$ rpki-client -vvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft File: DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft (raw, json) Hash identifier: r63Y9IbaVBNpdUdPY3EEdfm/mrFdwt58ocTQsIcSlf0= Subject key identifier: 64:5D:51:AC:8C:86:86:A3:4E:C3:40:FB:E0:A7:FD:31:2B:1A:7C:B5 Authority key identifier: DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA Certificate issuer: /CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA Certificate serial: 71E6C42B8E779A805185C65007C49F32559EF3C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer Subject info access: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft Manifest number: 0292 Signing time: Sun 10 Aug 2025 01:20:00 +0000 Manifest this update: Sun 10 Aug 2025 01:15:00 +0000 Manifest next update: Mon 11 Aug 2025 04:49:00 +0000 Files and hashes: 1: 34352e3138372e3131382e302f32332d3233203d3e20323639343731.roa (hash: fMc8gzldryFUQ8IHHb0p6EJgGXlPn15thkQQ4FZHnmU=) 2: 323830343a363532343a3a2f33322d3332203d3e20323639343731.roa (hash: enBvjYbf1meZakj7o/v5LLd98daGE67Ofpb1+DdLfkU=) 3: 34352e3138372e3131392e302f32342d3234203d3e20323639343731.roa (hash: 7YvaZPSSnSfIpvWLSuz5hoPkexAX+X5gsJzDtlBMvas=) 4: DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl (hash: XHrVwiHy1Bom2TnVmtNULI0a6vXqiJP5Jut1kx/Qz2g=) 5: 34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa (hash: /UkhwqWZdTdeal6ugVixgVRqE4NRcTozr4bSrI9VJMk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 14:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:e6:c4:2b:8e:77:9a:80:51:85:c6:50:07:c4:9f:32:55:9e:f3:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA Validity Not Before: Aug 10 01:15:00 2025 GMT Not After : Aug 11 04:49:00 2025 GMT Subject: CN=645D51AC8C8686A34EC340FBE0A7FD312B1A7CB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2c:10:da:51:d5:24:f5:c4:8f:42:11:47:16: 49:71:b5:6f:53:a2:c8:be:77:c7:10:76:65:c4:67: c5:a2:3d:ad:fe:8a:51:a7:99:ca:48:0b:88:dc:fe: 61:0b:c9:9b:06:2d:49:18:b0:8d:cc:8f:fa:6f:f5: 0e:45:d0:e9:6d:a4:75:ca:2b:9d:ec:ba:12:d5:40: 67:ba:c4:c2:a4:c9:60:d6:df:10:40:bc:73:df:e4: f1:56:2d:8e:ac:4d:b4:7d:fc:de:b6:09:53:05:2e: 08:68:a8:f5:a8:f5:32:5f:f9:40:8a:15:1e:a1:09: a8:3f:fb:da:6c:52:4e:a1:b8:c4:03:9b:96:32:46: 8e:69:22:ae:03:a9:22:01:5f:36:20:bb:ed:96:2e: 13:52:9a:e7:be:24:cc:6d:42:80:05:12:50:bf:9b: fe:4d:92:34:b4:f7:a4:3d:32:fd:e4:64:56:f3:2a: f8:d4:ab:d1:62:84:4a:5c:a1:ef:63:cd:d8:80:cf: cd:b5:61:63:fa:ec:00:f5:d1:04:cf:e1:69:38:33: 2b:67:f7:d4:92:45:2d:e7:b6:9d:60:7d:46:72:d5: 0d:f1:8b:b2:aa:50:bf:aa:38:97:f4:0d:80:79:fe: 45:4b:f6:16:c0:8d:f6:87:92:ba:70:37:50:e5:36: 2c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5D:51:AC:8C:86:86:A3:4E:C3:40:FB:E0:A7:FD:31:2B:1A:7C:B5 X509v3 Authority Key Identifier: keyid:DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:71:3e:6c:a2:49:fe:d9:8c:c7:03:a9:cb:f6:ec:41:dc:8b: cb:bf:e6:30:29:ac:c5:a4:4e:31:32:63:4f:54:83:c8:e4:2d: 44:38:af:6d:d1:01:d7:74:38:1f:1a:69:6f:27:3e:a0:e4:ce: d8:f9:0b:8f:a5:de:3b:a7:b0:70:73:69:75:54:5b:81:08:dd: 82:3e:d5:7f:00:b4:b7:8f:74:13:4f:bb:56:c2:f0:e3:b1:89: 27:20:b7:f8:78:ee:6c:0c:66:6a:86:6b:72:ad:4f:0f:5c:2f: cf:f1:69:04:6f:9f:bb:3c:f0:ba:49:d4:31:cc:79:80:e9:0e: 2b:19:f6:04:6e:3d:01:06:52:2e:13:19:35:a8:f7:66:9d:64: 03:e7:a7:04:cf:d2:fa:30:5c:49:58:d1:10:b1:53:69:bb:8a: 18:92:b0:78:3c:90:f4:ac:7c:c6:86:4a:59:d7:77:22:6e:70: 88:c2:c5:88:33:ca:d3:b3:c0:0d:83:9a:d6:c1:05:43:33:e7: 17:96:8c:5e:d4:6a:d5:46:a1:e5:f5:a9:3e:be:ae:89:2c:10: 2e:4f:1e:48:29:1b:f5:03:8a:61:7a:4c:d0:cb:de:5c:73:8e: 9a:e9:7a:9b:dd:a9:a0:84:85:50:5f:e1:d8:ac:5c:4d:22:c7: 33:ee:20:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcebEK453moBRhcZQB8SfMlWe88cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzQkE0NDc4RkRCOEU0QTM3NTMyNEMwNDREODBDNTY1 NTA0RjVGQTAeFw0yNTA4MTAwMTE1MDBaFw0yNTA4MTEwNDQ5MDBaMDMxMTAvBgNV BAMTKDY0NUQ1MUFDOEM4Njg2QTM0RUMzNDBGQkUwQTdGRDMxMkIxQTdDQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDELBDaUdUk9cSPQhFHFklxtW9T osi+d8cQdmXEZ8WiPa3+ilGnmcpIC4jc/mELyZsGLUkYsI3Mj/pv9Q5F0OltpHXK K53suhLVQGe6xMKkyWDW3xBAvHPf5PFWLY6sTbR9/N62CVMFLghoqPWo9TJf+UCK FR6hCag/+9psUk6huMQDm5YyRo5pIq4DqSIBXzYgu+2WLhNSmue+JMxtQoAFElC/ m/5NkjS096Q9Mv3kZFbzKvjUq9FihEpcoe9jzdiAz821YWP67AD10QTP4Wk4Mytn 99SSRS3ntp1gfUZy1Q3xi7KqUL+qOJf0DYB5/kVL9hbAjfaHkrpwN1DlNizHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZF1RrIyGhqNOw0D74Kf9MSsafLUwHwYDVR0j BBgwFoAU3jukR4/bjko3UyTARNgMVlUE9fowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2hCWmRvUDI4eEZyYVVGcVBDVVR2NVRMV0ZDQUFReWE5Y3hQRktwRTI5 dzgvMS9ERTNCQTQ0NzhGREI4RTRBMzc1MzI0QzA0NEQ4MEM1NjU1MDRGNUZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFM0JBNDQ3OEZEQjhFNEEz NzUzMjRDMDQ0RDgwQzU2NTUwNEY1RkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2hCWmRvUDI4eEZyYVVGcVBDVVR2NVRMV0ZDQUFReWE5Y3hQRktwRTI5dzgvMS9E RTNCQTQ0NzhGREI4RTRBMzc1MzI0QzA0NEQ4MEM1NjU1MDRGNUZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxHE+bKJJ/tmMxwOpy/bsQdyLy7/mMCmsxaROMTJjT1SDyOQtRDivbdEB13Q4 Hxppbyc+oOTO2PkLj6XeO6ewcHNpdVRbgQjdgj7VfwC0t490E0+7VsLw47GJJyC3 +HjubAxmaoZrcq1PD1wvz/FpBG+fuzzwuknUMcx5gOkOKxn2BG49AQZSLhMZNaj3 Zp1kA+enBM/S+jBcSVjRELFTabuKGJKweDyQ9Kx8xoZKWdd3Im5wiMLFiDPK07PA DYOa1sEFQzPnF5aMXtRq1Uah5fWpPr6uiSwQLk8eSCkb9QOKYXpM0MveXHOOmul6 m92poISFUF/h2KxcTSLHM+4gXA== -----END CERTIFICATE-----Generated at Sun Aug 10 04:50:52 2025 by rpki-client