$ rpki-client -vvf rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft File: D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft (raw, json) Hash identifier: XwAzTRi3Za1bqwJDuvV1/liW2cl/wbEMJsgvodCsylY= Subject key identifier: 23:D5:68:9C:47:DF:78:73:BD:8D:D1:60:6A:8A:23:BB:76:0B:82:CA Authority key identifier: D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC Certificate issuer: /CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC Certificate serial: 02A4DEF88818FE198D783D68666A34D9554EBAE8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft Manifest number: 02A1 Signing time: Wed 20 Aug 2025 05:59:56 +0000 Manifest this update: Wed 20 Aug 2025 05:54:56 +0000 Manifest next update: Thu 21 Aug 2025 07:29:56 +0000 Files and hashes: 1: D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl (hash: 9jjmhzDyHw2A2OXQPFxuuQ/QUaMWKxqlASr9iBrhiIQ=) 2: 3138372e36332e3134382e302f32322d3234203d3e20323731343535.roa (hash: IhDSHYohc0+Dr9apFyNFCQVRejVX/yjwQA2nWachXec=) 3: 323830343a376263633a3a2f33322d3438203d3e20323731343535.roa (hash: XOwtVM5LyoozAIAy6kZOX07UdARTT+Ta3OmCSyAiYcM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 07:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a4:de:f8:88:18:fe:19:8d:78:3d:68:66:6a:34:d9:55:4e:ba:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC Validity Not Before: Aug 20 05:54:56 2025 GMT Not After : Aug 21 07:29:56 2025 GMT Subject: CN=23D5689C47DF7873BD8DD1606A8A23BB760B82CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:90:0d:53:b3:06:e0:09:df:37:7f:ef:83: 7b:75:9b:b4:05:17:9a:94:c8:55:2c:27:ee:7b:cc: 9c:15:e4:f0:50:7c:6b:7e:d5:65:de:a7:25:4c:9c: 99:c1:2d:fe:f2:f2:32:2c:09:92:58:c6:bd:d0:b1: 06:6b:ac:a4:18:4b:7e:5f:fa:af:4b:19:eb:35:1c: c7:fa:f2:25:06:cd:a1:60:cd:51:00:6e:ad:e6:9e: 5b:a9:5c:aa:2c:2e:99:b9:db:59:44:e8:db:2a:69: 30:4c:0d:e1:cf:4a:90:01:dd:f6:73:b7:31:50:58: 3f:e5:94:6e:ef:bc:18:e8:01:3f:02:4f:eb:9f:01: a6:4d:fd:b8:3f:e5:df:a2:1f:99:85:b4:4b:9e:1b: 8b:90:26:49:f2:52:b2:28:6e:e1:4b:9f:d8:4e:b3: 1b:b9:61:87:b6:ad:17:c7:de:6b:3a:bd:b2:fa:26: 21:d8:5d:84:5f:2e:f2:d1:61:cd:67:33:86:f5:a9: 76:67:ec:90:a7:7c:ee:03:ae:7d:93:82:3f:3f:e0: 81:1a:3d:f7:88:0a:40:11:e2:43:07:a8:5c:db:04: 28:7c:55:00:b3:8a:8e:bf:8c:0c:92:9d:6e:9e:97: 58:75:ab:9c:af:8b:7e:a9:ad:40:15:fa:d4:e8:59: 26:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D5:68:9C:47:DF:78:73:BD:8D:D1:60:6A:8A:23:BB:76:0B:82:CA X509v3 Authority Key Identifier: keyid:D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:16:f0:cc:74:a2:06:77:58:1a:4c:68:ca:29:9f:84:1c:88: 36:db:6b:c7:35:49:73:a5:91:1e:1e:7b:ba:30:61:88:87:33: 18:82:c4:62:d9:33:b9:a9:b7:3d:8c:1a:48:17:ab:86:c5:52: 5a:10:e5:fd:59:66:04:3c:0b:e3:23:a3:d5:a0:aa:c0:ac:3d: 2d:87:7f:b7:29:0f:c5:f5:81:85:6a:79:36:b6:e9:51:2e:79: b6:30:6b:eb:16:7b:52:0c:cc:60:af:6c:94:50:2f:c4:ea:e2: d3:d2:b7:1c:76:c3:b9:a0:11:85:23:78:d8:09:e7:c3:d9:e0: 9f:3a:18:ea:d1:fc:77:ee:81:20:1f:89:d6:59:a3:93:31:a4: 60:37:36:36:b4:ff:1f:57:74:df:de:04:b9:fd:56:ac:85:51: 38:5b:30:cd:38:bd:84:69:27:d1:0e:df:f8:e8:63:06:fe:6f: 21:8d:7e:c5:de:34:0b:fd:c0:f0:2b:df:c6:25:97:14:3b:e0: d1:36:c3:eb:c8:8a:5c:55:ba:91:89:ea:db:65:7e:46:6e:08: 44:65:2c:51:67:2a:a3:c2:21:51:31:19:6a:11:04:48:3b:18: 8b:b8:12:b3:d7:6e:7d:f1:71:81:73:dc:fb:69:e8:d4:3c:ba: da:15:2f:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAqTe+IgY/hmNeD1oZmo02VVOuugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNGNzEwODcwMEY2OUFCM0M0NjBFMDE3MEU5OUU3MDUx RUNCMzFFQzAeFw0yNTA4MjAwNTU0NTZaFw0yNTA4MjEwNzI5NTZaMDMxMTAvBgNV BAMTKDIzRDU2ODlDNDdERjc4NzNCRDhERDE2MDZBOEEyM0JCNzYwQjgyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvJANU7MG4AnfN3/vg3t1m7QF F5qUyFUsJ+57zJwV5PBQfGt+1WXepyVMnJnBLf7y8jIsCZJYxr3QsQZrrKQYS35f +q9LGes1HMf68iUGzaFgzVEAbq3mnlupXKosLpm521lE6NsqaTBMDeHPSpAB3fZz tzFQWD/llG7vvBjoAT8CT+ufAaZN/bg/5d+iH5mFtEueG4uQJknyUrIobuFLn9hO sxu5YYe2rRfH3ms6vbL6JiHYXYRfLvLRYc1nM4b1qXZn7JCnfO4Drn2Tgj8/4IEa PfeICkAR4kMHqFzbBCh8VQCzio6/jAySnW6el1h1q5yvi36prUAV+tToWSZ5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUI9VonEffeHO9jdFgaooju3YLgsowHwYDVR0j BBgwFoAU0/cQhwD2mrPEYOAXDpnnBR7LMewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHpodzNSWGZkWjVUdnk2cldmU3JRUzdFZFVLc2N6QktrNnhEWVg3ZXVL MzMvMS9EM0Y3MTA4NzAwRjY5QUIzQzQ2MEUwMTcwRTk5RTcwNTFFQ0IzMUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzRjcxMDg3MDBGNjlBQjND NDYwRTAxNzBFOTlFNzA1MUVDQjMxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHpodzNSWGZkWjVUdnk2cldmU3JRUzdFZFVLc2N6QktrNnhEWVg3ZXVLMzMvMS9E M0Y3MTA4NzAwRjY5QUIzQzQ2MEUwMTcwRTk5RTcwNTFFQ0IzMUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxRbwzHSiBndYGkxoyimfhByINttrxzVJc6WRHh57ujBhiIczGILEYtkzuam3 PYwaSBerhsVSWhDl/VlmBDwL4yOj1aCqwKw9LYd/tykPxfWBhWp5NrbpUS55tjBr 6xZ7UgzMYK9slFAvxOri09K3HHbDuaARhSN42Annw9ngnzoY6tH8d+6BIB+J1lmj kzGkYDc2NrT/H1d0394Euf1WrIVROFswzTi9hGkn0Q7f+OhjBv5vIY1+xd40C/3A 8CvfxiWXFDvg0TbD68iKXFW6kYnq22V+Rm4IRGUsUWcqo8IhUTEZahEESDsYi7gS s9duffFxgXPc+2no1Dy62hUvVQ== -----END CERTIFICATE-----Generated at Wed Aug 20 20:17:43 2025 by rpki-client