$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft File: DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft (raw, json) Hash identifier: 0LOCTqiaBVA3hs95YoXNkki16oZeDPDH1YCtALW7VEU= Subject key identifier: 82:32:82:C5:4A:65:AC:8E:6A:A5:81:4D:9E:3F:EF:54:BC:DD:C1:42 Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 616CFABE6A9D74C7AF48AA8086A62739CE0F150B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft Manifest number: 0174 Signing time: Sun 10 Aug 2025 10:45:16 +0000 Manifest this update: Sun 10 Aug 2025 10:40:16 +0000 Manifest next update: Mon 11 Aug 2025 13:09:16 +0000 Files and hashes: 1: AS28270.roa (hash: uGHkRPishqbsJJ54+ugErw9R72HvNLzUbFhVrAbllrQ=) 2: AS262992.roa (hash: LOrGt5rTWX38I9DqRFkfOvwpOY0hC94ElGsl+njChjw=) 3: AS271724.roa (hash: l5gmeL2yHvrD9TVL4KZFQizJAvhAXD1DWO8q3z+rTGI=) 4: AS262509.roa (hash: z3WtH/Sygr90lElh4BrL1IcwiuvTDrgPHmvGfu++SqQ=) 5: DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl (hash: oAaLXrNBWL5dE6YbIGtU4/whTCLNT6Pi69aIhKNVZ1M=) 6: AS26506.roa (hash: tFkD2PMWofwimoG981bob/PjPPKK2IynxaWoUB+x+bY=) 7: AS28220.roa (hash: 2f4mdy18qLlx+ZdLI6cTxQUAw0TZ9sUecxUz0WF1Sqw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 13:09:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:6c:fa:be:6a:9d:74:c7:af:48:aa:80:86:a6:27:39:ce:0f:15:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Aug 10 10:40:16 2025 GMT Not After : Aug 11 13:09:16 2025 GMT Subject: CN=823282C54A65AC8E6AA5814D9E3FEF54BCDDC142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:95:a5:e7:47:d0:0b:70:76:aa:63:01:b7: 39:d4:fb:f4:64:bb:d9:8c:95:11:d6:cb:cd:f7:d5: 1c:43:1a:74:40:b0:96:1f:31:0b:e5:d8:dc:bd:ca: d1:c5:a0:58:56:d5:c9:69:b8:25:27:9e:d3:28:ca: 5a:d4:8e:32:1c:33:f3:f7:9f:a6:e2:a9:80:ae:44: 76:d8:44:12:9c:12:6c:48:8a:52:0b:a6:8f:2e:45: 4f:43:5b:69:2f:5c:da:1c:54:15:66:ae:be:d0:bb: 96:1e:26:3c:2e:af:70:ba:4a:8d:81:51:71:c5:aa: 02:47:66:4c:ef:ea:f6:96:e5:53:16:2e:d7:ad:e2: ac:ea:e7:ce:7d:a4:47:db:cf:b5:60:28:a2:bd:03: 27:02:43:9e:80:86:9d:13:6b:df:c8:01:c7:f8:83: 54:da:b4:67:15:3b:96:41:42:dc:eb:70:6b:5f:71: 91:a5:74:0c:f5:91:2a:52:24:64:60:ef:d8:f6:d7: 05:62:aa:09:8c:f3:66:81:84:86:16:2f:f4:ec:f2: 63:bd:70:c3:de:c8:b3:84:5f:59:39:be:1b:50:75: 05:7b:e1:87:87:2b:2d:d3:a7:e7:76:db:de:ee:e9: c3:ed:ee:7e:77:1b:ff:ed:5b:cc:03:16:bf:ed:d0: a5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:32:82:C5:4A:65:AC:8E:6A:A5:81:4D:9E:3F:EF:54:BC:DD:C1:42 X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:de:cb:8c:c3:90:fb:f2:15:da:6e:e4:c0:fd:9a:f2:7a:3d: 68:a3:ca:3d:bf:27:91:51:19:f2:d2:6a:06:dd:88:73:3c:ca: 2e:65:36:d6:71:f6:d4:79:64:ff:c5:b2:a9:30:dc:27:32:70: 1e:32:58:ea:a0:e5:41:93:67:01:03:0c:d7:cc:ed:0a:3a:a1: 06:44:c9:41:b4:df:c1:0b:da:3b:5e:26:15:f2:c5:9f:6f:57: d0:21:52:7e:12:5a:18:80:9f:63:48:6c:ad:4e:d6:45:d6:19: 64:4e:81:83:42:2f:88:ec:03:b2:95:65:84:43:38:64:a0:d8: 60:80:60:bb:54:2a:b7:8a:2d:c5:fe:b6:5f:ac:b4:04:f2:3e: 83:8f:0a:d6:c3:81:b8:52:02:88:5f:48:a9:9b:39:0f:15:e9: a8:5e:ac:74:ce:78:66:72:98:a8:25:8d:f2:39:db:6d:e1:cf: 4a:6a:1d:30:65:6b:12:5f:c3:93:c3:10:a5:a2:d3:a8:9b:eb: da:e8:66:3b:5b:e3:6c:5a:21:20:6d:58:f8:00:76:d8:e7:c4: 51:83:8d:f4:6d:e0:23:5e:ac:0d:09:49:ba:36:64:a4:48:99: d3:bf:a4:32:aa:03:39:4b:e5:2a:9b:5d:84:b8:38:ed:3e:a0: 4b:6c:0f:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYWz6vmqddMevSKqAhqYnOc4PFQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTA4MTAxMDQwMTZaFw0yNTA4MTExMzA5MTZaMDMxMTAvBgNV BAMTKDgyMzI4MkM1NEE2NUFDOEU2QUE1ODE0RDlFM0ZFRjU0QkNEREMxNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXJWl50fQC3B2qmMBtznU+/Rk u9mMlRHWy8331RxDGnRAsJYfMQvl2Ny9ytHFoFhW1clpuCUnntMoylrUjjIcM/P3 n6biqYCuRHbYRBKcEmxIilILpo8uRU9DW2kvXNocVBVmrr7Qu5YeJjwur3C6So2B UXHFqgJHZkzv6vaW5VMWLtet4qzq5859pEfbz7VgKKK9AycCQ56Ahp0Ta9/IAcf4 g1TatGcVO5ZBQtzrcGtfcZGldAz1kSpSJGRg79j21wViqgmM82aBhIYWL/Ts8mO9 cMPeyLOEX1k5vhtQdQV74YeHKy3Tp+d2297u6cPt7n53G//tW8wDFr/t0KVHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgjKCxUplrI5qpYFNnj/vVLzdwUIwHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3REYvMC9E RTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAct7LjMOQ+/IV2m7kwP2a8no9aKPKPb8nkVEZ8tJqBt2IczzKLmU21nH21Hlk /8WyqTDcJzJwHjJY6qDlQZNnAQMM18ztCjqhBkTJQbTfwQvaO14mFfLFn29X0CFS fhJaGICfY0hsrU7WRdYZZE6Bg0IviOwDspVlhEM4ZKDYYIBgu1Qqt4otxf62X6y0 BPI+g48K1sOBuFICiF9IqZs5DxXpqF6sdM54ZnKYqCWN8jnbbeHPSmodMGVrEl/D k8MQpaLTqJvr2uhmO1vjbFohIG1Y+AB22OfEUYON9G3gI16sDQlJujZkpEiZ07+k MqoDOUvlKptdhLg47T6gS2wPVQ== -----END CERTIFICATE-----Generated at Sun Aug 10 18:55:09 2025 by rpki-client