$ rpki-client -vvf rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/DB99F3B22C4D4597BA1B8377C45F7519342444E3.mft File: DB99F3B22C4D4597BA1B8377C45F7519342444E3.mft (raw, json) Hash identifier: qRkYIKTdXFCAM47vq+CV+NGduN6HTfVQ3b9iNafCwJQ= Subject key identifier: 0A:49:1B:5E:21:FD:4B:52:0B:16:AB:FF:E4:22:E6:B8:9E:F5:B6:AF Authority key identifier: DB:99:F3:B2:2C:4D:45:97:BA:1B:83:77:C4:5F:75:19:34:24:44:E3 Certificate issuer: /CN=DB99F3B22C4D4597BA1B8377C45F7519342444E3 Certificate serial: 38CC1AC23091020A12B9097F9BD68BDB0C858C53 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB99F3B22C4D4597BA1B8377C45F7519342444E3.cer Subject info access: rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/DB99F3B22C4D4597BA1B8377C45F7519342444E3.mft Manifest number: 28 Signing time: Mon 28 Apr 2025 14:07:24 +0000 Manifest this update: Mon 28 Apr 2025 14:02:24 +0000 Manifest next update: Tue 29 Apr 2025 15:02:24 +0000 Files and hashes: 1: 3134332e3133372e35362e302f32322d3332203d3e20323634303332.roa (hash: fi79g+bJaupI29fbmfSwXFJdcXqzcY7K55NwzziOMaw=) 2: 323830343a323963303a3a2f33322d313238203d3e20323634303332.roa (hash: qn6kN0RjbCKGpLIqN8hn+nKkeVGrZIaTyhHi4o5Cjuk=) 3: DB99F3B22C4D4597BA1B8377C45F7519342444E3.crl (hash: blYKJDnNf1OkT6cowQxQ9msBZqpjNY2aJ54NYFR2p5U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/DB99F3B22C4D4597BA1B8377C45F7519342444E3.crl rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/DB99F3B22C4D4597BA1B8377C45F7519342444E3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB99F3B22C4D4597BA1B8377C45F7519342444E3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 15:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cc:1a:c2:30:91:02:0a:12:b9:09:7f:9b:d6:8b:db:0c:85:8c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB99F3B22C4D4597BA1B8377C45F7519342444E3 Validity Not Before: Apr 28 14:02:24 2025 GMT Not After : Apr 29 15:02:24 2025 GMT Subject: CN=0A491B5E21FD4B520B16ABFFE422E6B89EF5B6AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:04:82:d5:76:16:da:45:e8:d4:e3:77:b7:1d: 20:57:eb:14:a5:ec:74:4d:88:7b:4e:9f:32:6a:39: ff:aa:dc:c9:84:a8:65:19:12:99:58:19:5f:fb:e2: cc:cf:67:e7:fc:f4:cf:5a:9e:26:bc:65:47:12:bb: 5e:9b:42:74:4f:05:5d:fb:b4:80:7a:12:5c:b3:44: 0a:5c:2f:02:6e:e1:3f:8a:aa:b0:0c:23:5a:33:4e: 6f:0a:2f:fb:90:33:8c:77:bb:26:df:b3:3f:82:b5: e3:2e:60:cf:c5:25:0f:a7:b9:2d:2d:58:41:a6:80: e7:b0:de:fe:73:e4:a4:27:99:42:34:39:e8:07:df: 77:a3:cd:15:54:87:b6:03:0d:f7:6e:42:d2:85:83: 0a:05:65:a5:7c:16:e2:83:a3:59:6e:c4:e2:42:28: 30:d8:5f:16:16:22:96:15:ad:60:e9:ef:2f:73:7d: 91:d5:e8:c4:64:bc:fc:e7:5d:b1:5b:a0:5b:75:52: 51:1f:a4:13:07:d7:f7:85:4d:5a:5e:0a:48:1a:2f: ca:e7:a4:ef:66:42:ae:11:b3:61:be:42:84:fd:cd: 93:e3:65:82:74:96:fb:92:d2:67:7b:5c:0d:a0:f1: d8:46:71:d7:96:4d:29:ad:46:fd:b3:a7:e7:a5:a4: e2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:49:1B:5E:21:FD:4B:52:0B:16:AB:FF:E4:22:E6:B8:9E:F5:B6:AF X509v3 Authority Key Identifier: keyid:DB:99:F3:B2:2C:4D:45:97:BA:1B:83:77:C4:5F:75:19:34:24:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/DB99F3B22C4D4597BA1B8377C45F7519342444E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB99F3B22C4D4597BA1B8377C45F7519342444E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/DB99F3B22C4D4597BA1B8377C45F7519342444E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:7c:2d:e8:8e:55:e5:cc:c9:67:9b:51:07:cd:05:b0:98:56: 6e:8f:c5:a2:6a:ce:b1:55:50:02:cb:b4:33:d5:11:5a:e5:c9: 80:c3:8b:8c:87:12:ec:28:72:7e:03:38:62:3e:3f:de:d8:10: e4:c2:ba:10:2a:21:61:d5:07:bb:b2:b3:e7:f4:dc:ea:af:09: f9:ee:29:e0:76:86:f4:bf:b1:29:46:08:7c:90:41:5f:df:11: b5:28:a5:ad:6a:2d:ae:ce:7b:aa:e7:6d:67:b1:65:5b:3a:b0: 0a:7b:ca:3e:98:83:33:47:01:ee:c5:ae:a3:68:20:07:7e:48: e4:52:27:c5:b0:41:19:ed:21:1b:88:b1:61:21:22:9e:d7:41: 0f:2c:0d:36:68:81:02:ee:ab:58:90:c8:ee:0c:7f:8a:b1:f9: f2:d0:6d:42:b3:b8:c8:30:c1:54:3c:9f:36:a3:51:83:33:4f: 56:d0:2f:3b:23:6e:15:c2:37:51:8a:dd:4f:2e:a2:87:b3:43: 21:90:94:8d:60:d0:92:ca:8e:5b:33:9d:9f:9a:bf:e6:10:64: 47:7c:3f:3c:72:b4:ec:19:42:ff:79:95:e6:31:c8:6b:58:e8: b1:f8:2b:5b:76:eb:a3:1f:5e:ae:41:54:ff:34:17:7b:78:a6: e6:14:76:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOMwawjCRAgoSuQl/m9aL2wyFjFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5OUYzQjIyQzRENDU5N0JBMUI4Mzc3QzQ1Rjc1MTkz NDI0NDRFMzAeFw0yNTA0MjgxNDAyMjRaFw0yNTA0MjkxNTAyMjRaMDMxMTAvBgNV BAMTKDBBNDkxQjVFMjFGRDRCNTIwQjE2QUJGRkU0MjJFNkI4OUVGNUI2QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmBILVdhbaRejU43e3HSBX6xSl 7HRNiHtOnzJqOf+q3MmEqGUZEplYGV/74szPZ+f89M9ania8ZUcSu16bQnRPBV37 tIB6ElyzRApcLwJu4T+KqrAMI1ozTm8KL/uQM4x3uybfsz+CteMuYM/FJQ+nuS0t WEGmgOew3v5z5KQnmUI0OegH33ejzRVUh7YDDfduQtKFgwoFZaV8FuKDo1luxOJC KDDYXxYWIpYVrWDp7y9zfZHV6MRkvPznXbFboFt1UlEfpBMH1/eFTVpeCkgaL8rn pO9mQq4Rs2G+QoT9zZPjZYJ0lvuS0md7XA2g8dhGcdeWTSmtRv2zp+elpOILAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCkkbXiH9S1ILFqv/5CLmuJ71tq8wHwYDVR0j BBgwFoAU25nzsixNRZe6G4N3xF91GTQkROMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRktaUXlubU5pV3FKS0JQck01MVVNeUJmV3BDejJxQUFNU1VteU1VcUFG TWMvMC9EQjk5RjNCMjJDNEQ0NTk3QkExQjgzNzdDNDVGNzUxOTM0MjQ0NEUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCOTlGM0IyMkM0RDQ1OTdC QTFCODM3N0M0NUY3NTE5MzQyNDQ0RTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RktaUXlubU5pV3FKS0JQck01MVVNeUJmV3BDejJxQUFNU1VteU1VcUFGTWMvMC9E Qjk5RjNCMjJDNEQ0NTk3QkExQjgzNzdDNDVGNzUxOTM0MjQ0NEUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ3wt6I5V5czJZ5tRB80FsJhWbo/FomrOsVVQAsu0M9URWuXJgMOLjIcS7Chy fgM4Yj4/3tgQ5MK6ECohYdUHu7Kz5/Tc6q8J+e4p4HaG9L+xKUYIfJBBX98RtSil rWotrs57qudtZ7FlWzqwCnvKPpiDM0cB7sWuo2ggB35I5FInxbBBGe0hG4ixYSEi ntdBDywNNmiBAu6rWJDI7gx/irH58tBtQrO4yDDBVDyfNqNRgzNPVtAvOyNuFcI3 UYrdTy6ih7NDIZCUjWDQksqOWzOdn5q/5hBkR3w/PHK07BlC/3mV5jHIa1josfgr W3brox9erkFU/zQXe3im5hR29Q== -----END CERTIFICATE-----Generated at Mon Apr 28 15:24:15 2025 by rpki-client on console.sobornost.net