$ rpki-client -vvf rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft File: 585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft (raw, json) Hash identifier: Jqjohx4gEE7y6LsLONn3e8PJ3hvepucn0AWvdONK5xc= Subject key identifier: 1A:68:08:7E:57:DD:A2:C4:88:36:3A:3E:C4:D4:73:81:00:7F:DB:A0 Authority key identifier: 58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23 Certificate issuer: /CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23 Certificate serial: 0C8C4FD4AA2A0D1F5F2E6FA70C3B0D901CAD3756 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer Subject info access: rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft Manifest number: 025D Signing time: Wed 02 Jul 2025 13:37:36 +0000 Manifest this update: Wed 02 Jul 2025 13:32:36 +0000 Manifest next update: Thu 03 Jul 2025 15:06:36 +0000 Files and hashes: 1: 323830343a363061303a343030303a3a2f33342d3438203d3e20323639313831.roa (hash: IDneDWzTyr5SgSIAENGnHT6t+yatkXYogvFZdoAk/uI=) 2: 323830343a363061303a3a2f33342d3334203d3e20323639313831.roa (hash: C9Dzi/tZKmZzh2kIScwrPLKcajDKYsSOCBFj00Na0gw=) 3: 585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl (hash: W6iGxj2KuDdoGHVL5lDSFgk2U7V2ZRZ+4b0N+pIvRVA=) 4: 323830343a363061303a633030303a3a2f33342d3438203d3e20323639313831.roa (hash: aC08Xc+AWU2Gmn9FKnzrvxdKmO26eHCpZULre8VMh/I=) 5: 34352e3138312e3131322e302f32322d3234203d3e20323639313831.roa (hash: 5cTe/r7IooW1P31zdsmcHlinxnkNAFe2rsZjLal0A/M=) 6: 323830343a363061303a383030303a3a2f33342d3438203d3e20323639313831.roa (hash: 7VYb9eVMn/JdVnewRd3uN1ztGHf7FqVnTEIvA9WR40g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 15:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:8c:4f:d4:aa:2a:0d:1f:5f:2e:6f:a7:0c:3b:0d:90:1c:ad:37:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23 Validity Not Before: Jul 2 13:32:36 2025 GMT Not After : Jul 3 15:06:36 2025 GMT Subject: CN=1A68087E57DDA2C488363A3EC4D47381007FDBA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:2a:f5:19:1a:3a:8a:06:53:24:bb:f8:4c: b0:1e:a5:2a:04:a2:4d:2f:e7:bd:70:75:bf:20:ca: 9b:cc:19:0a:e5:73:c8:c7:b6:4b:16:8f:45:c0:38: 9d:c0:32:2a:b3:c7:1e:b9:00:d8:ef:c5:82:10:88: d4:b2:dd:2f:73:9c:26:38:9e:89:30:0d:10:fd:56: e5:70:9c:76:4c:e6:ca:b9:27:a3:d7:33:5b:5b:05: 84:d3:1b:c3:96:af:73:6f:d1:6e:19:45:a3:db:a1: 3b:7e:17:f5:da:d9:ed:0c:d7:a3:39:29:d1:a5:69: 86:c7:08:bb:f8:9a:57:af:0c:2b:a0:d7:3c:f8:48: bf:f7:c1:c6:54:0a:85:74:b6:e2:c6:c3:fb:af:80: 70:36:5a:37:62:1e:3d:5a:af:6c:fc:d2:85:15:bc: cb:a2:96:92:e9:11:00:26:d4:7e:c2:09:0b:37:4f: 64:8f:da:ea:d9:1c:2c:4e:11:4a:49:a1:17:59:2f: 74:ad:6e:56:9b:51:3a:e9:ff:0f:08:b7:0d:2a:14: 43:06:50:ee:f7:bc:f4:f1:7f:04:a3:93:a8:25:13: 2f:3f:44:70:22:44:a4:54:1d:58:81:78:3d:de:c1: bf:db:8f:64:da:77:99:fb:95:de:fa:5f:ed:cd:fd: b3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:68:08:7E:57:DD:A2:C4:88:36:3A:3E:C4:D4:73:81:00:7F:DB:A0 X509v3 Authority Key Identifier: keyid:58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:c4:ad:d8:57:fe:3a:98:5c:36:c2:c3:47:ac:59:22:9e:9d: 10:59:9c:a0:a7:e8:1b:c5:64:26:55:82:bd:50:82:e6:f9:9d: 6a:b0:2c:e0:51:0b:dc:8c:e6:f0:b3:b1:f9:c6:e8:ed:14:bb: 18:63:1c:2e:d9:56:00:ae:73:c6:65:a4:f0:5c:7e:02:b6:a0: 98:ac:b2:12:dd:e4:d4:1f:47:fe:b4:2b:fb:59:91:5a:d4:29: d9:63:c8:4b:83:af:f1:3b:b7:96:93:3e:78:32:75:96:ad:5f: 8c:85:68:94:bc:dd:1a:5c:62:00:38:7c:50:2b:4e:bb:16:f8: 76:91:57:92:2d:e7:03:d3:c9:c5:20:1e:e8:5a:4e:88:b6:b4: 39:a6:02:64:4f:58:f1:1c:2d:94:e7:73:e1:ec:87:9a:a3:d1: 5f:ee:c4:b1:21:e9:8f:94:5c:29:e8:47:08:47:93:10:3d:39: 39:ee:be:00:47:bd:b7:8f:93:7d:39:e8:54:a6:29:fd:ad:9e: 81:3b:db:45:aa:89:37:32:62:f7:9b:d9:3f:f1:b9:71:77:2b: 93:4d:6c:a7:b4:e1:0e:19:c4:24:cf:a0:d4:ce:0b:ce:aa:f3: af:15:88:21:e1:97:ea:e4:a4:df:8a:48:54:4f:b5:c2:bf:01: e3:d2:56:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDIxP1KoqDR9fLm+nDDsNkBytN1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1QjQ2NEREMTRGRjhERUVENjkwOENCRkE5QUFFNUFB QTc0OEMyMzAeFw0yNTA3MDIxMzMyMzZaFw0yNTA3MDMxNTA2MzZaMDMxMTAvBgNV BAMTKDFBNjgwODdFNTdEREEyQzQ4ODM2M0EzRUM0RDQ3MzgxMDA3RkRCQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAMir1GRo6igZTJLv4TLAepSoE ok0v571wdb8gypvMGQrlc8jHtksWj0XAOJ3AMiqzxx65ANjvxYIQiNSy3S9znCY4 nokwDRD9VuVwnHZM5sq5J6PXM1tbBYTTG8OWr3Nv0W4ZRaPboTt+F/Xa2e0M16M5 KdGlaYbHCLv4mlevDCug1zz4SL/3wcZUCoV0tuLGw/uvgHA2WjdiHj1ar2z80oUV vMuilpLpEQAm1H7CCQs3T2SP2urZHCxOEUpJoRdZL3StblabUTrp/w8Itw0qFEMG UO73vPTxfwSjk6glEy8/RHAiRKRUHViBeD3ewb/bj2Tad5n7ld76X+3N/bNVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGmgIflfdosSINjo+xNRzgQB/26AwHwYDVR0j BBgwFoAUWFtGTdFP+N7taQjL+pquWqp0jCMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG5iQ1cybnVLVzl2bldWVVFzYkxnRGNER3NpTUE1eHVQN3VDaW85WDk3 WXIvMS81ODVCNDY0REQxNEZGOERFRUQ2OTA4Q0JGQTlBQUU1QUFBNzQ4QzIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4NUI0NjRERDE0RkY4REVF RDY5MDhDQkZBOUFBRTVBQUE3NDhDMjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SG5iQ1cybnVLVzl2bldWVVFzYkxnRGNER3NpTUE1eHVQN3VDaW85WDk3WXIvMS81 ODVCNDY0REQxNEZGOERFRUQ2OTA4Q0JGQTlBQUU1QUFBNzQ4QzIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArcSt2Ff+OphcNsLDR6xZIp6dEFmcoKfoG8VkJlWCvVCC5vmdarAs4FEL3Izm 8LOx+cbo7RS7GGMcLtlWAK5zxmWk8Fx+AragmKyyEt3k1B9H/rQr+1mRWtQp2WPI S4Ov8Tu3lpM+eDJ1lq1fjIVolLzdGlxiADh8UCtOuxb4dpFXki3nA9PJxSAe6FpO iLa0OaYCZE9Y8RwtlOdz4eyHmqPRX+7EsSHpj5RcKehHCEeTED05Oe6+AEe9t4+T fTnoVKYp/a2egTvbRaqJNzJi95vZP/G5cXcrk01sp7ThDhnEJM+g1M4LzqrzrxWI IeGX6uSk34pIVE+1wr8B49JW6g== -----END CERTIFICATE-----Generated at Wed Jul 2 22:33:19 2025 by rpki-client