$ rpki-client -vvf rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.mft File: 68444A333B7333B9388B8EEAF41EBF4CE7435184.mft (raw, json) Hash identifier: 1i0popKKsnV4/EIOHqfgzsfb9WbMaNGuqZcrWNYK0dU= Subject key identifier: 1C:D9:DC:FE:37:FE:70:E5:A8:8B:AD:4F:92:6F:2C:69:70:D1:00:6B Authority key identifier: 68:44:4A:33:3B:73:33:B9:38:8B:8E:EA:F4:1E:BF:4C:E7:43:51:84 Certificate issuer: /CN=68444A333B7333B9388B8EEAF41EBF4CE7435184 Certificate serial: 09583C392358B78B8D9AC3B38847CB4B646968D4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68444A333B7333B9388B8EEAF41EBF4CE7435184.cer Subject info access: rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.mft Manifest number: 0141 Signing time: Fri 08 Aug 2025 23:05:16 +0000 Manifest this update: Fri 08 Aug 2025 23:00:16 +0000 Manifest next update: Sat 09 Aug 2025 23:29:16 +0000 Files and hashes: 1: 323830343a393061303a3a2f33332d3333203d3e20323733353634.roa (hash: 9slyalyodfIjuabKQl1OaotSu3tVzc0vjMGuFcg7H6s=) 2: 323830343a393061303a383030303a3a2f33332d3333203d3e20323733353634.roa (hash: v7S2CLGT/ZqXkfm07pku2Pp32bVIRh7d3pnHAY8XPa0=) 3: 323830343a393061303a3a2f33322d3332203d3e20323733353634.roa (hash: V4WyGeoLeCa9NI+HATajuvHV4jSt4eH6YjiJOyRWgBs=) 4: 68444A333B7333B9388B8EEAF41EBF4CE7435184.crl (hash: e1vBT1us9YvWdVAvYIDNt0ZNFL0rjLB/f6xWZRjajDE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.crl rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68444A333B7333B9388B8EEAF41EBF4CE7435184.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 23:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:58:3c:39:23:58:b7:8b:8d:9a:c3:b3:88:47:cb:4b:64:69:68:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68444A333B7333B9388B8EEAF41EBF4CE7435184 Validity Not Before: Aug 8 23:00:16 2025 GMT Not After : Aug 9 23:29:16 2025 GMT Subject: CN=1CD9DCFE37FE70E5A88BAD4F926F2C6970D1006B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b5:7f:a4:a0:05:08:86:58:c4:ce:a2:a3:bd: 8b:e5:f3:c7:3e:7a:a4:06:b9:92:92:d5:2f:c2:4f: 0f:0a:7f:c6:7e:02:d5:52:a7:0e:02:cd:72:4e:7e: b6:06:74:3f:d6:e1:7e:ee:79:34:2d:25:6f:aa:7f: b9:3d:b8:1e:2f:53:e3:b1:bd:13:31:24:68:cf:15: 33:a0:9b:6e:e2:61:21:6a:4c:b5:2e:7f:2c:57:17: a1:8e:e1:f2:6e:ba:f4:b4:7c:4e:90:89:b7:72:cd: 0e:38:d6:36:f6:2d:96:8f:bc:5a:36:19:ca:1e:25: 43:08:38:bd:ee:36:6a:c3:b7:3a:f5:0b:d8:04:97: a2:1f:50:95:4c:56:d0:ba:c5:c7:1b:74:6f:13:55: 79:e2:7a:3d:d6:05:fc:f6:f8:1c:e8:cf:97:a9:88: cc:ad:08:e3:4a:44:a5:10:28:29:ab:50:cf:e1:c0: e5:76:36:52:d5:61:f5:e5:b0:52:55:7f:c2:03:82: 37:db:cf:38:89:df:da:c0:56:55:8f:15:d1:4c:7c: 87:4d:57:f2:a3:d4:3a:cb:38:ff:f0:6c:50:95:f7: dd:7a:33:89:99:a9:16:b6:af:af:40:fa:5e:21:38: 31:f9:29:58:25:b0:5d:b5:30:38:5b:d6:6c:d1:ac: 57:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D9:DC:FE:37:FE:70:E5:A8:8B:AD:4F:92:6F:2C:69:70:D1:00:6B X509v3 Authority Key Identifier: keyid:68:44:4A:33:3B:73:33:B9:38:8B:8E:EA:F4:1E:BF:4C:E7:43:51:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68444A333B7333B9388B8EEAF41EBF4CE7435184.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:87:dd:89:d9:b2:43:df:c6:6b:1f:97:50:74:68:cc:0a:5b: 23:b2:73:e6:9f:c4:d5:53:ee:55:52:83:2c:95:57:d3:2b:39: 2c:3b:74:90:f6:e5:a6:ec:65:d2:27:e0:e8:ac:7c:25:5b:6b: 49:2b:28:44:b9:95:47:45:fb:3c:9e:a2:21:19:03:ea:0d:fc: 5f:75:24:5d:24:bb:78:7f:a4:b3:e7:36:35:a0:fb:3c:78:e4: 54:7b:39:af:93:3b:5e:5b:61:c2:94:8e:68:34:1f:17:3f:de: d0:f4:19:fd:12:bb:a9:08:2f:7b:c3:13:4d:96:1b:3a:e5:51: aa:6f:25:8e:1c:8d:42:db:3e:ff:d6:58:ee:90:24:ea:31:5b: 75:78:14:c5:a7:3a:7b:f8:ec:97:cb:33:f9:22:88:21:5c:a2: ed:bf:90:fa:20:16:aa:34:d6:3a:cf:f3:b8:db:7b:80:33:75: 69:6c:a1:fe:68:31:19:1b:cc:89:35:50:cb:ae:93:25:c6:d8: 5f:0e:49:c6:19:75:92:db:2f:bf:d6:16:8d:29:d5:1c:da:0e: a0:30:06:f1:66:3e:6b:67:01:08:42:c3:b6:1c:6b:d7:5c:ac: fe:14:a4:21:f6:2a:0f:0b:9f:ca:2a:66:80:4f:57:a9:b1:68: c9:03:1e:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCVg8OSNYt4uNmsOziEfLS2RpaNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0NDRBMzMzQjczMzNCOTM4OEI4RUVBRjQxRUJGNENF NzQzNTE4NDAeFw0yNTA4MDgyMzAwMTZaFw0yNTA4MDkyMzI5MTZaMDMxMTAvBgNV BAMTKDFDRDlEQ0ZFMzdGRTcwRTVBODhCQUQ0RjkyNkYyQzY5NzBEMTAwNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7tX+koAUIhljEzqKjvYvl88c+ eqQGuZKS1S/CTw8Kf8Z+AtVSpw4CzXJOfrYGdD/W4X7ueTQtJW+qf7k9uB4vU+Ox vRMxJGjPFTOgm27iYSFqTLUufyxXF6GO4fJuuvS0fE6QibdyzQ441jb2LZaPvFo2 GcoeJUMIOL3uNmrDtzr1C9gEl6IfUJVMVtC6xccbdG8TVXniej3WBfz2+Bzoz5ep iMytCONKRKUQKCmrUM/hwOV2NlLVYfXlsFJVf8IDgjfbzziJ39rAVlWPFdFMfIdN V/Kj1DrLOP/wbFCV9916M4mZqRa2r69A+l4hODH5KVglsF21MDhb1mzRrFf7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHNnc/jf+cOWoi61Pkm8saXDRAGswHwYDVR0j BBgwFoAUaERKMztzM7k4i47q9B6/TOdDUYQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFJCVUI0NXIzQnZOY0RBQ0JTYlBhVlk1M2VQOEpGMzc5NXcxWXAzam4x cGcvMC82ODQ0NEEzMzNCNzMzM0I5Mzg4QjhFRUFGNDFFQkY0Q0U3NDM1MTg0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4NDQ0QTMzM0I3MzMzQjkz ODhCOEVFQUY0MUVCRjRDRTc0MzUxODQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFJCVUI0NXIzQnZOY0RBQ0JTYlBhVlk1M2VQOEpGMzc5NXcxWXAzam4xcGcvMC82 ODQ0NEEzMzNCNzMzM0I5Mzg4QjhFRUFGNDFFQkY0Q0U3NDM1MTg0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaofdidmyQ9/Gax+XUHRozApbI7Jz5p/E1VPuVVKDLJVX0ys5LDt0kPblpuxl 0ifg6Kx8JVtrSSsoRLmVR0X7PJ6iIRkD6g38X3UkXSS7eH+ks+c2NaD7PHjkVHs5 r5M7XlthwpSOaDQfFz/e0PQZ/RK7qQgve8MTTZYbOuVRqm8ljhyNQts+/9ZY7pAk 6jFbdXgUxac6e/jsl8sz+SKIIVyi7b+Q+iAWqjTWOs/zuNt7gDN1aWyh/mgxGRvM iTVQy66TJcbYXw5Jxhl1ktsvv9YWjSnVHNoOoDAG8WY+a2cBCELDthxr11ys/hSk IfYqDwufyipmgE9XqbFoyQMeTg== -----END CERTIFICATE-----Generated at Sat Aug 9 02:56:17 2025 by rpki-client