$ rpki-client -vvf rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft File: 9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft (raw, json) Hash identifier: QfYdMokaS9KnfOKtTy446lqk8ODu1QbUB/fSjs2qEJk= Subject key identifier: 1A:FB:9C:C9:5E:45:2B:E2:95:CB:4B:57:5D:30:47:86:0C:F6:D5:46 Authority key identifier: 99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87 Certificate issuer: /CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87 Certificate serial: 765169C92A4C00BC091DAF5C20EB807EFF78CB83 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft Manifest number: 01F1 Signing time: Fri 25 Apr 2025 07:56:44 +0000 Manifest this update: Fri 25 Apr 2025 07:51:44 +0000 Manifest next update: Sat 26 Apr 2025 10:13:44 +0000 Files and hashes: 1: 9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl (hash: NSe1FYXjWe5ywyzR4XvsWcWqXZDFUxVnyrHoJQF0w/A=) 2: 34352e3233372e342e302f32322d3234203d3e20323638323932.roa (hash: YOvdKqb793ktG+K4voH6fVWuWoEYneOJkNY8DmbE57k=) 3: 323830343a346566303a3a2f33322d3336203d3e20323638323932.roa (hash: JzJsy650SSsFhDpBxyHj9SfH3TNilDwlyqAwmdmbW/o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Apr 2025 10:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:51:69:c9:2a:4c:00:bc:09:1d:af:5c:20:eb:80:7e:ff:78:cb:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87 Validity Not Before: Apr 25 07:51:44 2025 GMT Not After : Apr 26 10:13:44 2025 GMT Subject: CN=1AFB9CC95E452BE295CB4B575D3047860CF6D546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:55:13:28:4a:14:07:9a:95:50:12:ec:5f:ea: ae:b1:f4:a0:de:7d:2e:af:7f:83:80:bb:dc:1b:f1: 9c:da:47:01:35:f0:bf:b1:60:1d:a7:3f:3f:bc:b7: 0e:4c:80:62:b8:aa:42:b0:5b:da:d4:01:ff:8c:f0: 09:89:43:23:36:ab:1e:f9:a9:40:41:94:db:b7:c9: 08:8b:ea:73:f7:87:1a:a7:d5:6a:17:f4:6b:9a:47: 16:bb:1e:29:51:1b:7b:41:cb:6c:3c:79:ba:d7:b6: 74:fc:0b:19:50:d4:77:e4:76:15:08:7b:78:83:46: e4:c2:aa:e5:45:2e:0b:94:b3:42:d4:a7:fb:ea:6b: fb:e8:3b:9e:f1:49:6b:e5:a8:74:76:b6:3d:a1:0f: 3e:c6:4f:a8:99:2f:00:76:34:29:a3:71:44:42:e5: fd:9d:d3:1a:43:ef:72:47:07:a4:37:98:15:a5:57: f2:a2:8a:c5:7d:65:46:da:10:9f:cd:8b:1f:81:c2: c3:91:be:da:bd:a9:5b:b4:51:27:f7:d2:c4:e9:18: de:df:67:da:97:38:e1:a6:65:03:32:b6:d7:00:85: f3:a5:9d:fb:58:0b:a6:a4:24:f1:0d:38:1c:9f:c2: 94:9d:15:89:56:12:ee:c5:e6:ac:df:5e:1f:1a:22: cd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FB:9C:C9:5E:45:2B:E2:95:CB:4B:57:5D:30:47:86:0C:F6:D5:46 X509v3 Authority Key Identifier: keyid:99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:de:56:b2:1f:71:7f:e4:90:89:a2:5a:a5:6a:60:8c:be:fa: 4c:75:5a:08:c3:40:be:83:18:ba:24:73:ea:8b:a8:55:68:be: 47:7f:69:8a:61:c5:7c:5e:f6:ff:77:d1:d9:44:c8:5c:66:bc: d0:4e:b6:13:5a:45:3d:eb:2e:99:02:17:25:2b:07:8e:43:23: 06:6e:df:64:79:6d:9e:fa:b7:a1:d4:93:67:23:bf:97:b8:28: c5:ad:e5:51:1d:1a:c2:69:ed:8e:ce:31:2f:89:8b:a6:46:47: 76:54:57:4d:d5:a4:0f:a2:09:7e:18:df:fb:8f:75:71:e5:02: 5d:94:19:fb:00:04:e3:af:ba:d4:bc:d4:38:12:3d:c4:64:cd: 60:4d:71:02:fa:78:39:79:b7:18:80:9e:57:ed:b9:c2:eb:45: 85:36:d1:52:b0:65:39:00:28:e2:5f:2f:87:df:bf:8b:93:c2: ea:2d:4a:0f:37:19:e0:4f:18:7b:21:2a:5c:5b:4c:92:30:dd: d5:ae:2f:b7:20:18:db:cd:12:a3:63:28:51:3a:10:fe:6f:a2: 76:cf:b4:7b:7f:d4:c7:f6:06:0d:75:5e:67:2e:4f:ec:64:d3: 45:2e:dc:ac:d3:8c:70:74:6d:5d:58:6f:ba:44:1a:07:38:93: 85:8c:0a:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdlFpySpMALwJHa9cIOuAfv94y4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk2NUIxRTI5MzFDOTRDREEwM0NCNjNFRjNBNkNBRTMz QkMxNUU4NzAeFw0yNTA0MjUwNzUxNDRaFw0yNTA0MjYxMDEzNDRaMDMxMTAvBgNV BAMTKDFBRkI5Q0M5NUU0NTJCRTI5NUNCNEI1NzVEMzA0Nzg2MENGNkQ1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqVRMoShQHmpVQEuxf6q6x9KDe fS6vf4OAu9wb8ZzaRwE18L+xYB2nPz+8tw5MgGK4qkKwW9rUAf+M8AmJQyM2qx75 qUBBlNu3yQiL6nP3hxqn1WoX9GuaRxa7HilRG3tBy2w8ebrXtnT8CxlQ1HfkdhUI e3iDRuTCquVFLguUs0LUp/vqa/voO57xSWvlqHR2tj2hDz7GT6iZLwB2NCmjcURC 5f2d0xpD73JHB6Q3mBWlV/KiisV9ZUbaEJ/Nix+BwsORvtq9qVu0USf30sTpGN7f Z9qXOOGmZQMyttcAhfOlnftYC6akJPENOByfwpSdFYlWEu7F5qzfXh8aIs2vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGvucyV5FK+KVy0tXXTBHhgz21UYwHwYDVR0j BBgwFoAUmWWx4pMclM2gPLY+86bK4zvBXocwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmJkM2RjelpMb3phcVVoRmdyVTJiVGlBN2o3aktvelRHZ0VSZHo4bzJi aG4vMC85OTY1QjFFMjkzMUM5NENEQTAzQ0I2M0VGM0E2Q0FFMzNCQzE1RTg3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NjVCMUUyOTMxQzk0Q0RB MDNDQjYzRUYzQTZDQUUzM0JDMTVFODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmJkM2RjelpMb3phcVVoRmdyVTJiVGlBN2o3aktvelRHZ0VSZHo4bzJiaG4vMC85 OTY1QjFFMjkzMUM5NENEQTAzQ0I2M0VGM0E2Q0FFMzNCQzE1RTg3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM95Wsh9xf+SQiaJapWpgjL76THVaCMNAvoMYuiRz6ouoVWi+R39pimHFfF72 /3fR2UTIXGa80E62E1pFPesumQIXJSsHjkMjBm7fZHltnvq3odSTZyO/l7goxa3l UR0awmntjs4xL4mLpkZHdlRXTdWkD6IJfhjf+491ceUCXZQZ+wAE46+61LzUOBI9 xGTNYE1xAvp4OXm3GICeV+25wutFhTbRUrBlOQAo4l8vh9+/i5PC6i1KDzcZ4E8Y eyEqXFtMkjDd1a4vtyAY280So2MoUToQ/m+ids+0e3/Ux/YGDXVeZy5P7GTTRS7c rNOMcHRtXVhvukQaBziThYwKgw== -----END CERTIFICATE-----Generated at Fri Apr 25 10:37:07 2025 by rpki-client on console.sobornost.net