$ rpki-client -vvf rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.mft File: D45EE207E811FF7831A3054740F4FC376DE9C473.mft (raw, json) Hash identifier: 2tBZ1gJobtWy/jHqbmLqlBE/WzpUeBZkWMXJ/rMPPFM= Subject key identifier: 0B:37:48:56:BB:E6:55:06:67:1A:BF:C6:DC:89:E8:CE:C6:9E:E6:EB Authority key identifier: D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73 Certificate issuer: /CN=D45EE207E811FF7831A3054740F4FC376DE9C473 Certificate serial: 6495F27A08D1649162FC43A3B70BFF90FD16661D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer Subject info access: rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.mft Manifest number: 0123 Signing time: Wed 02 Jul 2025 23:40:29 +0000 Manifest this update: Wed 02 Jul 2025 23:35:29 +0000 Manifest next update: Fri 04 Jul 2025 02:03:29 +0000 Files and hashes: 1: 3230302e32342e38342e302f32322d3232203d3e203631373930.roa (hash: oWpT8s3eNAWGbVlR5gpPmlnfM5HqmKLYroWKrDnfVhA=) 2: D45EE207E811FF7831A3054740F4FC376DE9C473.crl (hash: Fen7Do01CRs11wNtUAgllt0LhFB34mLHBhNrGsasLnA=) 3: 3230302e32342e38302e302f32322d3232203d3e203631373930.roa (hash: M2lNJNOo3QmEHp0Yb2W0NhzPTUamH5IA9BhxqbF6t7Q=) 4: 323830343a313935633a3a2f33332d3333203d3e203631373930.roa (hash: zxoVB0/V+w47xzbIkuWqO0MNlAIMgniNQQdYXcRA3gs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.crl rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 00:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:95:f2:7a:08:d1:64:91:62:fc:43:a3:b7:0b:ff:90:fd:16:66:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D45EE207E811FF7831A3054740F4FC376DE9C473 Validity Not Before: Jul 2 23:35:29 2025 GMT Not After : Jul 4 02:03:29 2025 GMT Subject: CN=0B374856BBE65506671ABFC6DC89E8CEC69EE6EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a5:59:50:8e:7d:c7:63:46:14:2f:5c:2e:af: ef:46:d0:88:e9:46:78:3a:c5:62:ea:3e:c5:69:cb: ed:09:f1:ea:f0:8c:b7:2e:11:17:1c:eb:b1:e2:41: 7d:c6:d6:8f:27:48:24:b1:f9:73:fd:28:d7:f5:5d: e6:63:3d:f2:f1:a9:ab:45:fb:16:0d:fe:c2:dc:1e: 25:9f:87:cd:0a:65:d3:2f:86:28:e5:ed:fe:d7:90: db:d7:47:42:c6:c6:83:51:d7:33:d3:aa:b9:e5:3c: 49:20:cc:a0:9c:2f:b0:98:94:99:d7:3c:ee:28:3e: b7:b2:9b:ae:9c:3d:a3:6c:fa:28:54:1e:5d:bc:13: 5e:3a:2b:d2:e3:06:91:15:8d:bb:fc:00:b0:9d:71: 1f:59:89:34:8a:24:34:79:8a:ae:e4:3c:6e:2d:4b: 47:0e:01:ec:f2:91:85:b0:3c:65:90:5f:ab:16:3f: ff:99:ce:38:ad:46:81:7a:7c:61:ac:a4:35:66:22: 72:8c:39:4f:d8:e3:08:c3:8d:6e:be:4d:ba:56:fd: b3:b8:41:d1:80:92:7e:3c:34:0c:77:0c:65:f0:fa: 08:4b:54:68:e2:8d:40:4e:5e:93:aa:60:50:07:1f: a0:6e:25:e6:db:98:6c:61:30:d5:91:38:07:7b:13: cf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:37:48:56:BB:E6:55:06:67:1A:BF:C6:DC:89:E8:CE:C6:9E:E6:EB X509v3 Authority Key Identifier: keyid:D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:be:cb:0b:8c:de:50:36:55:ba:f3:d9:78:5a:21:b6:7f:5f: 50:80:57:0d:fb:60:fc:57:3c:50:75:07:ea:62:8f:5d:1a:2c: 15:90:fd:07:94:74:a1:74:42:27:38:1b:30:4e:a5:d3:8a:18: f4:0e:6c:c5:95:dc:d6:c3:1c:1a:a1:38:82:72:78:bd:58:74: bb:f7:02:65:38:93:54:36:44:59:11:c7:37:d3:86:5c:e4:74: d0:0a:9c:cc:32:7c:4a:36:15:cd:74:35:57:c4:6a:8f:1c:a2: a1:29:31:51:5a:c4:34:71:97:73:20:70:00:99:c7:96:59:b3: 1e:34:89:ad:00:92:98:37:b5:42:a9:a4:e6:2e:f8:01:5f:2a: 2c:7d:52:18:bc:88:78:68:13:40:0a:68:e8:83:1a:fc:8d:b9: d9:2a:39:7e:ea:90:ba:4f:76:3c:58:73:0a:27:91:ba:e2:27: 6e:82:cb:8c:d5:0b:66:7b:f2:1c:0c:c1:3b:e2:4c:98:0f:f5: db:75:c4:a2:bb:9c:bd:94:c9:b0:a2:fb:85:1c:05:0c:33:99: 75:23:ff:11:10:70:d2:7a:d9:94:52:96:c7:e1:cc:19:56:05: 77:2f:38:18:01:66:38:61:48:b9:54:91:fd:80:fb:2f:5d:7d: e0:3a:b6:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZJXyegjRZJFi/EOjtwv/kP0WZh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1RUUyMDdFODExRkY3ODMxQTMwNTQ3NDBGNEZDMzc2 REU5QzQ3MzAeFw0yNTA3MDIyMzM1MjlaFw0yNTA3MDQwMjAzMjlaMDMxMTAvBgNV BAMTKDBCMzc0ODU2QkJFNjU1MDY2NzFBQkZDNkRDODlFOENFQzY5RUU2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUpVlQjn3HY0YUL1wur+9G0Ijp Rng6xWLqPsVpy+0J8erwjLcuERcc67HiQX3G1o8nSCSx+XP9KNf1XeZjPfLxqatF +xYN/sLcHiWfh80KZdMvhijl7f7XkNvXR0LGxoNR1zPTqrnlPEkgzKCcL7CYlJnX PO4oPreym66cPaNs+ihUHl28E146K9LjBpEVjbv8ALCdcR9ZiTSKJDR5iq7kPG4t S0cOAezykYWwPGWQX6sWP/+ZzjitRoF6fGGspDVmInKMOU/Y4wjDjW6+TbpW/bO4 QdGAkn48NAx3DGXw+ghLVGjijUBOXpOqYFAHH6BuJebbmGxhMNWROAd7E8/7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCzdIVrvmVQZnGr/G3Inozsae5uswHwYDVR0j BBgwFoAU1F7iB+gR/3gxowVHQPT8N23pxHMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEhQRVRtY2ZSMmhQYW91Z2ZRTXh5TEdTcEtYZWhYMzVqeEFwNHlkNGRR NWkvMC9ENDVFRTIwN0U4MTFGRjc4MzFBMzA1NDc0MEY0RkMzNzZERTlDNDczLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NUVFMjA3RTgxMUZGNzgz MUEzMDU0NzQwRjRGQzM3NkRFOUM0NzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEhQRVRtY2ZSMmhQYW91Z2ZRTXh5TEdTcEtYZWhYMzVqeEFwNHlkNGRRNWkvMC9E NDVFRTIwN0U4MTFGRjc4MzFBMzA1NDc0MEY0RkMzNzZERTlDNDczLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEr7LC4zeUDZVuvPZeFohtn9fUIBXDftg/Fc8UHUH6mKPXRosFZD9B5R0oXRC JzgbME6l04oY9A5sxZXc1sMcGqE4gnJ4vVh0u/cCZTiTVDZEWRHHN9OGXOR00Aqc zDJ8SjYVzXQ1V8RqjxyioSkxUVrENHGXcyBwAJnHllmzHjSJrQCSmDe1Qqmk5i74 AV8qLH1SGLyIeGgTQApo6IMa/I252So5fuqQuk92PFhzCieRuuInboLLjNULZnvy HAzBO+JMmA/123XEorucvZTJsKL7hRwFDDOZdSP/ERBw0nrZlFKWx+HMGVYFdy84 GAFmOGFIuVSR/YD7L1194Dq26Q== -----END CERTIFICATE-----Generated at Thu Jul 3 02:57:50 2025 by rpki-client