$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft File: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft (raw, json) Hash identifier: KMIIBfdEfgR0Cly22mPOU963PSupNkLu5BiJLPTCipw= Subject key identifier: 6E:BD:B9:B9:9B:47:27:96:28:6E:42:9D:03:76:8D:5F:F9:33:FE:EF Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 Certificate issuer: /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69 Certificate serial: 588395DADAAEEE144D8847398D96E8C87EB88427 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer Subject info access: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft Manifest number: 0236 Signing time: Wed 11 Jun 2025 05:04:03 +0000 Manifest this update: Wed 11 Jun 2025 04:59:03 +0000 Manifest next update: Thu 12 Jun 2025 05:25:03 +0000 Files and hashes: 1: 323830343a346537343a3a2f33322d3438203d3e20323638323632.roa (hash: /VCzucGfHlqNTkfJXTq1xxcOLzuuIwZ1U/QtbROwaEI=) 2: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl (hash: bcE3D9cvN5C2hx0ksaFATORj07m5MNK52QyEBpbZdNk=) 3: 34352e3233372e32342e302f32322d3234203d3e20323638323632.roa (hash: rINL47d16XXmhij2neYqgRCOetMGqa2cVuGeKHBY2Ww=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 05:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:83:95:da:da:ae:ee:14:4d:88:47:39:8d:96:e8:c8:7e:b8:84:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69 Validity Not Before: Jun 11 04:59:03 2025 GMT Not After : Jun 12 05:25:03 2025 GMT Subject: CN=6EBDB9B99B472796286E429D03768D5FF933FEEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:53:22:68:2a:d6:7b:f7:40:f1:f9:df:62: 3f:4e:1a:40:81:8d:04:79:c0:98:30:7b:76:1b:f2: 60:3f:1c:e9:f1:c2:f9:21:54:cf:7c:a8:0f:0d:82: 0a:cd:65:16:d8:18:95:74:2f:da:68:5e:62:f5:43: b9:20:3e:34:2f:bc:42:c7:ed:5d:50:8c:8c:71:43: 1e:66:2a:bf:a8:61:1e:54:f5:64:0d:e3:69:a4:bb: 4a:95:2c:f0:b5:56:a7:1d:5f:1e:5e:61:1f:1b:75: 00:81:41:92:34:b8:25:e3:26:a5:89:f6:eb:8b:9e: e7:88:c8:af:25:2e:71:bb:87:fe:5f:a1:ab:49:08: dc:6b:05:c9:78:dc:57:e0:6b:43:a0:3f:8d:8b:79: 16:52:b5:14:ae:74:65:73:e5:1b:68:7b:a8:27:de: c6:8e:89:d0:29:4a:b9:cf:5d:8b:69:21:fb:da:73: 64:76:3e:c0:33:35:2c:61:80:40:7e:af:a9:d5:4f: b9:00:39:d4:87:14:12:26:93:a9:fd:fc:5c:fb:22: a7:f5:1c:53:57:2e:f4:b0:62:c9:64:b0:4e:eb:66: ea:8e:02:99:2e:ec:c8:4b:ba:31:93:85:f0:33:df: ed:84:6f:88:f4:1a:3d:aa:d5:30:2c:0b:f8:93:2d: da:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BD:B9:B9:9B:47:27:96:28:6E:42:9D:03:76:8D:5F:F9:33:FE:EF X509v3 Authority Key Identifier: keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d6:59:e4:40:ff:80:b6:66:3a:75:e4:2e:ee:88:cb:37:e8: 0b:e4:4e:81:a2:f1:b9:79:09:6d:54:a3:38:8b:8c:fb:65:22: 1b:fe:9c:f4:15:39:7e:d6:7f:bc:6c:52:4d:67:60:7f:6c:a0: d6:50:b4:93:91:6b:83:a3:b9:f4:06:5b:74:53:bc:a1:70:e8: c6:16:69:37:20:f5:b1:a6:90:8a:fd:fb:0e:78:30:9d:0d:89: 65:52:80:69:2c:08:23:f0:1a:c7:81:7f:8e:af:d4:4a:d6:da: 2e:22:5a:36:59:10:8d:79:54:fa:7c:51:6f:ac:0f:62:6b:df: 0f:8f:c4:8b:48:4d:2e:4d:23:54:79:16:3d:03:bd:52:4a:ce: cd:61:43:cd:72:9c:65:2f:2a:c1:5e:fe:dc:d3:d3:84:7c:c6: 34:a1:b5:97:31:c3:fd:7b:b9:58:b9:26:b7:c0:c6:ff:18:e1: 6d:4b:49:c2:b9:b9:2c:4c:3e:63:1d:14:3c:93:6a:d1:22:aa: 67:d6:ac:2e:df:90:ba:49:0a:b2:06:09:21:ac:1c:e7:bc:ee: b3:82:a5:93:0f:d6:b2:46:f6:c3:27:bc:45:16:35:2a:ab:a7: e4:9a:d2:43:f5:1d:5c:29:22:73:43:e9:af:ac:2b:0c:4d:25: 3e:cc:8d:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWIOV2tqu7hRNiEc5jZboyH64hCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCQkU1M0FBNDBBQ0I0NUVENzZEQUMwRTZGODMzQjI4 QkVEOEE2OTAeFw0yNTA2MTEwNDU5MDNaFw0yNTA2MTIwNTI1MDNaMDMxMTAvBgNV BAMTKDZFQkRCOUI5OUI0NzI3OTYyODZFNDI5RDAzNzY4RDVGRjkzM0ZFRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD4FMiaCrWe/dA8fnfYj9OGkCB jQR5wJgwe3Yb8mA/HOnxwvkhVM98qA8NggrNZRbYGJV0L9poXmL1Q7kgPjQvvELH 7V1QjIxxQx5mKr+oYR5U9WQN42mku0qVLPC1VqcdXx5eYR8bdQCBQZI0uCXjJqWJ 9uuLnueIyK8lLnG7h/5foatJCNxrBcl43Ffga0OgP42LeRZStRSudGVz5Rtoe6gn 3saOidApSrnPXYtpIfvac2R2PsAzNSxhgEB+r6nVT7kAOdSHFBImk6n9/Fz7Iqf1 HFNXLvSwYslksE7rZuqOApku7MhLujGThfAz3+2Eb4j0Gj2q1TAsC/iTLdrfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUbr25uZtHJ5YobkKdA3aNX/kz/u8wHwYDVR0j BBgwFoAU37vlOqQKy0XtdtrA5vgzsovtimkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1Rl VmovMC9ERkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQkJFNTNBQTQwQUNCNDVF RDc2REFDMEU2RjgzM0IyOEJFRDhBNjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1RlVmovMC9E RkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKdZZ5ED/gLZmOnXkLu6IyzfoC+ROgaLxuXkJbVSjOIuM+2UiG/6c9BU5ftZ/ vGxSTWdgf2yg1lC0k5Frg6O59AZbdFO8oXDoxhZpNyD1saaQiv37DngwnQ2JZVKA aSwII/Aax4F/jq/UStbaLiJaNlkQjXlU+nxRb6wPYmvfD4/Ei0hNLk0jVHkWPQO9 UkrOzWFDzXKcZS8qwV7+3NPThHzGNKG1lzHD/Xu5WLkmt8DG/xjhbUtJwrm5LEw+ Yx0UPJNq0SKqZ9asLt+QukkKsgYJIawc57zus4Klkw/Wskb2wye8RRY1Kqun5JrS Q/UdXCkic0Ppr6wrDE0lPsyNJw== -----END CERTIFICATE-----Generated at Wed Jun 11 22:33:54 2025 by rpki-client