$ rpki-client -vvf rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.mft File: 68444A333B7333B9388B8EEAF41EBF4CE7435184.mft (raw, json) Hash identifier: d1YFrcM9eGY1zo/FPt1o7P9RSxV8NaGK3WMRdhP41fg= Subject key identifier: BC:82:F4:00:77:68:F3:65:41:13:F9:56:04:A5:58:78:D3:21:C9:E6 Authority key identifier: 68:44:4A:33:3B:73:33:B9:38:8B:8E:EA:F4:1E:BF:4C:E7:43:51:84 Certificate issuer: /CN=68444A333B7333B9388B8EEAF41EBF4CE7435184 Certificate serial: 502B98362E66DA31C4B82BC489A17ECA9D68D65B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68444A333B7333B9388B8EEAF41EBF4CE7435184.cer Subject info access: rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.mft Manifest number: EA Signing time: Tue 03 Jun 2025 20:15:09 +0000 Manifest this update: Tue 03 Jun 2025 20:10:09 +0000 Manifest next update: Wed 04 Jun 2025 21:49:09 +0000 Files and hashes: 1: 323830343a393061303a3a2f33332d3333203d3e20323733353634.roa (hash: 9slyalyodfIjuabKQl1OaotSu3tVzc0vjMGuFcg7H6s=) 2: 323830343a393061303a383030303a3a2f33332d3333203d3e20323733353634.roa (hash: v7S2CLGT/ZqXkfm07pku2Pp32bVIRh7d3pnHAY8XPa0=) 3: 323830343a393061303a3a2f33322d3332203d3e20323733353634.roa (hash: V4WyGeoLeCa9NI+HATajuvHV4jSt4eH6YjiJOyRWgBs=) 4: 68444A333B7333B9388B8EEAF41EBF4CE7435184.crl (hash: hTekAuJtThF7Y2YmL93StlNkHBwbZaO2ebxl2gmEXd8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.crl rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68444A333B7333B9388B8EEAF41EBF4CE7435184.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Jun 2025 21:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2b:98:36:2e:66:da:31:c4:b8:2b:c4:89:a1:7e:ca:9d:68:d6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68444A333B7333B9388B8EEAF41EBF4CE7435184 Validity Not Before: Jun 3 20:10:09 2025 GMT Not After : Jun 4 21:49:09 2025 GMT Subject: CN=BC82F4007768F3654113F95604A55878D321C9E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:9b:de:e9:79:57:1d:16:80:f8:8c:b0:8e: 42:4c:26:bc:b5:c8:2d:89:fe:de:3e:75:c0:bc:83: 93:62:94:f6:31:4a:de:83:74:ae:4f:ac:8c:31:b3: 6e:fa:57:9c:3d:12:87:40:dd:93:1b:94:a7:f3:f2: 61:94:dc:ab:3e:79:5d:a6:5c:93:1e:a9:ef:d3:a8: 88:7e:9f:85:2b:b6:61:c9:9b:40:e4:62:fb:7e:dc: d9:07:91:a4:45:03:a9:80:23:f0:eb:27:26:7f:c5: 36:7c:5b:3e:8d:ad:8c:10:9d:37:90:a5:a6:85:50: 10:36:f8:b8:f2:c3:e0:5f:01:46:64:dd:99:86:1d: 12:a9:d7:2e:82:fb:2d:8c:f4:af:99:51:44:41:23: 15:e2:28:c5:d7:b9:1a:dc:4f:e8:c4:d8:e2:ac:df: 62:6b:af:66:49:d3:28:dd:b9:5a:9e:6e:37:6e:01: 3d:df:8b:84:9f:7a:07:6b:8a:5b:3f:0a:a4:33:91: 47:ee:e2:e2:60:af:7f:3b:04:2b:45:9d:23:01:b3: e2:3c:80:08:48:41:d6:26:35:8e:ad:1d:05:0b:3a: 67:ce:87:be:d3:8a:03:a3:28:78:a7:68:b8:f0:c0: bc:12:34:a2:9e:37:70:5c:49:0d:9e:02:a7:9c:73: 87:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:82:F4:00:77:68:F3:65:41:13:F9:56:04:A5:58:78:D3:21:C9:E6 X509v3 Authority Key Identifier: keyid:68:44:4A:33:3B:73:33:B9:38:8B:8E:EA:F4:1E:BF:4C:E7:43:51:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68444A333B7333B9388B8EEAF41EBF4CE7435184.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c0:62:ae:ae:2e:94:16:eb:93:c5:cd:84:dd:f6:eb:34:31: 57:bb:00:49:e3:de:50:a4:c1:92:3a:65:12:f8:39:ac:59:8d: 73:de:89:4f:10:cb:66:dc:a6:c8:1e:4d:51:63:78:e5:81:86: 44:dc:28:5c:1b:ec:af:13:6f:26:27:e9:cf:71:9c:4d:e4:56: fb:96:c5:58:b9:2b:24:fb:81:bf:d7:33:6e:b4:ae:d5:50:ce: 8d:ca:4d:93:02:d2:10:eb:99:f1:37:e2:a0:89:06:ec:de:55: 01:f4:d4:9e:3d:1b:d3:3e:01:18:98:4f:3d:b3:72:b4:64:c3: 84:82:ae:74:4f:45:fb:6f:29:51:4b:28:f0:1d:9d:69:b0:63: 29:56:e0:62:4c:eb:c5:85:ba:c2:29:71:ac:ba:cf:8f:f0:cd: 7b:49:63:30:3a:4f:80:a7:17:30:fd:b8:07:a3:3e:58:5f:40: 20:9b:ec:03:fb:2d:35:19:29:51:a9:00:e0:eb:d4:a4:41:ea: 47:c7:0e:38:8e:e5:75:78:1c:85:74:de:c0:04:89:48:39:ee: 19:18:ba:85:a1:12:32:0b:a0:26:45:e8:51:04:51:68:71:e7: d3:f4:a9:5f:77:c0:c3:d9:16:47:06:4b:c5:30:36:75:d6:18: 61:cc:44:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUCuYNi5m2jHEuCvEiaF+yp1o1lswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0NDRBMzMzQjczMzNCOTM4OEI4RUVBRjQxRUJGNENF NzQzNTE4NDAeFw0yNTA2MDMyMDEwMDlaFw0yNTA2MDQyMTQ5MDlaMDMxMTAvBgNV BAMTKEJDODJGNDAwNzc2OEYzNjU0MTEzRjk1NjA0QTU1ODc4RDMyMUM5RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBfZve6XlXHRaA+IywjkJMJry1 yC2J/t4+dcC8g5NilPYxSt6DdK5PrIwxs276V5w9EodA3ZMblKfz8mGU3Ks+eV2m XJMeqe/TqIh+n4UrtmHJm0DkYvt+3NkHkaRFA6mAI/DrJyZ/xTZ8Wz6NrYwQnTeQ paaFUBA2+Ljyw+BfAUZk3ZmGHRKp1y6C+y2M9K+ZUURBIxXiKMXXuRrcT+jE2OKs 32Jrr2ZJ0yjduVqebjduAT3fi4Sfegdrils/CqQzkUfu4uJgr387BCtFnSMBs+I8 gAhIQdYmNY6tHQULOmfOh77TigOjKHinaLjwwLwSNKKeN3BcSQ2eAqecc4eLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvIL0AHdo82VBE/lWBKVYeNMhyeYwHwYDVR0j BBgwFoAUaERKMztzM7k4i47q9B6/TOdDUYQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFJCVUI0NXIzQnZOY0RBQ0JTYlBhVlk1M2VQOEpGMzc5NXcxWXAzam4x cGcvMC82ODQ0NEEzMzNCNzMzM0I5Mzg4QjhFRUFGNDFFQkY0Q0U3NDM1MTg0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4NDQ0QTMzM0I3MzMzQjkz ODhCOEVFQUY0MUVCRjRDRTc0MzUxODQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFJCVUI0NXIzQnZOY0RBQ0JTYlBhVlk1M2VQOEpGMzc5NXcxWXAzam4xcGcvMC82 ODQ0NEEzMzNCNzMzM0I5Mzg4QjhFRUFGNDFFQkY0Q0U3NDM1MTg0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ8Birq4ulBbrk8XNhN326zQxV7sASePeUKTBkjplEvg5rFmNc96JTxDLZtym yB5NUWN45YGGRNwoXBvsrxNvJifpz3GcTeRW+5bFWLkrJPuBv9czbrSu1VDOjcpN kwLSEOuZ8TfioIkG7N5VAfTUnj0b0z4BGJhPPbNytGTDhIKudE9F+28pUUso8B2d abBjKVbgYkzrxYW6wilxrLrPj/DNe0ljMDpPgKcXMP24B6M+WF9AIJvsA/stNRkp UakA4OvUpEHqR8cOOI7ldXgchXTewASJSDnuGRi6haESMgugJkXoUQRRaHHn0/Sp X3fAw9kWRwZLxTA2ddYYYcxEug== -----END CERTIFICATE-----Generated at Wed Jun 4 11:24:26 2025 by rpki-client