$ rpki-client -vvf rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.mft File: 09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.mft (raw, json) Hash identifier: J+b7fFkA8JS83rXkhTfC16o8uk6hhC8kA+DvFZul3Cw= Subject key identifier: 9C:56:6D:64:04:16:12:19:90:EE:C2:FA:7B:EB:6F:97:11:57:EA:EC Authority key identifier: 09:D2:BD:A1:1F:5F:30:E7:2C:A0:2E:1F:43:CC:EB:58:3E:00:71:A3 Certificate issuer: /CN=09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3 Certificate serial: 30AE87484D743AF36E3AB2214B58D15D8EC75C7A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.mft Manifest number: 01AF Signing time: Thu 20 Feb 2025 00:03:45 +0000 Manifest this update: Wed 19 Feb 2025 23:58:45 +0000 Manifest next update: Fri 21 Feb 2025 02:54:45 +0000 Files and hashes: 1: 09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.crl (hash: 2/Sl5WawrD2BzpID8AeDDikSnRMKMQQ/UwN1gMDveQ0=) 2: 3137302e38322e3136342e302f32322d3234203d3e203532363730.roa (hash: Lcr6WgrPYpmxY4afXWgfP+7OOQAa+Z34RvH72vfxh0s=) 3: 323830343a313132303a3a2f33322d3334203d3e203532363730.roa (hash: 4/hUPCejGXEr3H6ud3OZea74hY+DXNudHVxfiJEvBVo=) 4: 3137372e36372e3138342e302f32312d3234203d3e203532363730.roa (hash: eN6l4W1aibNbdKMLULpBJiMfbRnSbGbysLtr4ND0OqE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.crl rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 22:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ae:87:48:4d:74:3a:f3:6e:3a:b2:21:4b:58:d1:5d:8e:c7:5c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3 Validity Not Before: Feb 19 23:58:45 2025 GMT Not After : Feb 21 02:54:45 2025 GMT Subject: CN=9C566D640416121990EEC2FA7BEB6F971157EAEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:01:9f:df:d1:7d:51:53:22:f4:76:95:8c:bc: 97:2f:c8:f2:2b:47:e3:18:8f:83:d7:ed:a2:33:d7: 5a:d5:f3:b7:eb:13:62:a0:09:ef:10:36:19:45:0e: 6e:be:eb:da:ea:f7:80:38:de:28:8b:e7:b9:31:29: 1f:73:af:12:46:c2:37:09:2c:82:e9:91:8d:2c:74: d3:ab:24:a9:44:5e:7d:8f:ca:ba:dd:18:e9:13:a8: 74:fc:93:95:7e:7e:e0:ed:80:93:dc:4c:97:c7:b7: 62:a6:5b:72:e2:d9:14:25:a9:a2:0e:ee:c3:60:84: b6:43:86:11:9e:12:2b:af:0a:41:e0:9c:fc:49:b5: 28:fa:a3:20:46:86:12:2a:2f:c7:f6:b2:5b:de:bf: 73:47:d1:0d:31:cb:d0:99:80:dd:ae:1e:bd:94:aa: fe:1f:ec:8b:63:a5:ea:55:b6:a2:f7:9f:c0:23:3d: ca:e8:76:e1:9e:48:93:31:d6:00:07:0c:d4:43:18: db:f7:97:e1:58:6e:09:76:72:0f:cd:e3:00:e3:43: f4:ec:87:5b:f4:f3:a8:fe:d5:72:12:3b:b3:7e:e0: f0:c3:2f:a4:fd:02:0a:45:ef:71:03:9b:d3:91:52: 42:50:11:09:94:df:a4:ee:9f:59:07:8b:e6:6f:96: 81:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:56:6D:64:04:16:12:19:90:EE:C2:FA:7B:EB:6F:97:11:57:EA:EC X509v3 Authority Key Identifier: keyid:09:D2:BD:A1:1F:5F:30:E7:2C:A0:2E:1F:43:CC:EB:58:3E:00:71:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/APWuTEFksSNxdrAY9C7gE74ktMMvhoeSaas3CevjAEFa/1/09D2BDA11F5F30E72CA02E1F43CCEB583E0071A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:9c:98:a0:c2:66:a4:29:a0:dd:b5:03:0e:ce:c3:63:91:30: cc:6b:af:c7:78:04:5a:d2:b3:78:8f:6c:ed:2d:38:94:90:c9: cc:8f:c6:6d:f1:f9:ae:2d:8f:20:52:ca:4e:4e:09:de:b7:dc: 08:96:fe:5a:a0:5f:f6:01:de:8c:11:fe:43:a9:8c:4f:98:f4: 66:79:d8:4b:02:65:8e:d1:87:f0:9c:81:e3:35:c9:54:1b:53: de:e8:d5:97:ec:8f:2d:a1:55:32:fe:77:b8:e7:a7:3a:26:60: a5:b8:4d:df:2b:ca:ea:83:b7:db:1c:9f:60:6d:22:82:6d:cf: 0a:32:dd:aa:70:19:ac:f7:c2:48:d7:4b:d2:ce:08:ea:ca:79: 3d:db:7f:f5:00:a5:a3:08:93:97:ca:24:c7:17:4d:b0:98:78: 84:ec:40:70:93:a4:f6:b5:ac:51:ca:bf:30:56:f2:49:f8:83: a6:6e:5b:b6:5c:b2:bb:6b:b6:38:1b:9a:1a:e2:24:86:29:c4: 61:ab:16:ba:fc:df:5a:5a:74:6d:b4:6b:19:8b:9a:60:cd:8a: f9:3d:50:59:36:e2:72:00:2b:96:be:15:1a:4f:79:c9:4a:f0: 49:ce:54:19:69:d8:61:50:ab:1c:eb:29:66:92:af:4a:ca:dc: c9:0a:80:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMK6HSE10OvNuOrIhS1jRXY7HXHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlEMkJEQTExRjVGMzBFNzJDQTAyRTFGNDNDQ0VCNTgz RTAwNzFBMzAeFw0yNTAyMTkyMzU4NDVaFw0yNTAyMjEwMjU0NDVaMDMxMTAvBgNV BAMTKDlDNTY2RDY0MDQxNjEyMTk5MEVFQzJGQTdCRUI2Rjk3MTE1N0VBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6AZ/f0X1RUyL0dpWMvJcvyPIr R+MYj4PX7aIz11rV87frE2KgCe8QNhlFDm6+69rq94A43iiL57kxKR9zrxJGwjcJ LILpkY0sdNOrJKlEXn2PyrrdGOkTqHT8k5V+fuDtgJPcTJfHt2KmW3Li2RQlqaIO 7sNghLZDhhGeEiuvCkHgnPxJtSj6oyBGhhIqL8f2slvev3NH0Q0xy9CZgN2uHr2U qv4f7ItjpepVtqL3n8AjPcroduGeSJMx1gAHDNRDGNv3l+FYbgl2cg/N4wDjQ/Ts h1v086j+1XISO7N+4PDDL6T9AgpF73EDm9ORUkJQEQmU36Tun1kHi+ZvloFTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnFZtZAQWEhmQ7sL6e+tvlxFX6uwwHwYDVR0j BBgwFoAUCdK9oR9fMOcsoC4fQ8zrWD4AcaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVBXdVRFRmtzU054ZHJBWTlDN2dFNzRrdE1NdmhvZVNhYXMzQ2V2akFF RmEvMS8wOUQyQkRBMTFGNUYzMEU3MkNBMDJFMUY0M0NDRUI1ODNFMDA3MUEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RDJCREExMUY1RjMwRTcy Q0EwMkUxRjQzQ0NFQjU4M0UwMDcxQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVBXdVRFRmtzU054ZHJBWTlDN2dFNzRrdE1NdmhvZVNhYXMzQ2V2akFFRmEvMS8w OUQyQkRBMTFGNUYzMEU3MkNBMDJFMUY0M0NDRUI1ODNFMDA3MUEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAZyYoMJmpCmg3bUDDs7DY5EwzGuvx3gEWtKzeI9s7S04lJDJzI/GbfH5ri2P IFLKTk4J3rfcCJb+WqBf9gHejBH+Q6mMT5j0ZnnYSwJljtGH8JyB4zXJVBtT3ujV l+yPLaFVMv53uOenOiZgpbhN3yvK6oO32xyfYG0igm3PCjLdqnAZrPfCSNdL0s4I 6sp5Pdt/9QClowiTl8okxxdNsJh4hOxAcJOk9rWsUcq/MFbySfiDpm5btlyyu2u2 OBuaGuIkhinEYasWuvzfWlp0bbRrGYuaYM2K+T1QWTbicgArlr4VGk95yUrwSc5U GWnYYVCrHOspZpKvSsrcyQqAqA== -----END CERTIFICATE-----Generated at Thu Feb 20 03:27:21 2025 by rpki-client on console.sobornost.net