$ rpki-client -vvf rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft File: 0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft (raw, json) Hash identifier: mgfU2pLE3DCuZJbMZwhfmh9KO4ksjcB7NkdSw/0m0es= Subject key identifier: 11:88:C3:C3:AD:9B:52:D6:E5:86:44:03:3B:B4:ED:6D:AC:8F:C7:D2 Authority key identifier: 0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15 Certificate issuer: /CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15 Certificate serial: 1BE0410239CC14065E86409EECB1366E611797E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer Subject info access: rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft Manifest number: 9A Signing time: Fri 06 Jun 2025 08:18:06 +0000 Manifest this update: Fri 06 Jun 2025 08:13:06 +0000 Manifest next update: Sat 07 Jun 2025 11:20:06 +0000 Files and hashes: 1: 323830343a316161303a3a2f33322d3438203d3e203631383732.roa (hash: zSptNN8DkmF10Nv+nlCLUTysqOi1fB0W3pY01wsysuw=) 2: 3137302e38312e34342e302f32322d3234203d3e203631383732.roa (hash: 3uUj0R6DlPY399C9yzaH3KMwAJiuFg6IDEJm6Flo7/I=) 3: 3137372e32322e3230382e302f32302d3234203d3e203631383732.roa (hash: Ff7NxA9f2NFen6Fa/2ff2j5YwONNZaeQShwc44r8Cz8=) 4: 0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl (hash: 4+f9kJRngw/UCzb0Ys0GKPQUkKVpX07oLVC1R4N3RdI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 11:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e0:41:02:39:cc:14:06:5e:86:40:9e:ec:b1:36:6e:61:17:97:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15 Validity Not Before: Jun 6 08:13:06 2025 GMT Not After : Jun 7 11:20:06 2025 GMT Subject: CN=1188C3C3AD9B52D6E58644033BB4ED6DAC8FC7D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ac:37:98:99:6d:97:52:ef:ed:b5:5a:81:1f: e4:8e:80:e0:82:40:44:94:af:22:98:99:6d:e6:54: a5:35:19:83:34:38:fc:4b:b5:53:85:2d:92:43:4a: 15:00:69:7d:54:53:e2:37:72:8c:24:93:47:c9:42: f1:19:c2:49:d4:bc:b8:39:b6:35:c9:12:1f:da:ed: e4:2b:b5:e2:18:34:ca:fe:cc:00:33:00:b5:28:39: 9d:9d:b5:fd:64:82:39:70:a7:8e:1a:8c:0f:be:46: d5:89:f6:66:da:db:53:be:7b:ef:89:e5:7c:f1:0a: de:5d:00:ff:42:18:61:d3:f7:e4:22:40:f2:fa:d7: 73:47:90:a8:fe:b7:bc:e7:c9:db:f7:d1:32:94:cc: 5f:1e:73:42:a9:9e:63:28:c5:56:c2:78:2c:7f:5d: 08:18:0e:fe:c2:8a:f8:d8:68:ff:10:48:d1:dd:01: 2b:8d:60:35:f7:24:f4:a1:8c:e4:d4:8f:42:2a:51: 7d:af:83:ee:50:4b:47:1e:50:2e:bc:34:2d:8e:0d: bb:18:95:5f:69:05:d2:54:02:63:70:ff:05:8d:7c: c6:ae:0e:07:2d:26:0c:04:34:55:e4:c7:fe:c6:d2: ea:be:e0:6e:ec:3f:b1:0a:89:fe:3d:e9:97:e8:8d: 98:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:88:C3:C3:AD:9B:52:D6:E5:86:44:03:3B:B4:ED:6D:AC:8F:C7:D2 X509v3 Authority Key Identifier: keyid:0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:34:91:67:02:e1:e8:5f:d1:7d:79:5d:21:87:7e:3f:70:46: de:67:f0:dd:f6:fc:61:f7:07:9c:e7:f4:ab:0c:88:f2:cd:2e: 29:13:83:d5:37:85:03:fd:0e:c2:e0:c0:46:16:0d:c6:9b:e3: 45:67:d4:63:ac:a8:1f:57:b9:d8:d9:1d:af:a4:d2:0e:86:86: f0:23:8b:03:25:31:d7:e9:78:27:75:59:ad:71:eb:48:21:90: cf:e0:82:24:29:d2:f5:09:a5:1e:f3:77:5d:57:94:9a:e5:c4: 37:8a:06:0c:d8:aa:94:6e:e7:ff:5d:4a:05:8b:ab:45:23:50: a7:e7:20:bf:74:8c:d9:90:80:69:14:6f:07:e5:10:78:4c:72: 5e:69:4d:32:99:d7:74:56:75:4c:bb:cf:dd:b6:3f:c6:9c:d2: 49:44:54:58:ac:06:40:60:12:95:fe:5a:34:27:60:18:9d:56: e9:77:4c:8b:d9:32:72:d9:57:99:9e:2c:dc:3f:34:61:90:b5: 2d:f9:f0:02:a1:22:e1:23:d0:07:2b:44:b9:6e:93:41:f5:c6: 89:52:48:7d:11:9b:0c:df:a8:fe:4d:e8:7a:14:cb:9d:45:9d: 0c:c9:8d:e2:57:e7:ac:99:01:47:d1:29:17:e0:73:4d:b3:cc: 21:86:a8:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUG+BBAjnMFAZehkCe7LE2bmEXl+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEREMTFENEZGOERBRDlBNTY0OUM4RjEzNTNENDE0QkJF RkI3QkMxNTAeFw0yNTA2MDYwODEzMDZaFw0yNTA2MDcxMTIwMDZaMDMxMTAvBgNV BAMTKDExODhDM0MzQUQ5QjUyRDZFNTg2NDQwMzNCQjRFRDZEQUM4RkM3RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcrDeYmW2XUu/ttVqBH+SOgOCC QESUryKYmW3mVKU1GYM0OPxLtVOFLZJDShUAaX1UU+I3cowkk0fJQvEZwknUvLg5 tjXJEh/a7eQrteIYNMr+zAAzALUoOZ2dtf1kgjlwp44ajA++RtWJ9mba21O+e++J 5XzxCt5dAP9CGGHT9+QiQPL613NHkKj+t7znydv30TKUzF8ec0KpnmMoxVbCeCx/ XQgYDv7CivjYaP8QSNHdASuNYDX3JPShjOTUj0IqUX2vg+5QS0ceUC68NC2ODbsY lV9pBdJUAmNw/wWNfMauDgctJgwENFXkx/7G0uq+4G7sP7EKif496ZfojZilAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEYjDw62bUtblhkQDO7TtbayPx9IwHwYDVR0j BBgwFoAUDdEdT/ja2aVknI8TU9QUu++3vBUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2pXWmVTNXJta0dyN211bUNtcmtXTDZBQkVZYXQ1c1A1TjhzS0VEV0ND cUYvMC8wREQxMUQ0RkY4REFEOUE1NjQ5QzhGMTM1M0Q0MTRCQkVGQjdCQzE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBERDExRDRGRjhEQUQ5QTU2 NDlDOEYxMzUzRDQxNEJCRUZCN0JDMTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2pXWmVTNXJta0dyN211bUNtcmtXTDZBQkVZYXQ1c1A1TjhzS0VEV0NDcUYvMC8w REQxMUQ0RkY4REFEOUE1NjQ5QzhGMTM1M0Q0MTRCQkVGQjdCQzE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMjSRZwLh6F/RfXldIYd+P3BG3mfw3fb8YfcHnOf0qwyI8s0uKROD1TeFA/0O wuDARhYNxpvjRWfUY6yoH1e52Nkdr6TSDoaG8COLAyUx1+l4J3VZrXHrSCGQz+CC JCnS9QmlHvN3XVeUmuXEN4oGDNiqlG7n/11KBYurRSNQp+cgv3SM2ZCAaRRvB+UQ eExyXmlNMpnXdFZ1TLvP3bY/xpzSSURUWKwGQGASlf5aNCdgGJ1W6XdMi9kyctlX mZ4s3D80YZC1LfnwAqEi4SPQBytEuW6TQfXGiVJIfRGbDN+o/k3oehTLnUWdDMmN 4lfnrJkBR9EpF+BzTbPMIYaojw== -----END CERTIFICATE-----Generated at Sat Jun 7 04:17:27 2025 by rpki-client