$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft File: AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json) Hash identifier: 8xY5ekVHwUMZEhmQ2nrM6VQSFi/+ls5HD9266cnLwM0= Subject key identifier: BF:34:8E:25:75:4B:1F:19:DB:1C:BE:A0:D0:BF:6A:33:2F:25:05:B9 Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Certificate serial: 73BE31C3A05E835581F6C8C6C3899CCDB1836664 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft Manifest number: 0208 Signing time: Sun 27 Apr 2025 17:30:00 +0000 Manifest this update: Sun 27 Apr 2025 17:25:00 +0000 Manifest next update: Mon 28 Apr 2025 20:12:00 +0000 Files and hashes: 1: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: n+2TBTOHTVqlTeZy1PU15qn+GtMX5cp0sE0gbp6qH0k=) 2: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: XrgPqt2d+yXrgA5qVsA3hVOyOYJP6pNSPVOYcSw37As=) 3: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: G+9fnKDKYzXcNVDiQbyVgNQLvfSyrAWnEylFjOb1cKM=) 4: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: JHU7hFLVcz7KCri5GGmgpJSrExwyJApMd1LcVi/3ahc=) 5: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: g+h7ZeJQoiwltb4pTrWxNjM0uMiKUgQuoMSR90spDQE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 20:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:be:31:c3:a0:5e:83:55:81:f6:c8:c6:c3:89:9c:cd:b1:83:66:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Validity Not Before: Apr 27 17:25:00 2025 GMT Not After : Apr 28 20:12:00 2025 GMT Subject: CN=BF348E25754B1F19DB1CBEA0D0BF6A332F2505B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e1:88:cb:92:a4:72:da:63:c4:a7:cf:72:18: e8:56:ad:c5:94:32:ad:9c:79:25:e9:ce:92:15:c4: 36:72:ab:2b:63:06:a5:ef:f4:5a:13:a7:f3:0a:dc: 6f:37:81:c3:97:93:b7:c4:c6:ac:19:20:43:8d:2e: 08:8d:60:b4:34:6b:c3:23:6a:9a:cb:b3:e3:a9:2b: f1:d9:21:57:44:00:00:55:20:c6:95:0b:8f:81:3f: 1c:c6:b3:be:36:b1:b1:a3:e1:a8:e7:6a:14:11:2d: cb:f8:59:68:00:13:8d:a0:c9:d6:ac:2a:22:ae:b3: f3:69:3f:79:46:7d:8c:1c:dc:bd:7a:5c:9e:b1:90: a6:87:52:be:a0:ce:7f:6b:b9:b8:6d:d6:d7:48:f9: 53:ce:ab:e9:6a:8a:ce:ed:71:b2:37:1d:48:20:a6: d2:14:c7:db:51:b9:3f:33:e7:8e:11:31:ba:ec:cc: 13:0b:bc:ea:2a:f5:0a:a8:32:9b:6f:a1:f5:21:1f: 13:45:47:3d:91:c4:20:f9:b3:7a:dc:c6:24:e1:72: 87:00:a9:20:a4:8a:a9:21:40:f8:a1:55:f3:b4:0b: ca:ad:92:db:5f:60:e1:b2:ea:6e:2b:ac:f1:05:64: 52:e3:1c:0e:ea:e1:89:ec:86:98:9c:13:59:de:29: 03:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:34:8E:25:75:4B:1F:19:DB:1C:BE:A0:D0:BF:6A:33:2F:25:05:B9 X509v3 Authority Key Identifier: keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:2c:0e:fa:65:03:4f:b2:ff:6f:b1:0d:86:b8:9f:cd:a3:6e: ff:b7:db:c0:68:09:10:14:b0:3a:59:95:13:e9:06:9e:2c:80: 04:50:bb:33:37:d3:52:97:77:20:3c:ab:d5:02:8c:25:ba:d0: 21:fd:a6:7f:58:be:d4:e0:27:09:30:8f:82:52:d5:fd:5a:44: c1:5b:74:c8:fa:ee:aa:eb:ff:d4:7a:05:5f:b5:4f:be:87:bf: c7:35:f1:0b:66:ce:ea:70:9d:95:70:4f:d3:ec:63:40:fb:0a: 9e:32:e6:e5:7c:8a:ef:06:eb:f9:0e:de:3e:19:ad:f6:6e:c1: 81:04:73:e8:8b:61:6f:b9:a3:3c:b9:2e:08:cc:9f:d1:90:41: ad:b8:3b:88:e3:d8:53:5b:79:60:86:e9:d2:c8:73:95:ac:9d: 07:5d:c9:0a:e0:fc:7d:e4:07:86:19:4e:4b:f0:6b:35:07:21: cd:11:86:17:ff:04:f6:cc:6d:08:32:ad:40:92:0f:b6:26:86: 9c:d3:a2:ec:e5:ae:2c:b1:95:ae:f1:88:b1:46:5f:4c:02:6e: 42:63:03:9a:cf:e7:55:4e:fd:64:b3:35:65:92:2c:f0:a3:44: 21:7b:67:2c:1d:54:81:ca:80:b0:c1:da:43:15:2b:6d:37:35: 21:dd:87:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc74xw6Beg1WB9sjGw4mczbGDZmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDNTI5RkIyNDNCNzc4MEEyMEIyN0EyQzRFNzNEQUY2 NUMyNTAyMTAeFw0yNTA0MjcxNzI1MDBaFw0yNTA0MjgyMDEyMDBaMDMxMTAvBgNV BAMTKEJGMzQ4RTI1NzU0QjFGMTlEQjFDQkVBMEQwQkY2QTMzMkYyNTA1QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24YjLkqRy2mPEp89yGOhWrcWU Mq2ceSXpzpIVxDZyqytjBqXv9FoTp/MK3G83gcOXk7fExqwZIEONLgiNYLQ0a8Mj aprLs+OpK/HZIVdEAABVIMaVC4+BPxzGs742sbGj4ajnahQRLcv4WWgAE42gydas KiKus/NpP3lGfYwc3L16XJ6xkKaHUr6gzn9rubht1tdI+VPOq+lqis7tcbI3HUgg ptIUx9tRuT8z544RMbrszBMLvOoq9QqoMptvofUhHxNFRz2RxCD5s3rcxiThcocA qSCkiqkhQPihVfO0C8qtkttfYOGy6m4rrPEFZFLjHA7q4YnshpicE1neKQNrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvzSOJXVLHxnbHL6g0L9qMy8lBbkwHwYDVR0j BBgwFoAUr8Up+yQ7d4CiCyeixOc9r2XCUCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQ UUIvMS9BRkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQzUyOUZCMjQzQjc3ODBB MjBCMjdBMkM0RTczREFGNjVDMjUwMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQUUIvMS9B RkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARSwO+mUDT7L/b7ENhrifzaNu/7fbwGgJEBSwOlmVE+kGniyABFC7MzfTUpd3 IDyr1QKMJbrQIf2mf1i+1OAnCTCPglLV/VpEwVt0yPruquv/1HoFX7VPvoe/xzXx C2bO6nCdlXBP0+xjQPsKnjLm5XyK7wbr+Q7ePhmt9m7BgQRz6Ithb7mjPLkuCMyf 0ZBBrbg7iOPYU1t5YIbp0shzlaydB13JCuD8feQHhhlOS/BrNQchzRGGF/8E9sxt CDKtQJIPtiaGnNOi7OWuLLGVrvGIsUZfTAJuQmMDms/nVU79ZLM1ZZIs8KNEIXtn LB1UgcqAsMHaQxUrbTc1Id2HDA== -----END CERTIFICATE-----Generated at Sun Apr 27 19:12:13 2025 by rpki-client on console.sobornost.net