$ rpki-client -vvf rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft File: DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft (raw, json) Hash identifier: gHx3HExrSeGsuUvPpqmxSpiD09ywORSZq/imIqJK01M= Subject key identifier: 0D:06:F6:00:41:C5:63:4F:58:ED:58:B7:61:BD:EF:E4:4B:8C:67:4D Authority key identifier: DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 Certificate issuer: /CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Certificate serial: 2A761AE615FD16663A648885DC7975ACAD2999E6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft Manifest number: 02A6 Signing time: Sat 23 Aug 2025 00:38:13 +0000 Manifest this update: Sat 23 Aug 2025 00:33:13 +0000 Manifest next update: Sun 24 Aug 2025 00:38:13 +0000 Files and hashes: 1: DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl (hash: EPybXuWG2FGAHJokj1pZNpaw/aNBj521qLwJf7IKlUk=) 2: 323830343a6561383a3a2f33322d3438203d3e20323632393636.roa (hash: k3mQQh+jFVJ+W9lI5qcYz2pIEXAoMKMazd3p9xRcR90=) 3: 3138362e3235302e32382e302f32322d3235203d3e20323632393636.roa (hash: iKC8mrbvMcLPzl1+sFNxgHBkh7HGux1xw4YCVG73YFo=) 4: 3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa (hash: Z6rpwRyuxvgqZK9wg3IWbxseWkxo3KvfvA7U8nx0qtI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 00:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:76:1a:e6:15:fd:16:66:3a:64:88:85:dc:79:75:ac:ad:29:99:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Validity Not Before: Aug 23 00:33:13 2025 GMT Not After : Aug 24 00:38:13 2025 GMT Subject: CN=0D06F60041C5634F58ED58B761BDEFE44B8C674D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fc:d1:bc:e1:fb:5a:d5:aa:a2:17:61:fc:b6: 8d:93:02:c7:d4:55:61:6c:fa:c0:40:ad:9c:1b:3f: b7:93:12:e1:9b:52:58:6a:a3:c6:cb:73:e0:47:22: d5:f2:40:aa:ef:96:71:85:6a:ce:75:d7:0d:07:ce: 6a:40:bf:d5:6d:95:4d:63:f6:c7:40:93:a9:25:1a: a2:39:b6:d5:ae:08:f6:0f:ad:f0:59:8b:a1:ff:f4: 36:3a:4b:3f:f2:2d:6f:66:ed:b9:95:97:8f:27:c4: 78:0f:0c:5a:a8:24:93:c9:6d:bd:30:ce:37:5d:01: dd:08:4b:33:23:a7:e7:c2:e9:2b:e6:dd:30:c8:83: 07:95:bd:68:58:aa:44:0f:e5:26:88:6e:80:2e:3c: dc:d4:20:f0:64:b0:5c:5e:e8:14:25:3d:99:5d:eb: fe:9e:4c:c6:92:a7:0b:93:77:1d:ef:ba:a3:0c:69: 10:bc:e4:29:44:7e:94:86:f9:fa:5f:a2:bc:91:05: 3a:ef:d0:01:7c:a2:0d:a9:be:b0:1b:99:47:d0:0a: 8f:27:6a:bd:0d:57:6b:61:5f:c3:5c:ed:5a:f4:29: ab:cb:dd:11:ae:65:4d:33:4c:43:6f:b3:ed:f5:20: ed:00:3e:3a:09:8b:d1:86:f6:89:1d:3f:48:fb:03: 8e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:06:F6:00:41:C5:63:4F:58:ED:58:B7:61:BD:EF:E4:4B:8C:67:4D X509v3 Authority Key Identifier: keyid:DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d4:fc:74:86:15:d3:08:6c:86:b0:76:d0:8e:b1:ad:00:48: 15:79:3f:b3:e4:9f:34:6b:87:fe:57:4b:0f:06:76:9b:df:90: 5f:fb:03:59:f1:f8:2a:d7:39:f4:56:50:c2:c3:5c:ae:44:68: 8d:c2:35:cd:24:5a:6d:b7:b9:2b:bc:f7:58:77:54:c0:cd:ab: b6:dc:a7:b5:ec:ae:f3:68:ed:45:33:31:19:58:fe:99:d7:86: de:b1:24:bf:3f:13:fe:2b:c7:6c:1b:9f:2d:e6:dd:e1:57:09: 2b:8b:a3:80:5f:47:0a:fe:93:0e:6f:05:fa:7f:08:28:b4:c5: ef:d9:07:7b:4f:e4:86:a6:52:f5:d5:75:a0:31:05:82:6b:ac: 0b:45:14:9c:6d:6b:85:2f:0f:ec:82:26:24:93:e9:f8:3f:2e: be:9a:8f:b1:15:73:86:e2:2b:6d:e0:8f:4a:94:62:5f:6a:f1: 80:9c:35:06:9d:26:e1:c1:37:76:47:76:d9:ab:bd:3b:b2:8a: 8d:cb:57:2f:8d:e5:5a:16:26:b0:5f:dc:ee:bb:a6:a7:9f:23: 60:c0:6c:3a:37:d1:0c:fe:ab:43:50:0c:6a:56:fb:b0:eb:21: 86:f6:5a:3a:d7:ef:a5:1c:fe:7c:db:7c:d0:38:bc:0e:12:5f: 05:7e:df:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKnYa5hX9FmY6ZIiF3Hl1rK0pmeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2MDExM0RCODQ3RUU0RkRGRUNGOEU3QjMyRDhDQjBB MjhBNDIyOTAeFw0yNTA4MjMwMDMzMTNaFw0yNTA4MjQwMDM4MTNaMDMxMTAvBgNV BAMTKDBEMDZGNjAwNDFDNTYzNEY1OEVENThCNzYxQkRFRkU0NEI4QzY3NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/NG84fta1aqiF2H8to2TAsfU VWFs+sBArZwbP7eTEuGbUlhqo8bLc+BHItXyQKrvlnGFas511w0HzmpAv9VtlU1j 9sdAk6klGqI5ttWuCPYPrfBZi6H/9DY6Sz/yLW9m7bmVl48nxHgPDFqoJJPJbb0w zjddAd0ISzMjp+fC6Svm3TDIgweVvWhYqkQP5SaIboAuPNzUIPBksFxe6BQlPZld 6/6eTMaSpwuTdx3vuqMMaRC85ClEfpSG+fpforyRBTrv0AF8og2pvrAbmUfQCo8n ar0NV2thX8Nc7Vr0KavL3RGuZU0zTENvs+31IO0APjoJi9GG9okdP0j7A47JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDQb2AEHFY09Y7Vi3Yb3v5EuMZ00wHwYDVR0j BBgwFoAU22ARPbhH7k/f7Pjnsy2MsKKKQikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2szZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01z Q2ovMS9EQjYwMTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCNjAxMTNEQjg0N0VFNEZE RkVDRjhFN0IzMkQ4Q0IwQTI4QTQyMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2szZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01zQ2ovMS9E QjYwMTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADdT8dIYV0whshrB20I6xrQBIFXk/s+SfNGuH/ldLDwZ2m9+QX/sDWfH4Ktc5 9FZQwsNcrkRojcI1zSRabbe5K7z3WHdUwM2rttynteyu82jtRTMxGVj+mdeG3rEk vz8T/ivHbBufLebd4VcJK4ujgF9HCv6TDm8F+n8IKLTF79kHe0/khqZS9dV1oDEF gmusC0UUnG1rhS8P7IImJJPp+D8uvpqPsRVzhuIrbeCPSpRiX2rxgJw1Bp0m4cE3 dkd22au9O7KKjctXL43lWhYmsF/c7rump58jYMBsOjfRDP6rQ1AMalb7sOshhvZa OtfvpRz+fNt80Di8DhJfBX7fUA== -----END CERTIFICATE-----Generated at Sat Aug 23 15:54:44 2025 by rpki-client