$ rpki-client -vvf rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.mft File: AC469298E4E56983439AA441B4B6CAFBB04F8F28.mft (raw, json) Hash identifier: 3xWRLvuwyVsD1RG1KSnGg8WmTeYtx1etTZrzE6QnSEM= Subject key identifier: 2A:68:5A:22:EC:C8:19:05:39:DD:D6:98:AF:64:97:59:8F:FB:D6:D6 Authority key identifier: AC:46:92:98:E4:E5:69:83:43:9A:A4:41:B4:B6:CA:FB:B0:4F:8F:28 Certificate issuer: /CN=AC469298E4E56983439AA441B4B6CAFBB04F8F28 Certificate serial: 737F3BD9F0595DD0614B95D4F974BD155EC9C8BE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.cer Subject info access: rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.mft Manifest number: 0209 Signing time: Mon 28 Apr 2025 11:19:28 +0000 Manifest this update: Mon 28 Apr 2025 11:14:28 +0000 Manifest next update: Tue 29 Apr 2025 11:35:28 +0000 Files and hashes: 1: AC469298E4E56983439AA441B4B6CAFBB04F8F28.crl (hash: 42e2aLNZquFRXLwkWNU76BfGyjruiy6W7hHiEOtpyyk=) 2: 323830343a353138383a3a2f33322d3334203d3e20323638343538.roa (hash: Mv+OZ01O49zIHJJDesHD7xJ/KwQyTUDir7uCnjI9KHQ=) 3: 34352e3136312e3130302e302f32322d3234203d3e20323638343538.roa (hash: NqLcgKbfzAfsmZNI+XUfpxZJPzuSbfOui/lTDMEpzng=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.crl rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 11:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:7f:3b:d9:f0:59:5d:d0:61:4b:95:d4:f9:74:bd:15:5e:c9:c8:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC469298E4E56983439AA441B4B6CAFBB04F8F28 Validity Not Before: Apr 28 11:14:28 2025 GMT Not After : Apr 29 11:35:28 2025 GMT Subject: CN=2A685A22ECC8190539DDD698AF6497598FFBD6D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cd:19:31:9e:79:0c:e0:71:2d:c1:83:0f:fc: 2d:99:ca:5e:cc:76:e5:79:69:58:ab:6d:7a:42:84: 0b:9c:78:5b:94:c5:c5:cf:ff:42:2a:7d:c7:26:0f: 2a:2f:b5:ce:37:29:3b:67:48:d3:b9:e9:32:80:7b: da:8a:6f:6c:89:20:e7:53:dd:33:04:b3:dc:48:4d: 47:e8:32:e1:98:23:14:0b:63:10:22:07:46:94:e1: 7b:57:22:3f:70:0b:71:06:28:c2:59:e4:c5:ca:6d: b0:aa:32:fd:13:95:02:a7:d7:8f:62:c6:21:8e:56: 06:15:9a:8a:a9:a8:e0:c6:38:78:6c:f4:76:d5:7c: 2a:ab:57:1b:b1:02:da:b2:7d:47:6c:b9:df:4b:8c: 36:1a:f9:8d:42:f6:be:86:97:29:03:4e:64:28:d7: 0d:04:60:4b:9a:e4:c1:4b:ef:30:02:42:35:6c:1a: 77:57:8a:b6:cf:b5:8b:0c:13:1d:e5:35:52:4a:56: 4e:38:c5:db:8e:27:1a:d4:de:ed:f3:76:f0:86:8f: 18:97:44:47:2a:be:a4:a9:dc:0c:7a:c7:14:87:8f: 26:3b:fe:c5:e8:7c:12:b1:67:ab:18:99:fb:9b:fb: 02:c5:81:8c:b7:59:23:9a:7d:24:73:85:10:4b:17: dd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:68:5A:22:EC:C8:19:05:39:DD:D6:98:AF:64:97:59:8F:FB:D6:D6 X509v3 Authority Key Identifier: keyid:AC:46:92:98:E4:E5:69:83:43:9A:A4:41:B4:B6:CA:FB:B0:4F:8F:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:68:b6:10:01:84:c3:6b:fe:87:6e:69:16:75:06:87:b5:a1: 8e:2b:57:d4:93:f3:15:c5:31:35:0e:62:ef:28:0f:d5:60:1b: 6d:5e:0a:36:d3:b1:c4:dc:a4:1c:86:09:93:90:ab:29:7b:91: cd:ba:74:8a:04:c1:10:72:8b:01:73:96:c2:ee:1d:cd:7b:d4: 00:24:54:7a:bb:eb:4d:18:96:eb:fd:aa:a9:32:6d:07:69:69: 33:ac:a3:c1:fd:c1:34:25:c2:5d:01:7d:20:ad:6c:51:35:7e: de:3f:3e:bc:83:2e:1f:63:cb:cd:d8:70:d5:97:ee:6b:0d:6a: 3d:86:b5:cd:5b:d4:a1:3e:48:1f:ee:3e:9c:2e:8d:f3:b5:0d: 70:7f:fd:9e:8f:fe:1a:8d:62:4b:d3:f6:ad:7b:2b:f0:23:6a: 78:65:12:fa:3e:e8:f9:b5:92:e7:a2:0f:98:73:27:01:d5:03: a7:7d:a5:fd:9e:43:bd:77:13:27:97:76:6c:58:ad:92:9f:a4: 33:2a:95:7f:be:e0:43:66:5f:4b:12:04:82:02:fe:4f:52:e4: 43:5a:4e:95:dc:b4:2c:1c:83:b8:ad:44:f1:de:b1:91:c2:02: 59:f3:17:2f:c1:75:79:b4:b9:82:97:24:a6:82:a7:22:a9:c3: 31:10:c7:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc3872fBZXdBhS5XU+XS9FV7JyL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM0NjkyOThFNEU1Njk4MzQzOUFBNDQxQjRCNkNBRkJC MDRGOEYyODAeFw0yNTA0MjgxMTE0MjhaFw0yNTA0MjkxMTM1MjhaMDMxMTAvBgNV BAMTKDJBNjg1QTIyRUNDODE5MDUzOURERDY5OEFGNjQ5NzU5OEZGQkQ2RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzRkxnnkM4HEtwYMP/C2Zyl7M duV5aVirbXpChAuceFuUxcXP/0IqfccmDyovtc43KTtnSNO56TKAe9qKb2yJIOdT 3TMEs9xITUfoMuGYIxQLYxAiB0aU4XtXIj9wC3EGKMJZ5MXKbbCqMv0TlQKn149i xiGOVgYVmoqpqODGOHhs9HbVfCqrVxuxAtqyfUdsud9LjDYa+Y1C9r6GlykDTmQo 1w0EYEua5MFL7zACQjVsGndXirbPtYsMEx3lNVJKVk44xduOJxrU3u3zdvCGjxiX REcqvqSp3Ax6xxSHjyY7/sXofBKxZ6sYmfub+wLFgYy3WSOafSRzhRBLF93xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKmhaIuzIGQU53daYr2SXWY/71tYwHwYDVR0j BBgwFoAUrEaSmOTlaYNDmqRBtLbK+7BPjygwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXFyUHdqS2VVc1cxZHk0WERCWk1kWTdXU0w3UTNOM3RuSHhtOTFUY3RZ QkMvMS9BQzQ2OTI5OEU0RTU2OTgzNDM5QUE0NDFCNEI2Q0FGQkIwNEY4RjI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDNDY5Mjk4RTRFNTY5ODM0 MzlBQTQ0MUI0QjZDQUZCQjA0RjhGMjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OXFyUHdqS2VVc1cxZHk0WERCWk1kWTdXU0w3UTNOM3RuSHhtOTFUY3RZQkMvMS9B QzQ2OTI5OEU0RTU2OTgzNDM5QUE0NDFCNEI2Q0FGQkIwNEY4RjI4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABGi2EAGEw2v+h25pFnUGh7WhjitX1JPzFcUxNQ5i7ygP1WAbbV4KNtOxxNyk HIYJk5CrKXuRzbp0igTBEHKLAXOWwu4dzXvUACRUervrTRiW6/2qqTJtB2lpM6yj wf3BNCXCXQF9IK1sUTV+3j8+vIMuH2PLzdhw1Zfuaw1qPYa1zVvUoT5IH+4+nC6N 87UNcH/9no/+Go1iS9P2rXsr8CNqeGUS+j7o+bWS56IPmHMnAdUDp32l/Z5DvXcT J5d2bFitkp+kMyqVf77gQ2ZfSxIEggL+T1LkQ1pOldy0LByDuK1E8d6xkcICWfMX L8F1ebS5gpckpoKnIqnDMRDHNg== -----END CERTIFICATE-----Generated at Mon Apr 28 13:04:57 2025 by rpki-client on console.sobornost.net