$ rpki-client -vvf rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.mft File: B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.mft (raw, json) Hash identifier: uHinUqBaUkSQtG/D/b+GI6as4dh6+T94gEEThrDdMV0= Subject key identifier: AC:38:D4:91:98:91:8B:74:4D:D9:A2:27:0E:42:F9:F6:55:7D:20:44 Authority key identifier: B9:D1:B1:FF:7C:EF:5F:61:4B:C7:B3:D3:82:BC:36:5B:A8:42:20:54 Certificate issuer: /CN=B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054 Certificate serial: 44B7CC99B3C9280F8E04A952F895A68152ED6601 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.cer Subject info access: rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.mft Manifest number: 01DA Signing time: Mon 28 Apr 2025 13:31:15 +0000 Manifest this update: Mon 28 Apr 2025 13:26:15 +0000 Manifest next update: Tue 29 Apr 2025 13:44:15 +0000 Files and hashes: 1: 323830343a3834633a3a2f33322d3438203d3e20323632333633.roa (hash: xCFsYuVUhBgmTDvN/mdCv07I7GiOKUanrqDYTyBRQHk=) 2: 3137372e3132362e3234302e302f32302d3234203d3e20323632333633.roa (hash: ugCnw88BTq0+CEgxplOV0n++9LOLCEF63Yi0gQIZGto=) 3: B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.crl (hash: mzFARvBvCi8F3E0bgiQBimFUqcrL5P+CnWZHJtwhKyY=) 4: 3137372e3132362e3234382e302f32332d3234203d3e20323632333633.roa (hash: zpSZziASnME13eib2ahlYykB9P509NQDs5i2SsGCOig=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.crl rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 13:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b7:cc:99:b3:c9:28:0f:8e:04:a9:52:f8:95:a6:81:52:ed:66:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054 Validity Not Before: Apr 28 13:26:15 2025 GMT Not After : Apr 29 13:44:15 2025 GMT Subject: CN=AC38D49198918B744DD9A2270E42F9F6557D2044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0b:eb:b6:bd:c7:20:7d:65:44:ae:25:3d:44: 57:58:9a:60:9a:93:e4:5f:89:79:b0:5e:11:15:38: b6:6c:e0:2f:57:af:56:aa:52:c6:6c:41:ec:81:44: 11:22:29:0a:fa:6e:5b:45:19:f6:ba:6c:6c:f3:72: 27:61:0d:51:0c:10:bf:da:10:a4:46:08:21:80:16: 95:4c:80:6e:a5:d1:b3:94:41:a2:dd:df:f4:01:3d: 94:67:84:9f:40:01:cb:9f:a3:fe:ae:3c:49:ce:e0: 85:a8:e3:e9:37:76:59:56:62:be:cd:ad:cd:30:fb: 71:cd:59:d8:a0:78:dd:74:d1:7e:22:3c:58:a9:03: 21:bd:d1:b8:55:ff:fa:3a:66:1f:e2:bf:dd:61:17: ab:d8:10:b9:d9:cc:a4:5f:9d:d8:e1:84:3d:3c:4a: 23:31:b2:1e:d5:24:4e:f3:c7:e5:64:37:28:d7:65: f7:e9:9b:6b:38:08:b1:2f:67:4e:cb:fe:3e:dc:56: 8b:92:81:f2:29:4e:f9:4d:d1:69:c9:08:c5:3e:46: 91:bc:8b:97:dd:33:cb:be:a2:db:63:5a:6a:59:26: 06:7e:d1:f8:97:8c:f7:25:6e:6e:7a:ee:a6:52:31: f3:8f:7c:14:4b:c9:b8:49:a2:25:c3:d7:b2:ea:07: 15:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:38:D4:91:98:91:8B:74:4D:D9:A2:27:0E:42:F9:F6:55:7D:20:44 X509v3 Authority Key Identifier: keyid:B9:D1:B1:FF:7C:EF:5F:61:4B:C7:B3:D3:82:BC:36:5B:A8:42:20:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:dd:e9:58:0e:c7:eb:e6:0d:47:7b:62:8b:4f:f1:bf:0c:c7: c2:51:52:5d:a7:ba:32:6c:ae:ae:49:f3:54:b9:8f:e7:4e:b9: a3:e7:de:ea:b6:fe:60:48:23:28:f8:f2:df:0b:d1:68:2f:4b: b7:6e:90:57:de:3a:f3:4c:39:b5:70:60:63:c7:79:3e:f5:3b: 0a:75:9f:b6:db:1c:3b:3d:06:ee:b7:46:05:6e:03:36:5c:4c: 78:ea:07:1b:e8:d5:c4:fb:9f:81:21:05:18:30:ec:e2:44:4d: 77:48:12:8a:88:02:80:e2:85:e6:bb:14:da:06:08:33:0f:9f: 55:6e:9b:f9:4f:e0:03:9a:fc:5c:b9:d3:92:1d:25:71:9e:57: 62:13:cb:9a:2a:9c:a8:f9:dc:ec:6c:38:47:54:38:58:7c:0c: 98:2e:c9:6c:87:bf:05:2c:a8:76:26:25:a5:4c:eb:09:5f:80: a9:eb:c0:78:8e:5b:c6:6e:79:87:47:a6:c2:32:91:0a:31:90: 01:a0:c2:05:e2:73:ff:d7:44:08:b5:5d:ea:a9:08:29:d1:50: 56:2c:a2:e5:41:6b:e3:dd:07:67:80:49:21:47:a4:dc:2e:1e: ee:c8:d3:31:1e:40:ff:16:ee:4f:ad:dc:b2:eb:5a:00:2f:ec: a0:8e:6e:c4 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIURLfMmbPJKA+OBKlS+JWmgVLtZgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlEMUIxRkY3Q0VGNUY2MTRCQzdCM0QzODJCQzM2NUJB ODQyMjA1NDAeFw0yNTA0MjgxMzI2MTVaFw0yNTA0MjkxMzQ0MTVaMDMxMTAvBgNV BAMTKEFDMzhENDkxOTg5MThCNzQ0REQ5QTIyNzBFNDJGOUY2NTU3RDIwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfC+u2vccgfWVEriU9RFdYmmCa k+RfiXmwXhEVOLZs4C9Xr1aqUsZsQeyBRBEiKQr6bltFGfa6bGzzcidhDVEMEL/a EKRGCCGAFpVMgG6l0bOUQaLd3/QBPZRnhJ9AAcufo/6uPEnO4IWo4+k3dllWYr7N rc0w+3HNWdigeN100X4iPFipAyG90bhV//o6Zh/iv91hF6vYELnZzKRfndjhhD08 SiMxsh7VJE7zx+VkNyjXZffpm2s4CLEvZ07L/j7cVouSgfIpTvlN0WnJCMU+RpG8 i5fdM8u+ottjWmpZJgZ+0fiXjPclbm567qZSMfOPfBRLybhJoiXD17LqBxU7AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUrDjUkZiRi3RN2aInDkL59lV9IEQwHwYDVR0j BBgwFoAUudGx/3zvX2FLx7PTgrw2W6hCIFQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby91cUNEQWhuTGZNMzZqa3N4WTlhWjk4MUZlUm93NkhYQ3hjS1VXakVWZldC LzEvQjlEMUIxRkY3Q0VGNUY2MTRCQzdCM0QzODJCQzM2NUJBODQyMjA1NC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9COUQxQjFGRjdDRUY1RjYxNEJD N0IzRDM4MkJDMzY1QkE4NDIyMDU0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3Vx Q0RBaG5MZk0zNmprc3hZOWFaOTgxRmVSb3c2SFhDeGNLVVdqRVZmV0IvMS9COUQx QjFGRjdDRUY1RjYxNEJDN0IzRDM4MkJDMzY1QkE4NDIyMDU0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA VN3pWA7H6+YNR3tii0/xvwzHwlFSXae6MmyurknzVLmP5065o+fe6rb+YEgjKPjy 3wvRaC9Lt26QV94680w5tXBgY8d5PvU7CnWfttscOz0G7rdGBW4DNlxMeOoHG+jV xPufgSEFGDDs4kRNd0gSiogCgOKF5rsU2gYIMw+fVW6b+U/gA5r8XLnTkh0lcZ5X YhPLmiqcqPnc7Gw4R1Q4WHwMmC7JbIe/BSyodiYlpUzrCV+AqevAeI5bxm55h0em wjKRCjGQAaDCBeJz/9dECLVd6qkIKdFQViyi5UFr490HZ4BJIUek3C4e7sjTMR5A /xbuT63csutaAC/soI5uxA== -----END CERTIFICATE-----Generated at Mon Apr 28 15:25:13 2025 by rpki-client on console.sobornost.net