$ rpki-client -vvf rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft File: DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft (raw, json) Hash identifier: rugDGdbDYHlaBoOK5/eNHMtK9V9bj7nQ0RafeSFTmxw= Subject key identifier: B2:B7:C0:71:FF:86:79:2C:A9:61:32:00:71:53:73:98:3A:51:56:5F Authority key identifier: DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E Certificate issuer: /CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E Certificate serial: 44E75EF54306B0EDF56587BBD731E5A3FFD6D60C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer Subject info access: rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft Manifest number: 32 Signing time: Fri 20 Jun 2025 03:22:36 +0000 Manifest this update: Fri 20 Jun 2025 03:17:36 +0000 Manifest next update: Sat 21 Jun 2025 07:08:36 +0000 Files and hashes: 1: 3137372e38352e3137322e302f32322d3234203d3e203532373436.roa (hash: KCrFqTQzO17kQlL8SOLSVWkU5WyJdtvB7e1wLs8BQYA=) 2: 323830343a316535343a3a2f33322d3536203d3e203532373436.roa (hash: ADTcvk7C0x33Y2RYKuM0CdXcsQC2etHZuMH6cQfkxbQ=) 3: 3133312e3232312e3138302e302f32322d3234203d3e203532373436.roa (hash: 3PsUICllrnsF07Zi7kmN3vDa9q1Ef/q577Ua+T+jmVg=) 4: DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl (hash: oHJC42X+z7BmCObttVZDMc+WrO0moUnqSqWrO/w0XIU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 03:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e7:5e:f5:43:06:b0:ed:f5:65:87:bb:d7:31:e5:a3:ff:d6:d6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E Validity Not Before: Jun 20 03:17:36 2025 GMT Not After : Jun 21 07:08:36 2025 GMT Subject: CN=B2B7C071FF86792CA9613200715373983A51565F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:54:30:a5:9a:b3:bc:2a:d1:d3:93:f0:b4:2e: 23:05:fb:ce:03:d5:ff:db:e7:2a:12:60:e2:61:31: df:ad:11:86:86:3d:d9:cf:10:36:79:34:cb:de:00: dd:37:2c:6f:d5:eb:da:50:8c:03:3c:eb:9c:91:53: 85:0d:7e:ed:be:d4:84:b4:10:d8:23:e2:d4:6e:c8: 3a:ca:ce:3c:4b:e0:e0:11:f8:40:e2:87:43:b3:be: 28:f3:03:e9:9f:e3:82:55:9d:5e:7f:45:16:60:50: 9d:3e:1f:cd:e6:a2:9a:ca:f0:e9:ab:65:b2:cf:fb: 99:6f:50:52:b7:65:b4:2d:04:e5:21:c0:4e:b3:1a: 37:63:1f:69:30:d2:8b:eb:74:35:09:e4:b0:7a:9b: 64:7d:93:15:1e:b6:65:dd:31:18:b7:a7:3f:e6:26: 1c:b4:27:4c:22:13:c8:90:e9:f7:8d:e8:cc:0b:12: 5c:6a:a7:0c:cc:ee:57:58:d0:9c:b3:ee:52:db:1b: 68:8d:77:1f:b1:4f:eb:ad:93:e3:c9:51:63:85:f5: 71:a1:b6:30:06:ae:8d:29:9f:f3:02:ea:b9:0d:41: 93:17:e6:22:2a:50:3e:3e:0b:c9:14:ed:4c:0e:a5: 6e:3a:31:15:b1:14:d0:3d:58:46:4c:cc:bc:8f:2d: 41:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B7:C0:71:FF:86:79:2C:A9:61:32:00:71:53:73:98:3A:51:56:5F X509v3 Authority Key Identifier: keyid:DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ed:b1:fc:02:fc:33:56:83:5e:6d:a7:40:a2:d3:1d:18:80: 23:42:6a:db:fa:bc:49:9e:7a:6a:8b:0c:bf:71:c4:40:4b:8b: f5:d9:e4:8c:6d:52:fb:8e:61:59:e9:18:8e:60:1e:29:06:d1: 28:f7:bd:a3:ac:a6:b1:4e:ed:de:a1:8f:9d:c7:12:88:28:d0: a1:19:32:43:39:f9:29:3e:54:90:b0:c7:ba:1c:24:22:1b:da: 23:48:98:aa:96:20:9f:f3:ad:26:e1:02:1c:e7:dc:26:99:7a: 07:2a:45:97:fd:db:8a:ed:05:96:b7:8d:61:fd:4b:21:79:81: f5:49:51:9a:1e:a3:ed:ea:a0:30:9c:b2:80:d3:e7:50:8a:01: 4e:f1:88:8b:38:82:3d:87:32:27:e3:38:9c:e8:c5:cf:5e:02: d5:7a:eb:07:98:d2:a8:4e:06:37:37:69:28:55:b6:b3:d3:b9: 1d:a7:24:85:c7:8d:7b:35:f2:9a:c7:39:7e:1c:81:4e:88:52: ff:6c:6e:43:a3:62:35:b4:9a:09:ee:9b:af:f8:66:2f:d8:0a: 86:f1:60:eb:6a:b9:e2:b7:be:5f:c2:b5:e3:93:50:ef:1d:06: 58:f4:51:30:7a:f3:5d:b9:17:0d:75:e9:82:b3:09:d7:b3:33: 71:e4:4a:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUROde9UMGsO31ZYe71zHlo//W1gwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCMUYzRkE2RjQyMERGMDE5MDU1MkZDMDk3Mjg1OUFG NDVGMzY4RTAeFw0yNTA2MjAwMzE3MzZaFw0yNTA2MjEwNzA4MzZaMDMxMTAvBgNV BAMTKEIyQjdDMDcxRkY4Njc5MkNBOTYxMzIwMDcxNTM3Mzk4M0E1MTU2NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBVDClmrO8KtHTk/C0LiMF+84D 1f/b5yoSYOJhMd+tEYaGPdnPEDZ5NMveAN03LG/V69pQjAM865yRU4UNfu2+1IS0 ENgj4tRuyDrKzjxL4OAR+EDih0OzvijzA+mf44JVnV5/RRZgUJ0+H83moprK8Omr ZbLP+5lvUFK3ZbQtBOUhwE6zGjdjH2kw0ovrdDUJ5LB6m2R9kxUetmXdMRi3pz/m Jhy0J0wiE8iQ6feN6MwLElxqpwzM7ldY0Jyz7lLbG2iNdx+xT+utk+PJUWOF9XGh tjAGro0pn/MC6rkNQZMX5iIqUD4+C8kU7UwOpW46MRWxFNA9WEZMzLyPLUGrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsrfAcf+GeSypYTIAcVNzmDpRVl8wHwYDVR0j BBgwFoAU37Hz+m9CDfAZBVL8CXKFmvRfNo4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRW55ZGhwQlZta2E0V05DZFF3aGtmbVJudXFFNk1GbTV4MnFZM3Zwb3Nv algvMC9ERkIxRjNGQTZGNDIwREYwMTkwNTUyRkMwOTcyODU5QUY0NUYzNjhFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQjFGM0ZBNkY0MjBERjAx OTA1NTJGQzA5NzI4NTlBRjQ1RjM2OEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RW55ZGhwQlZta2E0V05DZFF3aGtmbVJudXFFNk1GbTV4MnFZM3Zwb3NvalgvMC9E RkIxRjNGQTZGNDIwREYwMTkwNTUyRkMwOTcyODU5QUY0NUYzNjhFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj+2x/AL8M1aDXm2nQKLTHRiAI0Jq2/q8SZ56aosMv3HEQEuL9dnkjG1S+45h WekYjmAeKQbRKPe9o6ymsU7t3qGPnccSiCjQoRkyQzn5KT5UkLDHuhwkIhvaI0iY qpYgn/OtJuECHOfcJpl6BypFl/3biu0FlreNYf1LIXmB9UlRmh6j7eqgMJyygNPn UIoBTvGIiziCPYcyJ+M4nOjFz14C1XrrB5jSqE4GNzdpKFW2s9O5HackhceNezXy msc5fhyBTohS/2xuQ6NiNbSaCe6br/hmL9gKhvFg62q54re+X8K145NQ7x0GWPRR MHrzXbkXDXXpgrMJ17MzceRKFQ== -----END CERTIFICATE-----Generated at Fri Jun 20 07:14:57 2025 by rpki-client