$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft File: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft (raw, json) Hash identifier: xf9BRvYNf3LFbcBmSaLksYxEXP+F02JXdUDqfzH6MiE= Subject key identifier: C3:53:B7:FA:92:60:0D:52:21:AE:B0:75:C5:FD:13:69:2E:2C:E4:DB Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 Certificate issuer: /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69 Certificate serial: 786116A747E852286E90B3974F73D87A6535F0D4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer Subject info access: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft Manifest number: 0234 Signing time: Mon 09 Jun 2025 19:13:58 +0000 Manifest this update: Mon 09 Jun 2025 19:08:58 +0000 Manifest next update: Tue 10 Jun 2025 20:07:58 +0000 Files and hashes: 1: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl (hash: eq2AePVT8OEhv5iHy+y+sB+kP8N8xredK5qSWLmXxM4=) 2: 34352e3233372e32342e302f32322d3234203d3e20323638323632.roa (hash: rINL47d16XXmhij2neYqgRCOetMGqa2cVuGeKHBY2Ww=) 3: 323830343a346537343a3a2f33322d3438203d3e20323638323632.roa (hash: /VCzucGfHlqNTkfJXTq1xxcOLzuuIwZ1U/QtbROwaEI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 20:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:61:16:a7:47:e8:52:28:6e:90:b3:97:4f:73:d8:7a:65:35:f0:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69 Validity Not Before: Jun 9 19:08:58 2025 GMT Not After : Jun 10 20:07:58 2025 GMT Subject: CN=C353B7FA92600D5221AEB075C5FD13692E2CE4DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:01:88:7d:18:d6:84:21:b9:a9:39:f5:b1:18: 5c:6d:d9:c1:ca:5b:b6:b4:18:be:1a:8f:7b:3b:cf: 78:cf:f0:7e:bf:20:a6:81:b4:5c:f2:b6:13:23:6a: ac:ad:08:c1:b8:ea:b0:2f:35:b8:88:46:13:55:42: ee:fc:e0:bd:d3:a7:63:ff:85:78:da:81:8a:06:bf: 3e:9c:02:50:a8:22:9b:48:ae:70:4c:09:7a:04:53: b2:6b:1b:bf:e2:5e:b6:d4:4c:f2:58:50:80:3d:0f: 15:50:4c:98:50:53:13:c6:fc:6a:c2:be:e7:83:1f: 88:e7:f6:74:2d:ca:12:0f:f7:e6:fe:a9:73:e6:c0: 81:6e:4f:da:92:cc:54:64:fb:2e:d5:53:14:96:99: cf:0d:0a:95:0c:69:a4:52:89:3c:62:90:a9:e2:f1: 54:31:9e:74:46:ef:34:28:b7:82:d5:52:43:e3:27: 79:bb:4b:e7:69:0e:2c:a1:82:df:d0:b9:20:2f:62: 03:c6:9a:1c:43:8a:9c:90:0a:c2:52:ab:3b:c1:40: 92:b9:de:fa:08:f9:d2:eb:02:22:66:79:f9:02:f9: b7:16:cd:d0:0a:db:2b:f3:ba:0d:2c:b7:cc:ee:25: bd:39:85:3a:94:00:74:42:68:9a:9f:f3:18:dc:ed: e3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:53:B7:FA:92:60:0D:52:21:AE:B0:75:C5:FD:13:69:2E:2C:E4:DB X509v3 Authority Key Identifier: keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:2c:26:d6:01:a7:c7:41:bf:db:f8:cd:07:16:7a:6f:b1:c3: 43:ca:cd:8f:db:c8:5f:60:5c:b4:d7:e4:17:fc:c4:c9:77:bd: 39:77:2e:de:b7:b5:02:49:6f:01:63:a1:c0:12:07:28:34:79: 83:78:16:31:e0:d3:07:48:b1:cf:b9:1d:0e:c4:f6:38:c5:08: 05:0f:01:9f:43:60:92:16:aa:55:d6:65:e6:4f:d0:d6:2a:75: 54:d4:ad:71:9e:e0:d8:3a:ac:65:36:4b:38:12:f2:f1:f6:7e: 12:1c:cb:a9:c8:ef:59:65:60:02:bc:64:5c:89:e8:65:b6:fe: 4f:d0:98:12:28:25:44:88:ba:22:9f:86:4f:9f:c3:31:03:b4: 9e:1c:97:5e:f4:6c:a5:16:64:f8:c0:80:c8:4f:de:ca:8a:8c: 4f:85:40:2f:99:a0:18:8d:15:27:65:1f:8f:32:ea:1e:ea:6f: df:23:2d:7d:a2:e7:70:bd:2d:22:1b:81:59:fc:4b:11:86:e0: b3:74:61:8e:97:7b:6a:c7:71:73:d7:8a:30:f4:f7:00:12:c2: 8c:ca:9c:fe:66:cd:f4:61:3e:86:02:7d:20:50:fd:87:29:54: 86:77:c7:43:15:a5:94:12:0d:fd:fc:47:b7:e6:7e:ca:67:1e: ee:66:39:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeGEWp0foUihukLOXT3PYemU18NQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCQkU1M0FBNDBBQ0I0NUVENzZEQUMwRTZGODMzQjI4 QkVEOEE2OTAeFw0yNTA2MDkxOTA4NThaFw0yNTA2MTAyMDA3NThaMDMxMTAvBgNV BAMTKEMzNTNCN0ZBOTI2MDBENTIyMUFFQjA3NUM1RkQxMzY5MkUyQ0U0REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQAYh9GNaEIbmpOfWxGFxt2cHK W7a0GL4aj3s7z3jP8H6/IKaBtFzythMjaqytCMG46rAvNbiIRhNVQu784L3Tp2P/ hXjagYoGvz6cAlCoIptIrnBMCXoEU7JrG7/iXrbUTPJYUIA9DxVQTJhQUxPG/GrC vueDH4jn9nQtyhIP9+b+qXPmwIFuT9qSzFRk+y7VUxSWmc8NCpUMaaRSiTxikKni 8VQxnnRG7zQot4LVUkPjJ3m7S+dpDiyhgt/QuSAvYgPGmhxDipyQCsJSqzvBQJK5 3voI+dLrAiJmefkC+bcWzdAK2yvzug0st8zuJb05hTqUAHRCaJqf8xjc7eObAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUw1O3+pJgDVIhrrB1xf0TaS4s5NswHwYDVR0j BBgwFoAU37vlOqQKy0XtdtrA5vgzsovtimkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1Rl VmovMC9ERkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQkJFNTNBQTQwQUNCNDVF RDc2REFDMEU2RjgzM0IyOEJFRDhBNjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1RlVmovMC9E RkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANywm1gGnx0G/2/jNBxZ6b7HDQ8rNj9vIX2BctNfkF/zEyXe9OXcu3re1Aklv AWOhwBIHKDR5g3gWMeDTB0ixz7kdDsT2OMUIBQ8Bn0NgkhaqVdZl5k/Q1ip1VNSt cZ7g2DqsZTZLOBLy8fZ+EhzLqcjvWWVgArxkXInoZbb+T9CYEiglRIi6Ip+GT5/D MQO0nhyXXvRspRZk+MCAyE/eyoqMT4VAL5mgGI0VJ2UfjzLqHupv3yMtfaLncL0t IhuBWfxLEYbgs3Rhjpd7asdxc9eKMPT3ABLCjMqc/mbN9GE+hgJ9IFD9hylUhnfH QxWllBIN/fxHt+Z+ymce7mY5tg== -----END CERTIFICATE-----Generated at Mon Jun 9 23:43:45 2025 by rpki-client