$ rpki-client -vvf rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft File: DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft (raw, json) Hash identifier: wcsjTUfoIs3b2xLfBd7Q4gHfjE8W/pN2lczC0d1JhSI= Subject key identifier: 07:7A:3A:10:7C:85:B9:A7:37:A0:71:19:C5:86:FF:A8:BF:DC:3A:74 Authority key identifier: DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 Certificate issuer: /CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Certificate serial: 2E7913C4BD2ABAC9B00B40DA9738751649B89D88 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft Manifest number: 025E Signing time: Mon 30 Jun 2025 14:11:43 +0000 Manifest this update: Mon 30 Jun 2025 14:06:43 +0000 Manifest next update: Tue 01 Jul 2025 15:48:43 +0000 Files and hashes: 1: 3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa (hash: Z6rpwRyuxvgqZK9wg3IWbxseWkxo3KvfvA7U8nx0qtI=) 2: 323830343a6561383a3a2f33322d3438203d3e20323632393636.roa (hash: k3mQQh+jFVJ+W9lI5qcYz2pIEXAoMKMazd3p9xRcR90=) 3: 3138362e3235302e32382e302f32322d3235203d3e20323632393636.roa (hash: iKC8mrbvMcLPzl1+sFNxgHBkh7HGux1xw4YCVG73YFo=) 4: DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl (hash: AzT5IYYEFmOFzNV8LZahbVL4yom7qBX9hU0xCIDrgeE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 15:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:79:13:c4:bd:2a:ba:c9:b0:0b:40:da:97:38:75:16:49:b8:9d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Validity Not Before: Jun 30 14:06:43 2025 GMT Not After : Jul 1 15:48:43 2025 GMT Subject: CN=077A3A107C85B9A737A07119C586FFA8BFDC3A74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:53:8d:d2:a8:ad:10:c1:d2:7d:f5:1d:8b: 5b:21:c7:e9:61:9f:95:14:6c:32:72:1f:6d:c9:38: bd:87:68:72:ea:34:21:11:f7:42:96:8d:4c:7e:9f: 93:1a:3e:af:d8:bc:c3:7f:0a:1d:20:3e:8f:35:1c: 99:0c:1f:41:a7:d1:fa:68:43:8e:3d:47:a7:ab:1b: 9d:32:93:da:c1:90:81:ee:6d:5f:31:6a:76:89:8e: f4:50:a1:a5:6e:b9:4a:a0:88:c7:cb:c6:cd:3d:8d: c2:fe:a0:88:e1:57:4d:c0:0b:5c:0b:3b:82:4f:c6: ff:55:9e:84:e7:8b:7e:62:61:cf:cc:3f:3f:48:a4: 0d:df:5f:2a:c5:75:47:70:7b:9e:0b:ba:56:11:f1: 5d:08:8d:75:8b:49:05:bb:79:be:71:56:b4:2a:b8: ca:4b:36:1f:48:09:4f:80:cf:a1:57:55:33:cc:08: 10:30:f6:0b:7b:ee:0c:9b:b9:7e:5b:33:43:c2:61: 6b:ab:70:36:04:81:ae:e2:86:22:7f:4c:4d:44:d8: 9b:4b:6e:e2:e3:92:b7:dd:68:8b:5e:45:84:fc:31: 7f:96:f4:22:92:14:43:16:09:e0:aa:fa:13:21:5f: 9f:cd:1b:ba:75:a3:0e:83:3b:88:c9:7f:cd:ff:2a: 7e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7A:3A:10:7C:85:B9:A7:37:A0:71:19:C5:86:FF:A8:BF:DC:3A:74 X509v3 Authority Key Identifier: keyid:DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:34:50:30:6e:30:60:58:b5:85:70:c1:c9:80:4b:b2:85:17: 5a:e1:e8:47:a2:16:e9:bb:f1:a8:8e:b9:90:6f:af:12:97:22: 1e:7a:ac:f7:ee:35:fc:6a:61:cc:6f:7e:2f:c9:c9:e2:e5:ad: b2:88:cb:3c:d9:cc:7d:a3:e6:9c:b4:5a:96:ac:60:6d:fc:06: 28:51:9c:2b:4f:10:04:f2:81:08:a7:ae:c6:74:f0:dc:fd:5e: 2c:82:0a:87:65:c3:23:9d:07:cb:28:a4:ee:0d:18:01:e7:b7: 6f:68:1f:10:ef:cd:92:b4:af:a2:94:a4:94:43:66:aa:f9:2c: f5:3b:e0:cc:9d:f0:7e:94:e2:ed:49:e8:c5:ad:15:34:30:fc: b1:04:d3:6c:a0:ab:13:fe:5d:69:03:97:4f:5b:c4:fc:f8:d5: a8:03:9b:d4:44:75:18:e8:7b:e1:48:f0:9f:6f:81:42:14:ba: 54:9e:12:30:bc:16:9d:ef:b9:6a:8c:e5:5a:9b:55:5d:07:5d: 7f:9f:2c:f5:97:8f:21:7a:fb:ba:bf:9c:ba:58:d6:5a:cf:52: 10:03:dc:ae:64:62:be:98:19:23:37:7a:81:34:36:a0:c5:7f: 93:27:b5:f9:d8:3a:69:12:f9:cc:52:b1:63:95:f7:3b:a6:6f: 77:2f:10:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULnkTxL0qusmwC0Dalzh1Fkm4nYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2MDExM0RCODQ3RUU0RkRGRUNGOEU3QjMyRDhDQjBB MjhBNDIyOTAeFw0yNTA2MzAxNDA2NDNaFw0yNTA3MDExNTQ4NDNaMDMxMTAvBgNV BAMTKDA3N0EzQTEwN0M4NUI5QTczN0EwNzExOUM1ODZGRkE4QkZEQzNBNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ZFON0qitEMHSffUdi1shx+lh n5UUbDJyH23JOL2HaHLqNCER90KWjUx+n5MaPq/YvMN/Ch0gPo81HJkMH0Gn0fpo Q449R6erG50yk9rBkIHubV8xanaJjvRQoaVuuUqgiMfLxs09jcL+oIjhV03AC1wL O4JPxv9VnoTni35iYc/MPz9IpA3fXyrFdUdwe54LulYR8V0IjXWLSQW7eb5xVrQq uMpLNh9ICU+Az6FXVTPMCBAw9gt77gybuX5bM0PCYWurcDYEga7ihiJ/TE1E2JtL buLjkrfdaIteRYT8MX+W9CKSFEMWCeCq+hMhX5/NG7p1ow6DO4jJf83/Kn53AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUB3o6EHyFuac3oHEZxYb/qL/cOnQwHwYDVR0j BBgwFoAU22ARPbhH7k/f7Pjnsy2MsKKKQikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2szZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01z Q2ovMS9EQjYwMTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCNjAxMTNEQjg0N0VFNEZE RkVDRjhFN0IzMkQ4Q0IwQTI4QTQyMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2szZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01zQ2ovMS9E QjYwMTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWjRQMG4wYFi1hXDByYBLsoUXWuHoR6IW6bvxqI65kG+vEpciHnqs9+41/Gph zG9+L8nJ4uWtsojLPNnMfaPmnLRalqxgbfwGKFGcK08QBPKBCKeuxnTw3P1eLIIK h2XDI50Hyyik7g0YAee3b2gfEO/NkrSvopSklENmqvks9TvgzJ3wfpTi7Unoxa0V NDD8sQTTbKCrE/5daQOXT1vE/PjVqAOb1ER1GOh74Ujwn2+BQhS6VJ4SMLwWne+5 aozlWptVXQddf58s9ZePIXr7ur+culjWWs9SEAPcrmRivpgZIzd6gTQ2oMV/kye1 +dg6aRL5zFKxY5X3O6Zvdy8QlA== -----END CERTIFICATE-----Generated at Mon Jun 30 17:35:52 2025 by rpki-client