$ rpki-client -vvf rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft File: DFBB164DBC72494619B08F0FA235F18F7F107520.mft (raw, json) Hash identifier: NcAQr9ZWAJECR0dEoEAPKD0SpVzqxZGULU1Hm90Om9Q= Subject key identifier: 8E:A3:DD:7B:BF:29:60:55:22:7C:FA:2D:94:F3:B2:2C:0C:97:43:EB Authority key identifier: DF:BB:16:4D:BC:72:49:46:19:B0:8F:0F:A2:35:F1:8F:7F:10:75:20 Certificate issuer: /CN=DFBB164DBC72494619B08F0FA235F18F7F107520 Certificate serial: 531BA94CAAA53B16247557B441B9A8635E4EB35D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer Subject info access: rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft Manifest number: A9 Signing time: Wed 04 Jun 2025 08:46:49 +0000 Manifest this update: Wed 04 Jun 2025 08:41:49 +0000 Manifest next update: Thu 05 Jun 2025 10:08:49 +0000 Files and hashes: 1: 323830343a3563383a3a2f33322d3438203d3e20323632353431.roa (hash: fzNeJlyzQ/5gNIi831p8psFpjajO/6NKFVdt9eenWSk=) 2: DFBB164DBC72494619B08F0FA235F18F7F107520.crl (hash: ZpEeNoiWJEs+XlmuaRCEhm3wkLkSWF9+uwj5etiRiPo=) 3: 3137372e37322e35342e302f32342d3234203d3e20323634383830.roa (hash: IPHv9O5Pug97aXu+8gkHhnDu0MN7EgfcGaRDHIk3+FU=) 4: 3137372e37322e34382e302f32312d3234203d3e20323632353431.roa (hash: k7yG3rwBHYiWNCTrjcmWrZ2xUsrjw2FtXhCpxKNLYI0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.crl rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Jun 2025 10:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:1b:a9:4c:aa:a5:3b:16:24:75:57:b4:41:b9:a8:63:5e:4e:b3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBB164DBC72494619B08F0FA235F18F7F107520 Validity Not Before: Jun 4 08:41:49 2025 GMT Not After : Jun 5 10:08:49 2025 GMT Subject: CN=8EA3DD7BBF296055227CFA2D94F3B22C0C9743EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:15:c9:83:aa:12:b9:70:f2:54:60:48:c7:be: 2b:6a:38:7b:58:a9:b9:a0:98:a2:b0:d5:a1:e5:bb: 4a:51:8f:da:fa:d1:e0:34:41:ef:d2:6b:d6:ae:c2: 12:bb:9b:e5:5d:e1:6c:81:91:75:46:f1:cc:7b:ea: 97:9f:72:bc:47:9d:70:e5:8a:7a:87:c4:d5:05:f0: 15:64:87:34:e5:f7:28:2f:6c:12:a0:0d:3f:3a:3c: 1c:d0:3c:33:66:0e:3b:69:5d:7b:09:50:4f:88:29: c6:6f:c6:11:50:f1:e9:7b:4d:cb:7c:52:1f:13:7a: 6d:61:97:e1:ab:32:31:26:f0:a9:24:69:20:c7:47: 74:8e:65:04:a3:15:09:33:57:4a:fa:ec:3f:83:4f: 7a:7f:d4:4d:a5:a5:e4:fe:28:26:d0:ac:3e:cc:9c: 34:df:9f:fd:93:d4:ee:e9:f0:ae:56:c6:81:c6:9e: 44:99:0b:a2:bc:fe:91:d9:08:2e:98:ad:0c:1e:7d: 5a:b2:cf:49:17:25:2a:ff:0e:82:9c:11:9f:be:c9: 66:a0:9c:98:64:fa:e4:e7:bf:fe:3c:9a:30:67:ba: 53:6c:26:5d:e2:0e:3f:67:e4:f3:54:2d:65:4f:0f: 89:23:78:ad:f6:8d:04:2a:22:33:55:47:60:1d:a7: 3d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A3:DD:7B:BF:29:60:55:22:7C:FA:2D:94:F3:B2:2C:0C:97:43:EB X509v3 Authority Key Identifier: keyid:DF:BB:16:4D:BC:72:49:46:19:B0:8F:0F:A2:35:F1:8F:7F:10:75:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:57:53:df:23:d2:b9:7b:2b:4f:7e:08:7a:dc:79:1c:f3:aa: f9:11:db:85:35:4e:1d:74:f4:56:ac:51:20:a6:77:b2:bd:04: 12:6f:d0:83:a3:16:8c:5b:33:ae:c9:31:80:49:04:15:f4:6b: e8:87:6e:4c:81:81:51:7c:f4:06:31:20:eb:a2:5a:52:fe:71: 22:f3:58:21:0b:20:28:ad:7a:6f:4c:a6:81:06:65:84:ba:5c: 15:cd:7f:81:73:6b:30:43:36:7b:05:21:9c:c0:a9:ae:dc:54: 98:3d:5e:0f:5d:c7:0b:0f:57:c0:67:17:e3:29:5f:a5:ed:b5: 36:fa:91:ec:b8:83:9b:59:8e:5c:b5:2f:79:12:59:a3:25:54: cc:b9:2d:89:ce:80:86:5b:76:b1:77:52:cc:1e:1c:04:9c:b6: a5:87:7c:7b:82:3d:48:50:81:1c:3e:08:60:80:ec:1a:83:a5: 5d:28:10:f6:44:02:7b:f9:38:40:bf:2c:d0:49:80:3d:de:b7: 08:05:c0:34:f6:85:bc:56:d0:80:26:d9:b4:49:cd:bc:70:0f: 22:c0:dd:31:d3:d9:8f:19:bc:bc:d8:bc:16:05:34:24:94:18: dc:57:78:ed:03:f6:50:a2:6c:9b:67:2a:7d:0a:2d:4d:ab:7f: c2:f8:f9:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUxupTKqlOxYkdVe0QbmoY15Os10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCQjE2NERCQzcyNDk0NjE5QjA4RjBGQTIzNUYxOEY3 RjEwNzUyMDAeFw0yNTA2MDQwODQxNDlaFw0yNTA2MDUxMDA4NDlaMDMxMTAvBgNV BAMTKDhFQTNERDdCQkYyOTYwNTUyMjdDRkEyRDk0RjNCMjJDMEM5NzQzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFcmDqhK5cPJUYEjHvitqOHtY qbmgmKKw1aHlu0pRj9r60eA0Qe/Sa9auwhK7m+Vd4WyBkXVG8cx76pefcrxHnXDl inqHxNUF8BVkhzTl9ygvbBKgDT86PBzQPDNmDjtpXXsJUE+IKcZvxhFQ8el7Tct8 Uh8Tem1hl+GrMjEm8KkkaSDHR3SOZQSjFQkzV0r67D+DT3p/1E2lpeT+KCbQrD7M nDTfn/2T1O7p8K5WxoHGnkSZC6K8/pHZCC6YrQwefVqyz0kXJSr/DoKcEZ++yWag nJhk+uTnv/48mjBnulNsJl3iDj9n5PNULWVPD4kjeK32jQQqIjNVR2Adpz2rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjqPde78pYFUifPotlPOyLAyXQ+swHwYDVR0j BBgwFoAU37sWTbxySUYZsI8PojXxj38QdSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0JNcVpxNVl2R0Q4ZFpVckFSREc5SjVWNHEzV011d3F1OW9IWE43aGVh NG4vMC9ERkJCMTY0REJDNzI0OTQ2MTlCMDhGMEZBMjM1RjE4RjdGMTA3NTIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQkIxNjREQkM3MjQ5NDYx OUIwOEYwRkEyMzVGMThGN0YxMDc1MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0JNcVpxNVl2R0Q4ZFpVckFSREc5SjVWNHEzV011d3F1OW9IWE43aGVhNG4vMC9E RkJCMTY0REJDNzI0OTQ2MTlCMDhGMEZBMjM1RjE4RjdGMTA3NTIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgFdT3yPSuXsrT34Ietx5HPOq+RHbhTVOHXT0VqxRIKZ3sr0EEm/Qg6MWjFsz rskxgEkEFfRr6IduTIGBUXz0BjEg66JaUv5xIvNYIQsgKK16b0ymgQZlhLpcFc1/ gXNrMEM2ewUhnMCprtxUmD1eD13HCw9XwGcX4ylfpe21NvqR7LiDm1mOXLUveRJZ oyVUzLktic6Ahlt2sXdSzB4cBJy2pYd8e4I9SFCBHD4IYIDsGoOlXSgQ9kQCe/k4 QL8s0EmAPd63CAXANPaFvFbQgCbZtEnNvHAPIsDdMdPZjxm8vNi8FgU0JJQY3Fd4 7QP2UKJsm2cqfQotTat/wvj5bQ== -----END CERTIFICATE-----Generated at Wed Jun 4 11:27:06 2025 by rpki-client