$ rpki-client -vvf rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft File: 0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft (raw, json) Hash identifier: pVSbiMDnHFJWUE7Od9JhlVM7wJNvBFSGbg2Dh+l+5zc= Subject key identifier: E5:17:F0:1F:86:E1:2A:70:34:CA:EF:96:B0:11:3F:A5:DA:78:8C:00 Authority key identifier: 0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15 Certificate issuer: /CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15 Certificate serial: 74EB0FCC112CA0B011EAE253882063E423538567 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer Subject info access: rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft Manifest number: 0101 Signing time: Sat 23 Aug 2025 10:42:41 +0000 Manifest this update: Sat 23 Aug 2025 10:37:41 +0000 Manifest next update: Sun 24 Aug 2025 11:18:41 +0000 Files and hashes: 1: 0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl (hash: FWqYvNz7sBr2gkxiu/MoF131Bskc9rtmfUk33eowAFE=) 2: 3137302e38312e34342e302f32322d3234203d3e203631383732.roa (hash: 3uUj0R6DlPY399C9yzaH3KMwAJiuFg6IDEJm6Flo7/I=) 3: 3137372e32322e3230382e302f32302d3234203d3e203631383732.roa (hash: Ff7NxA9f2NFen6Fa/2ff2j5YwONNZaeQShwc44r8Cz8=) 4: 323830343a316161303a3a2f33322d3438203d3e203631383732.roa (hash: zSptNN8DkmF10Nv+nlCLUTysqOi1fB0W3pY01wsysuw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 11:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:eb:0f:cc:11:2c:a0:b0:11:ea:e2:53:88:20:63:e4:23:53:85:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15 Validity Not Before: Aug 23 10:37:41 2025 GMT Not After : Aug 24 11:18:41 2025 GMT Subject: CN=E517F01F86E12A7034CAEF96B0113FA5DA788C00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:59:d2:a3:6f:65:d4:05:c9:48:55:87:2a: 8d:30:bd:17:e9:06:0d:1e:5d:11:d3:25:70:ff:f3: 6b:29:84:c7:95:2b:83:4d:fd:31:2c:51:a4:0a:8d: e6:01:7d:cc:ea:94:aa:69:03:f8:e5:3e:30:76:38: ed:69:a7:7c:e1:bc:3e:86:6b:b3:d2:8f:6b:92:68: 8f:5c:a6:4f:e7:34:74:6d:c3:d4:a1:47:e0:57:c7: e7:1f:74:f5:42:23:bf:d3:c3:f2:f4:ff:89:37:c6: 6d:88:e9:6b:ac:4b:1a:68:84:02:78:1f:25:ab:12: b3:e2:2c:5e:28:37:79:47:3b:0f:06:38:c2:88:01: 10:5f:b5:a3:74:ad:7d:11:f7:67:96:62:87:96:51: 2e:6a:7f:ad:27:df:25:3b:94:59:19:ab:8c:02:85: df:d9:35:40:bf:a4:76:09:4c:b4:5b:c2:9d:51:5c: cf:a2:e7:bf:64:7c:20:8a:be:56:4e:00:40:b4:26: 89:7f:a6:a7:05:9e:a2:24:da:61:e1:52:76:a2:36: 99:91:5b:c0:e0:bb:bb:9a:17:4b:02:c7:1a:51:3e: 67:97:ac:54:43:05:fe:04:1c:62:eb:37:26:0b:28: e0:db:cd:bd:87:24:01:ff:6b:5e:ce:bd:b8:27:09: 7f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:17:F0:1F:86:E1:2A:70:34:CA:EF:96:B0:11:3F:A5:DA:78:8C:00 X509v3 Authority Key Identifier: keyid:0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:6d:fa:4d:d8:a4:60:44:d7:f4:e2:13:be:15:14:dc:9f:ef: 66:b4:4f:8a:09:42:0e:42:8a:83:69:18:bf:86:45:03:dd:17: 0a:0f:ff:89:1c:3d:75:42:57:26:59:5d:8b:4b:20:49:d5:d3: e9:68:77:36:a2:7c:ca:67:65:80:a3:81:37:0e:dc:76:53:54: c4:83:43:14:55:b7:cf:e0:ae:3b:b3:91:6c:18:4b:36:91:d3: 78:a0:b2:11:5d:ba:b3:18:40:cd:63:1e:1e:38:93:43:31:81: cd:37:14:bc:91:07:24:7a:99:e6:ab:4b:b6:9e:4c:c8:bc:49: 53:7e:1a:c2:48:a1:4c:c0:6e:71:a0:4c:e6:05:73:13:05:fa: 7f:c1:1e:d1:71:0a:8b:12:6c:a0:c0:a6:d5:7c:f8:f9:d4:73: b2:4d:9d:97:6f:e5:76:41:34:da:8b:73:dd:38:80:99:46:8c: 1b:b5:a6:03:7a:61:18:70:36:59:96:02:a8:19:9b:c7:69:2e: 70:df:15:0b:65:83:42:14:df:1f:4f:4d:b2:55:e3:8c:18:9c: 54:fe:28:eb:3b:7e:79:24:01:8f:13:eb:82:d1:c9:bf:1e:3e: a8:e4:6c:af:6a:10:95:41:5d:58:7d:a2:ae:9d:d2:cb:6c:6b: 83:b9:2d:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdOsPzBEsoLAR6uJTiCBj5CNThWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEREMTFENEZGOERBRDlBNTY0OUM4RjEzNTNENDE0QkJF RkI3QkMxNTAeFw0yNTA4MjMxMDM3NDFaFw0yNTA4MjQxMTE4NDFaMDMxMTAvBgNV BAMTKEU1MTdGMDFGODZFMTJBNzAzNENBRUY5NkIwMTEzRkE1REE3ODhDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1LVnSo29l1AXJSFWHKo0wvRfp Bg0eXRHTJXD/82sphMeVK4NN/TEsUaQKjeYBfczqlKppA/jlPjB2OO1pp3zhvD6G a7PSj2uSaI9cpk/nNHRtw9ShR+BXx+cfdPVCI7/Tw/L0/4k3xm2I6WusSxpohAJ4 HyWrErPiLF4oN3lHOw8GOMKIARBftaN0rX0R92eWYoeWUS5qf60n3yU7lFkZq4wC hd/ZNUC/pHYJTLRbwp1RXM+i579kfCCKvlZOAEC0Jol/pqcFnqIk2mHhUnaiNpmR W8Dgu7uaF0sCxxpRPmeXrFRDBf4EHGLrNyYLKODbzb2HJAH/a17OvbgnCX8BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5RfwH4bhKnA0yu+WsBE/pdp4jAAwHwYDVR0j BBgwFoAUDdEdT/ja2aVknI8TU9QUu++3vBUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2pXWmVTNXJta0dyN211bUNtcmtXTDZBQkVZYXQ1c1A1TjhzS0VEV0ND cUYvMC8wREQxMUQ0RkY4REFEOUE1NjQ5QzhGMTM1M0Q0MTRCQkVGQjdCQzE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBERDExRDRGRjhEQUQ5QTU2 NDlDOEYxMzUzRDQxNEJCRUZCN0JDMTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2pXWmVTNXJta0dyN211bUNtcmtXTDZBQkVZYXQ1c1A1TjhzS0VEV0NDcUYvMC8w REQxMUQ0RkY4REFEOUE1NjQ5QzhGMTM1M0Q0MTRCQkVGQjdCQzE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI236TdikYETX9OITvhUU3J/vZrRPiglCDkKKg2kYv4ZFA90XCg//iRw9dUJX Jlldi0sgSdXT6Wh3NqJ8ymdlgKOBNw7cdlNUxINDFFW3z+CuO7ORbBhLNpHTeKCy EV26sxhAzWMeHjiTQzGBzTcUvJEHJHqZ5qtLtp5MyLxJU34awkihTMBucaBM5gVz EwX6f8Ee0XEKixJsoMCm1Xz4+dRzsk2dl2/ldkE02otz3TiAmUaMG7WmA3phGHA2 WZYCqBmbx2kucN8VC2WDQhTfH09NslXjjBicVP4o6zt+eSQBjxPrgtHJvx4+qORs r2oQlUFdWH2irp3Sy2xrg7ktIA== -----END CERTIFICATE-----Generated at Sun Aug 24 02:54:26 2025 by rpki-client