$ rpki-client -vvf rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft File: DD0CBBA83E82BACB16521E6328443385F92099E0.mft (raw, json) Hash identifier: SdrBT1HyPGoER3QXuLGqCRQbxweGokp32alF8iTWeDU= Subject key identifier: 2F:EB:EE:B3:2D:86:F1:43:E5:E5:1D:79:63:FE:75:2A:3F:26:CE:D6 Authority key identifier: DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0 Certificate issuer: /CN=DD0CBBA83E82BACB16521E6328443385F92099E0 Certificate serial: 6510733E692C00DEF7CD889E1351FAC460661CB6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft Manifest number: FA Signing time: Wed 20 Aug 2025 11:09:10 +0000 Manifest this update: Wed 20 Aug 2025 11:04:09 +0000 Manifest next update: Thu 21 Aug 2025 14:57:09 +0000 Files and hashes: 1: DD0CBBA83E82BACB16521E6328443385F92099E0.crl (hash: hrDvHY7G+x7Nthv8ONuJl/3WKiiq1zQrHNJc4c5qyjQ=) 2: 3136302e31392e3234382e302f32322d3234203d3e20323636313732.roa (hash: Ca1pmAXz0FFwQDKx4al/0Enxv3kwvor9qxc1ErXA0kU=) 3: 323830343a336264303a3a2f33322d3332203d3e20323636313732.roa (hash: ARQtTGJn8ecRrryzPLbTrDMNnVh5iFR4d/qAnKHlnZ8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.crl rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 14:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:10:73:3e:69:2c:00:de:f7:cd:88:9e:13:51:fa:c4:60:66:1c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD0CBBA83E82BACB16521E6328443385F92099E0 Validity Not Before: Aug 20 11:04:09 2025 GMT Not After : Aug 21 14:57:09 2025 GMT Subject: CN=2FEBEEB32D86F143E5E51D7963FE752A3F26CED6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:e6:1e:8f:e8:ac:6c:ba:9a:5b:50:b8:91: 82:13:f6:70:bc:5a:38:89:9d:51:36:5b:a7:77:92: 5d:9c:7a:9a:00:2c:65:c6:93:69:60:90:1b:3a:63: 3a:31:ce:ae:53:55:20:fb:e1:b6:bb:fe:9c:f8:f6: 39:ef:78:3d:43:d1:33:3e:6c:af:81:5a:19:da:a6: 65:88:5c:6e:f4:5a:48:d1:91:b3:67:72:d8:53:c1: 2f:2e:21:fc:61:cc:b0:60:f7:fc:c0:e5:8a:f5:86: b7:f7:9e:74:a6:6c:63:b7:16:eb:5d:36:12:55:47: e5:1b:e6:31:d1:ee:46:48:ae:f3:9f:22:ad:a6:79: c7:89:5d:c9:ad:f0:47:f2:c5:c5:82:64:b9:29:b1: af:83:cc:84:09:74:41:99:9f:00:9a:53:3b:1b:7b: e5:20:42:5e:0f:08:49:26:2f:bf:85:0e:4a:e6:c0: 70:1d:7d:50:02:a7:60:0f:99:79:de:22:88:33:9e: 21:bb:5c:7b:9a:45:70:3d:b2:81:a7:57:f4:d7:01: d0:35:39:ab:28:bd:a6:95:46:c0:81:4f:3f:5f:20: ca:f2:ff:4c:68:57:85:10:6c:7f:90:55:40:94:c9: 7c:60:b2:e3:ad:34:38:87:ac:b5:78:60:27:e3:d1: e9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EB:EE:B3:2D:86:F1:43:E5:E5:1D:79:63:FE:75:2A:3F:26:CE:D6 X509v3 Authority Key Identifier: keyid:DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f3:30:4a:a0:f1:5d:3f:39:f1:f3:5d:11:68:39:b8:56:87: 5a:ca:bc:21:6b:67:12:5f:be:69:6e:21:2d:d1:d8:85:f6:ba: b2:29:48:8a:09:ee:94:e2:62:33:91:f6:2f:94:81:9d:81:ca: 95:cb:d1:90:44:38:a6:77:02:8e:fa:8f:5b:e4:c7:35:6e:cc: d4:fc:74:97:1e:c7:cd:77:83:07:67:79:7f:8a:86:0b:6e:5a: 6d:38:82:aa:a3:9b:b9:c8:72:61:f7:3e:4d:bb:3a:e3:4f:21: 3d:f3:93:dc:82:20:b5:e0:d5:60:22:17:77:53:8b:47:3d:4b: a6:87:a6:d5:45:d6:d6:bc:f1:97:f2:82:ec:cd:9b:08:ba:f9: 20:4c:6a:1b:10:78:75:0f:f6:4c:08:44:0b:05:42:2a:5b:c7: e8:55:6a:2d:d4:7a:6e:b9:79:fe:0c:f0:af:a5:b2:a5:d5:4a: d6:09:27:a7:41:8a:7a:3a:d7:ca:3a:55:c2:35:ad:c8:d4:95: 5e:dc:df:c2:c9:b9:da:d2:43:94:81:33:67:31:cc:b6:e5:1c: e0:f8:dc:a2:05:df:0a:b3:0d:51:9c:4d:3c:8c:d8:56:43:19: f3:b8:b6:5d:50:f6:87:fa:90:62:18:12:8d:b4:56:e5:a7:ee: a5:2c:eb:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZRBzPmksAN73zYieE1H6xGBmHLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQwQ0JCQTgzRTgyQkFDQjE2NTIxRTYzMjg0NDMzODVG OTIwOTlFMDAeFw0yNTA4MjAxMTA0MDlaFw0yNTA4MjExNDU3MDlaMDMxMTAvBgNV BAMTKDJGRUJFRUIzMkQ4NkYxNDNFNUU1MUQ3OTYzRkU3NTJBM0YyNkNFRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5leYej+isbLqaW1C4kYIT9nC8 WjiJnVE2W6d3kl2cepoALGXGk2lgkBs6Yzoxzq5TVSD74ba7/pz49jnveD1D0TM+ bK+BWhnapmWIXG70WkjRkbNncthTwS8uIfxhzLBg9/zA5Yr1hrf3nnSmbGO3Futd NhJVR+Ub5jHR7kZIrvOfIq2meceJXcmt8EfyxcWCZLkpsa+DzIQJdEGZnwCaUzsb e+UgQl4PCEkmL7+FDkrmwHAdfVACp2APmXneIogzniG7XHuaRXA9soGnV/TXAdA1 OasovaaVRsCBTz9fIMry/0xoV4UQbH+QVUCUyXxgsuOtNDiHrLV4YCfj0eklAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUL+vusy2G8UPl5R15Y/51Kj8mztYwHwYDVR0j BBgwFoAU3Qy7qD6CussWUh5jKEQzhfkgmeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM05MS3ZVY1J4Z1NHNWl1alVSd1hndGJnUHdpcmY1OTNmeERqOHl4eXM4 cDcvMC9ERDBDQkJBODNFODJCQUNCMTY1MjFFNjMyODQ0MzM4NUY5MjA5OUUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMENCQkE4M0U4MkJBQ0Ix NjUyMUU2MzI4NDQzMzg1RjkyMDk5RTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M05MS3ZVY1J4Z1NHNWl1alVSd1hndGJnUHdpcmY1OTNmeERqOHl4eXM4cDcvMC9E RDBDQkJBODNFODJCQUNCMTY1MjFFNjMyODQ0MzM4NUY5MjA5OUUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPfMwSqDxXT858fNdEWg5uFaHWsq8IWtnEl++aW4hLdHYhfa6silIignulOJi M5H2L5SBnYHKlcvRkEQ4pncCjvqPW+THNW7M1Px0lx7HzXeDB2d5f4qGC25abTiC qqObuchyYfc+Tbs6408hPfOT3IIgteDVYCIXd1OLRz1Lpoem1UXW1rzxl/KC7M2b CLr5IExqGxB4dQ/2TAhECwVCKlvH6FVqLdR6brl5/gzwr6WypdVK1gknp0GKejrX yjpVwjWtyNSVXtzfwsm52tJDlIEzZzHMtuUc4PjcogXfCrMNUZxNPIzYVkMZ87i2 XVD2h/qQYhgSjbRW5afupSzriA== -----END CERTIFICATE-----Generated at Wed Aug 20 18:38:54 2025 by rpki-client