$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft File: DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft (raw, json) Hash identifier: JbKVwUkUw5NNA15O8M4i6SpZAvnyl/0Zcn39QZX55ng= Subject key identifier: CF:F6:F7:5C:CB:AC:97:EE:D7:BD:D9:BC:04:26:5B:C4:64:37:C2:13 Authority key identifier: DC:34:ED:8D:E5:4B:D2:FA:BE:03:A2:7A:E8:FF:76:59:60:6B:65:42 Certificate issuer: /CN=DC34ED8DE54BD2FABE03A27AE8FF7659606B6542 Certificate serial: 59B3476E3DEF2ECF7B1A35451EA9C9F9CFD09645 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer Subject info access: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft Manifest number: 0137 Signing time: Wed 06 Aug 2025 17:44:00 +0000 Manifest this update: Wed 06 Aug 2025 17:39:00 +0000 Manifest next update: Thu 07 Aug 2025 20:30:00 +0000 Files and hashes: 1: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: zkubuxRpLG1gutEslbctXHKpEp2A7E4iQzNQuetKYz4=) 2: DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl (hash: 9foAl5Db31wfBM/2DxYkEwNQgN1QkRr5sTzHhngwsp8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 Aug 2025 20:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b3:47:6e:3d:ef:2e:cf:7b:1a:35:45:1e:a9:c9:f9:cf:d0:96:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34ED8DE54BD2FABE03A27AE8FF7659606B6542 Validity Not Before: Aug 6 17:39:00 2025 GMT Not After : Aug 7 20:30:00 2025 GMT Subject: CN=CFF6F75CCBAC97EED7BDD9BC04265BC46437C213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ac:36:9b:95:b8:ee:38:8c:d7:54:7e:ad:19: 44:96:c7:2c:29:6f:0d:b5:bb:1d:9e:fa:a5:21:54: ec:7f:7b:ec:65:c4:19:ce:1e:84:e8:57:f8:66:74: 0f:13:d3:5a:57:a1:1a:61:a8:95:9a:de:f2:1f:d7: e4:e7:8e:ea:00:14:f1:e4:f8:d8:26:7d:54:5d:73: 74:f3:4d:0b:aa:39:13:3f:43:c4:40:fa:76:6c:b9: 2f:47:38:9e:4b:39:5b:94:50:ff:22:65:c7:90:e1: 7b:d1:af:fb:35:12:ce:90:1c:b2:1c:d1:38:d9:78: 11:79:ff:d5:02:14:ab:1b:8f:bb:1e:3c:06:db:88: 0e:95:bb:92:b2:f6:fd:66:b0:32:e1:aa:78:58:c4: e5:fd:9c:4e:a1:7e:37:1c:dc:d2:30:84:d6:03:f1: f3:44:ed:90:80:75:d3:57:60:1f:40:de:8f:5a:3a: a0:5e:b6:bc:5d:47:e6:c3:42:dc:67:9b:80:d7:cc: d5:c5:c4:d5:cf:1b:7c:ab:f6:af:71:08:80:2e:93: 69:d7:53:b3:76:ef:8a:06:15:db:a8:32:af:ca:9b: ba:64:0e:8d:f3:d3:b6:e3:cd:24:e7:21:40:2d:d0: 4f:51:6c:e6:cf:ea:3e:8b:bd:be:b4:93:b6:ef:f5: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F6:F7:5C:CB:AC:97:EE:D7:BD:D9:BC:04:26:5B:C4:64:37:C2:13 X509v3 Authority Key Identifier: keyid:DC:34:ED:8D:E5:4B:D2:FA:BE:03:A2:7A:E8:FF:76:59:60:6B:65:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:83:a8:87:a8:fb:c6:71:05:35:66:d1:8d:8b:85:cd:0c:20: 18:bf:9d:48:c5:b0:57:08:e9:81:17:32:ef:73:cc:bf:25:7e: 82:e6:04:c7:45:e6:be:12:5a:63:5d:e6:cd:a0:1c:99:4e:69: 8d:e0:85:cd:45:35:a2:ea:d0:b5:05:ca:fa:51:fc:f9:2c:dc: ed:bb:17:f8:b3:d1:99:67:11:0d:b2:9b:2f:18:a9:e7:a7:9a: 8c:78:ac:59:c9:4c:00:07:ec:f3:42:17:cb:da:3e:c6:ed:d3: 32:32:59:5f:80:9c:a2:9d:de:3e:3e:46:5c:14:00:8b:c2:78: f3:87:b5:cc:86:b2:d8:f8:91:55:0b:d6:b7:c7:1e:b6:0e:d4: 2f:49:5d:25:bb:12:2c:f6:35:dc:8a:d4:3b:f2:b7:61:50:9b: 48:ad:22:fa:a6:f6:94:fd:74:b1:c8:9a:40:38:25:28:6d:c4: 07:78:c0:7f:e5:47:7c:9b:af:ca:7a:e1:8b:58:cf:88:3c:f8: d0:18:df:ae:30:4c:e0:b9:2c:58:38:c5:d0:83:cb:15:90:5d: 1e:1f:62:1a:c5:99:cf:1e:59:d8:31:72:f7:85:13:14:ee:28: 39:6b:75:2f:e7:f8:39:9f:79:63:c8:a0:45:74:c7:71:09:34: 50:18:ab:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWbNHbj3vLs97GjVFHqnJ+c/QlkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEVEOERFNTRCRDJGQUJFMDNBMjdBRThGRjc2NTk2 MDZCNjU0MjAeFw0yNTA4MDYxNzM5MDBaFw0yNTA4MDcyMDMwMDBaMDMxMTAvBgNV BAMTKENGRjZGNzVDQ0JBQzk3RUVEN0JERDlCQzA0MjY1QkM0NjQzN0MyMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOrDablbjuOIzXVH6tGUSWxywp bw21ux2e+qUhVOx/e+xlxBnOHoToV/hmdA8T01pXoRphqJWa3vIf1+TnjuoAFPHk +NgmfVRdc3TzTQuqORM/Q8RA+nZsuS9HOJ5LOVuUUP8iZceQ4XvRr/s1Es6QHLIc 0TjZeBF5/9UCFKsbj7sePAbbiA6Vu5Ky9v1msDLhqnhYxOX9nE6hfjcc3NIwhNYD 8fNE7ZCAddNXYB9A3o9aOqBetrxdR+bDQtxnm4DXzNXFxNXPG3yr9q9xCIAuk2nX U7N274oGFduoMq/Km7pkDo3z07bjzSTnIUAt0E9RbObP6j6Lvb60k7bv9VoNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUz/b3XMusl+7Xvdm8BCZbxGQ3whMwHwYDVR0j BBgwFoAU3DTtjeVL0vq+A6J66P92WWBrZUIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkz Q2kvMS9EQzM0RUQ4REU1NEJEMkZBQkUwM0EyN0FFOEZGNzY1OTYwNkI2NTQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMzRFRDhERTU0QkQyRkFC RTAzQTI3QUU4RkY3NjU5NjA2QjY1NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkzQ2kvMS9E QzM0RUQ4REU1NEJEMkZBQkUwM0EyN0FFOEZGNzY1OTYwNkI2NTQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzoOoh6j7xnEFNWbRjYuFzQwgGL+dSMWwVwjpgRcy73PMvyV+guYEx0XmvhJa Y13mzaAcmU5pjeCFzUU1ourQtQXK+lH8+Szc7bsX+LPRmWcRDbKbLxip56eajHis WclMAAfs80IXy9o+xu3TMjJZX4Ccop3ePj5GXBQAi8J484e1zIay2PiRVQvWt8ce tg7UL0ldJbsSLPY13IrUO/K3YVCbSK0i+qb2lP10sciaQDglKG3EB3jAf+VHfJuv ynrhi1jPiDz40BjfrjBM4LksWDjF0IPLFZBdHh9iGsWZzx5Z2DFy94UTFO4oOWt1 L+f4OZ95Y8igRXTHcQk0UBirlQ== -----END CERTIFICATE-----Generated at Thu Aug 7 11:18:49 2025 by rpki-client