$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft File: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft (raw, json) Hash identifier: xqIoWl2dSne+mCT54MAIZjrED589bk9eIOD3YJuhHck= Subject key identifier: D3:42:E2:1E:26:FE:B8:E1:77:AB:9B:64:CB:86:E9:76:9B:AD:20:60 Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3 Certificate issuer: /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3 Certificate serial: 3DBA8373895538DAC16DE936EA260067B970018F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft Manifest number: BA Signing time: Fri 08 Aug 2025 16:30:53 +0000 Manifest this update: Fri 08 Aug 2025 16:25:53 +0000 Manifest next update: Sat 09 Aug 2025 19:37:53 +0000 Files and hashes: 1: 3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa (hash: EO9/XY1ow03W8t7vGcP2Wy5W1TvFO2XAT86ZvjriNVc=) 2: 3137302e38332e3231322e302f32322d3332203d3e20323633343832.roa (hash: VRf7c1AilMDa5MAED8IvmErGMZeCvn1CKEsBPS+2gS8=) 3: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl (hash: gdxQQCzyaJmwNSFQ6kRLpRqT48NHlqZ6ghAtZTKoJkQ=) 4: 323830343a313238383a3a2f33322d313238203d3e20323633343832.roa (hash: hw5+VUcxGrU/e1Wu8H1AwOj1HjLcJDx9TuqRoRLdwuM=) 5: 3138392e38342e34342e302f32322d3332203d3e20323633343832.roa (hash: O4kifbSkitu5/3Knp4MgghSalt5nO6zrru13mWlDmc4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 19:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ba:83:73:89:55:38:da:c1:6d:e9:36:ea:26:00:67:b9:70:01:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3 Validity Not Before: Aug 8 16:25:53 2025 GMT Not After : Aug 9 19:37:53 2025 GMT Subject: CN=D342E21E26FEB8E177AB9B64CB86E9769BAD2060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5b:fe:09:83:8a:b5:64:5c:34:07:04:70:c9: e9:1a:2b:9a:ed:57:c9:70:d2:f9:a6:72:4f:ee:f4: c6:d5:70:eb:e2:88:a7:a8:d7:5b:37:9b:09:f3:3a: a4:33:3f:e8:b4:18:08:c3:91:4d:aa:52:70:e1:16: e5:67:f7:03:45:11:eb:55:08:93:24:89:d5:c4:24: f2:be:84:48:5a:81:a5:4f:d3:eb:14:93:bb:5b:2f: e1:eb:fd:54:6f:ad:c6:9b:1d:f0:ba:eb:c7:a7:43: 4b:11:7b:f5:40:ad:94:22:cd:e6:de:86:9a:ac:e5: df:85:b3:60:7e:09:22:09:3b:e2:94:ba:e4:55:dc: 95:7e:4a:b7:96:52:78:1a:ee:4a:f3:33:39:30:bc: 30:e3:63:5f:9d:d2:75:63:42:75:e1:14:0d:23:8f: d8:e5:79:bd:8b:62:c1:4b:9f:71:02:1d:62:d9:82: 2f:42:f1:0e:d9:da:84:70:ad:fb:98:d8:17:17:68: 9a:73:fb:59:8a:12:22:4b:46:3b:42:f3:e8:9e:10: 99:98:ec:06:ac:4f:f4:99:06:b9:98:6c:b0:52:59: d0:7f:da:e3:e3:71:21:5a:09:24:99:1c:94:7a:bf: a4:b0:73:09:f5:a3:99:c2:3a:d0:11:2f:43:8d:cc: fb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:42:E2:1E:26:FE:B8:E1:77:AB:9B:64:CB:86:E9:76:9B:AD:20:60 X509v3 Authority Key Identifier: keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:0b:db:54:05:98:b1:ba:40:63:f0:a9:00:82:a7:84:47:de: 16:3f:81:9f:5e:63:e1:a9:62:88:ab:18:e6:90:ee:55:31:14: 72:19:12:a0:be:78:4a:2d:6b:5d:8f:01:fb:d9:77:e2:a3:c6: 1d:46:30:a7:00:21:2e:88:f7:b3:03:af:85:46:2b:9b:e9:97: 65:d1:e2:c0:65:77:2e:98:1a:84:19:51:2d:56:94:42:d2:f3: 76:fe:f1:9c:a5:e2:4a:4f:65:29:4e:12:1b:6c:db:4b:20:3d: 62:cc:e0:57:b3:8b:ef:3b:9c:f5:a9:33:e3:e4:3c:cf:06:4b: e2:2f:f5:7e:6e:52:22:51:fe:cd:7f:67:85:7c:74:75:ba:a5: 73:19:12:50:79:1a:60:a7:83:af:f6:25:99:99:12:42:d0:13: bf:ad:3d:06:91:34:27:ad:18:4d:d8:3f:36:ee:ca:a7:9f:8d: dc:fa:e3:62:76:0e:0c:7a:5a:cd:f0:e5:00:4a:b7:0e:38:49: 8c:a2:33:e1:f3:ee:da:3b:0b:92:1f:ff:08:b6:35:12:63:ed: 50:16:af:4a:6d:b1:a0:60:77:86:d4:3e:31:ae:8c:f4:65:08: 9d:d6:23:37:b1:4b:c5:da:e4:c4:b6:14:88:1c:cd:2e:9f:2e: e9:7b:6b:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPbqDc4lVONrBbek26iYAZ7lwAY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBEQkQzQTBCNTREMTlFMTM1QkE1M0IzMUM0NTg4NDJD ODlENDlGMzAeFw0yNTA4MDgxNjI1NTNaFw0yNTA4MDkxOTM3NTNaMDMxMTAvBgNV BAMTKEQzNDJFMjFFMjZGRUI4RTE3N0FCOUI2NENCODZFOTc2OUJBRDIwNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxW/4Jg4q1ZFw0BwRwyekaK5rt V8lw0vmmck/u9MbVcOviiKeo11s3mwnzOqQzP+i0GAjDkU2qUnDhFuVn9wNFEetV CJMkidXEJPK+hEhagaVP0+sUk7tbL+Hr/VRvrcabHfC668enQ0sRe/VArZQizebe hpqs5d+Fs2B+CSIJO+KUuuRV3JV+SreWUnga7krzMzkwvDDjY1+d0nVjQnXhFA0j j9jleb2LYsFLn3ECHWLZgi9C8Q7Z2oRwrfuY2BcXaJpz+1mKEiJLRjtC8+ieEJmY 7AasT/SZBrmYbLBSWdB/2uPjcSFaCSSZHJR6v6Swcwn1o5nCOtARL0ONzPtpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU00LiHib+uOF3q5tky4bpdputIGAwHwYDVR0j BBgwFoAUINvToLVNGeE1ulOzHEWIQsidSfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFE VnMvMC8yMERCRDNBMEI1NEQxOUUxMzVCQTUzQjMxQzQ1ODg0MkM4OUQ0OUYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwREJEM0EwQjU0RDE5RTEz NUJBNTNCMzFDNDU4ODQyQzg5RDQ5RjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFEVnMvMC8y MERCRDNBMEI1NEQxOUUxMzVCQTUzQjMxQzQ1ODg0MkM4OUQ0OUYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAogvbVAWYsbpAY/CpAIKnhEfeFj+Bn15j4aliiKsY5pDuVTEUchkSoL54Si1r XY8B+9l34qPGHUYwpwAhLoj3swOvhUYrm+mXZdHiwGV3LpgahBlRLVaUQtLzdv7x nKXiSk9lKU4SG2zbSyA9YszgV7OL7zuc9akz4+Q8zwZL4i/1fm5SIlH+zX9nhXx0 dbqlcxkSUHkaYKeDr/YlmZkSQtATv609BpE0J60YTdg/Nu7Kp5+N3PrjYnYODHpa zfDlAEq3DjhJjKIz4fPu2jsLkh//CLY1EmPtUBavSm2xoGB3htQ+Ma6M9GUIndYj N7FLxdrkxLYUiBzNLp8u6Xtr4Q== -----END CERTIFICATE-----Generated at Sat Aug 9 03:01:22 2025 by rpki-client