$ rpki-client -vvf rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.mft File: 2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.mft (raw, json) Hash identifier: +wJtx6xpjGsNKChTpGWSrWd3jIsH65aMdPlXqsbCDpQ= Subject key identifier: 63:39:F2:77:8C:2C:BE:BC:54:66:96:B2:62:E5:0A:DB:CB:0E:51:B8 Authority key identifier: 2A:FE:E5:7C:CE:63:B2:1A:54:9A:CB:85:F8:45:EE:E4:DF:F9:A1:C9 Certificate issuer: /CN=2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9 Certificate serial: 24B8C0ADA6625733C411E31CC7743E8F96B08E86 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.cer Subject info access: rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.mft Manifest number: 01B4 Signing time: Thu 24 Apr 2025 08:52:45 +0000 Manifest this update: Thu 24 Apr 2025 08:47:45 +0000 Manifest next update: Fri 25 Apr 2025 09:59:45 +0000 Files and hashes: 1: 323830343a336162633a3a2f33322d3333203d3e20323636313036.roa (hash: FkDWM8ekj2MFpQZk00KWqniHh8Esq0ZNl7n1b93nHyI=) 2: 34352e352e3230302e302f32322d3233203d3e20323636313036.roa (hash: 1WFpWLWvvFfErwVnHx6Cu7+8+HdOBRUFV1xWAQCwgw4=) 3: 2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.crl (hash: zFJK8MGasi6IshU9i7V1RN7+W7mESYdPTa5yOouww0g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.crl rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 09:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b8:c0:ad:a6:62:57:33:c4:11:e3:1c:c7:74:3e:8f:96:b0:8e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9 Validity Not Before: Apr 24 08:47:45 2025 GMT Not After : Apr 25 09:59:45 2025 GMT Subject: CN=6339F2778C2CBEBC546696B262E50ADBCB0E51B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:32:53:7d:5b:cf:77:f0:f2:90:bc:e2:4e:53: 43:1d:a4:83:c3:d2:a2:41:3c:f5:9d:90:59:24:67: a8:94:39:18:3d:5b:45:61:33:39:65:fc:03:77:2d: 1a:99:0b:cd:61:ad:02:3e:85:03:71:c6:d9:98:a8: f5:c1:e7:aa:21:db:34:e0:63:68:46:52:e1:f7:ec: 04:19:a6:6e:79:e4:ab:35:62:65:5b:24:c3:43:26: 35:a6:15:38:ea:b2:5b:35:38:e3:44:3a:31:5c:58: 39:8f:bd:2c:01:b5:41:c9:8b:96:06:66:0d:a6:cc: f0:04:19:91:fd:1f:4d:41:49:a4:57:f8:49:4d:6f: 57:0d:8f:df:19:9a:17:6c:2b:a8:ed:0f:87:d7:62: 26:86:3f:85:56:ce:5b:e9:38:16:14:7f:c1:20:3c: bc:a2:cc:6f:6f:a2:c9:59:5f:05:23:c9:32:76:b2: 0a:89:57:22:b4:01:cf:88:67:28:61:0f:aa:ae:82: 0e:83:a3:81:a6:e8:c0:95:15:fe:26:cd:8a:d1:6c: eb:16:3f:8b:7b:15:98:4d:5a:72:bd:f6:f7:a3:22: fb:4d:4d:0e:dd:6b:0c:84:88:cf:6e:89:25:8e:b3: f8:03:c0:0a:e7:a8:38:5c:16:fb:2b:aa:b5:b0:0c: 11:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:39:F2:77:8C:2C:BE:BC:54:66:96:B2:62:E5:0A:DB:CB:0E:51:B8 X509v3 Authority Key Identifier: keyid:2A:FE:E5:7C:CE:63:B2:1A:54:9A:CB:85:F8:45:EE:E4:DF:F9:A1:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2e:9b:b6:c0:01:29:73:46:3f:3b:b4:a4:6c:43:3a:d2:b6: 3c:49:b1:4b:dd:c0:bc:c9:42:7d:06:cc:b2:32:f2:14:1d:88: 24:87:86:8c:c7:e8:c1:a8:21:69:92:d1:66:8c:56:2a:a6:53: 97:c8:96:30:36:49:0b:36:b9:92:ae:e5:a1:7a:fb:ab:b7:38: b5:76:d8:6b:64:83:b3:bb:7b:5a:6b:46:a4:28:78:cb:03:b8: 55:83:8e:46:e5:ff:72:75:69:17:79:fc:26:0f:7b:70:c8:06: c2:3f:e5:ce:2a:7a:0d:d6:44:30:74:a3:77:1b:df:54:b2:2b: 17:7a:ba:02:10:dc:2e:4f:93:6c:b2:f6:9c:ae:15:ea:f1:f7: 99:db:8d:aa:13:8d:e0:d4:c9:44:a5:8b:0e:82:d0:b0:f4:79: 85:6c:79:62:f6:45:e4:28:de:4c:96:8e:47:02:e1:0c:11:08: 67:49:0a:ac:3f:64:33:96:74:56:0e:b0:ef:31:72:19:da:39: be:71:f3:4f:92:c2:b1:6c:fe:99:77:28:64:d3:93:34:2a:86: de:2c:a6:f2:a4:b0:34:8c:c5:43:f3:b9:c1:3c:e5:cc:ec:78: d3:92:99:a7:25:65:8b:f0:57:7e:3e:1c:03:98:15:e1:83:e8: 31:4b:8d:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJLjAraZiVzPEEeMcx3Q+j5awjoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGRUU1N0NDRTYzQjIxQTU0OUFDQjg1Rjg0NUVFRTRE RkY5QTFDOTAeFw0yNTA0MjQwODQ3NDVaFw0yNTA0MjUwOTU5NDVaMDMxMTAvBgNV BAMTKDYzMzlGMjc3OEMyQ0JFQkM1NDY2OTZCMjYyRTUwQURCQ0IwRTUxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJMlN9W8938PKQvOJOU0MdpIPD 0qJBPPWdkFkkZ6iUORg9W0VhMzll/AN3LRqZC81hrQI+hQNxxtmYqPXB56oh2zTg Y2hGUuH37AQZpm555Ks1YmVbJMNDJjWmFTjqsls1OONEOjFcWDmPvSwBtUHJi5YG Zg2mzPAEGZH9H01BSaRX+ElNb1cNj98ZmhdsK6jtD4fXYiaGP4VWzlvpOBYUf8Eg PLyizG9voslZXwUjyTJ2sgqJVyK0Ac+IZyhhD6qugg6Do4Gm6MCVFf4mzYrRbOsW P4t7FZhNWnK99vejIvtNTQ7dawyEiM9uiSWOs/gDwArnqDhcFvsrqrWwDBGxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYznyd4wsvrxUZpayYuUK28sOUbgwHwYDVR0j BBgwFoAUKv7lfM5jshpUmsuF+EXu5N/5ockwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXUxNnJaa1ZNVHRTQ1Y2OFpRRjJENWhyMWpwTnlqOVVCZ21UYUs2ZWNZ NXAvMC8yQUZFRTU3Q0NFNjNCMjFBNTQ5QUNCODVGODQ1RUVFNERGRjlBMUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBRkVFNTdDQ0U2M0IyMUE1 NDlBQ0I4NUY4NDVFRUU0REZGOUExQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXUxNnJaa1ZNVHRTQ1Y2OFpRRjJENWhyMWpwTnlqOVVCZ21UYUs2ZWNZNXAvMC8y QUZFRTU3Q0NFNjNCMjFBNTQ5QUNCODVGODQ1RUVFNERGRjlBMUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADC6btsABKXNGPzu0pGxDOtK2PEmxS93AvMlCfQbMsjLyFB2IJIeGjMfowagh aZLRZoxWKqZTl8iWMDZJCza5kq7loXr7q7c4tXbYa2SDs7t7WmtGpCh4ywO4VYOO RuX/cnVpF3n8Jg97cMgGwj/lzip6DdZEMHSjdxvfVLIrF3q6AhDcLk+TbLL2nK4V 6vH3mduNqhON4NTJRKWLDoLQsPR5hWx5YvZF5CjeTJaORwLhDBEIZ0kKrD9kM5Z0 Vg6w7zFyGdo5vnHzT5LCsWz+mXcoZNOTNCqG3iym8qSwNIzFQ/O5wTzlzOx405KZ pyVli/BXfj4cA5gV4YPoMUuNwA== -----END CERTIFICATE-----Generated at Thu Apr 24 11:25:39 2025 by rpki-client on console.sobornost.net