$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft File: DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft (raw, json) Hash identifier: 9NfMCBhn4/rScX5DxXWDsPsVuZrLF0qkaum2N/f7Mxg= Subject key identifier: 2D:F0:77:6C:2F:55:BC:E3:30:15:E5:1D:9F:56:45:67:B6:5F:DC:2B Authority key identifier: DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE Certificate issuer: /CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE Certificate serial: 5EBFE52BEEFFF533FAC6BE8A232F0C9EF81EB7FB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer Subject info access: rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft Manifest number: B3 Signing time: Wed 20 Aug 2025 08:56:20 +0000 Manifest this update: Wed 20 Aug 2025 08:51:20 +0000 Manifest next update: Thu 21 Aug 2025 10:45:20 +0000 Files and hashes: 1: DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl (hash: QKoaBbUGn8vGvgeYwJWB5es6tXfC3ujbhWyCID3cMo4=) 2: 3137372e3132352e37322e302f32342d3234203d3e203532373636.roa (hash: 8l8sj6Lhn0LhQN9ND1pd5nXSQ+34FWL+b1PnT0OphM8=) 3: 3137372e3132352e37372e302f32342d3234203d3e203532373636.roa (hash: hMV0PmP1bIkVe5jy7BgKW2ObEfuIM/VAOkdwThtzkN0=) 4: 3137372e3132352e37332e302f32342d3234203d3e203532373636.roa (hash: yHmJCMANwgyJZi7RpIORKezVofQsOnGYoQYEeBdFCP0=) 5: 3137372e3132352e37322e302f32332d3233203d3e203532373636.roa (hash: RUgWQbSbfKqm4Hfu18+LGJPAqutuS6ikmtMKvWzJroY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 10:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:bf:e5:2b:ee:ff:f5:33:fa:c6:be:8a:23:2f:0c:9e:f8:1e:b7:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE Validity Not Before: Aug 20 08:51:20 2025 GMT Not After : Aug 21 10:45:20 2025 GMT Subject: CN=2DF0776C2F55BCE33015E51D9F564567B65FDC2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:90:77:ac:46:7a:09:f6:4a:94:48:95:68:f5: 29:c6:14:a7:31:ad:24:49:de:9d:c1:3c:ad:68:f4: a7:6d:47:7d:33:5d:53:57:de:eb:c3:a1:51:ec:fa: 45:f5:6e:ed:fb:de:bb:4b:96:68:9a:02:e8:15:7b: 84:1f:45:b8:c2:69:a1:94:6e:a7:d9:62:95:b2:c3: cd:95:0d:af:6a:e0:bb:a7:3b:b3:49:fc:e8:cc:17: ba:20:e3:16:54:82:82:c0:0d:5b:6e:da:c0:b3:91: b7:4e:30:d5:ea:02:fa:b3:21:96:bd:19:3f:5a:5e: b7:c5:2d:91:5b:a0:4f:13:b2:3d:a6:d3:20:d2:f8: 90:3d:0a:cb:e2:aa:8c:32:b5:ef:69:71:ac:5d:49: 77:e3:0c:c3:94:3a:e1:a9:8b:9b:3c:2c:55:36:2c: cf:1e:1f:ee:09:fe:da:11:32:cd:5b:bd:fb:32:29: 20:49:e1:10:3c:b3:f7:65:6c:98:30:f4:48:0b:c2: 8f:a5:ed:ab:e4:e9:cf:25:b2:cf:fa:c8:83:15:09: 39:2f:2f:e9:dc:96:74:f5:23:61:e4:7b:20:b7:4f: f9:e7:ce:da:4c:1b:67:f8:d6:c1:10:f1:31:da:6d: a4:48:31:ac:c1:8e:20:8a:6c:d8:8a:7e:60:19:d4: 64:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F0:77:6C:2F:55:BC:E3:30:15:E5:1D:9F:56:45:67:B6:5F:DC:2B X509v3 Authority Key Identifier: keyid:DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:7a:9a:02:7f:88:e3:af:b2:eb:b9:df:ae:55:4f:37:08:7b: 29:6c:94:b4:2d:35:e1:7b:16:60:12:7a:05:db:8c:12:6c:4e: a9:93:af:88:00:71:c1:29:43:22:e0:ac:e4:3f:18:37:f6:dc: a9:9b:74:ca:8a:c5:0c:27:03:66:f9:07:0b:32:c4:d1:fd:56: d6:6f:bb:d8:aa:80:c8:a0:9a:3f:f3:68:81:45:0a:fd:45:a1: 8e:f5:66:92:f2:a8:20:14:83:e9:6b:c4:ae:58:6d:46:51:ae: ba:fc:7c:18:cd:b0:bb:fb:47:a7:c1:89:64:83:47:d5:d5:87: 7e:00:81:51:8b:db:20:e4:6d:8a:2b:65:9e:58:bd:de:98:3a: b2:c9:b9:de:f4:45:d7:91:d1:ae:57:92:c5:c2:20:21:3d:41: d1:54:e8:e1:a1:74:68:9e:11:79:51:2f:74:e2:a9:03:8a:c2: 91:4d:a4:21:22:02:17:14:d3:35:a9:9e:0c:5e:32:f6:27:ba: 43:61:92:73:bd:05:0a:dd:48:13:f5:ac:d8:cf:f4:50:a9:15: df:4d:00:fc:9c:dd:91:b3:79:42:2b:c7:4b:88:1b:cb:30:f8: c3:c6:10:82:07:75:a9:fe:ff:9c:aa:06:66:29:35:bd:a5:2d: ea:87:05:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXr/lK+7/9TP6xr6KIy8Mnvget/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJBOUJCNkZENTY3QTUwODNCN0JBMEJCMDdDRDMxMjEw RjNDOEJFRTAeFw0yNTA4MjAwODUxMjBaFw0yNTA4MjExMDQ1MjBaMDMxMTAvBgNV BAMTKDJERjA3NzZDMkY1NUJDRTMzMDE1RTUxRDlGNTY0NTY3QjY1RkRDMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEkHesRnoJ9kqUSJVo9SnGFKcx rSRJ3p3BPK1o9KdtR30zXVNX3uvDoVHs+kX1bu373rtLlmiaAugVe4QfRbjCaaGU bqfZYpWyw82VDa9q4LunO7NJ/OjMF7og4xZUgoLADVtu2sCzkbdOMNXqAvqzIZa9 GT9aXrfFLZFboE8Tsj2m0yDS+JA9Csviqowyte9pcaxdSXfjDMOUOuGpi5s8LFU2 LM8eH+4J/toRMs1bvfsyKSBJ4RA8s/dlbJgw9EgLwo+l7avk6c8lss/6yIMVCTkv L+nclnT1I2HkeyC3T/nnztpMG2f41sEQ8THabaRIMazBjiCKbNiKfmAZ1GShAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULfB3bC9VvOMwFeUdn1ZFZ7Zf3CswHwYDVR0j BBgwFoAU26m7b9VnpQg7e6C7B80xIQ88i+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0NQUFp1UGppdVFCWWt2M0JhS1ZOcXFLNXQyN3ppcXA5ZmhCV1NTZUVv ZlYvMC9EQkE5QkI2RkQ1NjdBNTA4M0I3QkEwQkIwN0NEMzEyMTBGM0M4QkVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQTlCQjZGRDU2N0E1MDgz QjdCQTBCQjA3Q0QzMTIxMEYzQzhCRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0NQUFp1UGppdVFCWWt2M0JhS1ZOcXFLNXQyN3ppcXA5ZmhCV1NTZUVvZlYvMC9E QkE5QkI2RkQ1NjdBNTA4M0I3QkEwQkIwN0NEMzEyMTBGM0M4QkVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE3qaAn+I46+y67nfrlVPNwh7KWyUtC014XsWYBJ6BduMEmxOqZOviABxwSlD IuCs5D8YN/bcqZt0yorFDCcDZvkHCzLE0f1W1m+72KqAyKCaP/NogUUK/UWhjvVm kvKoIBSD6WvErlhtRlGuuvx8GM2wu/tHp8GJZINH1dWHfgCBUYvbIORtiitlnli9 3pg6ssm53vRF15HRrleSxcIgIT1B0VTo4aF0aJ4ReVEvdOKpA4rCkU2kISICFxTT NameDF4y9ie6Q2GSc70FCt1IE/Ws2M/0UKkV300A/JzdkbN5QivHS4gbyzD4w8YQ ggd1qf7/nKoGZik1vaUt6ocF+w== -----END CERTIFICATE-----Generated at Wed Aug 20 19:31:11 2025 by rpki-client