$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft File: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft (raw, json) Hash identifier: sWL6SnkLt8ksVBUXPJ0nJh63mwm6Wl/8Lbp6QfhBpOM= Subject key identifier: 9A:B4:DA:78:AB:4B:AB:49:52:C9:4A:86:85:35:5A:76:13:BA:F3:82 Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3 Certificate issuer: /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3 Certificate serial: 24938B23FBF69F3A1981E75C5C85490ECC336B54 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft Manifest number: CD Signing time: Fri 22 Aug 2025 20:57:43 +0000 Manifest this update: Fri 22 Aug 2025 20:52:43 +0000 Manifest next update: Sat 23 Aug 2025 23:57:43 +0000 Files and hashes: 1: 323830343a313238383a3a2f33322d313238203d3e20323633343832.roa (hash: hw5+VUcxGrU/e1Wu8H1AwOj1HjLcJDx9TuqRoRLdwuM=) 2: 3137302e38332e3231322e302f32322d3332203d3e20323633343832.roa (hash: VRf7c1AilMDa5MAED8IvmErGMZeCvn1CKEsBPS+2gS8=) 3: 3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa (hash: EO9/XY1ow03W8t7vGcP2Wy5W1TvFO2XAT86ZvjriNVc=) 4: 20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl (hash: 43Bes0/QPtK0h6XMDEzUUldQP6oSfbzt4IEY9TQu5eU=) 5: 3138392e38342e34342e302f32322d3332203d3e20323633343832.roa (hash: O4kifbSkitu5/3Knp4MgghSalt5nO6zrru13mWlDmc4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 23:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:93:8b:23:fb:f6:9f:3a:19:81:e7:5c:5c:85:49:0e:cc:33:6b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3 Validity Not Before: Aug 22 20:52:43 2025 GMT Not After : Aug 23 23:57:43 2025 GMT Subject: CN=9AB4DA78AB4BAB4952C94A8685355A7613BAF382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:01:db:ee:95:cc:d9:88:05:2e:a6:be:1f:c9: 37:48:50:10:ce:3f:57:dd:2c:03:53:2b:91:c7:42: e2:32:96:ec:ce:76:fb:b4:bc:44:8f:d2:0c:16:6a: 3e:18:24:34:bc:f1:8d:f1:92:a2:c3:f9:be:f4:b6: bd:1e:12:b1:88:c3:7b:f7:e3:97:77:c0:af:c3:7a: 44:7c:f2:02:20:15:24:2a:03:14:31:de:4d:a0:73: f6:a1:40:8d:4c:d2:56:ea:ac:6f:1e:e7:32:21:95: f3:d5:01:2b:a2:bf:6f:39:d5:25:89:53:2f:10:c0: 7a:11:f7:b3:ee:e7:e7:63:a2:76:0a:90:d8:f4:14: 34:ea:90:9e:bd:f3:7d:d7:cd:5c:0c:aa:6e:a7:fa: eb:d2:06:79:fc:65:3d:c8:87:02:3b:82:f5:f4:a8: dd:18:0d:e2:21:c0:4a:e5:8b:c4:ed:73:3d:0e:3b: 08:42:60:92:9f:78:f7:a1:bd:35:ff:f6:e1:63:cf: e3:f7:e6:f5:c4:4d:17:f5:ad:7c:af:26:ec:d3:b3: c8:07:c4:f5:51:f0:b9:48:8a:37:86:c3:eb:c7:de: bc:f6:55:13:82:c0:db:1a:aa:a4:be:af:b1:ce:83: b6:ef:90:b2:1b:c2:df:1c:4c:42:f8:b7:8d:a3:17: 77:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B4:DA:78:AB:4B:AB:49:52:C9:4A:86:85:35:5A:76:13:BA:F3:82 X509v3 Authority Key Identifier: keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:bb:7d:71:3a:8b:da:2f:34:b4:ee:01:ae:8a:a9:75:da:72: f0:24:29:cc:e2:05:56:ed:7d:e8:ea:c5:78:6d:ec:45:3f:cb: 3f:a3:f5:5c:c4:59:ab:a4:36:5a:bd:b2:ad:e5:6f:7c:4f:60: 44:97:42:60:41:e7:aa:de:b1:51:74:a7:9f:65:fe:a0:85:76: 58:cf:d9:38:e9:02:75:3e:ce:09:20:0b:ce:f0:6f:c5:25:75: 82:6e:2f:bb:cf:40:8e:65:17:b1:a0:95:43:06:ea:d2:aa:e1: 29:d4:b5:92:b0:17:f3:60:15:c4:1e:fe:e3:18:ab:60:de:80: 48:72:38:67:f3:f0:e0:28:4b:f9:dc:f9:b0:59:80:ec:1c:58: 58:56:3b:13:df:7c:45:51:6e:bd:32:0e:b5:ff:0f:da:c3:92: 8d:f7:ac:60:52:e2:85:79:6e:c6:17:c8:c1:1e:2f:41:de:c5: c4:7a:6c:00:eb:2e:73:7c:87:3f:ab:72:2f:c4:64:50:d4:51: ef:32:71:69:13:68:03:9b:57:8e:2b:3b:b9:63:76:0d:7d:55: 01:93:41:57:3e:ba:ea:95:47:65:5a:3d:6d:97:05:c0:3e:ef: 43:25:a4:02:a1:4f:6b:d9:cb:60:cf:f3:9a:23:c8:c1:90:a2: a3:d2:75:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJJOLI/v2nzoZgedcXIVJDswza1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBEQkQzQTBCNTREMTlFMTM1QkE1M0IzMUM0NTg4NDJD ODlENDlGMzAeFw0yNTA4MjIyMDUyNDNaFw0yNTA4MjMyMzU3NDNaMDMxMTAvBgNV BAMTKDlBQjREQTc4QUI0QkFCNDk1MkM5NEE4Njg1MzU1QTc2MTNCQUYzODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAdvulczZiAUupr4fyTdIUBDO P1fdLANTK5HHQuIyluzOdvu0vESP0gwWaj4YJDS88Y3xkqLD+b70tr0eErGIw3v3 45d3wK/DekR88gIgFSQqAxQx3k2gc/ahQI1M0lbqrG8e5zIhlfPVASuiv2851SWJ Uy8QwHoR97Pu5+djonYKkNj0FDTqkJ69833XzVwMqm6n+uvSBnn8ZT3IhwI7gvX0 qN0YDeIhwErli8Ttcz0OOwhCYJKfePehvTX/9uFjz+P35vXETRf1rXyvJuzTs8gH xPVR8LlIijeGw+vH3rz2VROCwNsaqqS+r7HOg7bvkLIbwt8cTEL4t42jF3dBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmrTaeKtLq0lSyUqGhTVadhO684IwHwYDVR0j BBgwFoAUINvToLVNGeE1ulOzHEWIQsidSfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFE VnMvMC8yMERCRDNBMEI1NEQxOUUxMzVCQTUzQjMxQzQ1ODg0MkM4OUQ0OUYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwREJEM0EwQjU0RDE5RTEz NUJBNTNCMzFDNDU4ODQyQzg5RDQ5RjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFEVnMvMC8y MERCRDNBMEI1NEQxOUUxMzVCQTUzQjMxQzQ1ODg0MkM4OUQ0OUYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs7t9cTqL2i80tO4Broqpddpy8CQpzOIFVu196OrFeG3sRT/LP6P1XMRZq6Q2 Wr2yreVvfE9gRJdCYEHnqt6xUXSnn2X+oIV2WM/ZOOkCdT7OCSALzvBvxSV1gm4v u89AjmUXsaCVQwbq0qrhKdS1krAX82AVxB7+4xirYN6ASHI4Z/Pw4ChL+dz5sFmA 7BxYWFY7E998RVFuvTIOtf8P2sOSjfesYFLihXluxhfIwR4vQd7FxHpsAOsuc3yH P6tyL8RkUNRR7zJxaRNoA5tXjis7uWN2DX1VAZNBVz666pVHZVo9bZcFwD7vQyWk AqFPa9nLYM/zmiPIwZCio9J10A== -----END CERTIFICATE-----Generated at Sat Aug 23 17:08:54 2025 by rpki-client