$ rpki-client -vvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft File: DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft (raw, json) Hash identifier: nvhFr3Y+M4tzw3yC0Ck+JXETzigu7YTVz90Ot1ZiWvI= Subject key identifier: 0F:5F:F1:B2:36:20:B0:56:B5:AC:BB:F9:00:C7:94:03:DE:77:FE:A0 Authority key identifier: DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D Certificate issuer: /CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D Certificate serial: 18A3C63F248376B91FD443C3EECCDA98479D70A7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer Subject info access: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft Manifest number: 64 Signing time: Sun 15 Jun 2025 17:04:48 +0000 Manifest this update: Sun 15 Jun 2025 16:59:48 +0000 Manifest next update: Mon 16 Jun 2025 19:43:48 +0000 Files and hashes: 1: 34352e3136382e3130302e302f32322d3234203d3e20323638303838.roa (hash: EBy3rQwQ+8YvV1n0NbcOpSkf6ZX3JhodQDIQP6f8oCY=) 2: 323830343a353764303a3a2f33322d3332203d3e20323638303838.roa (hash: V86kNco5ZHxMjKrWgLTi/qoHVEZvpbWtFOyczBdYZAU=) 3: DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl (hash: G2vvMpAjXWSLKwlp2hT+pubGMRFqMl9kOKRWBGIcr/E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 19:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a3:c6:3f:24:83:76:b9:1f:d4:43:c3:ee:cc:da:98:47:9d:70:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D Validity Not Before: Jun 15 16:59:48 2025 GMT Not After : Jun 16 19:43:48 2025 GMT Subject: CN=0F5FF1B23620B056B5ACBBF900C79403DE77FEA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:22:47:e2:d8:11:65:9e:dc:ac:ac:ca:0d:b9: 2b:d1:f9:89:15:06:db:5c:29:50:4b:a9:7c:f0:0b: a0:15:63:b4:f2:d7:d8:45:0e:0d:ad:15:6d:8a:e2: ce:9e:43:1d:23:fc:7c:1e:e8:52:f8:f8:c5:36:4c: ce:86:78:fa:4c:63:aa:6a:d6:b8:ac:76:29:73:ef: 66:df:dd:d9:fc:14:1d:ed:2a:cf:d3:05:10:27:40: 5d:40:bc:eb:6b:1d:a9:52:2e:6d:57:4f:68:33:08: 3c:aa:6a:f8:91:06:87:88:9d:49:17:31:3a:28:30: 0e:0e:71:27:62:ab:2c:4c:80:55:7d:a5:a7:5c:fa: bb:e9:19:48:dc:b5:e1:46:63:d1:b9:56:4e:4b:6b: 6d:82:3c:47:f2:5d:bc:01:4f:d8:4a:43:1b:0d:bf: 19:23:3f:76:50:d4:e4:c5:2d:64:b3:37:2f:dc:de: 4d:fc:5a:f3:6d:dd:92:0b:08:0f:5e:02:83:56:d8: 70:b6:ff:6c:0f:fd:57:fa:a2:22:b8:e0:de:21:15: ec:d8:38:c0:c6:2a:8e:e6:0d:9e:07:1a:0f:73:12: bc:68:a0:ff:25:c8:e8:b3:fb:ee:89:30:d8:32:7a: c0:14:38:e3:da:b9:7d:66:2c:f4:24:ee:20:2b:87: cb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5F:F1:B2:36:20:B0:56:B5:AC:BB:F9:00:C7:94:03:DE:77:FE:A0 X509v3 Authority Key Identifier: keyid:DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:bb:1b:f1:32:9b:96:b4:c6:52:2a:88:2d:6b:fa:7d:7f:51: 72:2c:80:3f:8c:36:b0:7f:8d:64:dd:de:f5:80:f2:ec:db:8e: 1f:00:57:ef:57:d5:47:b1:1e:da:fc:34:34:65:35:fb:6c:7b: 73:af:ef:3e:f9:79:3d:f3:5f:0f:3b:c8:2d:89:5c:af:91:47: 0d:f1:07:2a:f5:f4:ce:ca:3d:59:53:dc:65:35:4f:7b:9b:65: ae:5f:f5:f9:89:54:a0:36:7f:24:41:e1:61:91:e0:25:b7:ce: 19:45:07:ec:4c:6d:8d:c4:f8:ac:e8:ab:a0:b5:68:6d:ee:08: 91:d3:9a:b4:05:45:cd:e1:87:94:e1:ba:0c:c9:4b:6b:ff:e2: 81:7a:38:58:b8:12:01:6b:ec:6c:6e:b6:74:0e:15:39:d8:47: ad:c9:3d:6c:a9:8a:a5:fe:34:01:a7:38:6e:8e:91:4f:42:d1: fc:32:12:cd:0a:9d:6c:f8:79:2b:64:1f:b2:5f:93:37:c8:de: 0b:88:8a:61:8d:00:37:58:a6:80:b0:e9:71:5c:31:4f:58:fb: b3:b8:f8:33:45:e3:6d:43:96:93:99:62:fa:f7:39:05:6c:77: 49:90:cb:91:8e:3f:2f:cf:7e:34:f7:79:f5:32:27:d1:f9:08: 04:49:55:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGKPGPySDdrkf1EPD7szamEedcKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQzOTk3RUE2MjRCMjc0N0YwNkU3N0Q5MTQxMjJFQURF QzREMEI3RDAeFw0yNTA2MTUxNjU5NDhaFw0yNTA2MTYxOTQzNDhaMDMxMTAvBgNV BAMTKDBGNUZGMUIyMzYyMEIwNTZCNUFDQkJGOTAwQzc5NDAzREU3N0ZFQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpIkfi2BFlntysrMoNuSvR+YkV BttcKVBLqXzwC6AVY7Ty19hFDg2tFW2K4s6eQx0j/Hwe6FL4+MU2TM6GePpMY6pq 1risdilz72bf3dn8FB3tKs/TBRAnQF1AvOtrHalSLm1XT2gzCDyqaviRBoeInUkX MTooMA4OcSdiqyxMgFV9padc+rvpGUjcteFGY9G5Vk5La22CPEfyXbwBT9hKQxsN vxkjP3ZQ1OTFLWSzNy/c3k38WvNt3ZILCA9eAoNW2HC2/2wP/Vf6oiK44N4hFezY OMDGKo7mDZ4HGg9zErxooP8lyOiz++6JMNgyesAUOOPauX1mLPQk7iArh8urAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUD1/xsjYgsFa1rLv5AMeUA953/qAwHwYDVR0j BBgwFoAU3TmX6mJLJ0fwbnfZFBIurexNC30wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhy dUUvMC9ERDM5OTdFQTYyNEIyNzQ3RjA2RTc3RDkxNDEyMkVBREVDNEQwQjdELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMzk5N0VBNjI0QjI3NDdG MDZFNzdEOTE0MTIyRUFERUM0RDBCN0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhydUUvMC9E RDM5OTdFQTYyNEIyNzQ3RjA2RTc3RDkxNDEyMkVBREVDNEQwQjdELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAbsb8TKblrTGUiqILWv6fX9RciyAP4w2sH+NZN3e9YDy7NuOHwBX71fVR7Ee 2vw0NGU1+2x7c6/vPvl5PfNfDzvILYlcr5FHDfEHKvX0zso9WVPcZTVPe5tlrl/1 +YlUoDZ/JEHhYZHgJbfOGUUH7ExtjcT4rOiroLVobe4IkdOatAVFzeGHlOG6DMlL a//igXo4WLgSAWvsbG62dA4VOdhHrck9bKmKpf40Aac4bo6RT0LR/DISzQqdbPh5 K2Qfsl+TN8jeC4iKYY0AN1imgLDpcVwxT1j7s7j4M0XjbUOWk5li+vc5BWx3SZDL kY4/L89+NPd59TIn0fkIBElVqg== -----END CERTIFICATE-----Generated at Mon Jun 16 13:25:30 2025 by rpki-client