$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft File: DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft (raw, json) Hash identifier: xko/XPuj4pvgowgFSSYf9SuLc+MqlB+NEoEND3gA31w= Subject key identifier: 85:47:3A:7C:22:63:4D:F1:AF:38:E1:8D:F5:49:12:DA:BA:63:87:17 Authority key identifier: DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE Certificate issuer: /CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE Certificate serial: 2E3D6B8637A3F8EE798DD0C3D6EB4DFEDB1DB8CE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer Subject info access: rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft Manifest number: 50 Signing time: Fri 06 Jun 2025 12:53:35 +0000 Manifest this update: Fri 06 Jun 2025 12:48:35 +0000 Manifest next update: Sat 07 Jun 2025 16:40:35 +0000 Files and hashes: 1: 3137372e3132352e37332e302f32342d3234203d3e203532373636.roa (hash: yHmJCMANwgyJZi7RpIORKezVofQsOnGYoQYEeBdFCP0=) 2: DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl (hash: WOejHpWBpNaevnabSkh0cy+HkTOMJODDGr8UUNaZvRs=) 3: 3137372e3132352e37322e302f32332d3233203d3e203532373636.roa (hash: RUgWQbSbfKqm4Hfu18+LGJPAqutuS6ikmtMKvWzJroY=) 4: 3137372e3132352e37322e302f32342d3234203d3e203532373636.roa (hash: 8l8sj6Lhn0LhQN9ND1pd5nXSQ+34FWL+b1PnT0OphM8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 16:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3d:6b:86:37:a3:f8:ee:79:8d:d0:c3:d6:eb:4d:fe:db:1d:b8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE Validity Not Before: Jun 6 12:48:35 2025 GMT Not After : Jun 7 16:40:35 2025 GMT Subject: CN=85473A7C22634DF1AF38E18DF54912DABA638717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:01:b1:73:9e:23:47:77:2a:3a:2b:da:09:70: b6:72:9c:10:77:a5:a8:cc:6e:54:24:a4:b2:a5:56: 69:fc:bf:1d:16:8c:a5:75:08:56:91:22:7f:11:b5: e8:3e:da:87:58:be:58:52:44:d7:b5:6b:2f:1d:fc: 93:89:01:96:29:3b:2c:ef:15:8e:db:b7:26:54:57: 52:db:8b:e7:89:07:c0:cb:65:0c:21:c7:c0:db:73: ef:d8:4c:2d:de:2e:dc:fb:5e:48:de:1b:82:25:c3: 9c:71:d1:e3:dd:bc:28:c7:a7:09:d1:12:57:20:7a: 79:41:eb:0e:0f:22:a6:4b:63:bf:01:b9:2c:f0:d9: 76:8e:65:8b:17:ee:6c:ff:b1:04:ba:4c:af:f4:58: 58:24:6a:c0:af:47:a1:db:fb:a0:84:71:28:af:ae: 38:f2:44:f3:e9:a6:fa:a8:39:26:91:b8:06:b8:b8: c5:a5:78:6b:32:c7:e8:57:be:84:bc:ac:29:3d:4e: dc:11:f1:f4:24:22:40:c0:2d:de:95:b8:e5:e0:52: bc:49:a6:ac:d9:14:7e:4b:10:91:0a:a5:eb:b5:d4: d8:07:60:0d:d3:32:b3:41:82:f9:3b:cc:59:06:4a: b5:b0:60:7d:9a:42:51:79:5b:36:82:72:2b:da:a3: 59:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:47:3A:7C:22:63:4D:F1:AF:38:E1:8D:F5:49:12:DA:BA:63:87:17 X509v3 Authority Key Identifier: keyid:DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:02:03:6a:cb:d2:ac:a7:61:f9:c8:9b:74:ba:9c:ae:18:1a: 3e:d9:03:ce:0b:1f:9f:81:c8:9d:2e:fa:16:78:96:43:ce:52: 2f:f0:cf:26:38:05:50:6b:3a:d1:3e:73:77:8c:c4:b9:b2:04: c7:63:c7:b1:a4:81:12:4e:2d:97:62:27:ad:a6:22:a8:64:9b: 33:23:67:e4:76:4c:21:88:03:d3:62:c5:6d:dc:51:35:b4:80: 73:5b:e7:a1:ad:18:9d:c3:a2:7c:0d:29:db:74:f9:69:15:a6: 00:c7:f1:80:64:a4:34:40:e5:e7:bc:6d:ae:90:95:1c:42:ef: 05:60:a5:8a:ad:2d:ff:aa:23:c2:a0:b7:02:54:4a:73:f6:8d: 4c:b6:e1:f3:bf:2c:46:95:df:d7:28:86:42:fd:23:26:c7:62: ca:9c:af:10:19:86:ed:c1:db:ea:e0:8e:08:57:b5:8d:c1:40: 09:a8:2d:fc:74:f9:27:ec:c8:c1:60:83:6f:0c:84:bf:f3:f8: 79:17:e8:fb:a8:cb:b9:be:7e:93:57:65:52:47:74:b9:08:8f: 26:84:6f:bb:14:be:c5:e8:70:da:9a:2b:4c:5d:1e:c1:0d:53: 7d:06:e6:6c:ba:b1:9e:b7:5f:0e:cc:84:7d:61:e6:c9:95:55: cb:d5:4c:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULj1rhjej+O55jdDD1utN/tsduM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJBOUJCNkZENTY3QTUwODNCN0JBMEJCMDdDRDMxMjEw RjNDOEJFRTAeFw0yNTA2MDYxMjQ4MzVaFw0yNTA2MDcxNjQwMzVaMDMxMTAvBgNV BAMTKDg1NDczQTdDMjI2MzRERjFBRjM4RTE4REY1NDkxMkRBQkE2Mzg3MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+AbFzniNHdyo6K9oJcLZynBB3 pajMblQkpLKlVmn8vx0WjKV1CFaRIn8Rteg+2odYvlhSRNe1ay8d/JOJAZYpOyzv FY7btyZUV1Lbi+eJB8DLZQwhx8Dbc+/YTC3eLtz7XkjeG4Ilw5xx0ePdvCjHpwnR ElcgenlB6w4PIqZLY78BuSzw2XaOZYsX7mz/sQS6TK/0WFgkasCvR6Hb+6CEcSiv rjjyRPPppvqoOSaRuAa4uMWleGsyx+hXvoS8rCk9TtwR8fQkIkDALd6VuOXgUrxJ pqzZFH5LEJEKpeu11NgHYA3TMrNBgvk7zFkGSrWwYH2aQlF5WzaCcivao1k5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhUc6fCJjTfGvOOGN9UkS2rpjhxcwHwYDVR0j BBgwFoAU26m7b9VnpQg7e6C7B80xIQ88i+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0NQUFp1UGppdVFCWWt2M0JhS1ZOcXFLNXQyN3ppcXA5ZmhCV1NTZUVv ZlYvMC9EQkE5QkI2RkQ1NjdBNTA4M0I3QkEwQkIwN0NEMzEyMTBGM0M4QkVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQTlCQjZGRDU2N0E1MDgz QjdCQTBCQjA3Q0QzMTIxMEYzQzhCRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0NQUFp1UGppdVFCWWt2M0JhS1ZOcXFLNXQyN3ppcXA5ZmhCV1NTZUVvZlYvMC9E QkE5QkI2RkQ1NjdBNTA4M0I3QkEwQkIwN0NEMzEyMTBGM0M4QkVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApQIDasvSrKdh+cibdLqcrhgaPtkDzgsfn4HInS76FniWQ85SL/DPJjgFUGs6 0T5zd4zEubIEx2PHsaSBEk4tl2InraYiqGSbMyNn5HZMIYgD02LFbdxRNbSAc1vn oa0YncOifA0p23T5aRWmAMfxgGSkNEDl57xtrpCVHELvBWCliq0t/6ojwqC3AlRK c/aNTLbh878sRpXf1yiGQv0jJsdiypyvEBmG7cHb6uCOCFe1jcFACagt/HT5J+zI wWCDbwyEv/P4eRfo+6jLub5+k1dlUkd0uQiPJoRvuxS+xehw2porTF0ewQ1TfQbm bLqxnrdfDsyEfWHmyZVVy9VMlw== -----END CERTIFICATE-----Generated at Sat Jun 7 04:05:08 2025 by rpki-client