$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft File: AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft (raw, json) Hash identifier: J9YpRVLnb/vm5lVeMq4BM7rF9lvUn8O2QwQzCDzDnTM= Subject key identifier: 45:C6:CF:8A:29:E4:7E:FB:19:DE:EA:D6:EE:CE:5A:6B:4B:E8:28:64 Authority key identifier: AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 Certificate issuer: /CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Certificate serial: 4F862EEA9B7B4F162738501FCAA6323D563213B7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject info access: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft Manifest number: 6A Signing time: Sun 27 Apr 2025 11:49:02 +0000 Manifest this update: Sun 27 Apr 2025 11:44:02 +0000 Manifest next update: Mon 28 Apr 2025 12:19:02 +0000 Files and hashes: 1: AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl (hash: 5/mPuAX7562t8/JMwFr3hLJ59rgOltsBHVDaP1aoh4U=) 2: 3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa (hash: L4iJGteHF6GdbZUpYdPsmSF6aU2WwIJnyrqJCiuS0u4=) 3: 323830343a343863303a3a2f33322d3438203d3e20323637313432.roa (hash: wf3PSbxaQoz04LuH+DpJ300lgKtkTir3v4uSeMTRXRA=) 4: 34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa (hash: hmyhqfarobJ23Jlj20PKq7o0hSXC88s466WrKIYsZEQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 12:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:86:2e:ea:9b:7b:4f:16:27:38:50:1f:ca:a6:32:3d:56:32:13:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Validity Not Before: Apr 27 11:44:02 2025 GMT Not After : Apr 28 12:19:02 2025 GMT Subject: CN=45C6CF8A29E47EFB19DEEAD6EECE5A6B4BE82864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d8:0a:fe:f4:e4:c5:b0:48:09:8c:c7:80:0c: 65:9e:ac:9f:73:61:4f:09:df:c3:a2:f6:d8:87:33: 2a:ab:ff:a5:b3:9e:86:1c:34:a9:7a:29:c0:be:54: d3:32:ed:72:03:3f:81:13:8c:2c:3b:9c:df:1a:52: 72:ed:76:54:c6:63:49:93:4a:fb:3a:5d:29:ee:05: 46:fd:f3:f1:23:b2:81:ea:e3:3f:13:90:9e:93:0f: 0b:0b:ea:57:72:18:e8:b5:7e:36:8b:38:00:f6:40: f4:91:07:e6:e2:1f:be:24:6a:0f:82:d7:be:4e:e6: ca:4a:2d:a5:34:2f:e3:ba:d8:cb:89:de:45:86:4e: 77:da:d6:f3:60:f8:da:9b:ed:e4:31:8e:a2:6c:f0: c5:7e:9e:92:f5:62:8b:c2:68:ac:72:fe:b5:2b:31: 53:dc:0e:6c:9b:12:71:d7:2e:46:54:7e:98:83:ea: c4:70:aa:5e:ea:50:71:72:ac:9a:ea:7c:82:49:5e: 93:3e:03:61:76:0d:0b:1e:9b:7a:05:9e:47:05:db: 70:aa:4b:74:00:c0:4c:6b:c7:ac:13:cd:c3:8e:d7: 3d:25:97:38:2d:67:11:e2:ef:a9:be:16:eb:c5:b9: 0d:0e:cc:ba:6c:f7:55:68:1f:c3:90:cc:e2:40:99: c8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C6:CF:8A:29:E4:7E:FB:19:DE:EA:D6:EE:CE:5A:6B:4B:E8:28:64 X509v3 Authority Key Identifier: keyid:AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:1a:fd:7e:36:9b:28:93:62:32:e8:04:7e:42:61:aa:84:6d: 61:f0:27:de:14:93:5f:55:13:10:e5:f1:c2:63:05:f9:c7:ec: 7a:0c:47:b6:68:1c:12:94:10:5d:8f:18:59:2c:37:51:2a:47: e6:b1:eb:1b:de:05:2b:4e:85:ce:7c:04:dd:aa:d9:09:b7:d2: 95:9a:16:ff:dc:ee:47:75:42:b6:bd:3d:4f:31:79:19:5c:5a: 8c:12:cb:d2:41:12:ec:22:ae:25:57:77:93:8f:e7:e2:65:59: 62:c2:6a:3e:f0:2c:ea:62:6b:91:c6:d6:68:85:18:20:69:48: e2:a1:14:75:81:f4:b5:7f:34:7b:99:2a:00:d6:0f:81:0a:96: 46:08:ac:ae:a2:28:f1:f9:c2:28:74:bc:15:68:01:65:ba:ac: de:8b:95:20:85:f4:1b:61:16:1c:0e:d2:21:60:1b:83:47:a2: 15:39:7c:ef:61:ef:ea:16:de:a4:2c:43:e8:1b:06:f5:ea:47: e1:69:2b:be:7e:7e:4e:ae:2b:ce:fb:50:0b:e4:92:bf:2a:c0: 20:aa:fa:2a:c9:a1:83:36:4d:07:a2:11:e8:ff:5e:27:cf:d6: 2a:95:eb:9f:c2:7d:8e:6d:0c:e2:ce:6b:58:63:ae:5f:82:73: aa:8f:7f:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT4Yu6pt7TxYnOFAfyqYyPVYyE7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQUYzMjBFNjA1MzFGQjk1QzZDNjg1ODQyQjU2RDFC REZDRUQ0NTAeFw0yNTA0MjcxMTQ0MDJaFw0yNTA0MjgxMjE5MDJaMDMxMTAvBgNV BAMTKDQ1QzZDRjhBMjlFNDdFRkIxOURFRUFENkVFQ0U1QTZCNEJFODI4NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi2Ar+9OTFsEgJjMeADGWerJ9z YU8J38Oi9tiHMyqr/6WznoYcNKl6KcC+VNMy7XIDP4ETjCw7nN8aUnLtdlTGY0mT Svs6XSnuBUb98/EjsoHq4z8TkJ6TDwsL6ldyGOi1fjaLOAD2QPSRB+biH74kag+C 175O5spKLaU0L+O62MuJ3kWGTnfa1vNg+Nqb7eQxjqJs8MV+npL1YovCaKxy/rUr MVPcDmybEnHXLkZUfpiD6sRwql7qUHFyrJrqfIJJXpM+A2F2DQsem3oFnkcF23Cq S3QAwExrx6wTzcOO1z0llzgtZxHi76m+FuvFuQ0OzLps91VoH8OQzOJAmcgHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURcbPiinkfvsZ3urW7s5aa0voKGQwHwYDVR0j BBgwFoAUr/rzIOYFMfuVxsaFhCtW0b387UUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0 QlUvMC9BRkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkFGMzIwRTYwNTMxRkI5 NUM2QzY4NTg0MkI1NkQxQkRGQ0VENDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0QlUvMC9B RkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqRr9fjabKJNiMugEfkJhqoRtYfAn3hSTX1UTEOXxwmMF+cfsegxHtmgcEpQQ XY8YWSw3USpH5rHrG94FK06FznwE3arZCbfSlZoW/9zuR3VCtr09TzF5GVxajBLL 0kES7CKuJVd3k4/n4mVZYsJqPvAs6mJrkcbWaIUYIGlI4qEUdYH0tX80e5kqANYP gQqWRgisrqIo8fnCKHS8FWgBZbqs3ouVIIX0G2EWHA7SIWAbg0eiFTl872Hv6hbe pCxD6BsG9epH4Wkrvn5+Tq4rzvtQC+SSvyrAIKr6KsmhgzZNB6IR6P9eJ8/WKpXr n8J9jm0M4s5rWGOuX4Jzqo9/wQ== -----END CERTIFICATE-----Generated at Sun Apr 27 14:50:48 2025 by rpki-client on console.sobornost.net