$ rpki-client -vvf rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft File: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft (raw, json) Hash identifier: 0SC9G2P+xI0+quU0zXk0VttZ1RCWI+NBQCF0e0fn7LU= Subject key identifier: A8:13:D3:78:4A:A1:40:3F:18:1D:6B:9A:D3:74:8E:F2:69:C4:69:6D Authority key identifier: 1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 Certificate issuer: /CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Certificate serial: 77A2FB358EBEAC1DAF6A135B79D7995427A3FC2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft Manifest number: 01FF Signing time: Thu 24 Apr 2025 21:13:58 +0000 Manifest this update: Thu 24 Apr 2025 21:08:58 +0000 Manifest next update: Sat 26 Apr 2025 00:07:58 +0000 Files and hashes: 1: 34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa (hash: 1C/jOWt5ZHfKspqIFOUeY8exgTDIPGSvNHULSTIuARE=) 2: 323830343a346566383a3a2f33322d3335203d3e20323638323935.roa (hash: BstW0UlvH2wEHgaNKCbfIv8DXJSe7M/kYqDRbvgjc5k=) 3: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl (hash: xHmMg3Zbz3PqX4n0i9W74R4AdBZ2lsHEQL/uLbaO3sE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Apr 2025 21:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a2:fb:35:8e:be:ac:1d:af:6a:13:5b:79:d7:99:54:27:a3:fc:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Validity Not Before: Apr 24 21:08:58 2025 GMT Not After : Apr 26 00:07:58 2025 GMT Subject: CN=A813D3784AA1403F181D6B9AD3748EF269C4696D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bf:63:89:b7:42:aa:9b:36:2e:54:71:82:0c: 30:ab:11:19:e6:e1:ff:94:a7:04:95:38:16:ed:96: 35:3b:30:7a:84:12:05:6d:7f:22:eb:33:95:b4:5d: de:77:e1:7d:09:dc:f3:70:6f:72:cb:a1:43:54:5f: 32:d9:5f:75:21:41:6f:25:49:23:10:3b:5c:17:60: 79:37:4d:8b:e2:00:71:eb:99:fc:88:1a:2f:de:b5: 7a:16:62:4e:c6:fb:be:f4:3d:ed:a4:41:09:45:03: f8:b7:c5:f5:c0:3e:70:49:e1:da:c1:58:bb:9b:01: 78:14:ab:af:b8:b9:ba:c0:af:94:31:32:22:9a:d5: e6:eb:64:d4:1f:64:fb:a3:d5:a9:f9:56:f2:1c:9a: 58:5b:19:e6:cd:a4:3e:cb:ff:fd:c8:3f:48:42:ec: c8:dc:b8:ad:2f:de:b8:cb:0d:34:c5:20:dd:c5:57: 61:8d:ab:4a:da:8b:1d:8a:20:87:55:34:bb:02:7c: 8d:ef:3f:e6:9b:cf:35:a5:bc:e9:59:46:bc:5d:d4: 9c:10:b2:cb:ab:d3:be:b3:86:26:18:ab:77:a7:b0: ea:96:77:80:47:ac:53:6e:70:ab:e9:3b:43:df:96: 88:bd:e0:53:4a:35:e9:bd:32:31:43:ee:4e:39:9b: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:13:D3:78:4A:A1:40:3F:18:1D:6B:9A:D3:74:8E:F2:69:C4:69:6D X509v3 Authority Key Identifier: keyid:1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:94:39:62:91:19:88:07:c4:ec:73:6d:87:8d:4c:a9:3b:f8: bf:bf:79:aa:7e:76:36:61:e3:21:df:de:99:d2:70:21:0c:74: 5b:47:1e:30:79:19:b7:a4:87:52:48:6c:c6:54:ca:cb:a6:fd: c8:3e:9a:2a:54:f3:54:ca:5e:14:1b:f2:18:55:5b:9c:fb:6c: 16:af:0b:95:70:28:e2:5b:b0:67:11:76:af:38:7f:98:5a:c3: 06:32:65:77:35:30:f8:6e:63:24:2a:da:30:8d:98:10:11:e7: 18:24:11:5d:d5:f2:d8:22:b5:d6:15:7a:a5:18:7b:0e:ee:1f: 08:03:95:27:e6:e2:a3:45:0d:9f:dc:e5:21:8b:f8:fc:06:d2: 08:42:4b:04:40:51:4f:b5:50:30:38:4f:df:f2:52:11:dd:68: d4:63:af:8a:77:b0:8a:2f:af:38:35:0d:79:de:44:ce:bc:b8: cb:ef:d0:79:0e:01:7a:2d:37:95:3e:c5:b1:fe:52:c0:28:37: c0:82:de:0e:d6:18:30:c2:35:af:0a:a3:c0:04:3d:27:f5:71: 3f:9f:2c:9c:c6:ca:d6:2d:6f:cb:79:ef:39:36:e2:32:07:73: d3:15:b1:6c:6c:54:17:0e:97:3a:44:08:0d:f4:92:a9:53:75: 3b:51:e0:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUd6L7NY6+rB2vahNbedeZVCej/C4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMzYwOUQ5NjZERDhCMjJFNUZENTY2N0U0QkFDQUNF RkY4RDFGMDAeFw0yNTA0MjQyMTA4NThaFw0yNTA0MjYwMDA3NThaMDMxMTAvBgNV BAMTKEE4MTNEMzc4NEFBMTQwM0YxODFENkI5QUQzNzQ4RUYyNjlDNDY5NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtv2OJt0KqmzYuVHGCDDCrERnm 4f+UpwSVOBbtljU7MHqEEgVtfyLrM5W0Xd534X0J3PNwb3LLoUNUXzLZX3UhQW8l SSMQO1wXYHk3TYviAHHrmfyIGi/etXoWYk7G+770Pe2kQQlFA/i3xfXAPnBJ4drB WLubAXgUq6+4ubrAr5QxMiKa1ebrZNQfZPuj1an5VvIcmlhbGebNpD7L//3IP0hC 7MjcuK0v3rjLDTTFIN3FV2GNq0raix2KIIdVNLsCfI3vP+abzzWlvOlZRrxd1JwQ ssur076zhiYYq3ensOqWd4BHrFNucKvpO0Pfloi94FNKNem9MjFD7k45m6rNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqBPTeEqhQD8YHWua03SO8mnEaW0wHwYDVR0j BBgwFoAUG6NgnZZt2LIuX9VmfkusrO/40fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FI cm8vMS8xQkEzNjA5RDk2NkREOEIyMkU1RkQ1NjY3RTRCQUNBQ0VGRjhEMUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCQTM2MDlEOTY2REQ4QjIy RTVGRDU2NjdFNEJBQ0FDRUZGOEQxRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FIcm8vMS8x QkEzNjA5RDk2NkREOEIyMkU1RkQ1NjY3RTRCQUNBQ0VGRjhEMUYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWJQ5YpEZiAfE7HNth41MqTv4v795qn52NmHjId/emdJwIQx0W0ceMHkZt6SH UkhsxlTKy6b9yD6aKlTzVMpeFBvyGFVbnPtsFq8LlXAo4luwZxF2rzh/mFrDBjJl dzUw+G5jJCraMI2YEBHnGCQRXdXy2CK11hV6pRh7Du4fCAOVJ+bio0UNn9zlIYv4 /AbSCEJLBEBRT7VQMDhP3/JSEd1o1GOvinewii+vODUNed5Ezry4y+/QeQ4Bei03 lT7Fsf5SwCg3wILeDtYYMMI1rwqjwAQ9J/VxP58snMbK1i1vy3nvOTbiMgdz0xWx bGxUFw6XOkQIDfSSqVN1O1HgOw== -----END CERTIFICATE-----Generated at Fri Apr 25 00:06:38 2025 by rpki-client on console.sobornost.net