$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft File: BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft (raw, json) Hash identifier: 6T7j35tV5XlObUrn7v/O5rcAoadBURoUfORPddW4PM8= Subject key identifier: 32:5F:1B:4A:B0:63:6B:56:48:F3:C6:FF:14:04:82:BD:94:1F:0F:8C Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C Certificate issuer: /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C Certificate serial: 1A8F287AAA4762A3CBB4F3746241FB39A65A354C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft Manifest number: 024D Signing time: Mon 16 Jun 2025 14:00:32 +0000 Manifest this update: Mon 16 Jun 2025 13:55:32 +0000 Manifest next update: Tue 17 Jun 2025 17:37:32 +0000 Files and hashes: 1: 34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa (hash: JpCO4M6N05dDszkPP+IB3KMtveMRN/h0JLU2Pd3nWww=) 2: 323830343a353261633a343030303a3a2f33342d3334203d3e20323638353333.roa (hash: mqy8b9GeFOuJat8npSCtdNaMsEv+mc/f5yfeDuhXnYY=) 3: 323830343a353261633a3a2f33342d3334203d3e20323638353333.roa (hash: q4zgkyKtFDn2O0A5TEaDzEsRkWK7zaVWPz1XfL9ig6Q=) 4: 34352e3136322e3232362e302f32332d3233203d3e20323638353333.roa (hash: I+Ww78nrqDFQJeSUCTyBI5VULHKBcS0W9+lh0BWLpDE=) 5: 34352e3136322e3232342e302f32332d3233203d3e20323638353333.roa (hash: cOFomrq0u7uWaAdwHhxcYiXZVFUXmPTmjP3yNM2i3R4=) 6: 323830343a353261633a633030303a3a2f33342d3334203d3e20323638353333.roa (hash: TDmWOgpLRKpDDiL9IkKzagHfIzq66JLQS5+JyHVQCVc=) 7: 323830343a353261633a383030303a3a2f33342d3334203d3e20323638353333.roa (hash: G9Gop5zvToflO/2gpfor+zrNq42K6WPewb3L6fpm6hc=) 8: BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl (hash: uAAURCt3fz/ukopyLRNMMRB1tzyfEQlSqAhDzD2pYJc=) 9: 323830343a353261633a3a2f33322d3332203d3e20323638353333.roa (hash: 2QGqbscxEv91g94RnqkqrOoDAGPsowqCHy2js+JYcQM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 17:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:8f:28:7a:aa:47:62:a3:cb:b4:f3:74:62:41:fb:39:a6:5a:35:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C Validity Not Before: Jun 16 13:55:32 2025 GMT Not After : Jun 17 17:37:32 2025 GMT Subject: CN=325F1B4AB0636B5648F3C6FF140482BD941F0F8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:16:01:9f:44:6f:4e:d2:8d:00:c9:42:92:02: 3a:e0:46:e7:88:73:b3:d1:a6:e4:49:54:3b:54:9f: 88:bc:84:ef:da:3e:40:41:67:4f:e9:c3:89:d7:e3: 29:75:96:4e:b8:ba:50:5d:45:83:ce:f7:1a:de:3d: 65:0f:9c:3c:52:68:45:76:cd:fe:e3:0c:79:30:74: 46:bf:e3:df:0c:03:7e:0c:23:0a:33:df:9e:14:76: 3b:7e:c7:9c:b4:d6:f6:dd:4b:99:10:cd:3b:48:34: dc:99:e5:d4:0f:02:a1:88:76:59:eb:d8:59:b4:d6: 6e:76:df:8a:4e:cb:46:c5:e3:9c:26:8b:89:2c:2b: 33:0e:ac:a7:4b:03:c0:36:ed:8e:c5:8a:cf:dc:1c: 78:48:af:67:81:1f:55:c2:7b:05:a7:e7:75:e9:de: 23:81:39:73:1f:84:d3:47:b4:35:18:ba:96:cb:fb: c4:48:c7:13:aa:dd:b2:40:fc:7d:5f:8f:f8:67:f2: 1d:b3:dd:2e:67:ed:27:13:3d:f6:ca:68:b7:d5:44: 69:95:9b:e8:82:c8:39:6c:19:30:af:42:c4:74:fa: c5:00:14:aa:d5:cf:30:34:30:30:b1:9e:09:d2:0e: dd:b5:cb:af:2a:06:e4:0f:17:d5:c3:8f:b2:8c:02: 89:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5F:1B:4A:B0:63:6B:56:48:F3:C6:FF:14:04:82:BD:94:1F:0F:8C X509v3 Authority Key Identifier: keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:b4:b6:9a:a7:48:54:3f:e8:de:5a:95:b1:9f:f1:f1:12:74: f9:98:47:f4:d8:46:77:82:ed:08:7c:80:b8:47:13:5e:d9:6e: 45:1f:07:e0:9f:24:e6:5f:31:9d:d3:d4:9e:41:f1:17:ca:10: 11:4c:6a:48:dc:4d:b1:a0:82:ae:6b:aa:bf:1d:b6:0f:04:b6: 44:77:0b:c7:d2:d3:a0:f6:a9:e5:13:de:ae:5b:8a:92:63:30: b6:8a:80:19:fb:1d:d7:2e:d6:7e:71:ac:aa:fa:e9:ff:40:0c: e1:ad:33:35:82:52:63:52:b0:89:10:3e:0d:8e:ff:9c:a4:d5: 42:0e:56:d8:d5:3c:1e:10:ff:8b:26:83:83:57:ec:6d:18:1b: 42:53:d9:c8:ee:17:90:a8:a1:38:80:2a:b3:a5:b2:c1:e4:28: 08:b8:db:69:66:5b:c3:50:d0:ee:22:7b:e7:48:56:9e:1f:d2: 78:88:62:36:b2:d6:f8:f0:75:5a:23:b4:21:e6:f1:6b:f6:09: 24:2c:f8:b3:3a:b8:a4:f1:a3:1b:51:3f:af:a1:06:37:cf:a9: a2:25:9b:59:20:7b:1f:ca:8f:e2:c2:3e:ec:ae:21:31:ee:d5: 9b:a6:9e:0c:b1:27:63:b2:43:a4:fa:bd:9d:21:36:d5:13:ec: a1:9d:7a:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGo8oeqpHYqPLtPN0YkH7OaZaNUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIxNThGMUY5ODNEOEYyMUNBRUI5M0M5MjhBQzZBQjUy QjUxQ0IxQzAeFw0yNTA2MTYxMzU1MzJaFw0yNTA2MTcxNzM3MzJaMDMxMTAvBgNV BAMTKDMyNUYxQjRBQjA2MzZCNTY0OEYzQzZGRjE0MDQ4MkJEOTQxRjBGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpFgGfRG9O0o0AyUKSAjrgRueI c7PRpuRJVDtUn4i8hO/aPkBBZ0/pw4nX4yl1lk64ulBdRYPO9xrePWUPnDxSaEV2 zf7jDHkwdEa/498MA34MIwoz354Udjt+x5y01vbdS5kQzTtINNyZ5dQPAqGIdlnr 2Fm01m5234pOy0bF45wmi4ksKzMOrKdLA8A27Y7Fis/cHHhIr2eBH1XCewWn53Xp 3iOBOXMfhNNHtDUYupbL+8RIxxOq3bJA/H1fj/hn8h2z3S5n7ScTPfbKaLfVRGmV m+iCyDlsGTCvQsR0+sUAFKrVzzA0MDCxngnSDt21y68qBuQPF9XDj7KMAondAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMl8bSrBja1ZI88b/FASCvZQfD4wwHwYDVR0j BBgwFoAUuxWPH5g9jyHK65PJKKxqtStRyxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2RlaGU2OEsydWVSNGhXUTVVNWJwQ2daY1gyN3BSSlJKWVBGRG5BMmQ0 S1IvMS9CQjE1OEYxRjk4M0Q4RjIxQ0FFQjkzQzkyOEFDNkFCNTJCNTFDQjFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMTU4RjFGOTgzRDhGMjFD QUVCOTNDOTI4QUM2QUI1MkI1MUNCMUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2RlaGU2OEsydWVSNGhXUTVVNWJwQ2daY1gyN3BSSlJKWVBGRG5BMmQ0S1IvMS9C QjE1OEYxRjk4M0Q4RjIxQ0FFQjkzQzkyOEFDNkFCNTJCNTFDQjFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl7S2mqdIVD/o3lqVsZ/x8RJ0+ZhH9NhGd4LtCHyAuEcTXtluRR8H4J8k5l8x ndPUnkHxF8oQEUxqSNxNsaCCrmuqvx22DwS2RHcLx9LToPap5RPerluKkmMwtoqA Gfsd1y7WfnGsqvrp/0AM4a0zNYJSY1KwiRA+DY7/nKTVQg5W2NU8HhD/iyaDg1fs bRgbQlPZyO4XkKihOIAqs6WyweQoCLjbaWZbw1DQ7iJ750hWnh/SeIhiNrLW+PB1 WiO0Iebxa/YJJCz4szq4pPGjG1E/r6EGN8+poiWbWSB7H8qP4sI+7K4hMe7Vm6ae DLEnY7JDpPq9nSE21RPsoZ16BQ== -----END CERTIFICATE-----Generated at Tue Jun 17 01:30:13 2025 by rpki-client