$ rpki-client -vvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft File: 68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft (raw, json) Hash identifier: nITl4/89oUOrGitcO4YFHqAwrHIiBVEL7x/ML6oY3cY= Subject key identifier: DC:82:59:D3:5D:89:5C:49:7B:A3:EE:28:18:8C:0B:5F:51:50:5E:19 Authority key identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76 Certificate issuer: /CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76 Certificate serial: 33F3FDDE4A2FFD5073B69BF53E661A8CCF343102 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer Subject info access: rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft Manifest number: 0142 Signing time: Thu 19 Jun 2025 19:26:37 +0000 Manifest this update: Thu 19 Jun 2025 19:21:37 +0000 Manifest next update: Fri 20 Jun 2025 20:45:37 +0000 Files and hashes: 1: 3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa (hash: qvIMK685FSdFyB1oJt5aRMfVxCvrfR5JXAjYLXbC+4w=) 2: 323830343a333564343a3a2f33322d3332203d3e20323636333039.roa (hash: A0xY8FQpNJ+Dmu/PZSKbDs05Sg3vxalRRBfAWO03pMk=) 3: 323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa (hash: 2INq3xE6upAmDztTdWwtjePXTuQOj2MAyDG9knhJelM=) 4: 68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl (hash: ykGlcOo0xwCsNm/Qq7kpfC8yINRWZNq+r0R4y/OBHT4=) 5: 323830343a333564343a3a2f33332d3333203d3e20323636333039.roa (hash: NBE6K6zJ/FotRliNVDb8nUAwWjiBFGRk7f5Lj9E98Xo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 20:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f3:fd:de:4a:2f:fd:50:73:b6:9b:f5:3e:66:1a:8c:cf:34:31:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76 Validity Not Before: Jun 19 19:21:37 2025 GMT Not After : Jun 20 20:45:37 2025 GMT Subject: CN=DC8259D35D895C497BA3EE28188C0B5F51505E19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:1d:78:27:bc:44:4a:d8:f9:e6:71:14:3a: b7:3f:02:7b:c1:20:dd:60:20:55:28:d6:e8:90:86: 42:4b:50:bf:3d:60:cf:b5:b6:47:77:ec:70:1b:64: 81:73:6d:f4:ab:c3:cc:07:d8:d3:47:17:fb:c5:4a: 36:f4:f1:1e:07:61:09:6e:0c:c7:34:1f:ec:0d:35: c3:f5:1b:04:c4:13:30:ee:c8:00:88:26:40:c7:83: ee:5f:58:5f:65:87:f4:97:e8:0e:8d:b5:48:a0:13: 69:5d:23:24:42:a5:ed:27:61:aa:71:71:c3:d8:7c: 0b:f5:c0:05:82:29:e1:80:a8:a8:23:bd:f0:5c:df: fb:85:da:1e:2e:8c:f7:02:f9:8a:cc:a8:75:c2:25: ce:a3:22:0a:37:6d:d0:1a:4d:00:81:78:7c:4a:b2: 62:97:fd:c2:3a:2b:42:d9:22:c5:c0:bb:c8:cc:40: 20:81:5c:58:78:ed:b3:fc:af:85:94:6f:65:26:65: 6b:2e:90:7a:af:d9:a9:d3:60:78:88:cf:d2:d1:78: 47:a2:08:1c:3c:f6:23:23:ac:50:89:a6:ae:15:8c: c9:2b:96:41:a9:8f:e0:0f:6e:01:99:ca:0f:c5:8d: cf:c2:1a:51:47:ea:d8:53:25:47:cb:7a:d1:4b:27: ac:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:82:59:D3:5D:89:5C:49:7B:A3:EE:28:18:8C:0B:5F:51:50:5E:19 X509v3 Authority Key Identifier: keyid:68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:2d:cf:92:01:7d:09:9b:a2:9c:ce:3f:e1:28:47:c5:37:f5: 70:8e:c7:41:1d:b7:f9:31:c6:70:43:b5:ae:6a:b3:d6:51:b2: c8:b3:46:52:d4:d5:a1:29:98:64:e2:27:97:66:2b:e5:e6:25: f6:88:47:33:81:b8:34:9f:28:0c:70:24:83:b0:8c:7a:ae:f4: 32:ca:36:29:42:61:b8:26:11:ce:08:e9:df:13:bf:ee:65:f6: 44:17:d3:81:7c:d9:7e:49:5e:73:31:83:74:48:35:f8:5f:4a: 04:de:1b:f4:40:39:f1:d4:b4:29:5e:49:53:47:51:78:d4:ef: e5:b3:f9:a6:e1:7c:f0:f5:c4:2b:54:b7:21:4d:80:6f:9e:e0: 24:d8:8c:2c:ec:bd:be:80:8c:24:1c:fc:97:d4:d4:9f:ec:22: de:69:87:e4:21:f4:95:e4:c1:a5:cf:69:24:e6:e8:b5:04:d4: 28:71:78:22:b7:9c:b4:5d:61:fa:6d:65:c3:90:38:6d:dd:8b: ae:bc:64:7f:19:d7:81:7e:3d:3d:8d:1d:90:47:60:ac:8b:8f: 4a:a0:ca:ae:f3:ed:88:17:18:f8:84:7b:0a:04:a2:2d:6c:50: f6:81:b3:b2:33:0c:42:c1:0c:8b:3e:27:65:c5:f1:9d:64:3c: 73:fb:36:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM/P93kov/VBztpv1PmYajM80MQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjgwNDBBRUIzQUM5OEI1RkYzQzAzRDk4RTkwMUFCODE3 NzM0M0M3NjAeFw0yNTA2MTkxOTIxMzdaFw0yNTA2MjAyMDQ1MzdaMDMxMTAvBgNV BAMTKERDODI1OUQzNUQ4OTVDNDk3QkEzRUUyODE4OEMwQjVGNTE1MDVFMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx7x14J7xEStj55nEUOrc/AnvB IN1gIFUo1uiQhkJLUL89YM+1tkd37HAbZIFzbfSrw8wH2NNHF/vFSjb08R4HYQlu DMc0H+wNNcP1GwTEEzDuyACIJkDHg+5fWF9lh/SX6A6NtUigE2ldIyRCpe0nYapx ccPYfAv1wAWCKeGAqKgjvfBc3/uF2h4ujPcC+YrMqHXCJc6jIgo3bdAaTQCBeHxK smKX/cI6K0LZIsXAu8jMQCCBXFh47bP8r4WUb2UmZWsukHqv2anTYHiIz9LReEei CBw89iMjrFCJpq4VjMkrlkGpj+APbgGZyg/Fjc/CGlFH6thTJUfLetFLJ6wjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3IJZ012JXEl7o+4oGIwLX1FQXhkwHwYDVR0j BBgwFoAUaAQK6zrJi1/zwD2Y6QGrgXc0PHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWFGbzhZa1ZxODVGTm81ejd2b1FBcloyTHdGQ3A3R3hqNjEzZUg4UG5x ejkvMC82ODA0MEFFQjNBQzk4QjVGRjNDMDNEOThFOTAxQUI4MTc3MzQzQzc2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4MDQwQUVCM0FDOThCNUZG M0MwM0Q5OEU5MDFBQjgxNzczNDNDNzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWFGbzhZa1ZxODVGTm81ejd2b1FBcloyTHdGQ3A3R3hqNjEzZUg4UG5xejkvMC82 ODA0MEFFQjNBQzk4QjVGRjNDMDNEOThFOTAxQUI4MTc3MzQzQzc2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJC3PkgF9CZuinM4/4ShHxTf1cI7HQR23+THGcEO1rmqz1lGyyLNGUtTVoSmY ZOInl2Yr5eYl9ohHM4G4NJ8oDHAkg7CMeq70Mso2KUJhuCYRzgjp3xO/7mX2RBfT gXzZfkleczGDdEg1+F9KBN4b9EA58dS0KV5JU0dReNTv5bP5puF88PXEK1S3IU2A b57gJNiMLOy9voCMJBz8l9TUn+wi3mmH5CH0leTBpc9pJObotQTUKHF4IrectF1h +m1lw5A4bd2LrrxkfxnXgX49PY0dkEdgrIuPSqDKrvPtiBcY+IR7CgSiLWxQ9oGz sjMMQsEMiz4nZcXxnWQ8c/s28Q== -----END CERTIFICATE-----Generated at Fri Jun 20 00:45:48 2025 by rpki-client