$ rpki-client -vvf rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft File: 0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft (raw, json) Hash identifier: +qiU6TAGEZeVAAH8kNooA7UJUYiTvXDTI0v/hCwGBAE= Subject key identifier: 62:F1:CF:B0:9F:CB:58:41:5C:A8:EC:03:41:FC:C0:A4:4A:63:3A:70 Authority key identifier: 0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15 Certificate issuer: /CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15 Certificate serial: 68324D093DEC32DA0127BBF627854BDDCBA65CFA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer Subject info access: rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft Manifest number: FD Signing time: Wed 20 Aug 2025 09:57:33 +0000 Manifest this update: Wed 20 Aug 2025 09:52:33 +0000 Manifest next update: Thu 21 Aug 2025 13:54:33 +0000 Files and hashes: 1: 3137372e32322e3230382e302f32302d3234203d3e203631383732.roa (hash: Ff7NxA9f2NFen6Fa/2ff2j5YwONNZaeQShwc44r8Cz8=) 2: 323830343a316161303a3a2f33322d3438203d3e203631383732.roa (hash: zSptNN8DkmF10Nv+nlCLUTysqOi1fB0W3pY01wsysuw=) 3: 0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl (hash: ke2sLzAKO6Y03uqKBOPl+AqWMCQymwyzTAyOzzvy570=) 4: 3137302e38312e34342e302f32322d3234203d3e203631383732.roa (hash: 3uUj0R6DlPY399C9yzaH3KMwAJiuFg6IDEJm6Flo7/I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 13:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:32:4d:09:3d:ec:32:da:01:27:bb:f6:27:85:4b:dd:cb:a6:5c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15 Validity Not Before: Aug 20 09:52:33 2025 GMT Not After : Aug 21 13:54:33 2025 GMT Subject: CN=62F1CFB09FCB58415CA8EC0341FCC0A44A633A70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6e:41:6e:65:9a:f5:19:36:e3:3e:cb:20:25: 3e:43:58:c4:5d:85:fa:4e:a5:68:d3:56:92:ab:c2: c4:e9:0a:b8:d0:4c:3d:b6:a0:75:d9:4f:8e:31:bf: 42:99:8a:a0:7a:ab:3f:a2:28:40:79:8c:ca:f8:c7: 8c:95:9c:31:58:1a:d1:cb:2d:2b:a1:67:ff:31:11: a9:f2:8e:19:ec:01:91:3c:01:2c:55:fe:63:be:d2: 95:f8:ba:47:6c:3d:c7:05:8e:d3:b9:84:bb:52:30: f1:a0:48:8d:82:2e:78:02:ca:df:d9:19:09:29:67: 66:f7:e7:11:b1:14:91:05:55:2b:d2:39:6f:b0:b0: 5b:d3:51:bc:6d:1b:68:42:17:a3:44:c3:09:3d:8b: 58:8f:c7:50:94:92:a6:5e:44:4b:04:5c:06:45:07: 97:21:22:6d:bc:e4:43:10:62:b0:0e:db:d0:e1:c9: 85:6f:2d:20:be:f8:d8:1b:96:50:5d:01:01:8b:e7: 59:bd:32:7a:b8:4f:53:9a:31:f9:7d:58:68:0d:67: 16:c9:46:81:d9:4f:c4:ab:8c:3e:a8:d2:16:3d:2d: b4:15:db:12:b4:e0:58:43:66:68:3e:d3:2b:3c:b0: 85:aa:e0:53:12:28:40:79:5b:28:b9:cf:c4:17:e5: 27:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F1:CF:B0:9F:CB:58:41:5C:A8:EC:03:41:FC:C0:A4:4A:63:3A:70 X509v3 Authority Key Identifier: keyid:0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:90:9f:fa:1f:59:ff:06:31:45:b4:0b:36:15:6a:2c:8e:35: 0b:f1:d0:63:7a:8c:59:bf:d7:4a:49:ac:ee:63:76:33:0a:24: 44:ba:fd:29:8f:69:bf:e0:10:2c:2c:04:78:14:d1:9f:a3:53: 13:52:ac:25:a7:5b:b0:09:9f:74:39:02:e3:e7:f7:9c:e5:f2: a7:47:47:22:a7:ca:56:02:f0:39:ef:11:94:79:d3:55:f0:ae: 3d:38:d2:e7:3e:c0:91:61:d2:db:1a:6b:df:8c:ba:7b:c8:fb: 24:8c:e1:a2:25:2a:e1:22:79:d2:65:f0:29:d9:8e:ed:81:4f: 36:58:ef:12:9a:da:34:32:f0:09:bb:48:92:32:06:04:d2:35: a4:d0:2c:fa:7e:da:d8:74:52:9b:9c:72:33:79:58:d0:87:4a: a8:97:b4:c0:7a:7a:47:b2:44:3b:70:40:11:ef:28:df:e1:c0: 2c:34:50:bc:7b:0a:35:02:62:c3:f0:18:4f:76:32:07:1b:32: c8:ce:9e:36:d6:ae:d6:eb:f6:94:19:29:fa:b5:1d:ef:7b:df: bc:4c:d6:8f:cc:b2:34:b8:c1:73:ac:be:90:03:f1:1d:1e:b3: 5f:e5:2c:a4:84:74:89:4b:62:bf:86:83:d3:56:2f:bc:0d:27: e8:e8:a4:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaDJNCT3sMtoBJ7v2J4VL3cumXPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEREMTFENEZGOERBRDlBNTY0OUM4RjEzNTNENDE0QkJF RkI3QkMxNTAeFw0yNTA4MjAwOTUyMzNaFw0yNTA4MjExMzU0MzNaMDMxMTAvBgNV BAMTKDYyRjFDRkIwOUZDQjU4NDE1Q0E4RUMwMzQxRkNDMEE0NEE2MzNBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYbkFuZZr1GTbjPssgJT5DWMRd hfpOpWjTVpKrwsTpCrjQTD22oHXZT44xv0KZiqB6qz+iKEB5jMr4x4yVnDFYGtHL LSuhZ/8xEanyjhnsAZE8ASxV/mO+0pX4ukdsPccFjtO5hLtSMPGgSI2CLngCyt/Z GQkpZ2b35xGxFJEFVSvSOW+wsFvTUbxtG2hCF6NEwwk9i1iPx1CUkqZeREsEXAZF B5chIm285EMQYrAO29DhyYVvLSC++NgbllBdAQGL51m9Mnq4T1OaMfl9WGgNZxbJ RoHZT8SrjD6o0hY9LbQV2xK04FhDZmg+0ys8sIWq4FMSKEB5Wyi5z8QX5Sc5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYvHPsJ/LWEFcqOwDQfzApEpjOnAwHwYDVR0j BBgwFoAUDdEdT/ja2aVknI8TU9QUu++3vBUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2pXWmVTNXJta0dyN211bUNtcmtXTDZBQkVZYXQ1c1A1TjhzS0VEV0ND cUYvMC8wREQxMUQ0RkY4REFEOUE1NjQ5QzhGMTM1M0Q0MTRCQkVGQjdCQzE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBERDExRDRGRjhEQUQ5QTU2 NDlDOEYxMzUzRDQxNEJCRUZCN0JDMTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2pXWmVTNXJta0dyN211bUNtcmtXTDZBQkVZYXQ1c1A1TjhzS0VEV0NDcUYvMC8w REQxMUQ0RkY4REFEOUE1NjQ5QzhGMTM1M0Q0MTRCQkVGQjdCQzE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt5Cf+h9Z/wYxRbQLNhVqLI41C/HQY3qMWb/XSkms7mN2MwokRLr9KY9pv+AQ LCwEeBTRn6NTE1KsJadbsAmfdDkC4+f3nOXyp0dHIqfKVgLwOe8RlHnTVfCuPTjS 5z7AkWHS2xpr34y6e8j7JIzhoiUq4SJ50mXwKdmO7YFPNljvEpraNDLwCbtIkjIG BNI1pNAs+n7a2HRSm5xyM3lY0IdKqJe0wHp6R7JEO3BAEe8o3+HALDRQvHsKNQJi w/AYT3YyBxsyyM6eNtau1uv2lBkp+rUd73vfvEzWj8yyNLjBc6y+kAPxHR6zX+Us pIR0iUtiv4aD01YvvA0n6Oik0g== -----END CERTIFICATE-----Generated at Wed Aug 20 16:07:36 2025 by rpki-client