$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft File: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft (raw, json) Hash identifier: EJUEQS4ETsbhZTHPCCF+Y9qwWDraK2GiKM032lljVLo= Subject key identifier: 30:E8:5E:F0:A9:03:F6:DB:F5:7B:96:E0:71:5D:EB:D7:D7:67:F8:49 Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 Certificate issuer: /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69 Certificate serial: 1AD41AF25B4ECC3C49CFFF8B1536B3E019715125 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer Subject info access: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft Manifest number: 0297 Signing time: Sat 23 Aug 2025 15:01:10 +0000 Manifest this update: Sat 23 Aug 2025 14:56:10 +0000 Manifest next update: Sun 24 Aug 2025 18:36:10 +0000 Files and hashes: 1: 323830343a346537343a3a2f33322d3438203d3e20323638323632.roa (hash: /VCzucGfHlqNTkfJXTq1xxcOLzuuIwZ1U/QtbROwaEI=) 2: 34352e3233372e32342e302f32322d3234203d3e20323638323632.roa (hash: rINL47d16XXmhij2neYqgRCOetMGqa2cVuGeKHBY2Ww=) 3: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl (hash: geNbWBDL5KqzaCKeAZTorkrOE85YdAlaXWTfYqucx0c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 17:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d4:1a:f2:5b:4e:cc:3c:49:cf:ff:8b:15:36:b3:e0:19:71:51:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69 Validity Not Before: Aug 23 14:56:10 2025 GMT Not After : Aug 24 18:36:10 2025 GMT Subject: CN=30E85EF0A903F6DBF57B96E0715DEBD7D767F849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fb:75:13:fa:58:3d:76:71:45:55:50:38:2d: 8f:fd:96:41:75:8d:57:75:01:9f:83:8e:f1:fe:19: 01:91:51:64:20:75:9b:e2:d9:86:b7:05:f1:bc:8a: 9a:86:7d:58:06:6c:48:c8:72:26:98:fb:e7:b3:f1: 00:d5:dc:60:43:58:41:d9:f3:a5:ef:27:66:92:2d: 72:e5:8f:07:53:45:36:ce:39:51:3c:a4:f2:20:b5: 34:17:7c:66:b7:1a:f4:da:df:e4:a6:24:64:f8:13: 38:35:dd:ea:63:23:bf:fa:4c:6b:8c:f0:cc:d5:27: d1:36:36:be:a4:27:b4:9e:cd:d7:0d:ef:85:f8:8e: b9:67:99:b7:09:38:c4:71:e1:9d:70:2f:8b:52:a9: 3a:7e:3b:ce:1f:f0:45:a3:2f:14:ec:51:cb:fe:c3: 91:aa:c6:7b:d0:c6:d2:60:f5:fe:d8:e5:36:d4:42: 53:79:9a:3d:22:0b:80:97:0d:1d:d2:fc:25:18:bf: bc:f7:9b:44:dc:d0:8b:5f:89:74:76:62:25:9c:0d: 12:52:f0:8b:ee:a0:f8:03:5c:ee:71:a2:b0:28:50: 19:29:68:87:fc:8b:fb:75:6a:67:db:6e:83:ff:7c: f1:83:29:9b:8b:09:29:82:1f:1b:5d:7d:a1:b2:5f: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E8:5E:F0:A9:03:F6:DB:F5:7B:96:E0:71:5D:EB:D7:D7:67:F8:49 X509v3 Authority Key Identifier: keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:76:46:e4:72:4f:7b:13:27:10:d4:f2:3d:3b:3e:ec:cb:e1: 22:96:ff:17:83:49:e6:1c:cd:6d:88:e1:27:d2:a2:a5:b9:28: 72:dd:3d:4a:27:cb:d1:dd:c7:2f:c6:66:6c:fc:88:12:8c:85: b0:6d:4f:d4:ff:ba:a8:9f:1a:3d:59:95:9f:62:28:cf:1d:ed: d5:e1:4f:94:f8:e4:17:92:65:39:b1:64:c0:5d:5d:c8:e3:2c: 36:41:7c:f6:e9:db:1a:27:bd:98:86:b3:05:53:d3:5b:20:d9: 6a:f0:71:81:a6:26:15:09:15:98:31:38:ab:c0:a0:f8:89:28: 18:a0:98:67:22:fa:fc:20:48:84:a7:4a:50:d6:46:44:43:4a: 01:22:19:dc:50:7f:6b:cc:7c:27:00:bf:ff:22:0e:5a:9a:36: 9d:58:be:92:7c:02:e7:f5:f5:0b:94:9b:13:36:f0:c7:12:b5: 71:0f:51:04:ef:6e:91:39:b1:d0:2c:d2:fc:b8:ad:34:16:e6: c4:73:bb:c1:d5:cc:08:89:43:1b:1f:58:e2:49:7e:46:5d:21: 95:11:f9:ee:0e:96:37:bd:25:f1:e4:ec:7b:6e:b5:a2:09:c5: 2f:69:dc:ee:29:de:09:dd:b3:68:73:55:0e:c0:c9:5a:22:41: 7e:6c:d2:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGtQa8ltOzDxJz/+LFTaz4BlxUSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCQkU1M0FBNDBBQ0I0NUVENzZEQUMwRTZGODMzQjI4 QkVEOEE2OTAeFw0yNTA4MjMxNDU2MTBaFw0yNTA4MjQxODM2MTBaMDMxMTAvBgNV BAMTKDMwRTg1RUYwQTkwM0Y2REJGNTdCOTZFMDcxNURFQkQ3RDc2N0Y4NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN+3UT+lg9dnFFVVA4LY/9lkF1 jVd1AZ+DjvH+GQGRUWQgdZvi2Ya3BfG8ipqGfVgGbEjIciaY++ez8QDV3GBDWEHZ 86XvJ2aSLXLljwdTRTbOOVE8pPIgtTQXfGa3GvTa3+SmJGT4Ezg13epjI7/6TGuM 8MzVJ9E2Nr6kJ7SezdcN74X4jrlnmbcJOMRx4Z1wL4tSqTp+O84f8EWjLxTsUcv+ w5GqxnvQxtJg9f7Y5TbUQlN5mj0iC4CXDR3S/CUYv7z3m0Tc0ItfiXR2YiWcDRJS 8IvuoPgDXO5xorAoUBkpaIf8i/t1amfbboP/fPGDKZuLCSmCHxtdfaGyX1b9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMOhe8KkD9tv1e5bgcV3r19dn+EkwHwYDVR0j BBgwFoAU37vlOqQKy0XtdtrA5vgzsovtimkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1Rl VmovMC9ERkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQkJFNTNBQTQwQUNCNDVF RDc2REFDMEU2RjgzM0IyOEJFRDhBNjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1RlVmovMC9E RkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC3ZG5HJPexMnENTyPTs+7MvhIpb/F4NJ5hzNbYjhJ9Kipbkoct09SifL0d3H L8ZmbPyIEoyFsG1P1P+6qJ8aPVmVn2Iozx3t1eFPlPjkF5JlObFkwF1dyOMsNkF8 9unbGie9mIazBVPTWyDZavBxgaYmFQkVmDE4q8Cg+IkoGKCYZyL6/CBIhKdKUNZG RENKASIZ3FB/a8x8JwC//yIOWpo2nVi+knwC5/X1C5SbEzbwxxK1cQ9RBO9ukTmx 0CzS/LitNBbmxHO7wdXMCIlDGx9Y4kl+Rl0hlRH57g6WN70l8eTse261ognFL2nc 7ineCd2zaHNVDsDJWiJBfmzSJQ== -----END CERTIFICATE-----Generated at Sat Aug 23 19:04:34 2025 by rpki-client