$ rpki-client -vvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft File: DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft (raw, json) Hash identifier: d5+Ec3mH6Hq0FjHqoffiTounzPHAC5blBedym8fOXhc= Subject key identifier: EF:F8:67:32:EF:E8:BB:4E:A3:6B:07:64:8C:09:35:9B:FA:92:3D:2C Authority key identifier: DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA Certificate issuer: /CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA Certificate serial: 751F3E7986946FCF5735FE20E1B4D27B0B446E42 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer Subject info access: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft Manifest number: 02C7 Signing time: Fri 19 Sep 2025 05:10:00 +0000 Manifest this update: Fri 19 Sep 2025 05:05:00 +0000 Manifest next update: Sat 20 Sep 2025 08:40:00 +0000 Files and hashes: 1: 34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa (hash: /UkhwqWZdTdeal6ugVixgVRqE4NRcTozr4bSrI9VJMk=) 2: 34352e3138372e3131392e302f32342d3234203d3e20323639343731.roa (hash: 7YvaZPSSnSfIpvWLSuz5hoPkexAX+X5gsJzDtlBMvas=) 3: 323830343a363532343a3a2f33322d3332203d3e20323639343731.roa (hash: enBvjYbf1meZakj7o/v5LLd98daGE67Ofpb1+DdLfkU=) 4: 34352e3138372e3131382e302f32332d3233203d3e20323639343731.roa (hash: fMc8gzldryFUQ8IHHb0p6EJgGXlPn15thkQQ4FZHnmU=) 5: DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl (hash: wj5bxpnpbYoqpcTWGTVvaSVPPBYQlguQBfYkvVvHD/8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Sep 2025 05:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:1f:3e:79:86:94:6f:cf:57:35:fe:20:e1:b4:d2:7b:0b:44:6e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA Validity Not Before: Sep 19 05:05:00 2025 GMT Not After : Sep 20 08:40:00 2025 GMT Subject: CN=EFF86732EFE8BB4EA36B07648C09359BFA923D2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:01:cc:b0:ad:6b:de:c7:fc:8b:8b:aa:eb:a9: bd:16:07:ca:d2:87:4b:64:9e:3c:e1:de:8d:6b:bf: a8:83:d2:8a:e6:4d:e1:c2:0d:98:f7:47:88:57:c6: 75:54:8f:be:5a:48:3b:5f:9e:3b:5e:29:99:a0:88: 1a:33:d0:af:73:94:9c:33:58:b5:af:bc:06:39:f4: b4:bf:81:db:b6:04:ce:85:33:45:0f:6d:ba:34:e9: f1:4c:d4:b6:cf:b0:d2:e9:30:a1:d8:51:2a:00:d4: 6e:b0:35:54:0f:9f:f7:af:de:2e:3d:bc:0f:e7:37: 6d:22:86:dd:fa:59:87:03:b6:2d:26:50:1a:ce:bb: 9a:70:a8:de:a1:a2:6d:ec:a1:bd:18:4a:87:6c:64: 3b:31:41:22:30:65:2e:66:6e:22:69:15:ca:23:e8: b6:36:b6:18:3a:83:f9:4c:e1:b7:3a:36:82:b2:55: a0:0c:2b:57:f0:55:87:97:17:7e:61:09:60:46:d6: ae:01:10:89:e6:95:77:bd:1e:a4:71:48:52:e6:27: 27:f9:7d:ff:0b:f1:5f:66:f9:33:b7:65:8b:35:38: e9:b8:9e:1b:ea:d7:dd:25:39:7a:e5:2e:d6:e7:fd: 4d:68:d8:02:49:72:48:be:c6:5d:96:04:06:9c:0e: 50:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F8:67:32:EF:E8:BB:4E:A3:6B:07:64:8C:09:35:9B:FA:92:3D:2C X509v3 Authority Key Identifier: keyid:DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:32:4a:04:b2:72:e7:0c:65:c3:21:7a:cf:8b:68:50:da:94: fa:1c:52:78:38:10:18:e2:70:04:4e:db:bd:6c:27:7f:29:1a: 09:0c:88:80:dd:8d:8c:42:59:75:45:c8:af:98:f2:4f:c4:c7: 20:bf:30:aa:de:ff:67:4e:77:9b:c7:f7:de:4c:77:b1:28:00: 08:df:3f:b4:6d:51:c9:db:cc:4b:48:a3:3e:2d:22:31:9f:61: 01:a5:c6:36:1c:1f:6d:be:4a:42:93:9e:bc:f9:0e:64:f8:ae: 66:74:c7:6c:18:d8:0d:a0:8a:2e:b3:fb:1f:77:dd:f4:8b:1e: 6b:6c:2b:d5:43:fa:ab:8f:a5:61:08:ae:1a:15:8c:82:64:f1: ec:75:3f:4c:dd:b7:05:af:88:93:72:a7:4f:e9:e3:17:2c:6a: 13:08:90:40:6b:2b:01:65:98:40:40:e5:95:0e:4a:69:d3:fb: 27:3b:c6:ae:96:48:cb:62:d3:9b:17:81:66:66:55:dc:f3:d4: 07:8c:68:fd:5f:c1:0f:ab:47:c8:20:9c:03:76:26:81:e8:f4: d4:4a:00:12:c1:c4:71:4a:71:99:48:06:2e:d2:40:b1:14:71: 5d:c1:bd:ac:d6:7c:15:8e:56:ed:4a:40:9e:f5:03:bb:c9:6f: 46:5f:84:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdR8+eYaUb89XNf4g4bTSewtEbkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzQkE0NDc4RkRCOEU0QTM3NTMyNEMwNDREODBDNTY1 NTA0RjVGQTAeFw0yNTA5MTkwNTA1MDBaFw0yNTA5MjAwODQwMDBaMDMxMTAvBgNV BAMTKEVGRjg2NzMyRUZFOEJCNEVBMzZCMDc2NDhDMDkzNTlCRkE5MjNEMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUAcywrWvex/yLi6rrqb0WB8rS h0tknjzh3o1rv6iD0ormTeHCDZj3R4hXxnVUj75aSDtfnjteKZmgiBoz0K9zlJwz WLWvvAY59LS/gdu2BM6FM0UPbbo06fFM1LbPsNLpMKHYUSoA1G6wNVQPn/ev3i49 vA/nN20iht36WYcDti0mUBrOu5pwqN6hom3sob0YSodsZDsxQSIwZS5mbiJpFcoj 6LY2thg6g/lM4bc6NoKyVaAMK1fwVYeXF35hCWBG1q4BEInmlXe9HqRxSFLmJyf5 ff8L8V9m+TO3ZYs1OOm4nhvq190lOXrlLtbn/U1o2AJJcki+xl2WBAacDlD3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7/hnMu/ou06jawdkjAk1m/qSPSwwHwYDVR0j BBgwFoAU3jukR4/bjko3UyTARNgMVlUE9fowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2hCWmRvUDI4eEZyYVVGcVBDVVR2NVRMV0ZDQUFReWE5Y3hQRktwRTI5 dzgvMS9ERTNCQTQ0NzhGREI4RTRBMzc1MzI0QzA0NEQ4MEM1NjU1MDRGNUZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFM0JBNDQ3OEZEQjhFNEEz NzUzMjRDMDQ0RDgwQzU2NTUwNEY1RkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2hCWmRvUDI4eEZyYVVGcVBDVVR2NVRMV0ZDQUFReWE5Y3hQRktwRTI5dzgvMS9E RTNCQTQ0NzhGREI4RTRBMzc1MzI0QzA0NEQ4MEM1NjU1MDRGNUZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEzJKBLJy5wxlwyF6z4toUNqU+hxSeDgQGOJwBE7bvWwnfykaCQyIgN2NjEJZ dUXIr5jyT8THIL8wqt7/Z053m8f33kx3sSgACN8/tG1RydvMS0ijPi0iMZ9hAaXG Nhwfbb5KQpOevPkOZPiuZnTHbBjYDaCKLrP7H3fd9Isea2wr1UP6q4+lYQiuGhWM gmTx7HU/TN23Ba+Ik3KnT+njFyxqEwiQQGsrAWWYQEDllQ5KadP7JzvGrpZIy2LT mxeBZmZV3PPUB4xo/V/BD6tHyCCcA3Ymgej01EoAEsHEcUpxmUgGLtJAsRRxXcG9 rNZ8FY5W7UpAnvUDu8lvRl+EsQ== -----END CERTIFICATE-----Generated at Fri Sep 19 08:19:21 2025 by rpki-client