$ rpki-client -vvf rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.mft File: 688C4E450A1E9C4A430D25A4E2119AA4B53DD234.mft (raw, json) Hash identifier: yLTBBufeMxHUNtqntSQiPepn5HEJVAvUYW2Qh+seGvw= Subject key identifier: 33:A7:DC:39:26:84:40:10:62:D6:39:2D:99:F8:0B:84:69:D8:44:2E Authority key identifier: 68:8C:4E:45:0A:1E:9C:4A:43:0D:25:A4:E2:11:9A:A4:B5:3D:D2:34 Certificate issuer: /CN=688C4E450A1E9C4A430D25A4E2119AA4B53DD234 Certificate serial: 79C05E235DDE58D47200D494146B3035E82BDA21 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.cer Subject info access: rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.mft Manifest number: F2 Signing time: Tue 17 Jun 2025 10:09:48 +0000 Manifest this update: Tue 17 Jun 2025 10:04:48 +0000 Manifest next update: Wed 18 Jun 2025 14:07:48 +0000 Files and hashes: 1: 688C4E450A1E9C4A430D25A4E2119AA4B53DD234.crl (hash: N/YhpFg0NARBDykO3n8KtSgCc3ka4X5U2QDNQOK9Dps=) 2: 323830343a373466303a3a2f33322d3438203d3e20323731303133.roa (hash: hMFPPI8x0ZYN4CJCwq3IMtSDrKi/M1f+wsyRA+yTJcI=) 3: 3136382e3138312e3130302e302f32322d3234203d3e20323731303133.roa (hash: VUbkgjU98sebcr//E47MXUOCppMpLLyBzvFdh3Z4BYQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.crl rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 14:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c0:5e:23:5d:de:58:d4:72:00:d4:94:14:6b:30:35:e8:2b:da:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688C4E450A1E9C4A430D25A4E2119AA4B53DD234 Validity Not Before: Jun 17 10:04:48 2025 GMT Not After : Jun 18 14:07:48 2025 GMT Subject: CN=33A7DC392684401062D6392D99F80B8469D8442E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:ed:f9:cd:41:f0:7e:63:22:57:c2:c4:4f: d3:d6:7d:e0:e6:26:90:14:0f:e6:2d:ab:8e:27:07: 3b:44:b6:55:aa:c6:7b:12:28:19:8b:89:4e:29:3c: a0:af:7e:0a:fa:af:63:34:9e:d4:61:83:2d:b9:49: 16:b0:cb:68:eb:e7:41:cc:20:7f:04:6a:5b:73:8c: 7f:3b:7f:8a:c6:bd:e6:4f:4e:8c:2c:c1:f5:b2:07: a1:ba:02:0f:55:cc:0b:c4:61:d0:41:f7:78:95:26: c4:ce:1b:35:5a:29:e3:8f:78:c3:ac:02:3c:12:df: f2:f0:24:19:2c:64:5d:92:47:b7:a4:0e:48:6f:32: b5:b7:d8:e1:ea:35:fd:96:22:75:b9:e2:62:e4:50: 22:dc:ec:33:bb:91:9c:f8:cd:48:59:97:a9:a6:f6: 83:52:54:15:2e:c3:3c:aa:6d:84:e8:e2:f3:57:04: 03:56:3d:6c:7b:72:20:21:7f:00:82:28:80:af:a8: de:39:c6:fd:50:9b:22:29:c6:cb:a8:a3:77:4b:09: ba:c8:0f:0a:45:9a:a1:23:ee:32:07:77:30:5a:42: 82:41:56:a5:ad:05:e6:14:e0:01:55:74:31:de:d8: 1e:32:d1:89:5d:af:14:36:0b:a9:58:a4:57:25:27: 6d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A7:DC:39:26:84:40:10:62:D6:39:2D:99:F8:0B:84:69:D8:44:2E X509v3 Authority Key Identifier: keyid:68:8C:4E:45:0A:1E:9C:4A:43:0D:25:A4:E2:11:9A:A4:B5:3D:D2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/688C4E450A1E9C4A430D25A4E2119AA4B53DD234.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:96:25:ba:bb:b1:f8:b6:58:99:53:cf:ac:18:9d:ae:4a:09: c3:ea:d0:99:c0:80:62:9d:b0:b0:86:30:42:4d:0c:5c:4a:26: b0:09:d0:13:fe:4e:14:88:72:83:b8:2b:02:fe:66:19:87:0c: 3c:cb:23:a3:7c:4d:35:67:d2:be:ee:cd:ea:da:9b:03:9f:e4: ff:e1:ab:c9:8c:aa:11:9d:5b:9d:fb:0a:07:13:f3:4f:d0:58: 37:26:85:12:2c:c2:24:a2:0f:b5:d3:b8:74:2a:1e:b3:eb:13: e4:f8:aa:92:c6:ca:5d:87:f3:ea:39:c8:51:0d:1a:8f:a1:47: 77:62:ec:62:68:a1:3e:e6:ad:5d:a7:b8:84:34:4e:f9:e0:e0: 09:0c:ce:95:de:a7:c5:31:03:0e:75:2a:b1:30:33:8a:a3:40: e3:a9:31:e4:90:dc:b2:a9:2e:b2:3f:99:aa:67:65:d0:06:44: 9f:7c:0d:4b:a1:99:f7:f8:d7:e9:ad:2f:c7:8a:12:a2:97:34: 0d:06:1a:56:dc:00:29:01:d9:4d:e0:cd:21:d3:bf:2d:80:20: bf:58:41:50:11:7c:f1:4f:64:2b:2d:69:94:05:4e:9e:dc:a2: 6c:70:dd:ce:0e:37:38:d9:fe:33:61:a3:36:66:b7:9a:e5:1c: d9:66:57:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUecBeI13eWNRyANSUFGswNegr2iEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4QzRFNDUwQTFFOUM0QTQzMEQyNUE0RTIxMTlBQTRC NTNERDIzNDAeFw0yNTA2MTcxMDA0NDhaFw0yNTA2MTgxNDA3NDhaMDMxMTAvBgNV BAMTKDMzQTdEQzM5MjY4NDQwMTA2MkQ2MzkyRDk5RjgwQjg0NjlEODQ0MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqiu35zUHwfmMiV8LET9PWfeDm JpAUD+Ytq44nBztEtlWqxnsSKBmLiU4pPKCvfgr6r2M0ntRhgy25SRawy2jr50HM IH8EaltzjH87f4rGveZPTowswfWyB6G6Ag9VzAvEYdBB93iVJsTOGzVaKeOPeMOs AjwS3/LwJBksZF2SR7ekDkhvMrW32OHqNf2WInW54mLkUCLc7DO7kZz4zUhZl6mm 9oNSVBUuwzyqbYTo4vNXBANWPWx7ciAhfwCCKICvqN45xv1QmyIpxsuoo3dLCbrI DwpFmqEj7jIHdzBaQoJBVqWtBeYU4AFVdDHe2B4y0YldrxQ2C6lYpFclJ20HAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUM6fcOSaEQBBi1jktmfgLhGnYRC4wHwYDVR0j BBgwFoAUaIxORQoenEpDDSWk4hGapLU90jQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXRKcjY0cGsxTnY3cFhLSGlwaTRmVEJCNFJzNWJtR2EzVkVRYTNOY21w QVgvMC82ODhDNEU0NTBBMUU5QzRBNDMwRDI1QTRFMjExOUFBNEI1M0REMjM0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4OEM0RTQ1MEExRTlDNEE0 MzBEMjVBNEUyMTE5QUE0QjUzREQyMzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXRKcjY0cGsxTnY3cFhLSGlwaTRmVEJCNFJzNWJtR2EzVkVRYTNOY21wQVgvMC82 ODhDNEU0NTBBMUU5QzRBNDMwRDI1QTRFMjExOUFBNEI1M0REMjM0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaZYlurux+LZYmVPPrBidrkoJw+rQmcCAYp2wsIYwQk0MXEomsAnQE/5OFIhy g7grAv5mGYcMPMsjo3xNNWfSvu7N6tqbA5/k/+GryYyqEZ1bnfsKBxPzT9BYNyaF EizCJKIPtdO4dCoes+sT5PiqksbKXYfz6jnIUQ0aj6FHd2LsYmihPuatXae4hDRO +eDgCQzOld6nxTEDDnUqsTAziqNA46kx5JDcsqkusj+Zqmdl0AZEn3wNS6GZ9/jX 6a0vx4oSopc0DQYaVtwAKQHZTeDNIdO/LYAgv1hBUBF88U9kKy1plAVOntyibHDd zg43ONn+M2GjNma3muUc2WZX4w== -----END CERTIFICATE-----Generated at Wed Jun 18 04:27:43 2025 by rpki-client