$ rpki-client -vvf rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft File: DD880B71129737798123EE9EDC1423C3E8280892.mft (raw, json) Hash identifier: IsvLDroR2M1B8XY7rBQZyoypDS9dUF05kTVGzif3VUk= Subject key identifier: 66:D5:F7:6A:93:81:61:CE:12:D2:F9:7B:D1:B8:B2:AF:E3:95:01:1F Authority key identifier: DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92 Certificate issuer: /CN=DD880B71129737798123EE9EDC1423C3E8280892 Certificate serial: 5158A01EB116C3CFD9438E528EF92B541EF7AE1D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer Subject info access: rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft Manifest number: 028C Signing time: Wed 02 Jul 2025 06:00:00 +0000 Manifest this update: Wed 02 Jul 2025 05:55:00 +0000 Manifest next update: Thu 03 Jul 2025 06:00:00 +0000 Files and hashes: 1: 34352e3137352e33322e302f32322d3234203d3e20323638383831.roa (hash: EiFbXmNwfUfEkSI4qCqsU5jU8ePYLs88ZEXUItBxJT0=) 2: DD880B71129737798123EE9EDC1423C3E8280892.crl (hash: ZU//7TDmqhGMbiO4Y/U0Kvp8443ZMpKf+4Y/tJ3l+Ko=) 3: 323830343a356266633a3a2f33322d3438203d3e20323638383831.roa (hash: i06R7ZftAjC7a/YY6upqVlOH5minL/+0Kvab9Pct10w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:58:a0:1e:b1:16:c3:cf:d9:43:8e:52:8e:f9:2b:54:1e:f7:ae:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD880B71129737798123EE9EDC1423C3E8280892 Validity Not Before: Jul 2 05:55:00 2025 GMT Not After : Jul 9 06:00:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:a2:48:8f:e4:34:ee:30:32:b6:5f:d3:63: 90:7c:9a:7f:05:cb:77:38:1d:79:31:86:65:18:fc: ec:ec:38:da:3b:59:ec:81:8f:a8:c5:2a:6a:8e:44: 45:cd:b8:f8:c5:fc:37:aa:51:1b:55:86:37:da:55: d9:cd:bf:52:b6:9e:ef:63:3e:f8:73:ad:70:de:41: da:35:67:5d:6f:00:81:14:01:d0:cf:62:2d:78:d6: c3:05:eb:b9:3f:b0:a5:80:5c:07:2f:d5:33:65:f6: fb:99:21:99:b8:7b:db:9f:fc:c1:5b:ee:f7:e3:b9: 9a:2c:0c:b5:f6:38:e2:75:5d:ff:38:43:f7:70:cc: a3:7d:89:9c:4f:60:ae:4e:e3:1f:a3:fa:30:8a:8d: 6e:d3:46:1a:f8:a3:c9:43:a4:57:d8:7d:d6:32:f2: 51:85:ee:36:3d:49:48:20:2e:46:f7:26:fe:d9:64: 00:be:16:c5:59:e3:8c:7b:39:c0:2e:22:a8:b4:3a: f3:48:78:03:87:bd:b7:f6:ac:43:f6:1d:1a:23:b1: 0e:d5:bf:ce:e2:a7:df:c3:5a:7a:d2:7f:ea:21:e3: e4:61:d4:04:18:f5:be:da:e8:9c:e5:99:34:9c:94: 2b:1b:d3:ce:50:a2:8e:a2:2d:11:a8:b9:5c:0d:4d: 2b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D5:F7:6A:93:81:61:CE:12:D2:F9:7B:D1:B8:B2:AF:E3:95:01:1F X509v3 Authority Key Identifier: keyid:DD:88:0B:71:12:97:37:79:81:23:EE:9E:DC:14:23:C3:E8:28:08:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD880B71129737798123EE9EDC1423C3E8280892.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/1/DD880B71129737798123EE9EDC1423C3E8280892.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:da:6a:43:c2:0d:a5:1e:6b:4c:47:9a:38:07:e4:e1:83:24: 31:d3:13:08:ed:c0:e5:a0:46:81:bb:1b:35:c9:6c:e4:ce:00: 4d:94:2e:a1:47:99:01:94:5b:ac:67:a4:6f:9e:93:3c:b0:9f: b0:9a:e1:8d:ac:fc:6e:c5:6a:48:ff:aa:ab:a4:60:3b:e6:77: 7a:b7:84:0c:ac:b3:19:b3:95:5a:a8:9b:8a:1e:54:9c:38:f4: 7b:5c:31:a3:70:2a:33:4b:bf:eb:2c:ff:12:1f:63:4b:67:5e: 42:d1:fa:3f:a2:06:19:29:5d:3d:0a:2f:31:0f:87:a4:6c:00: 86:28:e7:a9:09:8f:85:38:15:e2:7a:4c:4a:a9:04:07:7c:49: 44:fc:65:f8:43:9a:b7:8e:3e:dc:a9:c2:03:ed:8e:af:d3:63: 53:a6:ed:85:45:33:fd:fe:38:ed:bc:16:44:56:c9:e8:d8:05: 77:8b:cf:bc:cc:54:4f:0a:e2:60:2d:7c:27:22:2f:44:c9:f8: c4:2c:2b:7b:40:6f:76:74:9f:d0:56:47:7b:f2:fb:06:b0:78: ff:29:af:0b:5e:3f:20:25:0a:5f:04:01:78:2f:cc:a0:99:af: 04:24:2d:fa:c5:84:7f:e8:6f:fe:0b:49:87:ae:c5:08:2d:ff: 55:a3:9d:7e -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUUVigHrEWw8/ZQ45SjvkrVB73rh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4ODBCNzExMjk3Mzc3OTgxMjNFRTlFREMxNDIzQzNF ODI4MDg5MjAeFw0yNTA3MDIwNTU1MDBaFw0yNTA3MDkwNjAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkVBQUEyNDg4RkU0MzRFRTMw MzJCNjVGRDM2MzkwN0M5QTdGMDVDQjc3MzgxRDc5MzE4NjY1MThGQ0VDRUMzOERB M0I1OUVDODE4RkE4QzUyQTZBOEU0NDQ1Q0RCOEY4QzVGQzM3QUE1MTFCNTU4NjM3 REE1NUQ5Q0RCRjUyQjY5RUVGNjMzRUY4NzNBRDcwREU0MURBMzU2NzVENkYwMDgx MTQwMUQwQ0Y2MjJENzhENkMzMDVFQkI5M0ZCMEE1ODA1QzA3MkZENTMzNjVGNkZC OTkyMTk5Qjg3QkRCOUZGQ0MxNUJFRUY3RTNCOTlBMkMwQ0I1RjYzOEUyNzU1REZG Mzg0M0Y3NzBDQ0EzN0Q4OTlDNEY2MEFFNEVFMzFGQTNGQTMwOEE4RDZFRDM0NjFB RjhBM0M5NDNBNDU3RDg3REQ2MzJGMjUxODVFRTM2M0Q0OTQ4MjAyRTQ2RjcyNkZF RDk2NDAwQkUxNkM1NTlFMzhDN0IzOUMwMkUyMkE4QjQzQUYzNDg3ODAzODdCREI3 RjZBQzQzRjYxRDFBMjNCMTBFRDVCRkNFRTJBN0RGQzM1QTdBRDI3RkVBMjFFM0U0 NjFENDA0MThGNUJFREFFODlDRTU5OTM0OUM5NDJCMUJEM0NFNTBBMjhFQTIyRDEx QThCOTVDMEQ0RDJCQ0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAvqqiSI/kNO4wMrZf02OQfJp/Bct3OB15MYZlGPzs7DjaO1nsgY+o xSpqjkRFzbj4xfw3qlEbVYY32lXZzb9Stp7vYz74c61w3kHaNWddbwCBFAHQz2It eNbDBeu5P7ClgFwHL9UzZfb7mSGZuHvbn/zBW+7347maLAy19jjidV3/OEP3cMyj fYmcT2CuTuMfo/owio1u00Ya+KPJQ6RX2H3WMvJRhe42PUlIIC5G9yb+2WQAvhbF WeOMeznALiKotDrzSHgDh7239qxD9h0aI7EO1b/O4qffw1p60n/qIePkYdQEGPW+ 2uic5Zk0nJQrG9POUKKOoi0RqLlcDU0rzwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FGbV92qTgWHOEtL5e9G4sq/jlQEfMB8GA1UdIwQYMBaAFN2IC3ESlzd5gSPuntwU I8PoKAiSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl4amhyQzRacnVpeUtO S3RMMWJwZkQ4dUZ0ZnpldmNmd0RMTXJMVGlEbmNMLzEvREQ4ODBCNzExMjk3Mzc3 OTgxMjNFRTlFREMxNDIzQzNFODI4MDg5Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9ERDg4MEI3MTEyOTczNzc5ODEyM0VFOUVEQzE0MjNDM0U4Mjgw ODkyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzl4amhyQzRacnVpeUtOS3RMMWJw ZkQ4dUZ0ZnpldmNmd0RMTXJMVGlEbmNMLzEvREQ4ODBCNzExMjk3Mzc3OTgxMjNF RTlFREMxNDIzQzNFODI4MDg5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAfaakPCDaUea0xHmjgH5OGD JDHTEwjtwOWgRoG7GzXJbOTOAE2ULqFHmQGUW6xnpG+ekzywn7Ca4Y2s/G7Fakj/ qqukYDvmd3q3hAyssxmzlVqom4oeVJw49HtcMaNwKjNLv+ss/xIfY0tnXkLR+j+i BhkpXT0KLzEPh6RsAIYo56kJj4U4FeJ6TEqpBAd8SUT8ZfhDmreOPtypwgPtjq/T Y1Om7YVFM/3+OO28FkRWyejYBXeLz7zMVE8K4mAtfCciL0TJ+MQsK3tAb3Z0n9BW R3vy+waweP8prwtePyAlCl8EAXgvzKCZrwQkLfrFhH/ob/4LSYeuxQgt/1WjnX4= -----END CERTIFICATE-----Generated at Wed Jul 2 22:33:34 2025 by rpki-client