtVIwtrkni7ZU uVn8mkj1ZGpXm3nGwyA+gWhYemflXe05zE8vi4pitlyQA+Wk9kMumGMGKM75xdLM G0m9zZ4LHkZC5ISh+mfXIfJE6p9z5FzZztSCCdU0GH63jLbH+4KDl7BvyfN7dKQN 2q9MOzS/zC4hBMX60qVUmzQ/By4qntK8ltCh/y5RMc2DDVZUTr2E6+CGmj7sqM27 eXkWN3G/0PA3im+OFlHTDZNHtw== -----END CERTIFICATE-----Generated at Fri Apr 25 03:46:20 2025 by rpki-client on console.sobornost.net