$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft File: DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft (raw, json) Hash identifier: HvRmB4DXuFdPc9AofNZfDelU75st6Pv0UbA+pW5ktg8= Subject key identifier: 3F:AC:27:85:8D:6D:A6:E7:4B:D2:C0:59:1F:8B:A3:3E:5A:20:D3:9E Authority key identifier: DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE Certificate issuer: /CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE Certificate serial: 29BC28B1861A4130C42A9918D792A1CFED31BE0C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer Subject info access: rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft Manifest number: 9E Signing time: Mon 04 Aug 2025 14:52:01 +0000 Manifest this update: Mon 04 Aug 2025 14:47:01 +0000 Manifest next update: Tue 05 Aug 2025 15:50:01 +0000 Files and hashes: 1: 3137372e3132352e37372e302f32342d3234203d3e203532373636.roa (hash: hMV0PmP1bIkVe5jy7BgKW2ObEfuIM/VAOkdwThtzkN0=) 2: DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl (hash: yMBsXEKG8mLyQ/R7isUsfcTmyY/OHgxgud5y0VBjYrI=) 3: 3137372e3132352e37332e302f32342d3234203d3e203532373636.roa (hash: yHmJCMANwgyJZi7RpIORKezVofQsOnGYoQYEeBdFCP0=) 4: 3137372e3132352e37322e302f32342d3234203d3e203532373636.roa (hash: 8l8sj6Lhn0LhQN9ND1pd5nXSQ+34FWL+b1PnT0OphM8=) 5: 3137372e3132352e37322e302f32332d3233203d3e203532373636.roa (hash: RUgWQbSbfKqm4Hfu18+LGJPAqutuS6ikmtMKvWzJroY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 05 Aug 2025 15:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:bc:28:b1:86:1a:41:30:c4:2a:99:18:d7:92:a1:cf:ed:31:be:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE Validity Not Before: Aug 4 14:47:01 2025 GMT Not After : Aug 5 15:50:01 2025 GMT Subject: CN=3FAC27858D6DA6E74BD2C0591F8BA33E5A20D39E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:03:fc:cc:f7:16:05:49:ba:b6:69:1f:3f: 5f:23:05:99:d4:85:ad:a3:91:5f:3f:7f:b7:cd:46: 94:11:71:bc:cd:e6:a6:51:9c:4f:b8:79:20:e4:10: 31:79:27:56:9f:9e:8c:8a:8b:57:ac:f3:1f:28:79: 1e:c3:62:b2:13:27:7f:60:ad:aa:d6:e7:a9:48:7c: e1:d6:4a:bc:ec:cb:81:31:e4:82:3a:23:52:ff:d6: c9:72:de:bf:20:45:5d:05:3b:4f:ac:51:3c:80:f6: 2f:83:58:ac:66:aa:63:70:ce:66:c0:e3:5d:67:03: 97:03:ca:26:07:dc:40:08:83:bc:5f:98:86:fe:b4: 3b:2d:49:76:d3:11:a0:3b:98:b6:cb:95:5b:e0:9c: ad:dc:b0:57:45:32:52:a1:4d:ed:31:fd:17:c5:f4: f6:5b:25:3b:1d:f4:e3:d0:9f:02:17:d9:61:32:bb: de:e6:05:6e:40:c4:37:03:2c:39:8c:e1:c0:bd:bf: f4:60:2e:9d:8d:b4:64:63:00:10:27:be:25:52:93: 62:f7:58:c6:93:8f:7c:e3:b5:5f:42:d2:a5:c0:d8: 35:1c:8e:a6:6e:c1:a1:5a:d9:48:f3:05:eb:11:e8: 26:21:88:9d:95:6f:b7:1b:5f:ec:53:c4:59:a3:11: a6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AC:27:85:8D:6D:A6:E7:4B:D2:C0:59:1F:8B:A3:3E:5A:20:D3:9E X509v3 Authority Key Identifier: keyid:DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:15:54:05:eb:b8:60:13:e7:b0:5b:30:53:fe:a0:ba:28:7f: 35:1f:a5:e6:8d:c4:ae:7b:49:11:5c:06:78:6d:5a:e9:e5:3d: e3:3b:4b:07:2b:c4:3c:74:a4:0c:16:f2:b7:35:8e:3c:ce:a4: dc:b1:cf:2e:3a:b3:fe:79:dd:1e:7d:81:75:f8:ca:31:e4:fd: 0a:b2:d7:de:10:d9:1b:33:28:2a:8c:59:c6:46:b9:2f:2a:2c: ae:5a:b3:69:5a:62:29:ce:e6:bc:e9:a3:a7:c6:a1:09:2f:8e: 23:3e:b4:75:c6:31:b5:73:54:01:fa:8a:44:7b:29:5a:1b:3b: d5:6e:42:de:3b:2f:7a:4c:d1:8f:30:b7:39:59:47:e1:12:ef: dd:8e:db:91:97:23:2e:5e:d6:ca:d2:ad:07:99:9c:c1:00:0d: ee:53:d0:d6:56:5f:a5:0d:63:7b:a7:87:8e:10:d6:05:38:70: e9:42:45:d7:ae:53:2c:cd:20:7d:ee:11:e3:b8:57:a1:2f:49: 79:74:84:19:75:68:f1:98:87:d5:0d:52:1f:fa:b9:e8:3f:11: 4e:a3:36:7c:61:21:9b:cc:b8:19:30:1f:d4:11:ee:c3:ca:68: e3:de:ae:a8:ff:fb:0d:e3:bf:b7:6f:bf:28:ce:e8:ed:e8:71: 75:5c:ab:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKbwosYYaQTDEKpkY15Khz+0xvgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJBOUJCNkZENTY3QTUwODNCN0JBMEJCMDdDRDMxMjEw RjNDOEJFRTAeFw0yNTA4MDQxNDQ3MDFaFw0yNTA4MDUxNTUwMDFaMDMxMTAvBgNV BAMTKDNGQUMyNzg1OEQ2REE2RTc0QkQyQzA1OTFGOEJBMzNFNUEyMEQzOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aQP8zPcWBUm6tmkfP18jBZnU ha2jkV8/f7fNRpQRcbzN5qZRnE+4eSDkEDF5J1afnoyKi1es8x8oeR7DYrITJ39g rarW56lIfOHWSrzsy4Ex5II6I1L/1sly3r8gRV0FO0+sUTyA9i+DWKxmqmNwzmbA 411nA5cDyiYH3EAIg7xfmIb+tDstSXbTEaA7mLbLlVvgnK3csFdFMlKhTe0x/RfF 9PZbJTsd9OPQnwIX2WEyu97mBW5AxDcDLDmM4cC9v/RgLp2NtGRjABAnviVSk2L3 WMaTj3zjtV9C0qXA2DUcjqZuwaFa2UjzBesR6CYhiJ2Vb7cbX+xTxFmjEaZDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUP6wnhY1tpudL0sBZH4ujPlog054wHwYDVR0j BBgwFoAU26m7b9VnpQg7e6C7B80xIQ88i+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0NQUFp1UGppdVFCWWt2M0JhS1ZOcXFLNXQyN3ppcXA5ZmhCV1NTZUVv ZlYvMC9EQkE5QkI2RkQ1NjdBNTA4M0I3QkEwQkIwN0NEMzEyMTBGM0M4QkVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQTlCQjZGRDU2N0E1MDgz QjdCQTBCQjA3Q0QzMTIxMEYzQzhCRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0NQUFp1UGppdVFCWWt2M0JhS1ZOcXFLNXQyN3ppcXA5ZmhCV1NTZUVvZlYvMC9E QkE5QkI2RkQ1NjdBNTA4M0I3QkEwQkIwN0NEMzEyMTBGM0M4QkVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxhVUBeu4YBPnsFswU/6guih/NR+l5o3ErntJEVwGeG1a6eU94ztLByvEPHSk DBbytzWOPM6k3LHPLjqz/nndHn2BdfjKMeT9CrLX3hDZGzMoKoxZxka5Lyosrlqz aVpiKc7mvOmjp8ahCS+OIz60dcYxtXNUAfqKRHspWhs71W5C3jsvekzRjzC3OVlH 4RLv3Y7bkZcjLl7WytKtB5mcwQAN7lPQ1lZfpQ1je6eHjhDWBThw6UJF165TLM0g fe4R47hXoS9JeXSEGXVo8ZiH1Q1SH/q56D8RTqM2fGEhm8y4GTAf1BHuw8po496u qP/7DeO/t2+/KM7o7ehxdVyrpA== -----END CERTIFICATE-----Generated at Mon Aug 4 22:12:13 2025 by rpki-client