$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft File: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft (raw, json) Hash identifier: +SOLLj0njludxCEiLZcMB6yqPuPBKdCYUSYVLJqKY6Q= Subject key identifier: 28:FF:0E:5A:25:3E:10:61:D7:AA:54:B3:D9:FE:2F:A9:EE:41:02:05 Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 Certificate issuer: /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69 Certificate serial: 05396ED710DCFA794AA3AA813B7E3C465E1B2AC9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer Subject info access: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft Manifest number: 0284 Signing time: Sat 09 Aug 2025 02:09:27 +0000 Manifest this update: Sat 09 Aug 2025 02:04:27 +0000 Manifest next update: Sun 10 Aug 2025 04:44:27 +0000 Files and hashes: 1: 34352e3233372e32342e302f32322d3234203d3e20323638323632.roa (hash: rINL47d16XXmhij2neYqgRCOetMGqa2cVuGeKHBY2Ww=) 2: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl (hash: 2irHGRmj3eZQbAuy6rB5yebZUcZaI4OQVOz/sR4X7MI=) 3: 323830343a346537343a3a2f33322d3438203d3e20323638323632.roa (hash: /VCzucGfHlqNTkfJXTq1xxcOLzuuIwZ1U/QtbROwaEI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 04:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:39:6e:d7:10:dc:fa:79:4a:a3:aa:81:3b:7e:3c:46:5e:1b:2a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69 Validity Not Before: Aug 9 02:04:27 2025 GMT Not After : Aug 10 04:44:27 2025 GMT Subject: CN=28FF0E5A253E1061D7AA54B3D9FE2FA9EE410205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:b7:59:64:2e:de:76:4e:f5:6e:cf:39:53: 37:06:b2:79:1c:c9:1c:96:d4:40:ab:ab:b9:dd:7a: 75:ad:68:f6:bc:20:3b:4b:fc:e8:b8:d7:77:0f:60: 94:48:44:14:3b:e0:54:c0:70:aa:db:25:a6:c3:4e: 28:2f:64:ca:5e:8d:23:db:30:00:be:41:19:e6:3b: 29:f6:2c:b9:fb:2c:1e:ec:43:78:aa:c6:b7:59:10: 38:aa:d4:41:0f:e7:bc:df:9b:49:9a:c4:6e:6c:bb: c6:f7:67:a5:e8:5f:84:85:76:48:8c:5d:56:46:f6: f1:d7:b6:ab:0c:6a:e8:59:d8:e6:02:8b:0a:f2:4c: ad:43:31:4b:fa:16:57:e5:05:47:e0:36:b5:79:f1: d3:4c:b6:ef:9a:b8:55:2e:a9:27:db:d5:be:b1:90: ad:74:10:7c:2c:f5:f1:9d:ed:26:29:1c:7a:49:30: b1:cb:a2:c0:cc:d6:88:13:69:e6:49:93:00:47:81: 78:6f:53:29:be:89:db:ef:67:cd:89:20:0c:6d:7d: 1f:cd:c8:66:c9:a4:79:62:4a:fc:a7:96:e7:3a:f2: b4:97:7b:e9:1f:0f:9d:3d:e5:21:32:28:57:63:a2: f8:60:f5:12:ea:8a:1e:79:67:3c:30:50:11:0a:3d: 69:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FF:0E:5A:25:3E:10:61:D7:AA:54:B3:D9:FE:2F:A9:EE:41:02:05 X509v3 Authority Key Identifier: keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d3:ce:6f:a9:40:5d:8d:83:b6:62:20:cb:4a:37:2f:a6:a0: 01:bd:a1:dc:9d:ed:62:5f:26:2a:ed:cd:22:eb:51:00:21:8d: f3:09:9a:9f:88:b4:5d:ed:59:f6:51:b1:70:f2:81:d0:cb:7b: e2:2f:8c:b0:9f:23:d8:bc:83:9c:7a:40:5c:e0:8e:94:11:5f: 7b:9c:a6:61:b6:d0:47:c2:75:61:f1:b4:61:14:59:c3:83:f3: ee:48:84:5e:90:a9:a6:34:70:00:8f:87:09:d1:08:ea:af:16: 5c:35:31:a0:4f:00:1e:5a:c3:ee:f9:50:5e:8b:25:c9:dd:bb: 59:79:5c:c2:6f:60:7e:1a:fc:a0:98:4b:44:fe:14:f1:8f:4f: 4a:1a:28:fa:fa:fe:e0:82:3d:9d:06:38:aa:77:eb:bd:0f:d4: ff:30:61:6e:bf:5c:3b:32:df:f3:c6:03:e6:39:8f:d3:e0:f2: 1d:4a:f7:a9:fd:be:2d:4c:7c:f2:8e:6f:7a:18:9c:60:37:ff: 38:fe:b4:12:3f:0d:74:50:86:0f:02:83:31:f1:62:7d:47:ae: be:4f:47:79:ad:1e:dc:c4:14:8f:8f:11:4a:f2:3d:5d:46:db: 36:ae:21:a4:87:a5:fa:ff:8c:a5:ab:45:da:98:b9:36:7a:a5: b0:2f:91:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBTlu1xDc+nlKo6qBO348Rl4bKskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCQkU1M0FBNDBBQ0I0NUVENzZEQUMwRTZGODMzQjI4 QkVEOEE2OTAeFw0yNTA4MDkwMjA0MjdaFw0yNTA4MTAwNDQ0MjdaMDMxMTAvBgNV BAMTKDI4RkYwRTVBMjUzRTEwNjFEN0FBNTRCM0Q5RkUyRkE5RUU0MTAyMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOrdZZC7edk71bs85UzcGsnkc yRyW1ECrq7ndenWtaPa8IDtL/Oi413cPYJRIRBQ74FTAcKrbJabDTigvZMpejSPb MAC+QRnmOyn2LLn7LB7sQ3iqxrdZEDiq1EEP57zfm0maxG5su8b3Z6XoX4SFdkiM XVZG9vHXtqsMauhZ2OYCiwryTK1DMUv6FlflBUfgNrV58dNMtu+auFUuqSfb1b6x kK10EHws9fGd7SYpHHpJMLHLosDM1ogTaeZJkwBHgXhvUym+idvvZ82JIAxtfR/N yGbJpHliSvynluc68rSXe+kfD5095SEyKFdjovhg9RLqih55ZzwwUBEKPWl5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKP8OWiU+EGHXqlSz2f4vqe5BAgUwHwYDVR0j BBgwFoAU37vlOqQKy0XtdtrA5vgzsovtimkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1Rl VmovMC9ERkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQkJFNTNBQTQwQUNCNDVF RDc2REFDMEU2RjgzM0IyOEJFRDhBNjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1RlVmovMC9E RkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB9POb6lAXY2DtmIgy0o3L6agAb2h3J3tYl8mKu3NIutRACGN8wman4i0Xe1Z 9lGxcPKB0Mt74i+MsJ8j2LyDnHpAXOCOlBFfe5ymYbbQR8J1YfG0YRRZw4Pz7kiE XpCppjRwAI+HCdEI6q8WXDUxoE8AHlrD7vlQXoslyd27WXlcwm9gfhr8oJhLRP4U 8Y9PShoo+vr+4II9nQY4qnfrvQ/U/zBhbr9cOzLf88YD5jmP0+DyHUr3qf2+LUx8 8o5vehicYDf/OP60Ej8NdFCGDwKDMfFifUeuvk9Hea0e3MQUj48RSvI9XUbbNq4h pIel+v+MpatF2pi5NnqlsC+Rhg== -----END CERTIFICATE-----Generated at Sat Aug 9 15:16:28 2025 by rpki-client