$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft File: 8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft (raw, json) Hash identifier: D81u0CQhWZ0zw/5RdIS05hxJ0XH9O9HRRST8j/AVwZc= Subject key identifier: D2:F8:77:BF:C8:53:20:1A:92:DB:51:FE:6A:8E:7F:6D:55:4D:CC:F0 Authority key identifier: 86:63:02:1B:58:90:05:D8:D6:AC:BA:9D:6E:EC:9F:6B:4B:B4:19:01 Certificate issuer: /CN=8663021B589005D8D6ACBA9D6EEC9F6B4BB41901 Certificate serial: 498C5FCAE1E7B94EEBDAB3CD51B6DC23EE52D470 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer Subject info access: rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft Manifest number: 67 Signing time: Wed 20 Aug 2025 12:55:33 +0000 Manifest this update: Wed 20 Aug 2025 12:50:33 +0000 Manifest next update: Thu 21 Aug 2025 14:05:33 +0000 Files and hashes: 1: 34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa (hash: lClBtfYM92uXyXK/GybPlj/qsX2ohVNNV0OjpzOgcKs=) 2: 34352e3136382e3132372e302f32342d3234203d3e20323638303633.roa (hash: 8AKLrxy41tpOvHAUkoY0N6YJ8jl+2fKhpTfK/gLjTgM=) 3: 34352e3136382e3132342e302f32342d3234203d3e20323638303633.roa (hash: iklcuoNIa74a9v+vnGbALu2PVhhOSHroYjM3mB52Vnw=) 4: 8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.crl (hash: 1Dq15SxlCRkni86nVHtAa15OCzU0qLuf2Yx+q+S6je8=) 5: 34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa (hash: BVk5GRfmlDttQSTk3gzcNbZFj6xTR2/n5uR1FdOiZ84=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.crl rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 14:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:8c:5f:ca:e1:e7:b9:4e:eb:da:b3:cd:51:b6:dc:23:ee:52:d4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8663021B589005D8D6ACBA9D6EEC9F6B4BB41901 Validity Not Before: Aug 20 12:50:33 2025 GMT Not After : Aug 21 14:05:33 2025 GMT Subject: CN=D2F877BFC853201A92DB51FE6A8E7F6D554DCCF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:1e:eb:39:aa:9b:37:39:40:0b:89:b0:a3: c7:38:4f:08:1c:72:2b:fc:be:6f:52:5d:35:72:06: cd:72:ce:8e:0a:ca:05:d3:c5:ba:b7:38:13:36:b8: 21:7d:2b:b4:0f:02:92:22:67:39:da:53:fb:dc:41: 4c:e4:27:ac:3c:2c:01:2a:9c:9c:86:37:de:24:ec: 29:03:1e:d1:a0:07:f8:39:ac:43:e4:12:94:b5:b0: da:68:52:79:58:81:3f:31:a0:5a:e0:57:82:8a:b7: 4c:f9:0b:d3:ce:55:b0:35:76:f9:e6:67:d3:c2:17: 7a:49:b2:3c:23:dd:f1:71:be:1a:57:6e:14:33:95: 9e:40:75:e9:2c:f0:38:4b:60:68:88:21:ed:1d:72: b3:e2:5d:a2:d0:6b:8e:0d:1c:af:e1:8a:b5:86:83: b6:4f:aa:1f:30:c7:d1:7a:53:31:f8:87:e9:ff:36: 9c:ea:27:52:72:95:79:af:b8:3d:89:c7:1f:87:cc: e6:38:ff:da:42:00:18:42:cd:22:ec:2a:a1:76:0f: 24:90:07:01:58:86:8a:9e:37:3b:34:93:34:be:6f: 50:87:36:b4:8d:b3:8a:dc:b8:55:96:a6:1f:06:ef: e0:9a:1e:e4:2c:24:4c:e2:68:f5:de:37:8f:5d:91: 6d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F8:77:BF:C8:53:20:1A:92:DB:51:FE:6A:8E:7F:6D:55:4D:CC:F0 X509v3 Authority Key Identifier: keyid:86:63:02:1B:58:90:05:D8:D6:AC:BA:9D:6E:EC:9F:6B:4B:B4:19:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9b:03:7e:30:45:65:30:dd:c0:f1:6f:c9:e3:c8:f6:b2:e2: c7:b9:79:d9:4d:9f:bc:f7:d9:39:db:49:a0:3a:83:9a:be:8c: 87:8b:dc:08:a8:ef:c0:dd:77:7d:47:b5:a3:11:32:1f:8c:28: 18:72:49:d5:49:14:ed:b8:d0:c3:25:24:de:dd:3e:95:a4:c1: 01:31:e0:23:66:3b:b5:4b:d4:90:f3:2f:2f:cf:22:6a:68:1a: 7c:6b:ec:68:67:a7:c2:73:31:c6:45:c6:b6:a0:dc:b3:d2:45: ea:c1:c4:dc:87:32:b7:af:a2:4f:78:15:61:e9:42:76:27:f3: 93:7a:d5:1a:c9:b2:13:19:a0:a6:7d:8f:6c:79:bd:54:97:79: b3:60:bc:6f:07:ab:ad:bf:95:4c:aa:bc:03:70:86:39:09:50: 3e:02:64:64:c8:7c:1c:96:9b:7d:ca:03:1b:83:48:9d:2f:6f: b9:06:14:18:02:41:e2:b4:f8:0f:7d:04:14:cc:04:e1:f8:b0: 02:0c:67:c2:6a:73:d9:d8:ab:94:d7:41:04:03:e2:6c:c2:cf: d0:8f:8f:7d:fa:13:ca:17:a4:2b:92:42:97:92:c0:a5:89:36: d2:ca:67:17:2e:29:bb:d5:80:f0:ba:a1:68:36:67:5e:7d:2f: 85:c8:77:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSYxfyuHnuU7r2rPNUbbcI+5S1HAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2MzAyMUI1ODkwMDVEOEQ2QUNCQTlENkVFQzlGNkI0 QkI0MTkwMTAeFw0yNTA4MjAxMjUwMzNaFw0yNTA4MjExNDA1MzNaMDMxMTAvBgNV BAMTKEQyRjg3N0JGQzg1MzIwMUE5MkRCNTFGRTZBOEU3RjZENTU0RENDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC58B7rOaqbNzlAC4mwo8c4Twgc civ8vm9SXTVyBs1yzo4KygXTxbq3OBM2uCF9K7QPApIiZznaU/vcQUzkJ6w8LAEq nJyGN94k7CkDHtGgB/g5rEPkEpS1sNpoUnlYgT8xoFrgV4KKt0z5C9POVbA1dvnm Z9PCF3pJsjwj3fFxvhpXbhQzlZ5Adeks8DhLYGiIIe0dcrPiXaLQa44NHK/hirWG g7ZPqh8wx9F6UzH4h+n/NpzqJ1JylXmvuD2Jxx+HzOY4/9pCABhCzSLsKqF2DySQ BwFYhoqeNzs0kzS+b1CHNrSNs4rcuFWWph8G7+CaHuQsJEziaPXeN49dkW3FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0vh3v8hTIBqS21H+ao5/bVVNzPAwHwYDVR0j BBgwFoAUhmMCG1iQBdjWrLqdbuyfa0u0GQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzdHcWVRRGFmU2hZWVRtVlhHUVdjekxxOUNIWXRNVGFqWlRrUnNaZ2hR UEovMC84NjYzMDIxQjU4OTAwNUQ4RDZBQ0JBOUQ2RUVDOUY2QjRCQjQxOTAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2NjMwMjFCNTg5MDA1RDhE NkFDQkE5RDZFRUM5RjZCNEJCNDE5MDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzdHcWVRRGFmU2hZWVRtVlhHUVdjekxxOUNIWXRNVGFqWlRrUnNaZ2hRUEovMC84 NjYzMDIxQjU4OTAwNUQ4RDZBQ0JBOUQ2RUVDOUY2QjRCQjQxOTAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATpsDfjBFZTDdwPFvyePI9rLix7l52U2fvPfZOdtJoDqDmr6Mh4vcCKjvwN13 fUe1oxEyH4woGHJJ1UkU7bjQwyUk3t0+laTBATHgI2Y7tUvUkPMvL88iamgafGvs aGenwnMxxkXGtqDcs9JF6sHE3Icyt6+iT3gVYelCdifzk3rVGsmyExmgpn2PbHm9 VJd5s2C8bwerrb+VTKq8A3CGOQlQPgJkZMh8HJabfcoDG4NInS9vuQYUGAJB4rT4 D30EFMwE4fiwAgxnwmpz2dirlNdBBAPibMLP0I+PffoTyhekK5JCl5LApYk20spn Fy4pu9WA8LqhaDZnXn0vhch3TA== -----END CERTIFICATE-----Generated at Wed Aug 20 16:17:09 2025 by rpki-client