$ rpki-client -vvf rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.mft File: D4DA9F477593CD447FEE14D83B87CF3109732518.mft (raw, json) Hash identifier: krRnNh5uUBwzwMdex4erRHvMaZ409yvLPnppr3ER/YU= Subject key identifier: 27:03:8D:F8:75:C1:E6:53:35:1E:C3:74:5C:8D:69:01:DD:F0:70:1E Authority key identifier: D4:DA:9F:47:75:93:CD:44:7F:EE:14:D8:3B:87:CF:31:09:73:25:18 Certificate issuer: /CN=D4DA9F477593CD447FEE14D83B87CF3109732518 Certificate serial: 4A886D612C1E1C95061C2FE1BBC29953E41D91C1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer Subject info access: rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.mft Manifest number: 4A Signing time: Mon 28 Apr 2025 09:28:09 +0000 Manifest this update: Mon 28 Apr 2025 09:23:09 +0000 Manifest next update: Tue 29 Apr 2025 12:27:09 +0000 Files and hashes: 1: D4DA9F477593CD447FEE14D83B87CF3109732518.crl (hash: copgCVHoQcS7JqvF4nJFKAISdfuVKhib1nWu3XPFlVk=) 2: 34352e3232352e3138302e302f32332d3234203d3e20323635343430.roa (hash: UG1bIEqSWcVFogpAN8dpdluBA2B6FznRqi8LUSLWdB0=) 3: 3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa (hash: 0miu0D5Gp1Chkjl4hhkBDcSw8B8Ad0dKsBzzjNy10No=) 4: 3137392e3139312e382e302f32312d3234203d3e20323635343430.roa (hash: pdPmIty1pH7V4Osp9Kq9lIakHDY9LRoCHbkEjChw8QQ=) 5: 323830343a333432633a3a2f33322d3438203d3e20323635343430.roa (hash: EH9NyyBoMTp1Gi63vgui2VwKI6RlvddRYrs90u0BAAk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.crl rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:88:6d:61:2c:1e:1c:95:06:1c:2f:e1:bb:c2:99:53:e4:1d:91:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4DA9F477593CD447FEE14D83B87CF3109732518 Validity Not Before: Apr 28 09:23:09 2025 GMT Not After : Apr 29 12:27:09 2025 GMT Subject: CN=27038DF875C1E653351EC3745C8D6901DDF0701E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a7:7c:3e:d0:d9:26:71:5e:ef:a9:0f:ec:3e: 2c:8b:3a:bd:c8:9c:2e:d6:00:4b:cb:d6:e3:e6:fe: 10:ad:71:84:3d:58:5a:6b:1d:fd:c1:b3:c5:f8:99: bb:d3:b9:a8:88:73:67:72:92:92:85:78:55:3a:bd: 5d:bb:f8:09:8e:78:10:92:55:51:fc:99:ca:37:b5: 94:ba:92:60:af:e3:ce:84:d1:6d:88:02:3d:90:c6: 50:f5:67:3c:91:9f:05:7b:bf:8c:7e:70:ac:74:18: be:ed:55:1e:f1:5f:cf:7a:b1:ec:d7:ca:df:55:fd: f7:83:d7:d9:54:c0:50:27:21:3d:90:38:11:f0:de: 17:db:52:89:89:a2:da:79:6b:2c:b8:60:da:e1:0d: 82:13:20:48:5b:03:3f:aa:3f:7d:8a:7f:1a:24:af: 53:4d:c0:ce:8a:5d:09:9d:24:82:a9:53:d3:de:77: f4:a5:0c:7a:0d:92:39:a3:3e:73:a1:0e:bd:51:56: 7a:cc:b4:5b:28:86:5b:cf:f5:ec:74:ab:43:d3:0e: 51:8e:e9:6a:9d:7f:c0:15:e2:8a:80:d9:12:6e:bb: 69:8a:fa:61:7d:e4:a6:51:76:ab:19:57:32:35:df: 06:d0:6f:7b:a2:f7:75:dc:32:92:0b:1f:7f:35:8f: dc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:03:8D:F8:75:C1:E6:53:35:1E:C3:74:5C:8D:69:01:DD:F0:70:1E X509v3 Authority Key Identifier: keyid:D4:DA:9F:47:75:93:CD:44:7F:EE:14:D8:3B:87:CF:31:09:73:25:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:be:27:2a:7c:39:22:85:e4:37:78:13:02:12:41:c1:43:b5: 7e:18:50:36:91:e9:42:00:b3:a1:0c:00:03:ff:13:13:76:be: 2e:67:56:7f:11:e5:93:27:e6:dd:25:5b:cb:c3:00:17:54:9b: af:07:a7:f6:34:aa:7f:d2:cb:9a:f0:3f:d0:19:9c:78:f8:ca: 5c:e2:4b:89:fa:8b:f2:ea:e5:78:2e:c5:f4:90:a8:81:13:1c: d3:c4:a2:30:d6:dd:4e:a3:2e:0f:a4:0d:f9:2c:9e:2f:ec:70: 8b:81:19:f3:84:d7:ae:04:eb:28:d8:4f:4e:af:ce:20:57:0f: b2:c4:c7:66:d6:ab:e0:57:09:f6:66:5b:a6:7c:a7:bc:4c:3a: e5:43:4b:1b:f3:79:d7:85:4f:7d:e1:51:3e:27:90:ac:37:f2: e4:bd:ed:0d:37:35:16:27:d0:ee:d4:87:fb:d3:00:b7:94:7d: f0:90:8c:5d:de:6a:5e:2b:46:29:a0:bd:2c:00:f3:69:36:66: 4a:1c:37:7e:5c:d2:d3:0a:6a:b6:5f:d0:07:12:47:0a:b3:a5: 8e:55:0e:35:5e:9a:ff:5a:cd:e7:2b:56:e6:6b:b5:96:7c:c4: 8b:7e:af:2b:e2:7f:c4:8f:e0:93:8e:7a:ae:27:22:5b:ed:e1: 4a:50:fc:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSohtYSweHJUGHC/hu8KZU+QdkcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDREQTlGNDc3NTkzQ0Q0NDdGRUUxNEQ4M0I4N0NGMzEw OTczMjUxODAeFw0yNTA0MjgwOTIzMDlaFw0yNTA0MjkxMjI3MDlaMDMxMTAvBgNV BAMTKDI3MDM4REY4NzVDMUU2NTMzNTFFQzM3NDVDOEQ2OTAxRERGMDcwMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIp3w+0NkmcV7vqQ/sPiyLOr3I nC7WAEvL1uPm/hCtcYQ9WFprHf3Bs8X4mbvTuaiIc2dykpKFeFU6vV27+AmOeBCS VVH8mco3tZS6kmCv486E0W2IAj2QxlD1ZzyRnwV7v4x+cKx0GL7tVR7xX896sezX yt9V/feD19lUwFAnIT2QOBHw3hfbUomJotp5ayy4YNrhDYITIEhbAz+qP32Kfxok r1NNwM6KXQmdJIKpU9Ped/SlDHoNkjmjPnOhDr1RVnrMtFsohlvP9ex0q0PTDlGO 6Wqdf8AV4oqA2RJuu2mK+mF95KZRdqsZVzI13wbQb3ui93XcMpILH381j9wrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJwON+HXB5lM1HsN0XI1pAd3wcB4wHwYDVR0j BBgwFoAU1NqfR3WTzUR/7hTYO4fPMQlzJRgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRlc2MjFaYzNTdTVVdXV4YlN5TU05QUFwOXZxNnI0c3lpbnV1cTFBZXlO elYvMC9ENERBOUY0Nzc1OTNDRDQ0N0ZFRTE0RDgzQjg3Q0YzMTA5NzMyNTE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0REE5RjQ3NzU5M0NENDQ3 RkVFMTREODNCODdDRjMxMDk3MzI1MTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rlc2MjFaYzNTdTVVdXV4YlN5TU05QUFwOXZxNnI0c3lpbnV1cTFBZXlOelYvMC9E NERBOUY0Nzc1OTNDRDQ0N0ZFRTE0RDgzQjg3Q0YzMTA5NzMyNTE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD74nKnw5IoXkN3gTAhJBwUO1fhhQNpHpQgCzoQwAA/8TE3a+LmdWfxHlkyfm 3SVby8MAF1Sbrwen9jSqf9LLmvA/0BmcePjKXOJLifqL8urleC7F9JCogRMc08Si MNbdTqMuD6QN+SyeL+xwi4EZ84TXrgTrKNhPTq/OIFcPssTHZtar4FcJ9mZbpnyn vEw65UNLG/N514VPfeFRPieQrDfy5L3tDTc1FifQ7tSH+9MAt5R98JCMXd5qXitG KaC9LADzaTZmShw3flzS0wpqtl/QBxJHCrOljlUONV6a/1rN5ytW5mu1lnzEi36v K+J/xI/gk456riciW+3hSlD8JA== -----END CERTIFICATE-----Generated at Mon Apr 28 13:05:02 2025 by rpki-client on console.sobornost.net