$ rpki-client -vvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft File: DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft (raw, json) Hash identifier: waDRAyghfMCnU9ncSBkWSJbGa+UfFvr/78yZQx0l0tc= Subject key identifier: FB:DD:7E:C7:1E:97:61:14:33:A8:44:E2:FB:56:07:CC:E8:7A:34:E5 Authority key identifier: DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA Certificate issuer: /CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA Certificate serial: 73B6D8267CE9EBE1E529C73D8C524350F8ADD9C2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer Subject info access: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft Manifest number: 0282 Signing time: Mon 28 Jul 2025 19:00:00 +0000 Manifest this update: Mon 28 Jul 2025 18:55:00 +0000 Manifest next update: Tue 29 Jul 2025 22:34:00 +0000 Files and hashes: 1: 323830343a363532343a3a2f33322d3332203d3e20323639343731.roa (hash: enBvjYbf1meZakj7o/v5LLd98daGE67Ofpb1+DdLfkU=) 2: 34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa (hash: /UkhwqWZdTdeal6ugVixgVRqE4NRcTozr4bSrI9VJMk=) 3: DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl (hash: sJYcNyiAotxfrXJ6Zoa9wtHKuM/CoNPuSmHjc0qZSK0=) 4: 34352e3138372e3131392e302f32342d3234203d3e20323639343731.roa (hash: 7YvaZPSSnSfIpvWLSuz5hoPkexAX+X5gsJzDtlBMvas=) 5: 34352e3138372e3131382e302f32332d3233203d3e20323639343731.roa (hash: fMc8gzldryFUQ8IHHb0p6EJgGXlPn15thkQQ4FZHnmU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Jul 2025 22:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b6:d8:26:7c:e9:eb:e1:e5:29:c7:3d:8c:52:43:50:f8:ad:d9:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA Validity Not Before: Jul 28 18:55:00 2025 GMT Not After : Jul 29 22:34:00 2025 GMT Subject: CN=FBDD7EC71E97611433A844E2FB5607CCE87A34E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8e:c2:6a:09:00:60:9a:09:cf:c3:23:fe:29: aa:d0:89:5f:75:09:93:fd:ea:64:75:0e:0b:e0:a4: a6:fa:ab:27:b1:2b:4d:13:76:6e:9e:7c:b4:ae:bb: 19:2a:68:ba:e4:39:e3:28:a7:e6:3d:26:87:80:ef: 53:77:01:49:56:dc:4c:25:f0:54:b7:df:3c:a6:75: f3:d4:18:10:18:5d:a8:08:66:4f:f3:73:d0:93:dd: 69:4d:a9:a5:eb:1e:c7:62:ea:7a:a5:27:f6:5f:76: 6a:da:1a:06:a2:39:24:ab:2f:3e:97:08:73:36:05: ea:0e:11:ef:0b:4b:21:fa:66:3c:1f:51:0d:6a:ce: a1:67:a3:a1:b9:08:e1:7d:41:f9:09:fa:ce:68:18: d9:87:09:d9:e3:02:18:ae:a2:33:eb:ab:78:b8:42: 15:62:ef:94:99:de:d5:3c:f9:ad:48:dc:c7:17:04: 21:2e:da:6a:37:9a:26:4c:92:97:6c:6d:7b:87:06: 7a:cb:6a:c3:16:f9:40:d9:d3:14:83:18:35:6e:10: 0d:a2:fa:2e:52:d3:9c:ac:55:ba:64:b3:d8:67:4e: c8:4c:35:37:31:1c:43:a8:0d:37:1c:87:e1:22:51: 0f:3c:40:90:d8:1a:8f:22:7a:3a:06:57:93:cc:e2: e4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DD:7E:C7:1E:97:61:14:33:A8:44:E2:FB:56:07:CC:E8:7A:34:E5 X509v3 Authority Key Identifier: keyid:DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:04:84:b4:6c:f5:41:d6:6a:c2:9b:79:7b:66:2e:b7:00:74: 92:b9:c0:c4:84:cb:36:5e:67:b7:b1:50:42:75:18:07:6a:4d: 4e:a2:43:da:8c:98:69:90:cc:aa:09:5e:b5:72:79:84:d7:e5: be:a7:f3:57:ad:14:d3:cf:67:64:67:0a:89:f1:c6:f1:8e:e5: 9a:0d:10:d9:6e:23:fe:29:ae:b8:80:2c:35:8b:4b:ed:71:69: 8d:9f:6e:a2:2e:db:d6:7e:8b:64:44:9f:46:01:9f:7a:19:37: f8:5d:f7:db:ce:d1:98:f8:74:30:01:40:77:64:2d:13:e0:d6: 9d:55:42:3f:bb:a6:89:b0:52:7f:74:77:fd:1e:d6:62:ed:2e: 2a:26:1c:1b:ca:90:e7:5d:76:30:70:bd:22:60:56:b6:66:f0: 7b:a5:26:96:5f:2f:1f:f7:7d:7b:18:cc:b4:26:84:d6:5f:95: 91:65:64:ec:53:31:94:32:4b:18:d6:aa:13:ec:ce:dd:49:35: 90:55:81:dc:94:d1:19:0b:8a:fe:d5:8e:9f:8f:c1:ff:fe:bc: 2c:4f:b0:4d:f3:b1:99:8a:13:16:99:9d:cc:bf:be:67:16:ac: cf:aa:fd:bd:c3:54:f3:40:7a:8c:fe:9e:3e:28:25:56:14:71: 44:49:97:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc7bYJnzp6+HlKcc9jFJDUPit2cIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzQkE0NDc4RkRCOEU0QTM3NTMyNEMwNDREODBDNTY1 NTA0RjVGQTAeFw0yNTA3MjgxODU1MDBaFw0yNTA3MjkyMjM0MDBaMDMxMTAvBgNV BAMTKEZCREQ3RUM3MUU5NzYxMTQzM0E4NDRFMkZCNTYwN0NDRTg3QTM0RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbjsJqCQBgmgnPwyP+KarQiV91 CZP96mR1DgvgpKb6qyexK00Tdm6efLSuuxkqaLrkOeMop+Y9JoeA71N3AUlW3Ewl 8FS33zymdfPUGBAYXagIZk/zc9CT3WlNqaXrHsdi6nqlJ/ZfdmraGgaiOSSrLz6X CHM2BeoOEe8LSyH6ZjwfUQ1qzqFno6G5COF9QfkJ+s5oGNmHCdnjAhiuojPrq3i4 QhVi75SZ3tU8+a1I3McXBCEu2mo3miZMkpdsbXuHBnrLasMW+UDZ0xSDGDVuEA2i +i5S05ysVbpks9hnTshMNTcxHEOoDTcch+EiUQ88QJDYGo8iejoGV5PM4uR/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+91+xx6XYRQzqETi+1YHzOh6NOUwHwYDVR0j BBgwFoAU3jukR4/bjko3UyTARNgMVlUE9fowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2hCWmRvUDI4eEZyYVVGcVBDVVR2NVRMV0ZDQUFReWE5Y3hQRktwRTI5 dzgvMS9ERTNCQTQ0NzhGREI4RTRBMzc1MzI0QzA0NEQ4MEM1NjU1MDRGNUZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFM0JBNDQ3OEZEQjhFNEEz NzUzMjRDMDQ0RDgwQzU2NTUwNEY1RkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2hCWmRvUDI4eEZyYVVGcVBDVVR2NVRMV0ZDQUFReWE5Y3hQRktwRTI5dzgvMS9E RTNCQTQ0NzhGREI4RTRBMzc1MzI0QzA0NEQ4MEM1NjU1MDRGNUZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAASEtGz1QdZqwpt5e2YutwB0krnAxITLNl5nt7FQQnUYB2pNTqJD2oyYaZDM qgletXJ5hNflvqfzV60U089nZGcKifHG8Y7lmg0Q2W4j/imuuIAsNYtL7XFpjZ9u oi7b1n6LZESfRgGfehk3+F33287RmPh0MAFAd2QtE+DWnVVCP7umibBSf3R3/R7W Yu0uKiYcG8qQ5112MHC9ImBWtmbwe6Umll8vH/d9exjMtCaE1l+VkWVk7FMxlDJL GNaqE+zO3Uk1kFWB3JTRGQuK/tWOn4/B//68LE+wTfOxmYoTFpmdzL++Zxasz6r9 vcNU80B6jP6ePiglVhRxREmXBQ== -----END CERTIFICATE-----Generated at Tue Jul 29 10:08:10 2025 by rpki-client