$ rpki-client -vvf rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.mft File: 68444A333B7333B9388B8EEAF41EBF4CE7435184.mft (raw, json) Hash identifier: gaP8FAQaT0eXkh39lGDLAzSWeC3sK44Ma02DA7jOs3c= Subject key identifier: 54:11:EB:5D:2A:41:68:7F:12:33:AB:85:06:1C:87:F1:48:78:68:30 Authority key identifier: 68:44:4A:33:3B:73:33:B9:38:8B:8E:EA:F4:1E:BF:4C:E7:43:51:84 Certificate issuer: /CN=68444A333B7333B9388B8EEAF41EBF4CE7435184 Certificate serial: 0AD3CCB7517493940DD3272CA41B429103A7C580 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68444A333B7333B9388B8EEAF41EBF4CE7435184.cer Subject info access: rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.mft Manifest number: 01A1 Signing time: Mon 20 Oct 2025 06:57:23 +0000 Manifest this update: Mon 20 Oct 2025 06:52:23 +0000 Manifest next update: Tue 21 Oct 2025 07:46:23 +0000 Files and hashes: 1: 68444A333B7333B9388B8EEAF41EBF4CE7435184.crl (hash: yFstG/6JUi4ZuwcLeMdq5pzytNskZJmPyaR/oy1XlNc=) 2: 323830343a393061303a383030303a3a2f33332d3333203d3e20323733353634.roa (hash: v7S2CLGT/ZqXkfm07pku2Pp32bVIRh7d3pnHAY8XPa0=) 3: 323830343a393061303a3a2f33322d3332203d3e20323733353634.roa (hash: V4WyGeoLeCa9NI+HATajuvHV4jSt4eH6YjiJOyRWgBs=) 4: 323830343a393061303a3a2f33332d3333203d3e20323733353634.roa (hash: 9slyalyodfIjuabKQl1OaotSu3tVzc0vjMGuFcg7H6s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.crl rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68444A333B7333B9388B8EEAF41EBF4CE7435184.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d3:cc:b7:51:74:93:94:0d:d3:27:2c:a4:1b:42:91:03:a7:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68444A333B7333B9388B8EEAF41EBF4CE7435184 Validity Not Before: Oct 20 06:52:23 2025 GMT Not After : Oct 21 07:46:23 2025 GMT Subject: CN=5411EB5D2A41687F1233AB85061C87F148786830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:20:be:e9:8f:0c:68:31:86:7b:05:f9:81: f3:4e:db:3b:d9:4b:fb:17:73:da:9a:d7:36:f0:f6: 34:95:c5:5c:7f:65:f8:54:f9:6d:c0:f6:c5:93:a4: 73:8a:ce:34:7e:ab:83:ef:2c:5f:f6:cd:58:ad:9e: 5d:4b:95:18:a7:c1:b2:e5:69:dc:5e:26:b4:4e:be: 6d:b0:ba:e7:0e:d9:01:c5:e8:c4:fd:2c:89:2a:31: 29:2c:2c:bd:01:99:0f:85:9e:05:67:2f:8d:dc:00: d1:a6:c6:e7:68:b7:6e:05:63:59:2b:d7:e3:a4:ce: 52:4b:a3:a2:ac:74:69:a2:f4:1b:93:15:53:e1:3a: e6:44:63:6e:52:52:b2:ab:5e:04:b2:a2:eb:5e:af: e1:8f:b6:55:30:79:b0:c4:69:48:39:6d:54:2e:4e: a5:5d:e4:ae:f9:36:bc:f7:91:b4:b1:0e:9b:d7:78: 70:37:78:0a:6f:e0:f1:55:49:88:a2:07:28:3b:9e: 5a:df:d3:77:ce:94:34:58:c6:27:ba:9b:54:19:e6: b9:da:35:ce:da:df:f5:c7:5b:62:ab:3c:2e:a4:94: 9e:73:6e:27:cd:5b:0f:b8:07:8b:bb:e3:40:b3:a0: 20:d0:f6:c8:92:3c:d1:92:72:14:6c:e0:40:58:f6: 66:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:11:EB:5D:2A:41:68:7F:12:33:AB:85:06:1C:87:F1:48:78:68:30 X509v3 Authority Key Identifier: keyid:68:44:4A:33:3B:73:33:B9:38:8B:8E:EA:F4:1E:BF:4C:E7:43:51:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68444A333B7333B9388B8EEAF41EBF4CE7435184.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/68444A333B7333B9388B8EEAF41EBF4CE7435184.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:81:da:56:12:5a:de:58:ff:56:f1:db:d6:ec:81:e8:31:21: 68:5c:d5:88:c0:89:28:76:d0:8f:35:dc:54:da:fa:ac:f0:9a: 2e:8e:b2:46:96:8b:5c:db:29:23:22:a4:a8:95:20:42:38:a5: c7:8d:70:7f:92:58:76:54:13:a8:98:89:b4:c9:03:98:67:46: 73:8f:6d:b3:b7:d3:e8:71:73:dd:df:8f:38:00:8d:ee:d7:07: 4f:18:81:f6:ba:e5:0b:0c:15:89:40:a6:cf:6c:b9:a5:a6:41: 0b:f8:34:31:40:95:cf:27:6b:d1:23:6b:e6:ff:0c:c5:7b:d2: 3c:59:9d:d9:14:4c:ed:b1:d2:b5:27:d7:66:77:f1:70:55:cb: c5:98:44:8d:e5:1e:c1:c1:04:1e:a7:17:7f:7a:ab:43:d7:c8: c5:ab:77:33:fe:81:40:c2:08:5c:78:54:71:3d:ae:df:9f:66: 8e:c0:eb:e1:8f:cf:c5:1f:95:4b:75:ac:bc:94:e5:37:d7:ba: 17:61:c4:3d:93:44:c7:0b:0e:e4:80:0b:82:0e:ac:ea:7f:b6: d0:56:7b:52:c1:2e:e2:50:34:75:91:bf:ad:fb:99:11:ac:7b: 6e:7e:18:40:42:af:c3:b5:0d:70:3a:05:b1:11:a6:16:1c:b2: 6a:3e:77:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCtPMt1F0k5QN0ycspBtCkQOnxYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg0NDRBMzMzQjczMzNCOTM4OEI4RUVBRjQxRUJGNENF NzQzNTE4NDAeFw0yNTEwMjAwNjUyMjNaFw0yNTEwMjEwNzQ2MjNaMDMxMTAvBgNV BAMTKDU0MTFFQjVEMkE0MTY4N0YxMjMzQUI4NTA2MUM4N0YxNDg3ODY4MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tiC+6Y8MaDGGewX5gfNO2zvZ S/sXc9qa1zbw9jSVxVx/ZfhU+W3A9sWTpHOKzjR+q4PvLF/2zVitnl1LlRinwbLl adxeJrROvm2wuucO2QHF6MT9LIkqMSksLL0BmQ+FngVnL43cANGmxudot24FY1kr 1+OkzlJLo6KsdGmi9BuTFVPhOuZEY25SUrKrXgSyouter+GPtlUwebDEaUg5bVQu TqVd5K75Nrz3kbSxDpvXeHA3eApv4PFVSYiiByg7nlrf03fOlDRYxie6m1QZ5rna Nc7a3/XHW2KrPC6klJ5zbifNWw+4B4u740CzoCDQ9siSPNGSchRs4EBY9mbZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVBHrXSpBaH8SM6uFBhyH8Uh4aDAwHwYDVR0j BBgwFoAUaERKMztzM7k4i47q9B6/TOdDUYQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFJCVUI0NXIzQnZOY0RBQ0JTYlBhVlk1M2VQOEpGMzc5NXcxWXAzam4x cGcvMC82ODQ0NEEzMzNCNzMzM0I5Mzg4QjhFRUFGNDFFQkY0Q0U3NDM1MTg0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4NDQ0QTMzM0I3MzMzQjkz ODhCOEVFQUY0MUVCRjRDRTc0MzUxODQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFJCVUI0NXIzQnZOY0RBQ0JTYlBhVlk1M2VQOEpGMzc5NXcxWXAzam4xcGcvMC82 ODQ0NEEzMzNCNzMzM0I5Mzg4QjhFRUFGNDFFQkY0Q0U3NDM1MTg0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVoHaVhJa3lj/VvHb1uyB6DEhaFzViMCJKHbQjzXcVNr6rPCaLo6yRpaLXNsp IyKkqJUgQjilx41wf5JYdlQTqJiJtMkDmGdGc49ts7fT6HFz3d+POACN7tcHTxiB 9rrlCwwViUCmz2y5paZBC/g0MUCVzydr0SNr5v8MxXvSPFmd2RRM7bHStSfXZnfx cFXLxZhEjeUewcEEHqcXf3qrQ9fIxat3M/6BQMIIXHhUcT2u359mjsDr4Y/PxR+V S3WsvJTlN9e6F2HEPZNExwsO5IALgg6s6n+20FZ7UsEu4lA0dZG/rfuZEax7bn4Y QEKvw7UNcDoFsRGmFhyyaj53Ow== -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:14 2025 by rpki-client