$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: RnY+Y7dQG45suugPaM+PAR9WZaEiqRuFkSZ/C447YSI= Subject key identifier: DC:93:A2:81:29:1D:D3:F7:97:8D:4C:7B:0B:59:E6:6E:C5:38:B7:47 Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 3230A8E6730935867753B4C469E60796BC103257 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: DE Signing time: Mon 28 Apr 2025 07:35:35 +0000 Manifest this update: Mon 28 Apr 2025 07:30:35 +0000 Manifest next update: Tue 29 Apr 2025 07:57:35 +0000 Files and hashes: 1: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: 9uEGZyY6Xz8X7onFbB1ftsK4h3mYGl03VW+UQu+y9fw=) 2: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: KTNEcC6Y2VHqLL+qb3kt3ywe3wmftinMc6r4trZIlnw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:30:a8:e6:73:09:35:86:77:53:b4:c4:69:e6:07:96:bc:10:32:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: Apr 28 07:30:35 2025 GMT Not After : Apr 29 07:57:35 2025 GMT Subject: CN=DC93A281291DD3F7978D4C7B0B59E66EC538B747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:97:7c:86:cc:9d:c1:6d:e6:81:d5:de:6d: dc:07:0f:19:b0:f7:c7:83:90:8b:23:e5:0f:09:55: a5:89:a1:ad:ea:c1:42:bc:24:f6:08:08:26:61:ef: be:4c:9e:fa:2a:a8:0a:c5:49:5e:e8:bd:69:23:ed: 1c:32:ba:cd:49:03:18:59:17:3c:79:9f:83:1f:3d: 07:2e:7d:02:27:63:02:90:ef:97:4d:4c:3b:fe:35: 6b:6d:d3:45:e1:d0:bb:e4:66:9c:37:60:9a:15:56: 31:a1:e2:9a:63:24:91:84:ca:73:b7:7a:63:8e:14: 90:3f:8a:df:e8:11:74:fa:e3:69:28:df:8b:b9:19: 12:bf:cb:0f:d5:e1:96:d3:2c:a9:67:47:96:38:95: 80:f4:7b:b4:c5:72:1a:7e:f3:cb:3f:e0:f6:6d:22: f1:a1:ea:48:c2:8c:c9:a6:7b:ed:6a:24:0f:97:6f: 3f:e3:51:1d:e3:73:d5:17:ea:ce:99:e7:62:21:e0: 1e:75:74:b6:0d:54:89:f0:d5:4d:33:fa:d1:8d:70: 94:db:fe:2b:d4:7a:51:d5:57:a9:10:43:12:2b:dd: 5a:88:92:d0:65:0a:2a:12:94:1e:99:d8:c6:81:83: d8:32:76:47:47:c1:eb:70:2d:82:2a:82:ce:2d:03: e9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:93:A2:81:29:1D:D3:F7:97:8D:4C:7B:0B:59:E6:6E:C5:38:B7:47 X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a6:db:e6:00:34:95:e3:1c:e3:96:16:28:b5:c6:dc:af:51: 77:79:bc:4d:33:89:e7:ac:58:32:a0:79:43:27:e5:16:bd:6b: 02:b7:60:8e:b1:c2:2b:5a:36:46:10:49:bd:33:f2:21:d4:94: b6:75:7e:e0:6c:fb:a7:28:12:c3:78:b6:35:7e:9a:a6:d6:be: 67:66:b6:19:06:e1:ff:93:39:d7:d6:90:5e:ba:93:a9:58:bc: ea:13:56:3c:0a:0e:ef:99:f3:9f:1f:94:8a:7b:11:67:68:8a: a4:c7:3d:3f:df:ab:e5:61:70:a0:88:24:0b:06:45:b3:8e:7e: 78:d3:28:f8:e3:e0:04:5f:b6:cd:be:15:9f:66:65:b5:28:67: e4:0f:c1:44:d8:27:c9:94:84:7a:92:76:4c:0e:75:34:b3:98: 24:71:00:78:4a:77:e2:69:fe:66:41:21:b0:e8:71:f4:df:28: fd:a3:83:85:a5:3a:6d:d7:f3:4a:30:8c:42:97:0a:36:2f:c6: b3:71:94:3e:b9:25:57:ec:33:d2:e8:7f:ba:e3:4e:ae:0b:35: 70:77:67:bf:42:ce:ac:b5:9d:e8:cf:21:61:a3:b4:cb:97:89: fe:d9:62:66:01:53:e6:e0:b7:1d:17:ad:c3:da:29:2d:16:d2: 4c:13:25:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMjCo5nMJNYZ3U7TEaeYHlrwQMlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNTA0MjgwNzMwMzVaFw0yNTA0MjkwNzU3MzVaMDMxMTAvBgNV BAMTKERDOTNBMjgxMjkxREQzRjc5NzhENEM3QjBCNTlFNjZFQzUzOEI3NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Zpd8hsydwW3mgdXebdwHDxmw 98eDkIsj5Q8JVaWJoa3qwUK8JPYICCZh775MnvoqqArFSV7ovWkj7Rwyus1JAxhZ Fzx5n4MfPQcufQInYwKQ75dNTDv+NWtt00Xh0LvkZpw3YJoVVjGh4ppjJJGEynO3 emOOFJA/it/oEXT642ko34u5GRK/yw/V4ZbTLKlnR5Y4lYD0e7TFchp+88s/4PZt IvGh6kjCjMmme+1qJA+Xbz/jUR3jc9UX6s6Z52Ih4B51dLYNVInw1U0z+tGNcJTb /ivUelHVV6kQQxIr3VqIktBlCioSlB6Z2MaBg9gydkdHwetwLYIqgs4tA+mLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3JOigSkd0/eXjUx7C1nmbsU4t0cwHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARqbb5gA0leMc45YWKLXG3K9Rd3m8TTOJ56xYMqB5QyflFr1rArdgjrHCK1o2 RhBJvTPyIdSUtnV+4Gz7pygSw3i2NX6apta+Z2a2GQbh/5M519aQXrqTqVi86hNW PAoO75nznx+UinsRZ2iKpMc9P9+r5WFwoIgkCwZFs45+eNMo+OPgBF+2zb4Vn2Zl tShn5A/BRNgnyZSEepJ2TA51NLOYJHEAeEp34mn+ZkEhsOhx9N8o/aODhaU6bdfz SjCMQpcKNi/Gs3GUPrklV+wz0uh/uuNOrgs1cHdnv0LOrLWd6M8hYaO0y5eJ/tli ZgFT5uC3HRetw9opLRbSTBMlNg== -----END CERTIFICATE-----Generated at Mon Apr 28 10:49:27 2025 by rpki-client on console.sobornost.net