$ rpki-client -vvf rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft File: DFBB164DBC72494619B08F0FA235F18F7F107520.mft (raw, json) Hash identifier: vIo6UcZnK2yrHkTrWHY//PJwur01BbWthXiWha6IQz0= Subject key identifier: 0C:BC:6A:D6:0F:2E:81:DA:F1:36:2B:68:2E:4E:F6:9C:E3:A6:01:9B Authority key identifier: DF:BB:16:4D:BC:72:49:46:19:B0:8F:0F:A2:35:F1:8F:7F:10:75:20 Certificate issuer: /CN=DFBB164DBC72494619B08F0FA235F18F7F107520 Certificate serial: 786C0AC84A76E987893D6514F9F3EFB51FB3BA40 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer Subject info access: rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft Manifest number: 0101 Signing time: Sat 09 Aug 2025 23:39:20 +0000 Manifest this update: Sat 09 Aug 2025 23:34:20 +0000 Manifest next update: Mon 11 Aug 2025 02:05:20 +0000 Files and hashes: 1: 3137372e37322e35342e302f32342d3234203d3e20323634383830.roa (hash: IPHv9O5Pug97aXu+8gkHhnDu0MN7EgfcGaRDHIk3+FU=) 2: DFBB164DBC72494619B08F0FA235F18F7F107520.crl (hash: 1FisJVe9WZrzrsQuy4QepXZ3w87W0kINzLG1TqxLrRQ=) 3: 3137372e37322e34382e302f32312d3234203d3e20323632353431.roa (hash: k7yG3rwBHYiWNCTrjcmWrZ2xUsrjw2FtXhCpxKNLYI0=) 4: 323830343a3563383a3a2f33322d3438203d3e20323632353431.roa (hash: fzNeJlyzQ/5gNIi831p8psFpjajO/6NKFVdt9eenWSk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.crl rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 14:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6c:0a:c8:4a:76:e9:87:89:3d:65:14:f9:f3:ef:b5:1f:b3:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBB164DBC72494619B08F0FA235F18F7F107520 Validity Not Before: Aug 9 23:34:20 2025 GMT Not After : Aug 11 02:05:20 2025 GMT Subject: CN=0CBC6AD60F2E81DAF1362B682E4EF69CE3A6019B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:1c:ab:c1:f4:f0:91:4a:1d:95:53:dd:38: 2e:c2:91:48:ec:53:3f:29:cc:77:ee:82:5c:a4:a9: 79:56:df:f3:f7:77:5e:51:46:0d:d8:f5:a2:93:d5: 8b:76:ef:62:53:4f:12:a1:ac:b6:da:00:31:32:4f: 04:d4:4c:03:fc:0d:78:a1:ff:53:16:87:29:f7:0e: 68:69:1b:21:5e:3f:0c:c1:11:50:ec:c7:b4:68:97: c1:3b:f2:0a:44:d4:87:f8:12:f6:fb:84:10:b1:b7: 2e:75:c7:fd:50:64:36:b5:c0:f7:20:e5:bd:38:81: 8a:08:3f:4e:c5:08:b4:a9:48:22:4b:56:57:7d:93: ea:e7:f0:f5:19:6a:a8:f0:e8:ac:05:d8:cb:a7:39: 59:1d:2a:4b:35:16:3d:8e:b0:2a:dc:34:ef:54:9e: d5:57:1b:44:b2:bf:d7:30:29:6b:7a:e6:e4:d7:06: de:19:41:55:77:ee:1a:eb:90:41:3f:4f:3c:20:0d: f6:6e:10:4d:c3:93:bb:08:1a:9f:2d:9d:ba:ff:a6: 16:36:f9:75:1f:5f:8b:8a:68:3e:ad:80:2e:c8:c5: 54:a2:73:18:19:be:9d:57:9b:ce:ea:2a:80:e4:c7: 78:fc:c7:32:d0:00:fc:4f:ef:ad:b0:e1:b3:e7:b2: 9a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BC:6A:D6:0F:2E:81:DA:F1:36:2B:68:2E:4E:F6:9C:E3:A6:01:9B X509v3 Authority Key Identifier: keyid:DF:BB:16:4D:BC:72:49:46:19:B0:8F:0F:A2:35:F1:8F:7F:10:75:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ce:04:49:37:09:c1:eb:fe:dc:9f:41:51:89:3c:18:b3:bd: e5:e6:14:46:29:2d:fe:dc:fa:58:a8:2e:88:9a:4e:13:88:bd: cf:7b:42:ac:cf:12:55:38:b0:7b:56:8b:a7:ac:c6:97:25:21: 12:f1:02:bc:2f:06:9b:a4:1f:07:46:f0:71:aa:c9:e6:bd:45: 2d:75:7f:dc:53:f7:0c:e0:f3:fd:58:e7:dc:90:1b:e4:c4:7c: 9a:4f:8d:5d:54:6a:7f:88:11:08:11:30:1a:76:31:c5:b6:1c: 84:d1:5a:00:a2:2d:0d:ba:2d:5c:28:10:42:ad:e6:c6:80:d3: 00:26:ef:fe:39:b8:05:c1:ee:e1:7a:b7:1d:d7:90:1b:9f:32: 7d:cf:b2:15:6e:e8:91:cd:a2:d9:bd:05:a0:fc:04:cc:a4:f4: 09:49:3a:2c:5e:2c:b0:0b:a1:8a:cd:18:12:0c:11:37:95:95: 82:e4:17:cc:47:b8:3b:46:50:1c:ba:cc:00:12:40:d6:dd:cd: c5:06:db:27:9f:3f:59:84:13:89:d1:3d:1d:ed:32:5b:8f:d0: 6c:02:ca:aa:99:6f:3e:a4:af:5a:f6:64:c3:da:a2:ae:75:f0: c9:e4:7c:31:0d:1c:40:3a:44:93:8f:20:b6:69:24:42:88:3e: f3:41:5b:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeGwKyEp26YeJPWUU+fPvtR+zukAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCQjE2NERCQzcyNDk0NjE5QjA4RjBGQTIzNUYxOEY3 RjEwNzUyMDAeFw0yNTA4MDkyMzM0MjBaFw0yNTA4MTEwMjA1MjBaMDMxMTAvBgNV BAMTKDBDQkM2QUQ2MEYyRTgxREFGMTM2MkI2ODJFNEVGNjlDRTNBNjAxOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtGxyrwfTwkUodlVPdOC7CkUjs Uz8pzHfuglykqXlW3/P3d15RRg3Y9aKT1Yt272JTTxKhrLbaADEyTwTUTAP8DXih /1MWhyn3DmhpGyFePwzBEVDsx7Rol8E78gpE1If4Evb7hBCxty51x/1QZDa1wPcg 5b04gYoIP07FCLSpSCJLVld9k+rn8PUZaqjw6KwF2MunOVkdKks1Fj2OsCrcNO9U ntVXG0Syv9cwKWt65uTXBt4ZQVV37hrrkEE/TzwgDfZuEE3Dk7sIGp8tnbr/phY2 +XUfX4uKaD6tgC7IxVSicxgZvp1Xm87qKoDkx3j8xzLQAPxP762w4bPnspoDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDLxq1g8ugdrxNitoLk72nOOmAZswHwYDVR0j BBgwFoAU37sWTbxySUYZsI8PojXxj38QdSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0JNcVpxNVl2R0Q4ZFpVckFSREc5SjVWNHEzV011d3F1OW9IWE43aGVh NG4vMC9ERkJCMTY0REJDNzI0OTQ2MTlCMDhGMEZBMjM1RjE4RjdGMTA3NTIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQkIxNjREQkM3MjQ5NDYx OUIwOEYwRkEyMzVGMThGN0YxMDc1MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0JNcVpxNVl2R0Q4ZFpVckFSREc5SjVWNHEzV011d3F1OW9IWE43aGVhNG4vMC9E RkJCMTY0REJDNzI0OTQ2MTlCMDhGMEZBMjM1RjE4RjdGMTA3NTIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiM4ESTcJwev+3J9BUYk8GLO95eYURikt/tz6WKguiJpOE4i9z3tCrM8SVTiw e1aLp6zGlyUhEvECvC8Gm6QfB0bwcarJ5r1FLXV/3FP3DODz/Vjn3JAb5MR8mk+N XVRqf4gRCBEwGnYxxbYchNFaAKItDbotXCgQQq3mxoDTACbv/jm4BcHu4Xq3HdeQ G58yfc+yFW7okc2i2b0FoPwEzKT0CUk6LF4ssAuhis0YEgwRN5WVguQXzEe4O0ZQ HLrMABJA1t3NxQbbJ58/WYQTidE9He0yW4/QbALKqplvPqSvWvZkw9qirnXwyeR8 MQ0cQDpEk48gtmkkQog+80FbNw== -----END CERTIFICATE-----Generated at Sun Aug 10 03:51:08 2025 by rpki-client