$ rpki-client -vvf rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft File: DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft (raw, json) Hash identifier: B8gJ+DxtAstAwLn8pqL8RwZlBpQ9TI/VTF1LAnXRj24= Subject key identifier: 94:E6:AB:EC:39:5D:89:2C:17:30:17:DF:6C:3F:0C:60:12:1A:73:DC Authority key identifier: DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E Certificate issuer: /CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E Certificate serial: 4B510B3EAE9AD2F7146B3A4F9F8C174BDD88CC3E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer Subject info access: rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft Manifest number: 42 Signing time: Wed 02 Jul 2025 08:06:37 +0000 Manifest this update: Wed 02 Jul 2025 08:01:37 +0000 Manifest next update: Thu 03 Jul 2025 09:52:37 +0000 Files and hashes: 1: 3133312e3232312e3138302e302f32322d3234203d3e203532373436.roa (hash: 3PsUICllrnsF07Zi7kmN3vDa9q1Ef/q577Ua+T+jmVg=) 2: DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl (hash: 5wAmLHI1knsdWb07OBfjt3eF7G1a2F7VmwnfJk+qSRA=) 3: 3137372e38352e3137322e302f32322d3234203d3e203532373436.roa (hash: KCrFqTQzO17kQlL8SOLSVWkU5WyJdtvB7e1wLs8BQYA=) 4: 323830343a316535343a3a2f33322d3536203d3e203532373436.roa (hash: ADTcvk7C0x33Y2RYKuM0CdXcsQC2etHZuMH6cQfkxbQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 09:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:51:0b:3e:ae:9a:d2:f7:14:6b:3a:4f:9f:8c:17:4b:dd:88:cc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E Validity Not Before: Jul 2 08:01:37 2025 GMT Not After : Jul 3 09:52:37 2025 GMT Subject: CN=94E6ABEC395D892C173017DF6C3F0C60121A73DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2d:b2:6e:d5:1c:b7:76:de:8c:09:51:28:7a: 7d:c4:08:22:ed:b2:1e:85:48:fa:48:ef:58:f3:93: dc:77:22:e2:07:68:a0:90:b7:9f:20:6b:d0:4c:3a: 65:ca:04:e1:79:df:07:d2:1c:5c:bf:62:d6:82:61: e0:8b:62:19:9f:d8:cd:25:18:96:46:a1:ce:42:46: 91:ad:95:ea:e0:20:62:51:07:e7:e0:43:b7:f0:08: e5:ab:2c:9d:61:7b:83:80:2b:39:21:21:66:06:92: a3:e2:67:8b:82:58:90:17:3e:70:94:85:b2:d6:99: c2:5e:cd:34:4b:1c:7e:66:9a:16:cb:fb:90:49:20: 60:8a:5e:f9:ab:dd:7c:53:e1:13:9d:a1:7f:34:45: 9a:da:0b:85:a9:16:b3:44:cc:fa:00:83:30:88:91: e6:98:bf:9e:a8:24:f6:0d:c7:ee:3c:b9:02:bb:3c: 76:eb:45:3d:2d:5c:c4:82:db:5b:04:3b:fd:ff:a9: d9:9d:f2:ab:00:47:ab:1e:fe:75:73:b1:88:c8:60: 64:be:19:af:ea:29:9b:40:ea:e3:54:a9:06:b5:cc: 7a:43:22:7c:96:90:e1:ef:7c:d1:5e:e0:ba:1e:14: b3:c9:b3:a9:c8:08:78:d2:e0:55:8c:20:7a:e3:6e: 9f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E6:AB:EC:39:5D:89:2C:17:30:17:DF:6C:3F:0C:60:12:1A:73:DC X509v3 Authority Key Identifier: keyid:DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b4:29:64:e7:49:60:4d:1b:10:5a:21:39:0b:3f:43:d1:f8: 3f:4b:e8:5f:84:11:35:fd:1c:45:d9:48:b8:55:38:9d:b4:42: f5:a5:cc:df:b0:5a:fe:15:94:60:1a:d5:07:88:1c:29:b6:dc: 65:86:0c:df:ad:75:da:98:00:b4:08:03:5f:90:78:f7:1d:12: 91:71:1a:ca:50:74:a4:6c:3f:64:b3:ad:b8:46:9c:46:0f:58: a0:1c:93:3c:9a:a6:bf:06:37:af:76:7b:68:f0:18:8b:ef:78: e9:75:c4:c3:d9:c9:76:62:fb:37:28:95:1c:fc:c2:f7:bd:ad: 86:a8:d2:b0:fc:d5:ed:48:2a:67:30:d1:8c:9f:a8:ae:b9:27: ed:a4:f3:c3:a8:f8:ad:55:d0:9d:93:51:d6:24:4b:2f:a3:c7: 6f:8b:d7:71:22:c4:85:ee:28:a0:c9:09:62:16:fd:bb:b8:02: 03:93:95:e4:51:97:5f:08:5e:cc:13:f4:9a:49:34:2b:bf:3f: a7:44:3f:97:95:74:eb:e8:b5:d1:c8:4e:8a:64:e9:64:8f:e2: 18:ee:8f:03:d2:b9:e6:50:6c:de:0e:6d:37:88:e4:2d:bc:5a: 10:88:11:d8:ff:17:27:9e:3a:6e:11:31:52:cb:18:02:f4:04: 12:46:41:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS1ELPq6a0vcUazpPn4wXS92IzD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCMUYzRkE2RjQyMERGMDE5MDU1MkZDMDk3Mjg1OUFG NDVGMzY4RTAeFw0yNTA3MDIwODAxMzdaFw0yNTA3MDMwOTUyMzdaMDMxMTAvBgNV BAMTKDk0RTZBQkVDMzk1RDg5MkMxNzMwMTdERjZDM0YwQzYwMTIxQTczREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9LbJu1Ry3dt6MCVEoen3ECCLt sh6FSPpI71jzk9x3IuIHaKCQt58ga9BMOmXKBOF53wfSHFy/YtaCYeCLYhmf2M0l GJZGoc5CRpGtlergIGJRB+fgQ7fwCOWrLJ1he4OAKzkhIWYGkqPiZ4uCWJAXPnCU hbLWmcJezTRLHH5mmhbL+5BJIGCKXvmr3XxT4ROdoX80RZraC4WpFrNEzPoAgzCI keaYv56oJPYNx+48uQK7PHbrRT0tXMSC21sEO/3/qdmd8qsAR6se/nVzsYjIYGS+ Ga/qKZtA6uNUqQa1zHpDInyWkOHvfNFe4LoeFLPJs6nICHjS4FWMIHrjbp99AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlOar7DldiSwXMBffbD8MYBIac9wwHwYDVR0j BBgwFoAU37Hz+m9CDfAZBVL8CXKFmvRfNo4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRW55ZGhwQlZta2E0V05DZFF3aGtmbVJudXFFNk1GbTV4MnFZM3Zwb3Nv algvMC9ERkIxRjNGQTZGNDIwREYwMTkwNTUyRkMwOTcyODU5QUY0NUYzNjhFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQjFGM0ZBNkY0MjBERjAx OTA1NTJGQzA5NzI4NTlBRjQ1RjM2OEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RW55ZGhwQlZta2E0V05DZFF3aGtmbVJudXFFNk1GbTV4MnFZM3Zwb3NvalgvMC9E RkIxRjNGQTZGNDIwREYwMTkwNTUyRkMwOTcyODU5QUY0NUYzNjhFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW7QpZOdJYE0bEFohOQs/Q9H4P0voX4QRNf0cRdlIuFU4nbRC9aXM37Ba/hWU YBrVB4gcKbbcZYYM36112pgAtAgDX5B49x0SkXEaylB0pGw/ZLOtuEacRg9YoByT PJqmvwY3r3Z7aPAYi+946XXEw9nJdmL7NyiVHPzC972thqjSsPzV7UgqZzDRjJ+o rrkn7aTzw6j4rVXQnZNR1iRLL6PHb4vXcSLEhe4ooMkJYhb9u7gCA5OV5FGXXwhe zBP0mkk0K78/p0Q/l5V06+i10chOimTpZI/iGO6PA9K55lBs3g5tN4jkLbxaEIgR 2P8XJ546bhExUssYAvQEEkZB+A== -----END CERTIFICATE-----Generated at Wed Jul 2 19:45:50 2025 by rpki-client