$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft File: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft (raw, json) Hash identifier: 6ASNsaF39WfOxhZ+8MERr1sFR/91zYx+7JporRM2Xzg= Subject key identifier: 1C:82:00:B3:45:AF:7A:D6:72:D2:FF:16:6D:D8:89:A4:72:AF:85:3D Authority key identifier: D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B Certificate issuer: /CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B Certificate serial: 246BEF8ED70E885B103BDAF9AA1B38FFD84A354D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft Manifest number: 0167 Signing time: Wed 17 Sep 2025 15:58:57 +0000 Manifest this update: Wed 17 Sep 2025 15:53:57 +0000 Manifest next update: Thu 18 Sep 2025 19:08:57 +0000 Files and hashes: 1: 323830343a313234633a3a2f33322d3438203d3e20323633343638.roa (hash: T2k3XHzj+R5PWM1PAn1IiRXkMkZU+kzdLTKOTB9BdPU=) 2: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl (hash: CADvu3CFKtLn9M8GCfGF/KjWjcXxUXuKmk+SFt92OKo=) 3: 3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa (hash: mQl+DqMitEfto4sm/J239pDInofAJ055830zO5LsIjU=) 4: 3137372e37332e36302e302f32322d3234203d3e20323633343638.roa (hash: ojNYwHHCihvNSk2FkbyfGPhui+Fo/NptmXx53NBSpaQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Sep 2025 19:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:6b:ef:8e:d7:0e:88:5b:10:3b:da:f9:aa:1b:38:ff:d8:4a:35:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B Validity Not Before: Sep 17 15:53:57 2025 GMT Not After : Sep 18 19:08:57 2025 GMT Subject: CN=1C8200B345AF7AD672D2FF166DD889A472AF853D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4f:56:86:27:c6:ea:f7:94:bb:ae:ab:85:ef: 5e:1e:cd:15:b7:12:0d:65:5e:7c:58:e5:a2:ab:94: 29:3b:8f:c3:4f:d3:a6:9c:ba:6b:ea:27:96:87:fa: 42:89:ff:89:01:fd:f4:67:f6:53:10:3c:db:78:0e: f1:84:f6:d7:4d:ca:82:01:18:44:60:81:9e:dd:16: 6c:cd:a8:9a:1d:bc:56:0b:1a:ba:3c:c9:ae:db:85: 8d:cb:01:7b:44:8d:53:09:85:48:51:ab:2e:aa:68: 74:99:b7:ce:e0:88:57:d3:ad:57:4c:0d:85:ff:c2: 20:82:c6:a8:6a:0f:e2:0c:fb:82:b7:13:ed:f7:09: 17:99:51:e4:ee:f5:6b:f6:11:5d:57:34:9c:70:d2: 7d:8f:da:f8:6c:2e:13:78:d9:00:ff:e0:d8:b2:07: 01:9a:71:b6:34:de:da:93:44:ad:8a:5e:28:e3:f1: 04:cf:ad:4c:57:37:63:f1:86:b9:fb:2e:e6:d7:8d: a7:90:f1:4a:2d:80:dd:85:09:09:3f:df:16:cf:bf: b5:10:49:6e:fd:88:1f:7d:1c:ca:29:25:d9:fa:f2: 25:8a:2c:53:87:0f:e6:02:65:23:d0:7f:d2:70:c9: cb:15:e8:f8:f4:d1:7e:f2:ff:94:37:b2:e6:fc:23: 79:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:82:00:B3:45:AF:7A:D6:72:D2:FF:16:6D:D8:89:A4:72:AF:85:3D X509v3 Authority Key Identifier: keyid:D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:7e:3b:05:92:45:c6:0b:5d:11:b3:78:ad:63:c6:a9:88:85: 8b:dc:f6:bd:bf:8e:10:bf:14:4c:1d:3f:13:f1:a3:ac:55:cf: bb:6c:ac:0a:16:89:e1:94:8b:d9:07:2c:f9:92:1e:e2:0a:26: aa:29:f8:a0:21:18:89:d5:9f:13:66:ed:6f:02:d5:07:98:58: bb:d9:b9:df:94:f0:c2:23:b3:c2:24:c9:bc:d3:c1:03:1f:f7: 04:8d:99:1e:0f:7f:cb:05:aa:fa:59:14:5b:21:ac:d7:1e:f6: 71:6b:8c:cd:6e:d8:d7:5a:00:69:c6:a8:e7:47:b1:0a:4c:6a: d3:39:13:07:0a:00:d4:f3:ca:44:ab:9c:3e:19:d3:e7:a4:4c: a3:4d:bc:48:8c:bb:22:54:0d:e0:2f:d4:5a:54:02:89:08:65: 6c:42:4f:28:06:c1:1c:7a:5a:4d:ca:26:55:ee:5e:b9:44:69: d6:00:78:55:f2:53:c9:f6:2b:6a:19:31:2c:fa:76:54:c0:c2: 45:0b:63:ac:2c:f9:20:b5:b4:ad:31:4c:e6:2a:25:f8:e5:7b: 64:ed:30:00:2d:b9:80:0b:30:41:00:f8:15:9b:45:90:c6:45: a8:67:8a:45:f0:69:a2:cc:c2:dc:57:a2:54:a3:d6:31:7a:41: 69:b2:dd:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJGvvjtcOiFsQO9r5qhs4/9hKNU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3NEY1NDI4MEZDOUNGN0U5MDY4QzZGRjc0NEZBNUFE MTQ5RDcxQjAeFw0yNTA5MTcxNTUzNTdaFw0yNTA5MTgxOTA4NTdaMDMxMTAvBgNV BAMTKDFDODIwMEIzNDVBRjdBRDY3MkQyRkYxNjZERDg4OUE0NzJBRjg1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTT1aGJ8bq95S7rquF714ezRW3 Eg1lXnxY5aKrlCk7j8NP06acumvqJ5aH+kKJ/4kB/fRn9lMQPNt4DvGE9tdNyoIB GERggZ7dFmzNqJodvFYLGro8ya7bhY3LAXtEjVMJhUhRqy6qaHSZt87giFfTrVdM DYX/wiCCxqhqD+IM+4K3E+33CReZUeTu9Wv2EV1XNJxw0n2P2vhsLhN42QD/4Niy BwGacbY03tqTRK2KXijj8QTPrUxXN2Pxhrn7LubXjaeQ8UotgN2FCQk/3xbPv7UQ SW79iB99HMopJdn68iWKLFOHD+YCZSPQf9JwycsV6Pj00X7y/5Q3sub8I3mRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHIIAs0WvetZy0v8WbdiJpHKvhT0wHwYDVR0j BBgwFoAU03T1QoD8nPfpBoxv90T6WtFJ1xswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0Vh blkvMC9EMzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNzRGNTQyODBGQzlDRjdF OTA2OEM2RkY3NDRGQTVBRDE0OUQ3MUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0VhblkvMC9E Mzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVn47BZJFxgtdEbN4rWPGqYiFi9z2vb+OEL8UTB0/E/GjrFXPu2ysChaJ4ZSL 2Qcs+ZIe4gomqin4oCEYidWfE2btbwLVB5hYu9m535TwwiOzwiTJvNPBAx/3BI2Z Hg9/ywWq+lkUWyGs1x72cWuMzW7Y11oAacao50exCkxq0zkTBwoA1PPKRKucPhnT 56RMo028SIy7IlQN4C/UWlQCiQhlbEJPKAbBHHpaTcomVe5euURp1gB4VfJTyfYr ahkxLPp2VMDCRQtjrCz5ILW0rTFM5iol+OV7ZO0wAC25gAswQQD4FZtFkMZFqGeK RfBposzC3FeiVKPWMXpBabLdcg== -----END CERTIFICATE-----Generated at Thu Sep 18 10:43:52 2025 by rpki-client