$ rpki-client -vvf rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft File: DD0CBBA83E82BACB16521E6328443385F92099E0.mft (raw, json) Hash identifier: LHJNxp84OqD7ly7l0EXpHh+rIFBJQbj62+7XARGLS3g= Subject key identifier: 93:53:EC:D1:4F:F1:0F:78:25:2C:9E:D4:E9:FC:6C:81:46:2F:D5:B7 Authority key identifier: DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0 Certificate issuer: /CN=DD0CBBA83E82BACB16521E6328443385F92099E0 Certificate serial: 25F970EB96A5DC802BCB40928055EDFCC3DFC257 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft Manifest number: FE Signing time: Sat 23 Aug 2025 12:50:23 +0000 Manifest this update: Sat 23 Aug 2025 12:45:23 +0000 Manifest next update: Sun 24 Aug 2025 15:33:23 +0000 Files and hashes: 1: DD0CBBA83E82BACB16521E6328443385F92099E0.crl (hash: f1F48MpubYQHUiv5tcR3DHC24otm4X3iyXoUpHrh508=) 2: 323830343a336264303a3a2f33322d3332203d3e20323636313732.roa (hash: ARQtTGJn8ecRrryzPLbTrDMNnVh5iFR4d/qAnKHlnZ8=) 3: 3136302e31392e3234382e302f32322d3234203d3e20323636313732.roa (hash: Ca1pmAXz0FFwQDKx4al/0Enxv3kwvor9qxc1ErXA0kU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.crl rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 15:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f9:70:eb:96:a5:dc:80:2b:cb:40:92:80:55:ed:fc:c3:df:c2:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD0CBBA83E82BACB16521E6328443385F92099E0 Validity Not Before: Aug 23 12:45:23 2025 GMT Not After : Aug 24 15:33:23 2025 GMT Subject: CN=9353ECD14FF10F78252C9ED4E9FC6C81462FD5B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d6:49:70:fb:06:12:0e:b5:11:53:27:81:8d: 57:2e:d1:c1:e2:1a:14:93:83:64:ce:7f:48:2a:48: a1:60:74:08:d5:58:cc:b0:b3:4a:4e:93:8a:5c:9d: 21:8f:7c:37:3d:7d:42:aa:15:33:54:42:98:c9:0b: 03:02:0c:a2:16:10:9d:05:9d:3f:de:93:30:9d:fb: f6:88:a6:c2:a5:6e:d8:01:aa:9c:41:7d:6a:36:1a: f3:63:81:9a:81:4e:0c:fb:0e:01:d1:d8:6d:7e:e8: 22:5e:a3:08:bc:da:25:2f:5c:32:ed:13:63:f2:5d: 2e:1b:1f:6c:f2:fd:b5:53:fc:d1:b5:94:e1:dc:e4: 07:b8:7f:d0:d7:98:10:25:fe:32:2e:4f:aa:ed:8b: 7d:54:49:8c:dc:59:a0:20:0a:aa:27:a0:94:91:3b: de:6f:2b:28:a5:a5:84:7b:59:d8:b7:f9:10:08:80: ff:d9:40:08:55:5c:6e:e5:f3:91:1d:92:af:2f:ea: a9:a6:05:4f:7b:19:fe:81:aa:1c:e9:a3:03:38:2f: b9:05:d1:9d:cd:5b:e3:f3:cc:63:ce:48:13:dc:07: 02:b1:e3:6b:e8:de:52:ca:b0:16:06:6a:a3:94:d2: d4:92:bf:50:0f:9f:9e:7c:ed:ea:24:39:08:69:76: e8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:53:EC:D1:4F:F1:0F:78:25:2C:9E:D4:E9:FC:6C:81:46:2F:D5:B7 X509v3 Authority Key Identifier: keyid:DD:0C:BB:A8:3E:82:BA:CB:16:52:1E:63:28:44:33:85:F9:20:99:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0CBBA83E82BACB16521E6328443385F92099E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/DD0CBBA83E82BACB16521E6328443385F92099E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:62:f1:e6:46:fd:10:b4:4b:6e:84:f6:fd:57:82:39:3a:a6: ac:c1:c8:6d:26:a3:f5:d4:e0:47:c1:1c:ee:55:6e:22:a9:27: c0:ca:ec:9f:b9:f4:0f:28:7a:dc:e7:c9:60:ec:fe:ef:ae:20: ed:93:a7:39:85:01:55:70:1a:de:93:87:14:0b:c9:09:53:ae: ec:26:9a:7a:bb:65:df:a1:a4:3a:de:c5:6b:6d:7a:80:f3:69: 89:80:0f:d9:45:be:16:2a:aa:d9:c8:09:6a:9b:b3:49:44:31: ec:c1:fa:a4:41:47:b1:eb:fd:b1:ed:01:6e:77:05:88:08:45: e8:a5:9b:d3:d2:62:e7:8f:bc:f0:e4:a4:09:f4:c9:b0:00:5b: ec:14:cc:c2:93:be:d2:83:7b:9d:8f:cb:a4:89:2a:8f:6c:10: ec:57:5d:2c:c7:a5:b1:d9:c2:c3:9c:da:c1:5d:73:55:7f:dd: 64:f9:98:4c:0f:d3:cb:65:ea:29:76:9b:b0:4d:0a:60:c4:3e: 0b:58:ba:ce:fb:49:e7:13:ff:b4:24:e3:24:f7:67:67:ba:b5: 18:e6:db:ce:08:72:1f:1e:69:49:8e:e4:e1:93:62:b4:bf:99: 70:bc:a9:b9:5b:70:7c:7d:53:4e:ae:9c:85:6f:34:0a:9b:06: 66:02:7a:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJflw65al3IAry0CSgFXt/MPfwlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQwQ0JCQTgzRTgyQkFDQjE2NTIxRTYzMjg0NDMzODVG OTIwOTlFMDAeFw0yNTA4MjMxMjQ1MjNaFw0yNTA4MjQxNTMzMjNaMDMxMTAvBgNV BAMTKDkzNTNFQ0QxNEZGMTBGNzgyNTJDOUVENEU5RkM2QzgxNDYyRkQ1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm1klw+wYSDrURUyeBjVcu0cHi GhSTg2TOf0gqSKFgdAjVWMyws0pOk4pcnSGPfDc9fUKqFTNUQpjJCwMCDKIWEJ0F nT/ekzCd+/aIpsKlbtgBqpxBfWo2GvNjgZqBTgz7DgHR2G1+6CJeowi82iUvXDLt E2PyXS4bH2zy/bVT/NG1lOHc5Ae4f9DXmBAl/jIuT6rti31USYzcWaAgCqonoJSR O95vKyilpYR7Wdi3+RAIgP/ZQAhVXG7l85Edkq8v6qmmBU97Gf6BqhzpowM4L7kF 0Z3NW+PzzGPOSBPcBwKx42vo3lLKsBYGaqOU0tSSv1APn5587eokOQhpdujNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUk1Ps0U/xD3glLJ7U6fxsgUYv1bcwHwYDVR0j BBgwFoAU3Qy7qD6CussWUh5jKEQzhfkgmeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM05MS3ZVY1J4Z1NHNWl1alVSd1hndGJnUHdpcmY1OTNmeERqOHl4eXM4 cDcvMC9ERDBDQkJBODNFODJCQUNCMTY1MjFFNjMyODQ0MzM4NUY5MjA5OUUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMENCQkE4M0U4MkJBQ0Ix NjUyMUU2MzI4NDQzMzg1RjkyMDk5RTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M05MS3ZVY1J4Z1NHNWl1alVSd1hndGJnUHdpcmY1OTNmeERqOHl4eXM4cDcvMC9E RDBDQkJBODNFODJCQUNCMTY1MjFFNjMyODQ0MzM4NUY5MjA5OUUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ2Lx5kb9ELRLboT2/VeCOTqmrMHIbSaj9dTgR8Ec7lVuIqknwMrsn7n0Dyh6 3OfJYOz+764g7ZOnOYUBVXAa3pOHFAvJCVOu7Caaertl36GkOt7Fa216gPNpiYAP 2UW+Fiqq2cgJapuzSUQx7MH6pEFHsev9se0BbncFiAhF6KWb09Ji54+88OSkCfTJ sABb7BTMwpO+0oN7nY/LpIkqj2wQ7FddLMelsdnCw5zawV1zVX/dZPmYTA/Ty2Xq KXabsE0KYMQ+C1i6zvtJ5xP/tCTjJPdnZ7q1GObbzghyHx5pSY7k4ZNitL+ZcLyp uVtwfH1TTq6chW80CpsGZgJ6Ng== -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:32 2025 by rpki-client