$ rpki-client -vvf rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft File: DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft (raw, json) Hash identifier: FX8giPE/FkOd+f4URm0o83+k4fcrIvPfPcXm3YhCcgY= Subject key identifier: 69:11:FE:01:FE:16:17:82:75:2E:AD:D3:87:1D:E6:63:C4:53:28:5F Authority key identifier: DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 Certificate issuer: /CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Certificate serial: 0E84C47742D7F85CB64633B52E99C403AC229C96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft Manifest number: 0284 Signing time: Tue 29 Jul 2025 01:28:02 +0000 Manifest this update: Tue 29 Jul 2025 01:23:02 +0000 Manifest next update: Wed 30 Jul 2025 02:44:02 +0000 Files and hashes: 1: 3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa (hash: Z6rpwRyuxvgqZK9wg3IWbxseWkxo3KvfvA7U8nx0qtI=) 2: DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl (hash: I6aaWQ1ZaAJWQWBrIROJKBcw7uI4cYri4LesDrgSaBw=) 3: 3138362e3235302e32382e302f32322d3235203d3e20323632393636.roa (hash: iKC8mrbvMcLPzl1+sFNxgHBkh7HGux1xw4YCVG73YFo=) 4: 323830343a6561383a3a2f33322d3438203d3e20323632393636.roa (hash: k3mQQh+jFVJ+W9lI5qcYz2pIEXAoMKMazd3p9xRcR90=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Jul 2025 02:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:84:c4:77:42:d7:f8:5c:b6:46:33:b5:2e:99:c4:03:ac:22:9c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Validity Not Before: Jul 29 01:23:02 2025 GMT Not After : Jul 30 02:44:02 2025 GMT Subject: CN=6911FE01FE161782752EADD3871DE663C453285F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:59:dd:cc:b6:7d:0b:14:19:d5:bd:5f:c7:99: 57:e5:7e:45:86:d0:d4:6e:38:6a:bc:82:c0:6b:7f: bc:fa:be:c8:30:46:f0:62:28:df:42:c0:01:12:44: 94:1c:9c:1b:26:8e:17:09:6d:07:c0:9d:8b:76:9d: 69:4d:d8:4b:5f:d4:5b:35:61:1d:60:ed:7f:7a:5f: 67:6d:71:32:f3:8e:3e:e1:a5:86:b2:9d:06:6d:33: 23:c1:75:62:96:73:57:78:3a:f0:97:af:be:a2:32: 0b:bf:d8:fa:67:98:4b:8d:af:55:3e:ee:c9:a3:7d: 58:26:28:0b:4e:55:91:d2:75:76:11:e7:85:03:f3: 4a:8a:5d:ba:c7:98:5b:b9:71:78:a2:80:7c:63:69: 15:7a:74:d4:25:48:58:ba:49:2c:5e:f9:83:d3:c2: 66:18:66:fa:fa:47:87:2f:cf:90:e1:28:77:49:12: e6:28:6a:cb:01:dc:16:da:49:2e:36:b5:e8:76:68: d1:a2:9d:2d:32:e2:31:b9:7c:2d:22:8b:a6:93:29: 01:1e:fc:03:0f:13:5a:fe:95:b3:63:6b:23:f5:b2: a8:b9:76:17:97:7b:05:c5:16:d1:11:da:e7:68:8f: be:8d:6e:9b:13:44:3c:81:d9:0c:0b:99:94:5a:32: dc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:11:FE:01:FE:16:17:82:75:2E:AD:D3:87:1D:E6:63:C4:53:28:5F X509v3 Authority Key Identifier: keyid:DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a0:ac:d4:29:9b:9a:ed:61:00:2f:22:99:62:7f:ff:3a:05: d1:f0:46:8f:b9:68:77:6d:4e:cf:4f:9e:54:03:ce:62:e2:df: d5:ae:ca:93:f8:5f:07:56:bb:ba:ba:65:b3:44:69:b7:93:38: 7d:a7:e3:56:e8:fe:c9:05:e8:80:8e:d9:15:ea:0f:8d:70:e3: bc:d6:6b:21:9d:44:3d:da:a6:2f:4a:69:94:6c:31:66:94:11: a8:90:03:54:3c:db:59:c5:6e:1a:d1:f9:20:b6:c3:dc:4c:50: 62:35:9e:2a:db:09:23:ca:47:de:aa:c6:4b:6a:c1:e5:b2:02: 3d:eb:22:3e:f8:06:b9:bf:d7:bd:7a:54:ec:67:8e:44:60:67: 92:04:68:98:70:eb:55:f6:ec:d4:61:2c:71:e5:fd:be:07:c1: 5c:a3:4e:0f:4f:c5:6e:fa:cc:fe:53:72:ce:9b:af:54:ca:5e: 42:16:0a:04:be:3c:bf:5a:a4:69:5d:29:67:8c:25:d1:d0:4a: cc:20:89:e6:d6:3b:4b:4f:5c:03:5f:0e:af:3e:d4:d7:83:8f: 72:c9:79:9a:9e:48:14:bd:ee:ed:0f:09:f3:56:a8:7f:2d:ac: dc:59:12:18:d6:77:20:a4:0a:99:5f:d3:cf:c6:ff:d9:4a:40: 79:11:b8:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDoTEd0LX+Fy2RjO1LpnEA6winJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2MDExM0RCODQ3RUU0RkRGRUNGOEU3QjMyRDhDQjBB MjhBNDIyOTAeFw0yNTA3MjkwMTIzMDJaFw0yNTA3MzAwMjQ0MDJaMDMxMTAvBgNV BAMTKDY5MTFGRTAxRkUxNjE3ODI3NTJFQUREMzg3MURFNjYzQzQ1MzI4NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Wd3Mtn0LFBnVvV/HmVflfkWG 0NRuOGq8gsBrf7z6vsgwRvBiKN9CwAESRJQcnBsmjhcJbQfAnYt2nWlN2Etf1Fs1 YR1g7X96X2dtcTLzjj7hpYaynQZtMyPBdWKWc1d4OvCXr76iMgu/2PpnmEuNr1U+ 7smjfVgmKAtOVZHSdXYR54UD80qKXbrHmFu5cXiigHxjaRV6dNQlSFi6SSxe+YPT wmYYZvr6R4cvz5DhKHdJEuYoassB3BbaSS42teh2aNGinS0y4jG5fC0ii6aTKQEe /AMPE1r+lbNjayP1sqi5dheXewXFFtER2udoj76NbpsTRDyB2QwLmZRaMtzlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaRH+Af4WF4J1Lq3Thx3mY8RTKF8wHwYDVR0j BBgwFoAU22ARPbhH7k/f7Pjnsy2MsKKKQikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2szZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01z Q2ovMS9EQjYwMTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCNjAxMTNEQjg0N0VFNEZE RkVDRjhFN0IzMkQ4Q0IwQTI4QTQyMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2szZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01zQ2ovMS9E QjYwMTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiaCs1Cmbmu1hAC8imWJ//zoF0fBGj7lod21Oz0+eVAPOYuLf1a7Kk/hfB1a7 urpls0Rpt5M4fafjVuj+yQXogI7ZFeoPjXDjvNZrIZ1EPdqmL0pplGwxZpQRqJAD VDzbWcVuGtH5ILbD3ExQYjWeKtsJI8pH3qrGS2rB5bICPesiPvgGub/XvXpU7GeO RGBnkgRomHDrVfbs1GEsceX9vgfBXKNOD0/FbvrM/lNyzpuvVMpeQhYKBL48v1qk aV0pZ4wl0dBKzCCJ5tY7S09cA18Orz7U14OPcsl5mp5IFL3u7Q8J81aofy2s3FkS GNZ3IKQKmV/Tz8b/2UpAeRG46Q== -----END CERTIFICATE-----Generated at Tue Jul 29 09:53:27 2025 by rpki-client