$ rpki-client -vvf rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/DDC98962EC146863E8B05E80D2B3A033070B822A.mft File: DDC98962EC146863E8B05E80D2B3A033070B822A.mft (raw, json) Hash identifier: HASCxPZziSWvZe95oiHlFC23C89OY+YqAIlYB49mErs= Subject key identifier: 16:D1:DA:21:2D:B3:A3:F8:4E:F7:21:1B:16:11:78:5D:8B:7F:46:F6 Authority key identifier: DD:C9:89:62:EC:14:68:63:E8:B0:5E:80:D2:B3:A0:33:07:0B:82:2A Certificate issuer: /CN=DDC98962EC146863E8B05E80D2B3A033070B822A Certificate serial: 75CC439C385C4661C163CABFF5DC92F0CF65D278 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDC98962EC146863E8B05E80D2B3A033070B822A.cer Subject info access: rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/DDC98962EC146863E8B05E80D2B3A033070B822A.mft Manifest number: 31 Signing time: Thu 19 Jun 2025 02:09:22 +0000 Manifest this update: Thu 19 Jun 2025 02:04:22 +0000 Manifest next update: Fri 20 Jun 2025 06:05:22 +0000 Files and hashes: 1: 323830343a326131343a3a2f33322d313238203d3e20323634303535.roa (hash: r7EBQ/G32l24X8r8G4Bt2g4N/+RKHvvtAJyodmIPIWM=) 2: DDC98962EC146863E8B05E80D2B3A033070B822A.crl (hash: yQCMcvTlOajlxM2QHRaf0+sDkQcsHmk4C1fnrHux/XY=) 3: 3134332e3133372e3230382e302f32322d3332203d3e20323634303535.roa (hash: XDJfknx4X6oefW9kWS9J2inVQYWsJr8rG/0unyVBF+Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/DDC98962EC146863E8B05E80D2B3A033070B822A.crl rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/DDC98962EC146863E8B05E80D2B3A033070B822A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDC98962EC146863E8B05E80D2B3A033070B822A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 05:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:cc:43:9c:38:5c:46:61:c1:63:ca:bf:f5:dc:92:f0:cf:65:d2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC98962EC146863E8B05E80D2B3A033070B822A Validity Not Before: Jun 19 02:04:22 2025 GMT Not After : Jun 20 06:05:22 2025 GMT Subject: CN=16D1DA212DB3A3F84EF7211B1611785D8B7F46F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:10:80:69:fa:ac:fa:57:b4:33:9c:59:65:5d: f4:00:c3:f4:30:e0:cf:e5:de:34:44:8b:1d:82:3e: a5:74:9f:c4:84:06:d9:a9:72:2b:2a:10:47:23:99: 7b:c7:24:c4:de:3a:91:27:20:05:da:91:f5:90:a7: 26:97:0f:9e:c7:41:93:42:a8:f2:1d:6a:ea:4a:48: 35:66:3b:df:16:0e:08:3c:5e:1b:c4:80:c9:dc:75: f4:03:30:9e:de:f2:e5:ea:9e:1e:61:d1:b9:aa:dc: 3c:44:c7:3c:2f:62:0d:06:b3:81:ce:ec:25:c1:73: a8:ec:9d:0b:bc:52:80:20:b8:50:b1:83:99:ea:1d: b1:de:19:d0:d3:ab:16:9b:77:d2:b5:f7:76:78:53: 5f:93:ae:4e:af:14:e5:3c:36:35:aa:d8:90:7a:c2: e3:43:2a:2e:7e:90:7c:67:c6:76:6d:e6:3e:fb:f8: 7e:eb:9e:42:45:26:0b:f8:3e:24:eb:e1:fd:b4:ca: ec:60:7e:f4:07:50:d4:22:46:db:c6:e1:a8:9a:15: 6e:1f:84:6d:0d:10:c5:eb:55:69:bc:0e:da:8d:ca: 61:52:e4:bf:7c:18:50:df:ff:7a:9f:a7:5b:aa:a1: a1:08:97:71:c0:8a:ee:ff:53:9b:56:f7:75:fa:71: c8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D1:DA:21:2D:B3:A3:F8:4E:F7:21:1B:16:11:78:5D:8B:7F:46:F6 X509v3 Authority Key Identifier: keyid:DD:C9:89:62:EC:14:68:63:E8:B0:5E:80:D2:B3:A0:33:07:0B:82:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/DDC98962EC146863E8B05E80D2B3A033070B822A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDC98962EC146863E8B05E80D2B3A033070B822A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/DDC98962EC146863E8B05E80D2B3A033070B822A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:51:25:13:f8:81:18:76:47:50:69:85:45:a4:89:36:9b:db: 14:24:43:6d:39:d4:75:59:e9:d8:ef:57:6b:31:5c:92:6a:c4: 77:d2:b3:dd:56:84:a4:0f:83:26:e6:e0:95:05:f1:24:fd:1b: c7:ad:57:47:e5:9c:53:45:dd:81:cc:5b:4b:eb:96:9a:1a:6f: fe:f8:13:ba:e3:d3:3b:b1:c2:ce:c6:ec:9d:17:d1:76:1d:b8: 46:df:45:c8:7a:99:ae:7c:21:76:26:37:f1:79:88:5d:4f:01: 1c:4b:b8:9a:8a:c7:86:43:b9:e3:a4:c2:6a:da:f8:c3:58:cb: 42:03:3b:31:ce:fe:13:a1:f6:78:36:25:a1:b6:5f:ad:4b:bc: ed:be:dd:05:b8:6e:10:4d:59:f6:57:7b:37:42:ec:e7:ed:d6: a9:66:29:82:df:54:35:dd:3b:39:c8:cf:ef:e7:6e:c9:86:f7: 9a:14:bf:c5:84:b3:f1:0b:67:61:cd:e4:fa:54:57:32:ea:c3: f3:ce:a9:6b:bb:e3:89:08:2d:17:55:f8:61:80:ca:f3:7e:80: 21:b0:69:aa:07:05:ef:e1:3b:18:fc:54:48:84:69:79:95:12: fa:63:36:2a:9d:20:f5:9e:b5:ce:68:bc:f6:d5:37:b4:a1:45: fb:4a:1f:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdcxDnDhcRmHBY8q/9dyS8M9l0ngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDOTg5NjJFQzE0Njg2M0U4QjA1RTgwRDJCM0EwMzMw NzBCODIyQTAeFw0yNTA2MTkwMjA0MjJaFw0yNTA2MjAwNjA1MjJaMDMxMTAvBgNV BAMTKDE2RDFEQTIxMkRCM0EzRjg0RUY3MjExQjE2MTE3ODVEOEI3RjQ2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgEIBp+qz6V7QznFllXfQAw/Qw 4M/l3jREix2CPqV0n8SEBtmpcisqEEcjmXvHJMTeOpEnIAXakfWQpyaXD57HQZNC qPIdaupKSDVmO98WDgg8XhvEgMncdfQDMJ7e8uXqnh5h0bmq3DxExzwvYg0Gs4HO 7CXBc6jsnQu8UoAguFCxg5nqHbHeGdDTqxabd9K193Z4U1+Trk6vFOU8NjWq2JB6 wuNDKi5+kHxnxnZt5j77+H7rnkJFJgv4PiTr4f20yuxgfvQHUNQiRtvG4aiaFW4f hG0NEMXrVWm8DtqNymFS5L98GFDf/3qfp1uqoaEIl3HAiu7/U5tW93X6ccgVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFtHaIS2zo/hO9yEbFhF4XYt/RvYwHwYDVR0j BBgwFoAU3cmJYuwUaGPosF6A0rOgMwcLgiowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVh0VVFvYXJLd0tmVjJraURpcGF5dnpNZnhZVXZ3SGJ5cG96ZHhDTDNx aDEvMC9EREM5ODk2MkVDMTQ2ODYzRThCMDVFODBEMkIzQTAzMzA3MEI4MjJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REQzk4OTYyRUMxNDY4NjNF OEIwNUU4MEQyQjNBMDMzMDcwQjgyMkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVh0VVFvYXJLd0tmVjJraURpcGF5dnpNZnhZVXZ3SGJ5cG96ZHhDTDNxaDEvMC9E REM5ODk2MkVDMTQ2ODYzRThCMDVFODBEMkIzQTAzMzA3MEI4MjJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA1ElE/iBGHZHUGmFRaSJNpvbFCRDbTnUdVnp2O9XazFckmrEd9Kz3VaEpA+D JubglQXxJP0bx61XR+WcU0XdgcxbS+uWmhpv/vgTuuPTO7HCzsbsnRfRdh24Rt9F yHqZrnwhdiY38XmIXU8BHEu4morHhkO546TCatr4w1jLQgM7Mc7+E6H2eDYlobZf rUu87b7dBbhuEE1Z9ld7N0Ls5+3WqWYpgt9UNd07OcjP7+duyYb3mhS/xYSz8Qtn Yc3k+lRXMurD886pa7vjiQgtF1X4YYDK836AIbBpqgcF7+E7GPxUSIRpeZUS+mM2 Kp0g9Z61zmi89tU3tKFF+0ofgg== -----END CERTIFICATE-----Generated at Thu Jun 19 04:49:40 2025 by rpki-client