$ rpki-client -vvf rsync.nex3.com.br/repo/AS265356/0/DC23EF8A45CF1AFC023B231103F26334E3B2BF14.mft File: DC23EF8A45CF1AFC023B231103F26334E3B2BF14.mft (raw, json) Hash identifier: zQ/Fm3XYBAPqb8FBe6G13oIqhhr9xkyE+LK5oCtcsng= Subject key identifier: 99:4E:F0:49:35:4A:34:1B:4D:DA:65:09:C0:B3:D1:58:C0:CE:85:1E Authority key identifier: DC:23:EF:8A:45:CF:1A:FC:02:3B:23:11:03:F2:63:34:E3:B2:BF:14 Certificate issuer: /CN=DC23EF8A45CF1AFC023B231103F26334E3B2BF14 Certificate serial: 33E885DFA58D9D24D08F618C95E90C3449A28C8F Authority info access: rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/DC23EF8A45CF1AFC023B231103F26334E3B2BF14.cer Subject info access: rsync://rsync.nex3.com.br/repo/AS265356/0/DC23EF8A45CF1AFC023B231103F26334E3B2BF14.mft Manifest number: AB Signing time: Tue 28 Jul 2026 12:01:06 +0000 Manifest this update: Tue 28 Jul 2026 11:56:06 +0000 Manifest next update: Wed 29 Jul 2026 14:09:06 +0000 Files and hashes: 1: AS265356.asa (hash: PEluQ9DNbSDuGp3tNpdPiWueIrOcj/N9REtN4v4WcwE=) 2: 3136382e3138312e3132342e302f32322d3234203d3e20323635333536.roa (hash: foySwCczZ3tppURnDNarKjfZ9fxDpyhRx+gM0dytcFM=) 3: 323830343a326561303a3a2f33322d3333203d3e20323635333536.roa (hash: /GdXx3fTDU97IsIU1kAg03PFW0XhC7Io6+X3cmTGq1g=) 4: DC23EF8A45CF1AFC023B231103F26334E3B2BF14.crl (hash: PGEV05BOiKVUcWaQD2b9ndrWBJW7HwZixOD/c8r899I=) Validation: OK Signature path: rsync://rsync.nex3.com.br/repo/AS265356/0/DC23EF8A45CF1AFC023B231103F26334E3B2BF14.crl rsync://rsync.nex3.com.br/repo/AS265356/0/DC23EF8A45CF1AFC023B231103F26334E3B2BF14.mft rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/DC23EF8A45CF1AFC023B231103F26334E3B2BF14.cer rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/9805E398075C7266BCC46FC22F440B4946C6F361.crl rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/9805E398075C7266BCC46FC22F440B4946C6F361.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9805E398075C7266BCC46FC22F440B4946C6F361.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Jul 2026 04:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e8:85:df:a5:8d:9d:24:d0:8f:61:8c:95:e9:0c:34:49:a2:8c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC23EF8A45CF1AFC023B231103F26334E3B2BF14 Validity Not Before: Jul 28 11:56:06 2026 GMT Not After : Jul 29 14:09:06 2026 GMT Subject: CN=994EF049354A341B4DDA6509C0B3D158C0CE851E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:7b:63:5c:e0:f6:e3:7c:83:bf:d0:8a:b2: 35:b1:36:5c:e6:d0:c8:ad:8c:51:49:d1:23:44:fa: 31:a0:bf:d6:36:7f:06:92:1c:55:da:7f:ed:7e:4c: 66:6b:8b:ef:91:69:b0:d3:94:a3:71:ab:d7:a7:4d: 14:f9:c5:6d:cf:b9:b5:04:39:79:2f:38:98:01:49: 60:f1:fd:b8:d9:07:f9:77:75:9d:01:13:72:bb:d3: a3:15:d1:dc:63:c1:6f:d1:da:5d:be:3e:55:c9:9b: dc:da:ac:1f:47:f3:88:06:85:ea:f9:23:40:a1:6e: b2:86:8e:f4:be:46:06:88:05:70:21:cb:e5:e3:eb: 81:69:3b:f2:6b:86:8f:2e:81:a7:ac:da:bf:0e:ac: b9:14:9b:48:27:bf:2f:67:75:e1:a4:2d:25:de:5e: 33:84:61:d9:aa:87:1b:22:04:f8:14:d0:8f:32:f9: 75:f7:5d:32:61:67:a5:16:95:67:ca:d8:68:21:22: f5:0c:bc:aa:50:f2:ae:be:22:9f:7f:78:e1:c7:c9: f3:ac:ae:a4:42:54:98:49:70:c4:77:d0:15:24:3e: 0b:28:8f:46:ec:e2:e2:f4:55:53:06:e9:10:79:97: b9:95:c8:24:2b:f9:c8:fb:3a:79:51:b8:8a:fc:7b: 4b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4E:F0:49:35:4A:34:1B:4D:DA:65:09:C0:B3:D1:58:C0:CE:85:1E X509v3 Authority Key Identifier: keyid:DC:23:EF:8A:45:CF:1A:FC:02:3B:23:11:03:F2:63:34:E3:B2:BF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.nex3.com.br/repo/AS265356/0/DC23EF8A45CF1AFC023B231103F26334E3B2BF14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/DC23EF8A45CF1AFC023B231103F26334E3B2BF14.cer Subject Information Access: Signed Object - URI:rsync://rsync.nex3.com.br/repo/AS265356/0/DC23EF8A45CF1AFC023B231103F26334E3B2BF14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:af:a1:49:8b:09:0c:b0:88:a3:f2:7d:39:4d:34:23:f3:1c: 28:68:e9:58:b6:f9:dc:d3:3a:51:2c:01:98:fe:9a:b6:d0:eb: 2c:7d:24:f0:77:84:e5:de:1d:bc:29:52:2c:6d:d3:50:e6:3c: 2d:49:25:b2:1b:0d:e8:d1:37:db:f4:46:69:03:b4:58:a4:da: 72:15:d8:ad:b4:c2:b7:b7:a0:c4:82:b9:8c:95:b5:d8:6b:73: 9f:e4:37:4a:38:ce:d8:cd:18:ca:92:6d:ab:f5:22:f7:7c:e1: 40:c7:ce:98:66:6e:47:07:d0:cb:3d:52:de:42:bc:89:d7:92: 67:80:a6:10:fe:39:86:e2:9d:a6:6c:f0:36:66:b0:35:d5:36: dd:57:01:f7:e9:51:db:f1:00:c0:cb:ef:89:df:00:f2:7f:bc: 42:4a:d4:34:f1:bb:6f:3f:37:4d:0b:ff:c6:66:82:b3:60:4b: 99:b4:16:51:e8:1d:67:6a:9f:f5:eb:4b:6a:ff:12:5d:c0:0e: 00:c1:f5:00:89:37:35:d6:f4:59:88:44:6b:be:41:f3:72:d4: b9:7d:8e:6b:50:96:c4:a2:d4:f8:a8:42:08:14:7c:8c:e2:88: f9:96:59:13:e4:d3:54:e1:28:80:0b:3c:df:1a:eb:b9:f4:e3: 2a:5c:c4:e6 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgIUM+iF36WNnSTQj2GMlekMNEmijI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMyM0VGOEE0NUNGMUFGQzAyM0IyMzExMDNGMjYzMzRF M0IyQkYxNDAeFw0yNjA3MjgxMTU2MDZaFw0yNjA3MjkxNDA5MDZaMDMxMTAvBgNV BAMTKDk5NEVGMDQ5MzU0QTM0MUI0RERBNjUwOUMwQjNEMTU4QzBDRTg1MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNmntjXOD243yDv9CKsjWxNlzm 0MitjFFJ0SNE+jGgv9Y2fwaSHFXaf+1+TGZri++RabDTlKNxq9enTRT5xW3PubUE OXkvOJgBSWDx/bjZB/l3dZ0BE3K706MV0dxjwW/R2l2+PlXJm9zarB9H84gGher5 I0ChbrKGjvS+RgaIBXAhy+Xj64FpO/Jrho8ugaes2r8OrLkUm0gnvy9ndeGkLSXe XjOEYdmqhxsiBPgU0I8y+XX3XTJhZ6UWlWfK2GghIvUMvKpQ8q6+Ip9/eOHHyfOs rqRCVJhJcMR30BUkPgsoj0bs4uL0VVMG6RB5l7mVyCQr+cj7OnlRuIr8e0t9AgMB AAGjggIlMIICITAdBgNVHQ4EFgQUmU7wSTVKNBtN2mUJwLPRWMDOhR4wHwYDVR0j BBgwFoAU3CPvikXPGvwCOyMRA/JjNOOyvxQwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnN5bmMubmV4My5jb20uYnIvcmVwby9BUzI2 NTM1Ni8wL0RDMjNFRjhBNDVDRjFBRkMwMjNCMjMxMTAzRjI2MzM0RTNCMkJGMTQu Y3JsMIGdBggrBgEFBQcBAQSBkDCBjTCBigYIKwYBBQUHMAKGfnJzeW5jOi8vcnBr aS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNjJlSFo0ZlNLNnZOUUdkTndOWGliWk1S WEthVW1aVmZFbXQxRXJUdVRXRXovMS9EQzIzRUY4QTQ1Q0YxQUZDMDIzQjIzMTEw M0YyNjMzNEUzQjJCRjE0LmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnN5bmMubmV4My5jb20uYnIvcmVwby9BUzI2NTM1Ni8wL0RDMjNF RjhBNDVDRjFBRkMwMjNCMjMxMTAzRjI2MzM0RTNCMkJGMTQubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+ r6FJiwkMsIij8n05TTQj8xwoaOlYtvnc0zpRLAGY/pq20OssfSTwd4Tl3h28KVIs bdNQ5jwtSSWyGw3o0Tfb9EZpA7RYpNpyFdittMK3t6DEgrmMlbXYa3Of5DdKOM7Y zRjKkm2r9SL3fOFAx86YZm5HB9DLPVLeQryJ15JngKYQ/jmG4p2mbPA2ZrA11Tbd VwH36VHb8QDAy++J3wDyf7xCStQ08btvPzdNC//GZoKzYEuZtBZR6B1nap/160tq /xJdwA4AwfUAiTc11vRZiERrvkHzctS5fY5rUJbEotT4qEIIFHyM4oj5llkT5NNU 4SiACzzfGuu59OMqXMTm -----END CERTIFICATE-----Generated at Tue Jul 28 15:49:30 2026 by rpki-client