$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft File: 68EC60223DF10BE63B7A84464ACF2A9697173D75.mft (raw, json) Hash identifier: la3uK/9AX2E5FkA0Qll4C7Pu3LFH5WpjhQsLvf8nUyM= Subject key identifier: BF:41:C7:F4:78:02:75:11:8F:93:D6:26:9D:21:CD:94:9B:09:57:E6 Authority key identifier: 68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75 Certificate issuer: /CN=68EC60223DF10BE63B7A84464ACF2A9697173D75 Certificate serial: 3BCD4302585341BABFB3DEC294FE8DE306394855 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer Subject info access: rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft Manifest number: 0238 Signing time: Mon 16 Jun 2025 21:01:13 +0000 Manifest this update: Mon 16 Jun 2025 20:56:13 +0000 Manifest next update: Tue 17 Jun 2025 23:56:13 +0000 Files and hashes: 1: 323830343a326233343a3a2f33322d3334203d3e20323635313430.roa (hash: uVxLH7D1ow0Hh8/yZxt1+IGQzZ0wkS42JQSyCTZ76C0=) 2: 3134332e3235352e302e302f32322d3234203d3e20323635313430.roa (hash: jO+j2ycSSgUqX/c6R4D4iMxvnJVHoWNPsmxQHR/K7WA=) 3: 68EC60223DF10BE63B7A84464ACF2A9697173D75.crl (hash: ztkEb+5BiOLcNRQm+YwMwNkidHe9g6AWZfTUQ0GaqZI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 22:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:cd:43:02:58:53:41:ba:bf:b3:de:c2:94:fe:8d:e3:06:39:48:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68EC60223DF10BE63B7A84464ACF2A9697173D75 Validity Not Before: Jun 16 20:56:13 2025 GMT Not After : Jun 17 23:56:13 2025 GMT Subject: CN=BF41C7F4780275118F93D6269D21CD949B0957E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ce:62:47:58:45:2d:1d:13:16:fe:b4:06:e0: b1:28:bf:6a:bf:b1:98:1c:e4:13:99:91:9c:05:09: 33:56:14:ce:49:d2:e0:e6:42:ca:5a:e4:6b:fb:56: b8:e9:f7:f7:a9:46:57:a2:e1:73:4f:55:f1:9e:89: 93:ae:5a:27:ea:a0:ac:06:b9:87:e3:89:5f:78:21: e0:8b:97:19:ce:34:16:65:d0:ff:38:68:c9:0f:d5: 58:c9:a6:b9:80:72:8c:58:dc:cf:b9:96:39:ef:f6: 2f:02:96:f0:0d:22:1e:b8:f8:e2:55:5c:64:36:15: 00:bc:a9:97:aa:51:58:46:06:f2:04:fd:a3:fe:20: 6a:a6:73:b2:43:d9:74:2d:d2:56:1a:93:3a:9b:d4: 2e:71:89:78:1f:8c:3a:44:56:0b:73:94:09:99:99: 1e:43:d9:dd:da:db:06:b6:94:74:d9:05:c1:c1:c6: f4:62:d8:b5:5e:80:0b:22:07:15:8f:d1:93:1e:3e: 0f:71:18:f8:42:3e:0f:91:fb:58:01:86:a3:b1:74: 1c:42:67:cb:90:6c:72:66:e5:6b:15:fb:aa:37:be: c3:63:2f:84:44:50:fe:42:62:1c:49:85:1e:f9:eb: d5:f2:88:99:ea:d2:48:45:fa:b0:83:93:4e:57:4c: e3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:41:C7:F4:78:02:75:11:8F:93:D6:26:9D:21:CD:94:9B:09:57:E6 X509v3 Authority Key Identifier: keyid:68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:53:d4:31:2f:9b:d1:f0:c8:26:63:bb:a1:d3:20:0c:00:ef: 26:b4:fb:c9:62:b0:f6:c3:60:43:08:32:19:76:d6:b2:3f:31: 3c:4c:bc:ec:fe:8f:2f:77:f7:c9:37:4a:46:a2:ca:c9:6f:c0: 99:bc:f5:47:4c:d1:6f:a6:d0:f1:52:fa:fa:29:1b:78:95:36: 6e:cd:75:00:5b:57:60:d4:75:cf:6c:cb:39:48:33:ad:c1:1b: 96:0c:3b:a7:e3:9e:cb:fe:b2:6d:1c:db:7c:fa:82:68:83:a4: 4d:16:3f:f9:39:6a:7b:8d:74:0a:f1:64:ac:9a:27:96:aa:76: 86:5a:bb:da:17:29:46:d3:08:16:d5:83:c1:23:bd:1d:e4:44: 90:f0:a0:58:75:9c:82:1f:82:f3:1d:d6:c9:18:3a:ef:5b:0c: 52:1c:1c:97:40:d1:21:4c:73:b1:be:7a:53:1e:5b:65:78:1b: e0:54:87:6b:d3:2b:5e:bd:f7:05:11:85:69:aa:4b:b2:69:40: 9e:b6:26:2c:ad:cc:6e:57:06:ea:ff:1b:30:1b:b4:c9:66:58: 1b:ea:3e:d4:61:c5:f3:c7:7d:d9:62:8d:fb:70:d6:ff:cb:af: 92:aa:41:20:c4:a9:f0:37:55:07:a3:22:90:81:1c:ba:54:cd: 22:8d:63:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO81DAlhTQbq/s97ClP6N4wY5SFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhFQzYwMjIzREYxMEJFNjNCN0E4NDQ2NEFDRjJBOTY5 NzE3M0Q3NTAeFw0yNTA2MTYyMDU2MTNaFw0yNTA2MTcyMzU2MTNaMDMxMTAvBgNV BAMTKEJGNDFDN0Y0NzgwMjc1MTE4RjkzRDYyNjlEMjFDRDk0OUIwOTU3RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdzmJHWEUtHRMW/rQG4LEov2q/ sZgc5BOZkZwFCTNWFM5J0uDmQspa5Gv7Vrjp9/epRlei4XNPVfGeiZOuWifqoKwG uYfjiV94IeCLlxnONBZl0P84aMkP1VjJprmAcoxY3M+5ljnv9i8ClvANIh64+OJV XGQ2FQC8qZeqUVhGBvIE/aP+IGqmc7JD2XQt0lYakzqb1C5xiXgfjDpEVgtzlAmZ mR5D2d3a2wa2lHTZBcHBxvRi2LVegAsiBxWP0ZMePg9xGPhCPg+R+1gBhqOxdBxC Z8uQbHJm5WsV+6o3vsNjL4REUP5CYhxJhR7569XyiJnq0khF+rCDk05XTOPrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUv0HH9HgCdRGPk9YmnSHNlJsJV+YwHwYDVR0j BBgwFoAUaOxgIj3xC+Y7eoRGSs8qlpcXPXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5NNWtOVkVQeTl2RDVkVGNRY2ROQnl1eHBkMm5IeTRTM2prVXFIUktE Z24vMC82OEVDNjAyMjNERjEwQkU2M0I3QTg0NDY0QUNGMkE5Njk3MTczRDc1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RUM2MDIyM0RGMTBCRTYz QjdBODQ0NjRBQ0YyQTk2OTcxNzNENzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5NNWtOVkVQeTl2RDVkVGNRY2ROQnl1eHBkMm5IeTRTM2prVXFIUktEZ24vMC82 OEVDNjAyMjNERjEwQkU2M0I3QTg0NDY0QUNGMkE5Njk3MTczRDc1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgFPUMS+b0fDIJmO7odMgDADvJrT7yWKw9sNgQwgyGXbWsj8xPEy87P6PL3f3 yTdKRqLKyW/Ambz1R0zRb6bQ8VL6+ikbeJU2bs11AFtXYNR1z2zLOUgzrcEblgw7 p+Oey/6ybRzbfPqCaIOkTRY/+Tlqe410CvFkrJonlqp2hlq72hcpRtMIFtWDwSO9 HeREkPCgWHWcgh+C8x3WyRg671sMUhwcl0DRIUxzsb56Ux5bZXgb4FSHa9MrXr33 BRGFaapLsmlAnrYmLK3MblcG6v8bMBu0yWZYG+o+1GHF88d92WKN+3DW/8uvkqpB IMSp8DdVB6MikIEculTNIo1jzQ== -----END CERTIFICATE-----Generated at Tue Jun 17 04:34:50 2025 by rpki-client