$ rpki-client -vvf rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft File: E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft (raw, json) Hash identifier: NNdwv8Eze6w2fGTcIiK3zkXKDx8MuAhGdSQam3xmg7w= Subject key identifier: 3B:B3:07:91:A6:DF:76:C9:7F:48:E0:24:C2:88:16:67:F4:C8:9C:F5 Authority key identifier: E3:25:5E:24:DF:41:7D:9D:2C:F5:A8:A3:92:C3:25:F0:94:32:EA:5E Certificate issuer: /CN=E3255E24DF417D9D2CF5A8A392C325F09432EA5E Certificate serial: 63385B61C504E4ADE02580A23A31376F1D93B79B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer Subject info access: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft Manifest number: 10 Signing time: Sat 23 Aug 2025 12:51:25 +0000 Manifest this update: Sat 23 Aug 2025 12:46:25 +0000 Manifest next update: Sun 24 Aug 2025 15:26:25 +0000 Files and hashes: 1: 3137372e38362e34382e302f32312d3332203d3e20323634323136.roa (hash: NvGUNNUTL+Xg6PVrRvuS3md8aJgENDZjmZ80pXSBIOQ=) 2: 323830343a323435383a3a2f33322d313238203d3e20323634323136.roa (hash: MZG1pWatGxwr0+bbifrxZdcTJXpxgFLz7Jve24qeGnY=) 3: E3255E24DF417D9D2CF5A8A392C325F09432EA5E.crl (hash: xnXTln1kMgx5Weoac7dXdnvBTKDIpmAxv4TpDHbJVCY=) 4: 3133382e39392e3139362e302f32322d3332203d3e20323634323136.roa (hash: nUVURxtskxjRDB8bSX5dLhrxDC/gBSXxkl6Cfb+5c+E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.crl rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 13:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:38:5b:61:c5:04:e4:ad:e0:25:80:a2:3a:31:37:6f:1d:93:b7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3255E24DF417D9D2CF5A8A392C325F09432EA5E Validity Not Before: Aug 23 12:46:25 2025 GMT Not After : Aug 24 15:26:25 2025 GMT Subject: CN=3BB30791A6DF76C97F48E024C2881667F4C89CF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:46:98:55:e7:b3:ad:85:f3:41:2a:a1:bd:56: 71:a6:79:f3:24:5c:ce:38:5e:83:51:e6:3e:8c:c7: ac:5d:8c:a9:e4:20:6b:36:39:42:d6:53:75:b0:b8: 0e:4e:77:50:fe:54:fa:a9:bf:93:4c:a5:0b:12:18: 84:1f:32:80:6e:d5:19:92:1d:28:fe:40:3f:f2:a6: 48:fb:c2:7d:69:f9:30:75:3c:6e:61:a8:0f:28:19: a5:56:ec:fb:ce:e8:d9:59:b3:cd:5c:c6:d8:31:f7: 85:ec:c2:0b:ab:7e:ef:1d:a9:06:92:13:c7:c2:72: 0d:b6:fa:4e:bb:d3:47:12:8b:ba:33:86:58:a6:2c: 99:1f:f0:0d:20:42:8b:76:06:3d:12:73:46:2e:2b: 6d:d8:8d:54:96:98:b8:81:57:87:e7:bd:75:09:7b: bd:82:01:9f:46:d6:7f:fb:73:ee:04:0a:d5:68:fe: ab:9f:da:e2:7c:d3:02:f3:c7:ca:7c:e9:f6:a1:f5: 17:f7:23:4b:85:aa:18:f1:bf:06:60:09:02:fc:81: 94:7e:6d:fd:57:92:79:e0:fb:e8:92:c4:f7:91:41: 11:63:b8:ed:50:76:2b:2b:6c:0e:07:f6:b8:4d:24: 3a:10:20:fc:3b:a5:0b:69:c1:99:8a:7f:a9:f9:4a: 24:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B3:07:91:A6:DF:76:C9:7F:48:E0:24:C2:88:16:67:F4:C8:9C:F5 X509v3 Authority Key Identifier: keyid:E3:25:5E:24:DF:41:7D:9D:2C:F5:A8:A3:92:C3:25:F0:94:32:EA:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/E3255E24DF417D9D2CF5A8A392C325F09432EA5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c3:9b:fc:e1:43:d4:b8:3c:22:72:87:2c:60:6f:e1:01:44: 3f:25:19:93:e5:3e:24:24:ed:a2:fe:0f:8b:3d:de:25:04:66: 05:93:06:2b:e1:c3:1a:1f:cc:a0:6b:7c:95:c2:f2:de:30:db: 04:90:05:34:f0:9e:d6:3e:43:c0:ec:88:f0:9c:38:0f:4b:2b: b8:fb:8b:a5:df:9c:a8:9f:b3:f0:5a:c3:84:63:01:42:2a:c5: fb:59:9d:d3:5d:8c:9f:b4:4e:f1:0d:70:61:15:a6:79:fe:74: e1:8d:54:b2:7e:7b:2f:9e:01:1e:4d:5f:24:79:e4:a2:0f:65: 88:21:6c:ca:e0:c3:47:f2:c2:be:ad:77:69:e2:0b:ca:df:3d: dd:4e:25:75:6f:38:55:72:06:dd:6e:19:47:6d:e5:e3:a1:00: 06:ac:6f:74:d6:45:88:f2:ac:be:7c:ea:7f:05:c6:01:3c:4c: 7b:d2:0e:fd:64:ad:63:5f:24:22:b0:f0:34:6e:f6:53:7b:69: aa:09:ad:0f:e8:2c:0b:55:b2:6d:68:11:a5:4a:16:84:2b:2f: d4:63:24:be:32:75:14:b0:ee:e3:db:e2:00:c6:30:fc:71:ce: 9d:20:56:a7:a4:5a:49:f5:a8:a4:85:72:fa:a7:f0:07:fc:53: 18:bf:41:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYzhbYcUE5K3gJYCiOjE3bx2Tt5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMyNTVFMjRERjQxN0Q5RDJDRjVBOEEzOTJDMzI1RjA5 NDMyRUE1RTAeFw0yNTA4MjMxMjQ2MjVaFw0yNTA4MjQxNTI2MjVaMDMxMTAvBgNV BAMTKDNCQjMwNzkxQTZERjc2Qzk3RjQ4RTAyNEMyODgxNjY3RjRDODlDRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsRphV57OthfNBKqG9VnGmefMk XM44XoNR5j6Mx6xdjKnkIGs2OULWU3WwuA5Od1D+VPqpv5NMpQsSGIQfMoBu1RmS HSj+QD/ypkj7wn1p+TB1PG5hqA8oGaVW7PvO6NlZs81cxtgx94Xswgurfu8dqQaS E8fCcg22+k6700cSi7ozhlimLJkf8A0gQot2Bj0Sc0YuK23YjVSWmLiBV4fnvXUJ e72CAZ9G1n/7c+4ECtVo/quf2uJ80wLzx8p86fah9Rf3I0uFqhjxvwZgCQL8gZR+ bf1Xknng++iSxPeRQRFjuO1QdisrbA4H9rhNJDoQIPw7pQtpwZmKf6n5SiThAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUO7MHkabfdsl/SOAkwogWZ/TInPUwHwYDVR0j BBgwFoAU4yVeJN9BfZ0s9aijksMl8JQy6l4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3dFZnV1VEhnUWNVeGlNWEVOV0t3amZZakxyenN5NVNZUFFhV2JudnJq U1MvMC9FMzI1NUUyNERGNDE3RDlEMkNGNUE4QTM5MkMzMjVGMDk0MzJFQTVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzMjU1RTI0REY0MTdEOUQy Q0Y1QThBMzkyQzMyNUYwOTQzMkVBNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3dFZnV1VEhnUWNVeGlNWEVOV0t3amZZakxyenN5NVNZUFFhV2JudnJqU1MvMC9F MzI1NUUyNERGNDE3RDlEMkNGNUE4QTM5MkMzMjVGMDk0MzJFQTVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg8Ob/OFD1Lg8InKHLGBv4QFEPyUZk+U+JCTtov4Piz3eJQRmBZMGK+HDGh/M oGt8lcLy3jDbBJAFNPCe1j5DwOyI8Jw4D0sruPuLpd+cqJ+z8FrDhGMBQirF+1md 012Mn7RO8Q1wYRWmef504Y1Usn57L54BHk1fJHnkog9liCFsyuDDR/LCvq13aeIL yt893U4ldW84VXIG3W4ZR23l46EABqxvdNZFiPKsvnzqfwXGATxMe9IO/WStY18k IrDwNG72U3tpqgmtD+gsC1WybWgRpUoWhCsv1GMkvjJ1FLDu49viAMYw/HHOnSBW p6RaSfWopIVy+qfwB/xTGL9Bxw== -----END CERTIFICATE-----Generated at Sat Aug 23 15:54:41 2025 by rpki-client