$ rpki-client -vvf rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/D00CC509AF17310BD082A9DE6401DA345FE17442.mft File: D00CC509AF17310BD082A9DE6401DA345FE17442.mft (raw, json) Hash identifier: fXuRdxkDl97QRjna/FeHqxtB6s4Hf2zET7U1ZlmA628= Subject key identifier: CA:C0:A1:01:E9:A4:63:D4:50:89:5D:EC:7E:0F:C4:24:DF:C2:4B:8C Authority key identifier: D0:0C:C5:09:AF:17:31:0B:D0:82:A9:DE:64:01:DA:34:5F:E1:74:42 Certificate issuer: /CN=D00CC509AF17310BD082A9DE6401DA345FE17442 Certificate serial: 4B5E0FFC9B3551F9EC1641E6E8B58C3CAED16BA4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D00CC509AF17310BD082A9DE6401DA345FE17442.cer Subject info access: rsync://rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/D00CC509AF17310BD082A9DE6401DA345FE17442.mft Manifest number: 01B2 Signing time: Mon 28 Apr 2025 09:27:38 +0000 Manifest this update: Mon 28 Apr 2025 09:22:38 +0000 Manifest next update: Tue 29 Apr 2025 12:51:38 +0000 Files and hashes: 1: 323830343a313830633a3a2f33322d3438203d3e203631393234.roa (hash: sdKe9sAgw4SBJ6oFnlpsWcE1sFs4Yj6CPkKYVvaUDSg=) 2: D00CC509AF17310BD082A9DE6401DA345FE17442.crl (hash: u43d3NMTyEijInyZTusFnZzNv/J6YOGV3+IuvTwzT+A=) 3: 3230312e3133302e38382e302f32312d3232203d3e203631393234.roa (hash: M+B66XShhg8ANR1HwJzAMfVhpDaZ9pr0qWeh1ySkCsc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/D00CC509AF17310BD082A9DE6401DA345FE17442.crl rsync://rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/D00CC509AF17310BD082A9DE6401DA345FE17442.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D00CC509AF17310BD082A9DE6401DA345FE17442.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 12:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5e:0f:fc:9b:35:51:f9:ec:16:41:e6:e8:b5:8c:3c:ae:d1:6b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00CC509AF17310BD082A9DE6401DA345FE17442 Validity Not Before: Apr 28 09:22:38 2025 GMT Not After : Apr 29 12:51:38 2025 GMT Subject: CN=CAC0A101E9A463D450895DEC7E0FC424DFC24B8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:53:5c:1d:44:8b:0a:ef:8e:26:87:d0:83:19: dd:82:5a:96:bb:9f:aa:16:d0:ac:4b:64:4c:89:20: a7:21:36:da:75:c6:85:16:e5:31:00:68:04:c2:37: e6:ce:0d:45:6d:f2:eb:79:33:32:98:ea:36:e9:7d: c5:ec:57:b4:5c:59:dd:9f:d2:26:01:fb:cc:71:de: 07:ef:19:5d:06:4e:0e:88:5e:36:47:41:a8:bf:99: 66:39:01:4d:d6:b3:cd:60:64:81:a6:27:cc:15:90: bb:a9:a5:ee:71:f8:ee:f3:95:74:e6:80:ce:b7:23: 3b:d0:51:37:57:72:74:c1:30:c6:13:25:ee:ae:51: 14:77:4c:d4:b2:23:40:fb:e3:70:07:b3:64:90:07: bc:1a:70:a4:8e:a2:74:2b:25:27:c6:ad:76:59:a2: 5e:e3:f3:0e:70:84:03:3f:48:45:d4:e4:92:54:ab: 63:ad:9d:59:e8:58:ee:ba:c4:3d:27:e6:1b:79:30: 71:30:d3:64:85:d0:69:f8:04:da:d6:b0:f3:31:63: ee:cf:54:f0:b3:b3:81:53:9b:b9:48:7c:9a:a2:14: 2a:44:6a:5d:7b:7c:fa:58:45:1a:72:01:67:52:a8: c9:f1:3c:f8:82:e0:c4:8c:61:13:70:09:68:8b:cd: 56:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C0:A1:01:E9:A4:63:D4:50:89:5D:EC:7E:0F:C4:24:DF:C2:4B:8C X509v3 Authority Key Identifier: keyid:D0:0C:C5:09:AF:17:31:0B:D0:82:A9:DE:64:01:DA:34:5F:E1:74:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/D00CC509AF17310BD082A9DE6401DA345FE17442.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D00CC509AF17310BD082A9DE6401DA345FE17442.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/D00CC509AF17310BD082A9DE6401DA345FE17442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:27:fe:4e:73:89:be:18:34:27:cd:33:ae:ab:3e:77:d9:27: ac:e2:e6:cc:59:1d:24:3c:ac:a6:cb:f4:fe:f2:76:a7:a2:79: 1d:0d:ee:aa:f2:e8:d7:b9:fb:2c:da:86:49:81:92:3a:e6:bc: c6:28:3f:6f:9d:1b:aa:56:c1:2e:0f:56:bd:b7:81:54:6e:6a: d3:36:7e:a0:7a:a8:77:2b:5c:6c:1d:2e:78:57:0f:e0:95:b9: cb:aa:0a:fe:f2:de:0f:38:b8:77:7e:1f:e6:96:b2:10:37:e9: 6b:6d:c9:52:8b:f4:60:bc:1b:da:e9:52:22:74:fa:95:6e:ae: 6d:43:6a:ca:1b:cb:dd:d6:9a:6f:75:fd:54:ef:3c:cd:b4:2d: e9:51:76:82:d8:49:14:e2:7e:f4:f6:09:02:b5:14:0c:e1:73: e6:63:9a:31:a2:3d:29:40:c8:b8:36:76:65:d1:39:a3:d1:0a: 36:3e:af:76:5b:30:31:fb:d7:15:9c:db:ad:77:55:e0:89:78: 31:4b:f2:20:17:0e:26:c8:ac:bd:9a:4c:b0:7a:d6:4b:2a:c6: 27:ee:5e:23:84:cf:48:d6:5d:a0:e3:73:70:22:ca:31:74:9e: 3a:eb:de:fe:32:a9:d2:21:af:44:17:0c:30:03:37:ae:81:3f: e1:1a:48:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS14P/Js1UfnsFkHm6LWMPK7Ra6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwQ0M1MDlBRjE3MzEwQkQwODJBOURFNjQwMURBMzQ1 RkUxNzQ0MjAeFw0yNTA0MjgwOTIyMzhaFw0yNTA0MjkxMjUxMzhaMDMxMTAvBgNV BAMTKENBQzBBMTAxRTlBNDYzRDQ1MDg5NURFQzdFMEZDNDI0REZDMjRCOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXU1wdRIsK744mh9CDGd2CWpa7 n6oW0KxLZEyJIKchNtp1xoUW5TEAaATCN+bODUVt8ut5MzKY6jbpfcXsV7RcWd2f 0iYB+8xx3gfvGV0GTg6IXjZHQai/mWY5AU3Ws81gZIGmJ8wVkLuppe5x+O7zlXTm gM63IzvQUTdXcnTBMMYTJe6uURR3TNSyI0D743AHs2SQB7wacKSOonQrJSfGrXZZ ol7j8w5whAM/SEXU5JJUq2OtnVnoWO66xD0n5ht5MHEw02SF0Gn4BNrWsPMxY+7P VPCzs4FTm7lIfJqiFCpEal17fPpYRRpyAWdSqMnxPPiC4MSMYRNwCWiLzVbRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUysChAemkY9RQiV3sfg/EJN/CS4wwHwYDVR0j BBgwFoAU0AzFCa8XMQvQgqneZAHaNF/hdEIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSkFkeWV4V2FIalZSb2h4ZEFpR29kVEM5eGp6VkpiWkhXcnpGR0xvTDE2 bk0vMC9EMDBDQzUwOUFGMTczMTBCRDA4MkE5REU2NDAxREEzNDVGRTE3NDQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwMENDNTA5QUYxNzMxMEJE MDgyQTlERTY0MDFEQTM0NUZFMTc0NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SkFkeWV4V2FIalZSb2h4ZEFpR29kVEM5eGp6VkpiWkhXcnpGR0xvTDE2bk0vMC9E MDBDQzUwOUFGMTczMTBCRDA4MkE5REU2NDAxREEzNDVGRTE3NDQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeSf+TnOJvhg0J80zrqs+d9knrOLmzFkdJDyspsv0/vJ2p6J5HQ3uqvLo17n7 LNqGSYGSOua8xig/b50bqlbBLg9WvbeBVG5q0zZ+oHqodytcbB0ueFcP4JW5y6oK /vLeDzi4d34f5payEDfpa23JUov0YLwb2ulSInT6lW6ubUNqyhvL3daab3X9VO88 zbQt6VF2gthJFOJ+9PYJArUUDOFz5mOaMaI9KUDIuDZ2ZdE5o9EKNj6vdlswMfvX FZzbrXdV4Il4MUvyIBcOJsisvZpMsHrWSyrGJ+5eI4TPSNZdoONzcCLKMXSeOuve /jKp0iGvRBcMMAM3roE/4RpIJw== -----END CERTIFICATE-----Generated at Mon Apr 28 13:05:05 2025 by rpki-client on console.sobornost.net