$ rpki-client -vvf rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft File: DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft (raw, json) Hash identifier: ff0W07UpgEGm1WATvrd/v1j6fy8ng03vtZ5ZnxXAq/U= Subject key identifier: CF:15:5A:05:81:00:7F:2B:01:1B:8B:11:79:44:F1:83:C2:83:3E:B3 Authority key identifier: DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA Certificate issuer: /CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA Certificate serial: 6F6E95089862F77CF5A177DF603AFDFB0DFDD209 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer Subject info access: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft Manifest number: 02A3 Signing time: Sat 23 Aug 2025 01:20:00 +0000 Manifest this update: Sat 23 Aug 2025 01:15:00 +0000 Manifest next update: Sun 24 Aug 2025 03:00:00 +0000 Files and hashes: 1: DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl (hash: 8jv/AKJskCUj7arDF4oDlKAwNTCStY5FSyvilRTEoyo=) 2: 34352e3138372e3131382e302f32332d3233203d3e20323639343731.roa (hash: fMc8gzldryFUQ8IHHb0p6EJgGXlPn15thkQQ4FZHnmU=) 3: 34352e3138372e3131392e302f32342d3234203d3e20323639343731.roa (hash: 7YvaZPSSnSfIpvWLSuz5hoPkexAX+X5gsJzDtlBMvas=) 4: 323830343a363532343a3a2f33322d3332203d3e20323639343731.roa (hash: enBvjYbf1meZakj7o/v5LLd98daGE67Ofpb1+DdLfkU=) 5: 34352e3138372e3131382e302f32342d3234203d3e20323639343731.roa (hash: /UkhwqWZdTdeal6ugVixgVRqE4NRcTozr4bSrI9VJMk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:6e:95:08:98:62:f7:7c:f5:a1:77:df:60:3a:fd:fb:0d:fd:d2:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3BA4478FDB8E4A375324C044D80C565504F5FA Validity Not Before: Aug 23 01:15:00 2025 GMT Not After : Aug 24 03:00:00 2025 GMT Subject: CN=CF155A0581007F2B011B8B117944F183C2833EB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:25:f4:4e:2a:8e:0a:1f:ea:a7:55:72:03:dc: 3e:a7:ad:0a:aa:b5:76:a2:39:ef:c1:94:ac:d9:37: 55:9d:e5:19:0c:df:ac:4e:dd:92:41:d9:1c:6d:23: ee:65:5d:3e:09:43:4c:e2:1a:b6:45:3c:bc:b3:a5: 22:cf:86:33:f6:f7:4f:62:07:d1:2c:98:43:3d:4c: 03:01:0c:7c:98:25:da:61:14:4f:d8:c9:cd:fb:ba: cb:ce:64:8c:c3:5f:8c:9a:56:82:59:3a:82:3e:34: 2c:de:80:2b:9b:2b:99:d0:0e:d1:ee:b8:05:00:25: 3d:4d:63:9c:47:97:c0:56:dc:ad:42:0a:12:25:4e: 45:1f:ef:51:2d:e6:a3:d0:c7:ce:8c:96:14:23:da: 23:7f:fb:a4:c7:e0:99:f3:9b:a2:2f:c1:b8:72:92: a4:0f:a5:51:1c:8e:72:7e:70:4f:9e:2c:ca:e7:16: 4f:4f:f0:ef:c1:57:5a:da:57:88:0b:78:75:1d:99: 15:70:4d:3f:fe:20:7e:0c:40:48:63:3a:f2:71:82: ad:39:d0:95:0d:3b:9d:34:31:36:87:61:b0:08:6e: 88:fb:1d:94:98:09:23:0f:b0:b7:9b:ad:73:d1:99: 6f:e3:fe:1a:ff:30:04:58:49:70:e0:92:d5:1b:7a: 99:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:15:5A:05:81:00:7F:2B:01:1B:8B:11:79:44:F1:83:C2:83:3E:B3 X509v3 Authority Key Identifier: keyid:DE:3B:A4:47:8F:DB:8E:4A:37:53:24:C0:44:D8:0C:56:55:04:F5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/1/DE3BA4478FDB8E4A375324C044D80C565504F5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:5e:d6:fa:a1:54:92:91:e0:da:86:90:87:3e:46:b2:f8:60: 96:87:02:55:f5:c7:4d:8b:67:2a:35:11:ae:79:69:e7:a7:e0: d2:9a:88:4f:a6:29:db:51:92:21:9c:a8:9d:ce:3b:8b:7f:6e: a2:91:08:b9:1c:21:a2:66:d6:0b:16:ca:f2:f2:e1:3e:f7:a8: f5:fe:50:2b:ff:6f:3b:f4:e5:e6:5a:5b:17:05:bd:2f:7b:1b: 9f:4c:8a:09:d6:66:7f:b9:cf:63:cd:28:55:73:1e:2b:f6:c0: e8:44:a2:b3:0c:a9:5e:72:6e:a7:4a:0a:8e:fc:ff:39:a6:d5: be:88:b0:cc:37:15:cf:5a:7f:98:01:93:ac:bc:58:8f:0c:4f: 47:33:23:de:07:94:28:11:b0:42:0d:e4:50:5f:17:ce:e7:eb: 48:93:5a:f7:54:6f:1b:0e:67:b0:60:c1:d8:dc:30:ea:d9:13: 00:56:c2:a3:0b:61:50:7d:c4:e3:d9:7c:68:2e:74:89:cf:89: b3:a9:f0:d0:0e:48:26:4e:98:9f:79:ee:57:e3:a4:9b:1e:c8: 74:95:13:86:e3:68:08:a9:33:44:2f:d3:4e:55:20:97:5d:85: 50:52:79:6e:ff:23:6b:dd:c3:93:fd:82:de:d5:4e:59:9a:fe: 8c:ec:0f:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUb26VCJhi93z1oXffYDr9+w390gkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzQkE0NDc4RkRCOEU0QTM3NTMyNEMwNDREODBDNTY1 NTA0RjVGQTAeFw0yNTA4MjMwMTE1MDBaFw0yNTA4MjQwMzAwMDBaMDMxMTAvBgNV BAMTKENGMTU1QTA1ODEwMDdGMkIwMTFCOEIxMTc5NDRGMTgzQzI4MzNFQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjJfROKo4KH+qnVXID3D6nrQqq tXaiOe/BlKzZN1Wd5RkM36xO3ZJB2RxtI+5lXT4JQ0ziGrZFPLyzpSLPhjP2909i B9EsmEM9TAMBDHyYJdphFE/Yyc37usvOZIzDX4yaVoJZOoI+NCzegCubK5nQDtHu uAUAJT1NY5xHl8BW3K1CChIlTkUf71Et5qPQx86MlhQj2iN/+6TH4Jnzm6Ivwbhy kqQPpVEcjnJ+cE+eLMrnFk9P8O/BV1raV4gLeHUdmRVwTT/+IH4MQEhjOvJxgq05 0JUNO500MTaHYbAIboj7HZSYCSMPsLebrXPRmW/j/hr/MARYSXDgktUbepltAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzxVaBYEAfysBG4sReUTxg8KDPrMwHwYDVR0j BBgwFoAU3jukR4/bjko3UyTARNgMVlUE9fowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2hCWmRvUDI4eEZyYVVGcVBDVVR2NVRMV0ZDQUFReWE5Y3hQRktwRTI5 dzgvMS9ERTNCQTQ0NzhGREI4RTRBMzc1MzI0QzA0NEQ4MEM1NjU1MDRGNUZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFM0JBNDQ3OEZEQjhFNEEz NzUzMjRDMDQ0RDgwQzU2NTUwNEY1RkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2hCWmRvUDI4eEZyYVVGcVBDVVR2NVRMV0ZDQUFReWE5Y3hQRktwRTI5dzgvMS9E RTNCQTQ0NzhGREI4RTRBMzc1MzI0QzA0NEQ4MEM1NjU1MDRGNUZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv17W+qFUkpHg2oaQhz5GsvhglocCVfXHTYtnKjURrnlp56fg0pqIT6Yp21GS IZyonc47i39uopEIuRwhombWCxbK8vLhPveo9f5QK/9vO/Tl5lpbFwW9L3sbn0yK CdZmf7nPY80oVXMeK/bA6ESiswypXnJup0oKjvz/OabVvoiwzDcVz1p/mAGTrLxY jwxPRzMj3geUKBGwQg3kUF8XzufrSJNa91RvGw5nsGDB2Nww6tkTAFbCowthUH3E 49l8aC50ic+Js6nw0A5IJk6Yn3nuV+Okmx7IdJUThuNoCKkzRC/TTlUgl12FUFJ5 bv8ja93Dk/2C3tVOWZr+jOwPBg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:56 2025 by rpki-client