$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.mft File: B27B85F02C63CD742721D85E375F5A98C91ED00B.mft (raw, json) Hash identifier: rtgCoiEh02a7OxkF3GIXQYImbwIxH8InaH4DFji9UkM= Subject key identifier: 67:BD:1E:58:BA:08:4C:9F:7E:61:B6:A8:66:5B:89:13:2F:28:5D:28 Authority key identifier: B2:7B:85:F0:2C:63:CD:74:27:21:D8:5E:37:5F:5A:98:C9:1E:D0:0B Certificate issuer: /CN=B27B85F02C63CD742721D85E375F5A98C91ED00B Certificate serial: 1D368DAFBAC1545F033C54C431517D4FE2F63D48 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27B85F02C63CD742721D85E375F5A98C91ED00B.cer Subject info access: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.mft Manifest number: 71 Signing time: Mon 28 Jul 2025 12:03:23 +0000 Manifest this update: Mon 28 Jul 2025 11:58:23 +0000 Manifest next update: Tue 29 Jul 2025 15:04:23 +0000 Files and hashes: 1: 3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa (hash: 2wuK83kGggWH4E8N6EQeR0Ft9R1UVymLSxczmk6VfBc=) 2: 3137302e38302e36382e302f32322d3234203d3e20323633393035.roa (hash: rbpFePIighvyZfYolRY0ciD0LBZZ3+jrzRt5MfVVy98=) 3: 323830343a323738303a3a2f33322d3334203d3e20323633393035.roa (hash: q++Y8uDb0QZkkc+9358Zhs1Jsl0QBiuDx2Mno5lvNRs=) 4: B27B85F02C63CD742721D85E375F5A98C91ED00B.crl (hash: BilUYMZv+UwEErmoX5NCNjbNm9yCoGWua7zMfr0JIXM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.crl rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27B85F02C63CD742721D85E375F5A98C91ED00B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Jul 2025 15:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:36:8d:af:ba:c1:54:5f:03:3c:54:c4:31:51:7d:4f:e2:f6:3d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B27B85F02C63CD742721D85E375F5A98C91ED00B Validity Not Before: Jul 28 11:58:23 2025 GMT Not After : Jul 29 15:04:23 2025 GMT Subject: CN=67BD1E58BA084C9F7E61B6A8665B89132F285D28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c6:43:9a:3f:e9:a3:7c:d5:8a:b3:5c:eb:e2: 38:cb:80:e4:48:62:c6:f6:da:58:23:8e:de:4e:63: a7:0e:2b:3a:c8:ec:2b:f6:4d:9a:0e:5a:c0:8e:d9: 14:93:f9:cd:c0:28:5b:a9:bd:d2:1a:a2:15:4e:99: 98:aa:b1:be:df:c8:8c:46:65:2d:ac:40:59:fe:62: 34:41:be:6b:8f:62:e7:26:77:2c:d5:bb:e1:70:68: 6a:fb:3f:0d:dd:06:5a:33:7c:f4:e4:b6:08:ca:22: 34:6d:a6:00:a0:42:49:e9:18:37:b5:8d:6d:d4:aa: 8c:5e:43:74:c5:9a:9c:35:ab:f6:bd:5d:d9:65:15: 28:d8:4e:bf:f0:24:80:8c:71:58:87:74:5e:aa:bf: 0f:ea:76:a8:91:ea:4f:8b:f5:24:5a:96:1e:88:e0: 46:42:67:b7:cf:13:c4:3f:de:e1:1f:6d:6d:bc:97: b1:99:8d:21:2d:61:7a:4d:a9:32:d6:83:46:96:a7: 69:19:ba:fd:9a:9b:8c:ee:3c:35:d0:8f:c1:a8:5b: f7:6c:89:5d:e0:c7:21:89:93:5d:82:99:6d:94:a6: c0:95:78:85:4f:52:9d:ec:31:5f:df:bc:2b:00:89: a2:0c:7b:6c:be:2b:01:70:27:c1:bd:2a:a8:92:bf: e4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BD:1E:58:BA:08:4C:9F:7E:61:B6:A8:66:5B:89:13:2F:28:5D:28 X509v3 Authority Key Identifier: keyid:B2:7B:85:F0:2C:63:CD:74:27:21:D8:5E:37:5F:5A:98:C9:1E:D0:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27B85F02C63CD742721D85E375F5A98C91ED00B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:1e:dd:93:b2:0e:3c:f0:60:9c:5d:43:5f:de:36:ee:e4:81: 12:f6:ec:c7:06:2d:04:52:2a:03:3e:03:27:8a:4d:2a:9a:f8: 87:5b:ba:bb:90:5c:56:26:c8:a0:e3:0b:c3:fa:c7:b6:de:14: 69:5e:4b:6c:82:cb:fb:3f:15:ad:3f:05:b2:bc:a4:67:d1:82: aa:a3:25:ea:c3:77:96:eb:3a:76:2c:86:89:fe:6f:aa:d5:40: dd:66:6a:1c:c5:30:28:4e:c4:6d:2d:1a:4a:df:30:62:1a:88: 32:55:b9:8f:77:dc:38:8e:28:c5:64:c7:f2:b3:be:ea:56:9c: 43:df:74:86:20:ad:9a:3b:d7:83:e9:64:87:d3:4b:ea:ab:0c: c4:20:03:dd:3d:fa:b3:8f:d6:3a:2c:4a:aa:d4:2f:a4:a9:d3: 92:56:f8:aa:d0:4e:92:ad:ba:77:25:fe:40:1b:86:5e:25:87: a1:15:6c:25:c9:6a:3a:5f:20:48:41:81:f2:8e:68:70:d1:44: 50:cb:47:37:77:11:fd:5a:3c:dc:39:7a:8e:70:b9:e2:1d:d4: 21:44:c0:e3:df:7b:98:1b:cd:f3:44:e3:34:7e:53:f4:a3:3c: f5:e6:87:98:b0:b9:db:93:5c:82:e2:c6:b7:d6:37:ed:f4:e7: d5:1d:af:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHTaNr7rBVF8DPFTEMVF9T+L2PUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI3Qjg1RjAyQzYzQ0Q3NDI3MjFEODVFMzc1RjVBOThD OTFFRDAwQjAeFw0yNTA3MjgxMTU4MjNaFw0yNTA3MjkxNTA0MjNaMDMxMTAvBgNV BAMTKDY3QkQxRTU4QkEwODRDOUY3RTYxQjZBODY2NUI4OTEzMkYyODVEMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnxkOaP+mjfNWKs1zr4jjLgORI Ysb22lgjjt5OY6cOKzrI7Cv2TZoOWsCO2RST+c3AKFupvdIaohVOmZiqsb7fyIxG ZS2sQFn+YjRBvmuPYucmdyzVu+FwaGr7Pw3dBlozfPTktgjKIjRtpgCgQknpGDe1 jW3UqoxeQ3TFmpw1q/a9XdllFSjYTr/wJICMcViHdF6qvw/qdqiR6k+L9SRalh6I 4EZCZ7fPE8Q/3uEfbW28l7GZjSEtYXpNqTLWg0aWp2kZuv2am4zuPDXQj8GoW/ds iV3gxyGJk12CmW2UpsCVeIVPUp3sMV/fvCsAiaIMe2y+KwFwJ8G9KqiSv+R/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZ70eWLoITJ9+YbaoZluJEy8oXSgwHwYDVR0j BBgwFoAUsnuF8CxjzXQnIdheN19amMke0AswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBj eUYvMC9CMjdCODVGMDJDNjNDRDc0MjcyMUQ4NUUzNzVGNUE5OEM5MUVEMDBCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyN0I4NUYwMkM2M0NENzQy NzIxRDg1RTM3NUY1QTk4QzkxRUQwMEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBjeUYvMC9C MjdCODVGMDJDNjNDRDc0MjcyMUQ4NUUzNzVGNUE5OEM5MUVEMDBCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiR7dk7IOPPBgnF1DX9427uSBEvbsxwYtBFIqAz4DJ4pNKpr4h1u6u5BcVibI oOMLw/rHtt4UaV5LbILL+z8VrT8FsrykZ9GCqqMl6sN3lus6diyGif5vqtVA3WZq HMUwKE7EbS0aSt8wYhqIMlW5j3fcOI4oxWTH8rO+6lacQ990hiCtmjvXg+lkh9NL 6qsMxCAD3T36s4/WOixKqtQvpKnTklb4qtBOkq26dyX+QBuGXiWHoRVsJclqOl8g SEGB8o5ocNFEUMtHN3cR/Vo83Dl6jnC54h3UIUTA4997mBvN80TjNH5T9KM89eaH mLC525NcguLGt9Y37fTn1R2vCg== -----END CERTIFICATE-----Generated at Tue Jul 29 05:56:30 2025 by rpki-client