$ rpki-client -vvf rpki-repo.registro.br/repo/6it69QArYxDrH6i3mYv8AZhDvDju4aWznVeqkkFUzUsU/0/DCBAF7B5DE371064161C98640210C7E6F5D9AEBD.mft File: DCBAF7B5DE371064161C98640210C7E6F5D9AEBD.mft (raw, json) Hash identifier: ZNBUZ14G9OPCgB9Od9uzUEW1GDAC/Tboh86HKup8kHM= Subject key identifier: DF:3F:15:F1:23:4E:ED:1F:49:14:34:7E:17:04:36:F4:C6:96:61:26 Authority key identifier: DC:BA:F7:B5:DE:37:10:64:16:1C:98:64:02:10:C7:E6:F5:D9:AE:BD Certificate issuer: /CN=DCBAF7B5DE371064161C98640210C7E6F5D9AEBD Certificate serial: 3129380808076DAAA1BC6DB5117615BAA6155AB7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCBAF7B5DE371064161C98640210C7E6F5D9AEBD.cer Subject info access: rsync://rpki-repo.registro.br/repo/6it69QArYxDrH6i3mYv8AZhDvDju4aWznVeqkkFUzUsU/0/DCBAF7B5DE371064161C98640210C7E6F5D9AEBD.mft Manifest number: 01AD Signing time: Mon 30 Jun 2025 20:08:58 +0000 Manifest this update: Mon 30 Jun 2025 20:03:58 +0000 Manifest next update: Tue 01 Jul 2025 22:01:58 +0000 Files and hashes: 1: 323830343a363430633a3a2f33322d3334203d3e20323639343031.roa (hash: Nem3xs0+FQoZAp0bHrNHU4dx2GWFq8Ay5azg/1BxexA=) 2: DCBAF7B5DE371064161C98640210C7E6F5D9AEBD.crl (hash: zAfaPaVt+YqYrJN09Hq9qPGZFFavQpU+3DbGymme69s=) 3: 34352e3138342e3136342e302f32322d3234203d3e20323639343031.roa (hash: jALcfqYuYrbHTB7zAZxSfsdBdP5+Ei3PSTNJ+Fw1+1Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6it69QArYxDrH6i3mYv8AZhDvDju4aWznVeqkkFUzUsU/0/DCBAF7B5DE371064161C98640210C7E6F5D9AEBD.crl rsync://rpki-repo.registro.br/repo/6it69QArYxDrH6i3mYv8AZhDvDju4aWznVeqkkFUzUsU/0/DCBAF7B5DE371064161C98640210C7E6F5D9AEBD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCBAF7B5DE371064161C98640210C7E6F5D9AEBD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 22:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:29:38:08:08:07:6d:aa:a1:bc:6d:b5:11:76:15:ba:a6:15:5a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCBAF7B5DE371064161C98640210C7E6F5D9AEBD Validity Not Before: Jun 30 20:03:58 2025 GMT Not After : Jul 1 22:01:58 2025 GMT Subject: CN=DF3F15F1234EED1F4914347E170436F4C6966126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:90:df:d5:38:d0:25:5f:2e:61:0b:82:bd:76: 3a:cd:37:e1:58:21:8a:25:65:e2:dc:27:1e:39:bc: 77:e0:57:da:01:8a:c5:4f:c3:89:55:9a:5f:5f:dc: 6f:f7:0c:08:4b:06:6d:3d:4b:38:84:aa:fb:fe:21: 32:e3:23:b8:c3:79:f6:ff:bc:67:0d:d2:c7:fe:ce: d1:ad:13:a2:51:9c:d2:7b:86:d5:76:65:02:fe:4f: c1:d0:e5:86:30:04:19:a4:c8:08:3f:18:1d:b4:61: 59:f9:d9:d1:38:fe:b9:12:f5:4c:d1:9a:85:58:f3: b9:94:5e:96:4f:03:e8:94:95:ab:62:24:39:90:10: dd:42:27:0e:2c:3a:cd:a6:59:34:1d:e7:ce:ac:1c: 4b:51:3e:3c:0c:c6:04:49:21:52:17:cc:66:73:8c: d4:8b:c9:b7:c7:03:dd:44:08:8e:17:b6:21:7a:4d: 18:70:48:d5:ad:23:4c:59:66:b0:ed:48:01:75:e5: ac:2c:f3:e8:d9:ca:ae:c8:dc:c9:6b:36:de:00:5a: c1:36:42:d0:4b:65:e3:94:42:27:78:1e:a4:59:ec: c3:93:3b:de:6e:98:cc:e5:94:65:60:a9:e6:2e:c2: 24:81:41:a1:28:d7:01:07:f3:66:d0:d4:74:a0:7c: 8d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3F:15:F1:23:4E:ED:1F:49:14:34:7E:17:04:36:F4:C6:96:61:26 X509v3 Authority Key Identifier: keyid:DC:BA:F7:B5:DE:37:10:64:16:1C:98:64:02:10:C7:E6:F5:D9:AE:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6it69QArYxDrH6i3mYv8AZhDvDju4aWznVeqkkFUzUsU/0/DCBAF7B5DE371064161C98640210C7E6F5D9AEBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCBAF7B5DE371064161C98640210C7E6F5D9AEBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6it69QArYxDrH6i3mYv8AZhDvDju4aWznVeqkkFUzUsU/0/DCBAF7B5DE371064161C98640210C7E6F5D9AEBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ed:2d:e7:60:8d:75:e8:5e:74:56:5d:25:85:ca:5e:6f:42: 16:1f:ed:f0:f3:21:ff:63:e1:ed:07:96:ed:1d:26:05:b9:f6: 5d:48:85:62:63:c9:e4:6b:4d:a7:69:1f:bd:6e:77:c4:41:6c: 18:2f:fa:2a:a2:e0:f2:ce:ec:b9:c2:88:7a:4a:9e:57:f7:fb: b7:6a:11:87:b0:9d:d7:e9:a0:27:c6:e0:a1:a2:06:0b:3b:7b: e8:31:a8:72:ae:11:31:18:96:3c:b5:c7:d0:7f:b4:ec:e3:9e: ef:8b:b9:7b:5e:ea:5d:4e:76:e7:29:ba:46:1d:d6:9c:1f:6f: ba:03:d1:4d:8c:4f:cd:47:c0:20:c7:79:ea:c0:71:58:5e:96: 51:80:3a:36:72:79:95:78:b4:85:95:61:ea:9f:60:32:90:d8: 79:f3:d3:e3:2c:48:ef:a1:2d:4d:12:7e:90:40:e6:77:3b:dc: f0:2f:95:58:8f:5b:60:8f:15:bf:1d:af:ab:e5:a0:77:67:8f: ba:b7:d1:b2:07:10:6e:85:38:4a:4e:19:d9:4f:89:be:f5:fe: c8:cc:8a:d5:f4:f7:55:6f:e9:1d:b6:fd:e6:ba:83:ab:f2:1a: 5e:f7:11:c8:c3:65:91:c1:c4:6b:f3:16:09:5a:b1:ac:9c:65: 45:4f:09:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMSk4CAgHbaqhvG21EXYVuqYVWrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENCQUY3QjVERTM3MTA2NDE2MUM5ODY0MDIxMEM3RTZG NUQ5QUVCRDAeFw0yNTA2MzAyMDAzNThaFw0yNTA3MDEyMjAxNThaMDMxMTAvBgNV BAMTKERGM0YxNUYxMjM0RUVEMUY0OTE0MzQ3RTE3MDQzNkY0QzY5NjYxMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDekN/VONAlXy5hC4K9djrNN+FY IYolZeLcJx45vHfgV9oBisVPw4lVml9f3G/3DAhLBm09SziEqvv+ITLjI7jDefb/ vGcN0sf+ztGtE6JRnNJ7htV2ZQL+T8HQ5YYwBBmkyAg/GB20YVn52dE4/rkS9UzR moVY87mUXpZPA+iUlatiJDmQEN1CJw4sOs2mWTQd586sHEtRPjwMxgRJIVIXzGZz jNSLybfHA91ECI4XtiF6TRhwSNWtI0xZZrDtSAF15aws8+jZyq7I3MlrNt4AWsE2 QtBLZeOUQid4HqRZ7MOTO95umMzllGVgqeYuwiSBQaEo1wEH82bQ1HSgfI1PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3z8V8SNO7R9JFDR+FwQ29MaWYSYwHwYDVR0j BBgwFoAU3Lr3td43EGQWHJhkAhDH5vXZrr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNml0NjlRQXJZeERySDZpM21ZdjhBWmhEdkRqdTRhV3puVmVxa2tGVXpV c1UvMC9EQ0JBRjdCNURFMzcxMDY0MTYxQzk4NjQwMjEwQzdFNkY1RDlBRUJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDQkFGN0I1REUzNzEwNjQx NjFDOTg2NDAyMTBDN0U2RjVEOUFFQkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Nml0NjlRQXJZeERySDZpM21ZdjhBWmhEdkRqdTRhV3puVmVxa2tGVXpVc1UvMC9E Q0JBRjdCNURFMzcxMDY0MTYxQzk4NjQwMjEwQzdFNkY1RDlBRUJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUe0t52CNdehedFZdJYXKXm9CFh/t8PMh/2Ph7QeW7R0mBbn2XUiFYmPJ5GtN p2kfvW53xEFsGC/6KqLg8s7sucKIekqeV/f7t2oRh7Cd1+mgJ8bgoaIGCzt76DGo cq4RMRiWPLXH0H+07OOe74u5e17qXU525ym6Rh3WnB9vugPRTYxPzUfAIMd56sBx WF6WUYA6NnJ5lXi0hZVh6p9gMpDYefPT4yxI76EtTRJ+kEDmdzvc8C+VWI9bYI8V vx2vq+Wgd2ePurfRsgcQboU4Sk4Z2U+JvvX+yMyK1fT3VW/pHbb95rqDq/IaXvcR yMNlkcHEa/MWCVqxrJxlRU8JGA== -----END CERTIFICATE-----Generated at Tue Jul 1 00:30:20 2025 by rpki-client