$ rpki-client -vvf rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft File: 69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft (raw, json) Hash identifier: I1GufNd2xYHhXvzDL/5W3PwuMYyoE6XYn7H7l0WpxEM= Subject key identifier: 6B:3F:D8:B9:95:8F:2C:F8:1F:21:4B:41:AE:33:08:79:57:B4:30:C8 Authority key identifier: 69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23 Certificate issuer: /CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123 Certificate serial: 1D69C1B4499145FAFC32B9A4DBE567B54DCCE304 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer Subject info access: rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft Manifest number: 2A Signing time: Mon 28 Apr 2025 15:47:36 +0000 Manifest this update: Mon 28 Apr 2025 15:42:36 +0000 Manifest next update: Tue 29 Apr 2025 17:15:36 +0000 Files and hashes: 1: 69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl (hash: 0fYCRYgmaj+nAvIscLg5IzR8VdcaCZW+10up+7C1YIw=) 2: 3137392e3138392e302e302f32302d3234203d3e203238333039.roa (hash: gj4anIFoqS5An8dBcpGfcziSjC/4vyS/7Ef60ioYdXI=) 3: 3138372e34342e36342e302f32302d3234203d3e203238333039.roa (hash: ytWMeT7a+5e3RhiY9vsuprXfI161f6tC472OLXTHDx0=) 4: 3136382e3232382e39362e302f32322d3234203d3e203238333039.roa (hash: P4GcC84l5CNw0HIyuFql5vqXvV7osJssOwZyF9l46qM=) 5: 3138392e33382e33322e302f32302d3234203d3e203238333039.roa (hash: 9htZ/FrsfimiBtIRqe4S+q6Q8vdfYo+stxFxu6+6KXM=) 6: 323830343a3136633a3a2f33322d3438203d3e203238333039.roa (hash: ExtPc8BcnrlABDGyELCaMKx1KVqxUBfgTRnIpEc/mhg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 16:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:69:c1:b4:49:91:45:fa:fc:32:b9:a4:db:e5:67:b5:4d:cc:e3:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123 Validity Not Before: Apr 28 15:42:36 2025 GMT Not After : Apr 29 17:15:36 2025 GMT Subject: CN=6B3FD8B9958F2CF81F214B41AE33087957B430C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:22:74:57:57:41:e0:2e:ab:f3:b2:75:92: 25:1a:66:0d:5a:0e:d5:16:71:2c:eb:fd:95:ba:f8: ba:24:91:aa:7a:69:a1:1a:2c:ab:c7:d2:cc:7d:41: 8b:3f:4c:ba:68:34:f2:0b:f0:9a:bd:24:a8:b5:c2: 92:dd:3f:a8:ef:bf:10:bf:31:b8:25:a8:67:06:05: db:03:9a:8e:4a:a1:4c:52:18:47:31:ae:67:a6:b9: 1e:64:df:20:a6:39:81:b9:5e:5c:c4:92:ce:1b:1b: d1:09:3c:2a:0a:59:e4:92:b7:dd:d9:78:ba:39:ba: 27:d0:ad:25:ad:27:58:6a:0a:93:1b:eb:f9:6c:5c: 25:2b:87:ae:78:5b:49:f0:72:01:f0:73:1e:73:eb: 92:c4:0b:eb:ca:03:84:c7:a0:1e:0a:47:f6:bf:59: dd:51:46:a9:a8:d9:ea:a2:b6:21:7b:61:3d:b6:5c: 3f:3d:98:51:83:ac:a1:1b:1c:29:70:58:cd:80:93: f4:40:c0:bc:a6:7d:0f:7c:36:2e:55:f4:6e:81:c8: 0e:de:3a:b6:6f:f2:dd:4d:2e:11:58:96:e1:48:32: 05:be:45:ac:2a:c5:fb:14:61:0c:8a:32:ae:13:d2: bd:13:ad:6a:a6:fc:86:18:09:08:4d:67:53:f4:8a: 9c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3F:D8:B9:95:8F:2C:F8:1F:21:4B:41:AE:33:08:79:57:B4:30:C8 X509v3 Authority Key Identifier: keyid:69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:4f:72:3b:bc:ee:e0:ba:5d:54:14:84:8f:ec:07:a2:e2:49: c0:a3:8c:66:87:98:72:3a:be:09:9f:75:9c:85:7c:08:a5:c9: 94:9e:56:0b:9a:5e:96:47:0e:d7:de:ae:9c:89:ba:1b:de:f9: 5b:dd:c9:7c:a3:16:46:de:fd:1b:79:98:91:af:43:5e:71:c7: 20:28:9a:26:a6:76:04:dd:a1:8e:3d:c1:e8:91:3c:92:b3:a3: 61:92:16:be:bb:7e:45:5d:74:c8:55:43:d1:cb:be:d4:9a:e6: fd:56:82:6e:e2:30:58:58:b1:ce:90:39:38:40:75:96:ba:18: 8d:ec:6e:b0:cb:53:b6:e7:75:04:f3:d7:3e:b1:cf:e6:57:04: f5:06:3e:35:cb:39:f6:a3:60:87:16:e3:4e:f8:83:ae:a8:6c: ca:a7:63:b2:35:00:46:b3:e6:12:97:2e:15:28:98:7a:36:8d: 0d:21:47:c2:0b:9e:09:59:d5:79:68:a4:62:54:fe:b8:ac:5e: 90:ff:bf:64:a9:3f:30:63:24:45:05:4f:0e:db:28:6f:0c:9c: 49:c0:2b:f1:95:de:ee:2e:7c:a7:60:d7:73:68:8b:bd:aa:2e: de:70:c5:fc:c2:c1:60:4e:dd:5d:d3:b0:26:49:3a:26:64:b0: 58:58:fc:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHWnBtEmRRfr8Mrmk2+VntU3M4wQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlERTVBRDFBNUIxRjk3ODg0RDE5REMzRTlFRkRBM0Y5 NjU0QzEyMzAeFw0yNTA0MjgxNTQyMzZaFw0yNTA0MjkxNzE1MzZaMDMxMTAvBgNV BAMTKDZCM0ZEOEI5OTU4RjJDRjgxRjIxNEI0MUFFMzMwODc5NTdCNDMwQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+yJ0V1dB4C6r87J1kiUaZg1a DtUWcSzr/ZW6+Lokkap6aaEaLKvH0sx9QYs/TLpoNPIL8Jq9JKi1wpLdP6jvvxC/ MbglqGcGBdsDmo5KoUxSGEcxrmemuR5k3yCmOYG5XlzEks4bG9EJPCoKWeSSt93Z eLo5uifQrSWtJ1hqCpMb6/lsXCUrh654W0nwcgHwcx5z65LEC+vKA4THoB4KR/a/ Wd1RRqmo2eqitiF7YT22XD89mFGDrKEbHClwWM2Ak/RAwLymfQ98Ni5V9G6ByA7e OrZv8t1NLhFYluFIMgW+RawqxfsUYQyKMq4T0r0TrWqm/IYYCQhNZ1P0ipzRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaz/YuZWPLPgfIUtBrjMIeVe0MMgwHwYDVR0j BBgwFoAUad5a0aWx+XiE0Z3D6e/aP5ZUwSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDczRGFnOW95ckd3Vzl5RThDcnUxS0J0b2VlZmFoSmF0Yml5eDR4SDh3 Q28vMC82OURFNUFEMUE1QjFGOTc4ODREMTlEQzNFOUVGREEzRjk2NTRDMTIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5REU1QUQxQTVCMUY5Nzg4 NEQxOURDM0U5RUZEQTNGOTY1NEMxMjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDczRGFnOW95ckd3Vzl5RThDcnUxS0J0b2VlZmFoSmF0Yml5eDR4SDh3Q28vMC82 OURFNUFEMUE1QjFGOTc4ODREMTlEQzNFOUVGREEzRjk2NTRDMTIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh09yO7zu4LpdVBSEj+wHouJJwKOMZoeYcjq+CZ91nIV8CKXJlJ5WC5pelkcO 196unIm6G975W93JfKMWRt79G3mYka9DXnHHICiaJqZ2BN2hjj3B6JE8krOjYZIW vrt+RV10yFVD0cu+1Jrm/VaCbuIwWFixzpA5OEB1lroYjexusMtTtud1BPPXPrHP 5lcE9QY+Ncs59qNghxbjTviDrqhsyqdjsjUARrPmEpcuFSiYejaNDSFHwgueCVnV eWikYlT+uKxekP+/ZKk/MGMkRQVPDtsobwycScAr8ZXe7i58p2DXc2iLvaou3nDF /MLBYE7dXdOwJkk6JmSwWFj8iA== -----END CERTIFICATE-----Generated at Mon Apr 28 17:38:04 2025 by rpki-client on console.sobornost.net