$ rpki-client -vvf rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.mft File: 66A56D870457AAEA1EED831D71D318FB7DA99B42.mft (raw, json) Hash identifier: lT8+WNC+LaWtXCBlNhK2RnLqcmrnPMDoJdVvUJuJBNY= Subject key identifier: CA:BC:09:6D:F8:03:DA:1D:60:1D:A7:AC:B3:C3:A5:EC:5C:2B:61:BE Authority key identifier: 66:A5:6D:87:04:57:AA:EA:1E:ED:83:1D:71:D3:18:FB:7D:A9:9B:42 Certificate issuer: /CN=66A56D870457AAEA1EED831D71D318FB7DA99B42 Certificate serial: 18F184B171BC7F5F8E91FBE91FCCBF15A8112A21 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer Subject info access: rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.mft Manifest number: 68 Signing time: Wed 05 Nov 2025 16:48:29 +0000 Manifest this update: Wed 05 Nov 2025 16:43:29 +0000 Manifest next update: Thu 06 Nov 2025 18:33:29 +0000 Files and hashes: 1: 323830343a323566383a3a2f33322d313238203d3e20323634333135.roa (hash: 1KthrIa60igSCZtKVf+DVJcgC6oFsB1IOVzRTY1jw9s=) 2: 3133382e3132322e34342e302f32322d3332203d3e20323634333135.roa (hash: /7QCn7F15gVDL46tm6gVsPYtNwIkAxryJGBHyUGpsvE=) 3: 66A56D870457AAEA1EED831D71D318FB7DA99B42.crl (hash: Lpi3moPuJ01PXIh7xbK7wHPN5ZWXoAsaQHqbwkC7JjA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.crl rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 18:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f1:84:b1:71:bc:7f:5f:8e:91:fb:e9:1f:cc:bf:15:a8:11:2a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A56D870457AAEA1EED831D71D318FB7DA99B42 Validity Not Before: Nov 5 16:43:29 2025 GMT Not After : Nov 6 18:33:29 2025 GMT Subject: CN=CABC096DF803DA1D601DA7ACB3C3A5EC5C2B61BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ba:2a:85:6a:d4:3b:37:1f:65:e7:1c:06:90: 61:17:96:23:7f:67:3b:99:28:47:4c:b4:b2:30:92: 1a:29:39:ae:27:9b:89:0e:b1:ee:c8:23:4b:f4:ba: 62:1a:af:b7:02:06:2a:fc:c2:75:f0:b0:4e:b5:cc: 9a:af:e4:f8:73:4d:e5:ea:88:96:78:f1:fd:9e:31: d4:3a:77:51:d6:43:93:b7:cf:3d:05:4c:84:65:27: 7c:55:73:79:07:66:97:0a:d1:bc:d5:62:3f:66:6a: 41:19:6b:26:9c:11:b1:3a:88:35:8f:37:32:f9:02: dd:4a:e7:bf:62:9f:28:9c:28:4e:83:30:01:83:f1: f3:7a:48:99:3c:4e:48:fd:0b:7a:49:ad:1f:ca:78: 01:5d:28:47:b5:47:87:0f:c8:c4:50:21:14:e4:39: 48:83:30:f4:51:54:48:e4:5f:0c:83:54:d3:ac:f7: 70:75:34:cb:89:d8:79:92:89:48:10:b0:54:9a:d2: 3f:0b:78:1b:86:7e:ac:b3:12:3a:e4:e8:d2:1a:e7: 4d:40:09:12:8f:3c:a4:68:6a:7e:67:b1:4d:72:a0: ca:f4:bd:01:3e:ab:fd:3f:fc:e2:e3:6c:fc:06:8c: 6e:65:ff:8c:93:4e:1f:a9:8f:e0:c0:07:d1:03:85: f2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BC:09:6D:F8:03:DA:1D:60:1D:A7:AC:B3:C3:A5:EC:5C:2B:61:BE X509v3 Authority Key Identifier: keyid:66:A5:6D:87:04:57:AA:EA:1E:ED:83:1D:71:D3:18:FB:7D:A9:9B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66A56D870457AAEA1EED831D71D318FB7DA99B42.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/66A56D870457AAEA1EED831D71D318FB7DA99B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:38:42:59:b1:cb:be:28:ed:35:c8:f5:ca:10:e8:87:9f:2c: 16:66:04:1e:e4:51:c0:de:38:8c:9f:68:31:f0:b4:0e:1f:4a: 08:f9:3f:06:8f:2d:7f:78:17:0d:63:38:f1:50:91:0e:b7:6d: 09:6d:3f:0b:f4:62:e7:f5:df:78:78:6f:16:4d:20:bf:cf:f2: 6d:d5:15:03:9a:13:19:18:c3:ec:e4:6f:f7:08:e1:ee:e5:75: 16:7a:03:b9:a7:24:e1:12:e2:a0:d7:f5:21:04:99:b8:ea:d4: d3:c7:c8:ab:df:eb:a3:fe:d7:00:06:47:4b:87:5f:6e:aa:07: 08:3b:23:15:cd:9a:e6:e5:0c:3d:0d:e4:00:b6:e5:3d:51:d2: fd:e7:5a:66:8c:55:46:70:b9:97:1e:52:49:f7:11:9c:3d:03: 1a:39:ff:f6:4e:7e:f7:bc:38:19:ee:ba:8f:d6:5a:24:3a:74: 70:73:47:19:8f:71:21:3a:ac:de:bb:8b:30:1b:66:ff:0a:38: 6d:a1:f0:f2:2b:fe:f5:a4:1c:fa:95:d4:a4:fb:48:70:b5:51: 2a:90:60:5d:54:83:f6:8e:3c:bd:ea:df:cb:3d:3c:d1:c9:4a: 72:13:0c:f4:38:2c:a0:86:fd:63:f6:b4:64:1f:9f:cd:27:28: 84:72:9b:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGPGEsXG8f1+OkfvpH8y/FagRKiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNTZEODcwNDU3QUFFQTFFRUQ4MzFENzFEMzE4RkI3 REE5OUI0MjAeFw0yNTExMDUxNjQzMjlaFw0yNTExMDYxODMzMjlaMDMxMTAvBgNV BAMTKENBQkMwOTZERjgwM0RBMUQ2MDFEQTdBQ0IzQzNBNUVDNUMyQjYxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVuiqFatQ7Nx9l5xwGkGEXliN/ ZzuZKEdMtLIwkhopOa4nm4kOse7II0v0umIar7cCBir8wnXwsE61zJqv5PhzTeXq iJZ48f2eMdQ6d1HWQ5O3zz0FTIRlJ3xVc3kHZpcK0bzVYj9makEZayacEbE6iDWP NzL5At1K579inyicKE6DMAGD8fN6SJk8Tkj9C3pJrR/KeAFdKEe1R4cPyMRQIRTk OUiDMPRRVEjkXwyDVNOs93B1NMuJ2HmSiUgQsFSa0j8LeBuGfqyzEjrk6NIa501A CRKPPKRoan5nsU1yoMr0vQE+q/0//OLjbPwGjG5l/4yTTh+pj+DAB9EDhfIdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyrwJbfgD2h1gHaess8Ol7FwrYb4wHwYDVR0j BBgwFoAUZqVthwRXquoe7YMdcdMY+32pm0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVJWQkIzeXg1WnVNaGJ6cTZ5Y0FSdmhFTlhQdzVMZEs1V2RzV2F0a2VO bm0vMC82NkE1NkQ4NzA0NTdBQUVBMUVFRDgzMUQ3MUQzMThGQjdEQTk5QjQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2QTU2RDg3MDQ1N0FBRUEx RUVEODMxRDcxRDMxOEZCN0RBOTlCNDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVJWQkIzeXg1WnVNaGJ6cTZ5Y0FSdmhFTlhQdzVMZEs1V2RzV2F0a2VObm0vMC82 NkE1NkQ4NzA0NTdBQUVBMUVFRDgzMUQ3MUQzMThGQjdEQTk5QjQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEjhCWbHLvijtNcj1yhDoh58sFmYEHuRRwN44jJ9oMfC0Dh9KCPk/Bo8tf3gX DWM48VCRDrdtCW0/C/Ri5/XfeHhvFk0gv8/ybdUVA5oTGRjD7ORv9wjh7uV1FnoD uack4RLioNf1IQSZuOrU08fIq9/ro/7XAAZHS4dfbqoHCDsjFc2a5uUMPQ3kALbl PVHS/edaZoxVRnC5lx5SSfcRnD0DGjn/9k5+97w4Ge66j9ZaJDp0cHNHGY9xITqs 3ruLMBtm/wo4baHw8iv+9aQc+pXUpPtIcLVRKpBgXVSD9o48verfyz080clKchMM 9DgsoIb9Y/a0ZB+fzScohHKbMg== -----END CERTIFICATE-----Generated at Thu Nov 6 04:46:37 2025 by rpki-client