$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft File: DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft (raw, json) Hash identifier: EeNULCCFuaOMIFaAHV97CnbqGA7sBBdXQgKGKM7F8ag= Subject key identifier: D8:9F:D4:E2:70:84:6A:83:89:CA:AF:B5:A6:C0:E7:53:40:30:DF:34 Authority key identifier: DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE Certificate issuer: /CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE Certificate serial: 38D6631E99D492EDB85491147B140A469CDBF096 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer Subject info access: rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft Manifest number: 5D Signing time: Mon 16 Jun 2025 07:02:02 +0000 Manifest this update: Mon 16 Jun 2025 06:57:02 +0000 Manifest next update: Tue 17 Jun 2025 07:48:02 +0000 Files and hashes: 1: 3137372e3132352e37332e302f32342d3234203d3e203532373636.roa (hash: yHmJCMANwgyJZi7RpIORKezVofQsOnGYoQYEeBdFCP0=) 2: 3137372e3132352e37322e302f32342d3234203d3e203532373636.roa (hash: 8l8sj6Lhn0LhQN9ND1pd5nXSQ+34FWL+b1PnT0OphM8=) 3: 3137372e3132352e37322e302f32332d3233203d3e203532373636.roa (hash: RUgWQbSbfKqm4Hfu18+LGJPAqutuS6ikmtMKvWzJroY=) 4: DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl (hash: l8/bPP62HBUCQUNAu2XmdFXtlsYc/GMTtsyVTWwTsjk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 04:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d6:63:1e:99:d4:92:ed:b8:54:91:14:7b:14:0a:46:9c:db:f0:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE Validity Not Before: Jun 16 06:57:02 2025 GMT Not After : Jun 17 07:48:02 2025 GMT Subject: CN=D89FD4E270846A8389CAAFB5A6C0E7534030DF34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:73:60:a6:a1:b1:ea:9b:a2:07:51:4a:46:d4: 21:8e:ca:20:b9:b5:c9:d5:9e:a9:67:98:d9:b0:3b: 25:ee:fd:8a:fb:06:b4:ec:0f:19:d0:70:af:f2:4f: 53:84:73:06:17:2c:5a:ed:e5:9f:77:70:aa:0a:a4: 74:1d:6d:85:32:7c:09:a0:b0:fc:2d:01:42:cd:44: c1:57:e0:a1:1c:c5:e1:3d:cc:c6:cd:fc:f4:96:4a: 04:e2:eb:40:94:4c:d5:c5:c5:01:89:55:51:11:ee: 32:ba:b0:78:76:a2:7c:92:dc:b8:f4:15:40:29:34: a6:49:9e:66:55:83:1f:6e:68:2e:fe:82:0a:4a:35: a5:a4:77:fa:72:a0:29:d1:22:f6:07:82:60:43:55: 48:1c:10:13:c4:2f:96:1b:3a:77:76:48:28:61:3c: b9:ff:e8:93:f6:f5:e0:b5:3e:f1:c2:d8:25:4e:b5: c0:45:43:b7:c5:44:a0:51:39:10:7a:2f:5d:c5:61: dd:0d:0a:e8:f8:4f:38:83:80:67:02:78:27:ad:3b: 22:1c:a4:51:34:38:2c:6d:55:f9:7e:80:2c:32:7d: bd:64:01:7a:aa:41:da:0b:b1:57:0c:7e:92:c9:41: 41:f9:5e:b4:1c:13:cd:59:52:48:6a:93:e3:6b:7a: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9F:D4:E2:70:84:6A:83:89:CA:AF:B5:A6:C0:E7:53:40:30:DF:34 X509v3 Authority Key Identifier: keyid:DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:02:74:93:bb:9b:50:1d:94:bc:30:ff:18:f8:59:63:b3:11: 9e:39:00:07:2c:c3:59:9f:79:03:0a:6f:c1:c6:5d:10:86:ce: 36:92:85:8b:b7:ea:a5:ec:9c:21:8f:62:fb:33:4a:36:8f:ea: 4f:8f:d5:23:46:77:f5:79:01:57:f9:0a:b0:36:6e:01:6b:3a: 73:0d:ca:58:f4:84:bc:46:ec:1a:57:e5:69:97:82:05:1b:fd: 71:5f:03:2a:9b:39:8b:42:5b:c3:2c:ba:53:e0:88:ae:31:0f: cb:c6:89:14:97:86:e5:c0:3d:f5:fe:1c:96:32:7d:1e:6d:55: 12:3f:bc:85:ce:4b:5e:a9:83:6b:27:3b:cd:24:22:cc:0f:74: b1:41:d1:9a:eb:6b:a3:69:b9:3f:0d:8f:e2:52:e3:d0:2d:b6: 1b:86:8d:4e:14:c2:83:12:85:1c:e9:29:4e:d8:bf:09:7b:4d: 5c:50:bb:7c:21:1a:43:c8:80:e7:50:1a:39:47:8c:7e:4a:d2: 97:1e:e4:4a:fb:90:ab:69:cc:25:3f:b5:0a:d1:d8:d4:17:ed: 81:ac:be:d4:99:4c:a5:85:69:d1:37:f5:c7:19:5e:ae:16:2f: a2:73:fd:ed:88:42:35:e9:a5:d0:d0:ed:10:9b:6b:c2:a3:db: e7:51:36:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUONZjHpnUku24VJEUexQKRpzb8JYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJBOUJCNkZENTY3QTUwODNCN0JBMEJCMDdDRDMxMjEw RjNDOEJFRTAeFw0yNTA2MTYwNjU3MDJaFw0yNTA2MTcwNzQ4MDJaMDMxMTAvBgNV BAMTKEQ4OUZENEUyNzA4NDZBODM4OUNBQUZCNUE2QzBFNzUzNDAzMERGMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoc2CmobHqm6IHUUpG1CGOyiC5 tcnVnqlnmNmwOyXu/Yr7BrTsDxnQcK/yT1OEcwYXLFrt5Z93cKoKpHQdbYUyfAmg sPwtAULNRMFX4KEcxeE9zMbN/PSWSgTi60CUTNXFxQGJVVER7jK6sHh2onyS3Lj0 FUApNKZJnmZVgx9uaC7+ggpKNaWkd/pyoCnRIvYHgmBDVUgcEBPEL5YbOnd2SChh PLn/6JP29eC1PvHC2CVOtcBFQ7fFRKBRORB6L13FYd0NCuj4TziDgGcCeCetOyIc pFE0OCxtVfl+gCwyfb1kAXqqQdoLsVcMfpLJQUH5XrQcE81ZUkhqk+NregNxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2J/U4nCEaoOJyq+1psDnU0Aw3zQwHwYDVR0j BBgwFoAU26m7b9VnpQg7e6C7B80xIQ88i+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0NQUFp1UGppdVFCWWt2M0JhS1ZOcXFLNXQyN3ppcXA5ZmhCV1NTZUVv ZlYvMC9EQkE5QkI2RkQ1NjdBNTA4M0I3QkEwQkIwN0NEMzEyMTBGM0M4QkVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQTlCQjZGRDU2N0E1MDgz QjdCQTBCQjA3Q0QzMTIxMEYzQzhCRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0NQUFp1UGppdVFCWWt2M0JhS1ZOcXFLNXQyN3ppcXA5ZmhCV1NTZUVvZlYvMC9E QkE5QkI2RkQ1NjdBNTA4M0I3QkEwQkIwN0NEMzEyMTBGM0M4QkVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeQJ0k7ubUB2UvDD/GPhZY7MRnjkAByzDWZ95AwpvwcZdEIbONpKFi7fqpeyc IY9i+zNKNo/qT4/VI0Z39XkBV/kKsDZuAWs6cw3KWPSEvEbsGlflaZeCBRv9cV8D Kps5i0Jbwyy6U+CIrjEPy8aJFJeG5cA99f4cljJ9Hm1VEj+8hc5LXqmDayc7zSQi zA90sUHRmutro2m5Pw2P4lLj0C22G4aNThTCgxKFHOkpTti/CXtNXFC7fCEaQ8iA 51AaOUeMfkrSlx7kSvuQq2nMJT+1CtHY1Bftgay+1JlMpYVp0Tf1xxlerhYvonP9 7YhCNeml0NDtEJtrwqPb51E2aw== -----END CERTIFICATE-----Generated at Mon Jun 16 11:18:49 2025 by rpki-client