$ rpki-client -vvf rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft File: 66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft (raw, json) Hash identifier: 3np2i9qlqWOOlS4P6k90bYRql8a3vhpgBSMeXEjXr3k= Subject key identifier: 75:F5:62:56:EE:D3:AB:21:F1:41:A3:54:AF:52:D0:BC:10:24:79:95 Authority key identifier: 66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF Certificate issuer: /CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF Certificate serial: 0E0E15BBD5A9353F95B22072EAB4DA584B4F2B5E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer Subject info access: rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft Manifest number: 01DD Signing time: Wed 20 Aug 2025 18:05:35 +0000 Manifest this update: Wed 20 Aug 2025 18:00:35 +0000 Manifest next update: Thu 21 Aug 2025 21:51:35 +0000 Files and hashes: 1: 66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl (hash: 7G+b9mrUJOOOsDnyIaOYEJiEdx8gJRoBFW9/VDac14Y=) 2: 34352e3232372e3130302e302f32322d3234203d3e20323731303234.roa (hash: hAS2i1VbX4dRq2s74k6OVSbnzXxGnFNj+kSSmNb1v0Y=) 3: 323830343a373531633a3a2f33322d3438203d3e20323731303234.roa (hash: kdiCLIBPgvx03r4z0/coVpN45suCV5e0imm5xVT80tc=) 4: 34352e3137392e3130362e302f32332d3234203d3e20323731303234.roa (hash: 5EjfMf4KxyWlNsMGlJvu26qX/Qos07VTS7AOE6/ZL6E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 21:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:0e:15:bb:d5:a9:35:3f:95:b2:20:72:ea:b4:da:58:4b:4f:2b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF Validity Not Before: Aug 20 18:00:35 2025 GMT Not After : Aug 21 21:51:35 2025 GMT Subject: CN=75F56256EED3AB21F141A354AF52D0BC10247995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:79:cc:20:6a:16:75:da:77:0a:e2:cc:5a:f0: 23:01:07:19:fc:3e:70:ac:de:c9:ae:2a:a7:86:34: 9f:ed:1b:43:9d:d7:26:d5:49:b9:b1:db:8f:f1:62: 3f:86:68:20:e1:18:ad:5e:d2:f4:98:5d:ea:7a:19: 96:2d:22:8d:41:bd:60:97:7d:5b:44:29:ac:a8:fd: 22:12:9b:24:28:10:f7:90:c8:32:8b:fc:69:8e:7f: 9c:62:cb:c4:fc:e7:50:a7:f8:c2:ee:b2:ec:7d:bf: 46:b8:48:c7:5c:ef:49:e9:c6:e2:2e:d9:73:d6:cd: 97:2e:f7:ae:12:0b:00:1e:a0:2d:cc:7e:21:43:38: 34:c8:e2:f3:c9:1e:2a:c5:aa:f3:84:12:be:15:8b: 2b:c2:90:5b:51:67:99:14:63:5d:03:2c:42:9b:07: da:07:fd:02:3c:83:0d:cc:75:fa:90:c1:47:49:d5: 45:6b:a5:f5:3e:39:8b:08:1e:7b:8e:76:a6:1c:14: e7:d7:6f:ba:72:84:61:7c:13:ef:59:6c:ac:8b:1b: e9:b7:cb:e8:32:20:34:59:ca:c7:45:49:1b:63:4f: 83:a1:04:0e:ea:64:73:b2:d3:d8:ff:76:6b:c4:85: 79:4d:3e:5d:cc:3f:93:0f:48:af:1c:ca:a2:b3:b7: c3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F5:62:56:EE:D3:AB:21:F1:41:A3:54:AF:52:D0:BC:10:24:79:95 X509v3 Authority Key Identifier: keyid:66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:23:90:4c:1a:12:a4:9e:51:e2:12:df:d5:45:9b:1f:90:94: 61:75:bf:99:1c:05:7d:7b:32:de:0f:12:64:32:58:b8:55:9a: eb:21:35:a0:a3:47:9c:44:2c:38:ac:6c:6b:40:8f:fd:5c:08: 91:1a:c4:4b:94:41:f9:a5:a1:28:ae:2a:56:50:1d:a3:61:ad: ba:50:29:9f:4d:ff:75:23:8f:5d:97:c6:2c:b0:11:22:b6:e1: 93:93:46:e0:ed:92:72:87:bf:20:46:34:9f:f5:6b:76:20:2b: 9f:ea:c8:e9:cf:c0:dd:1a:b3:19:7d:22:9e:0f:05:fb:86:f3: 10:49:23:4d:0d:c7:a0:57:fd:d1:32:73:ab:12:fe:c2:ca:44: 03:98:f1:76:de:b3:6e:43:57:d6:d1:65:53:6c:65:14:df:ee: da:d3:2e:6f:fc:d1:9a:0a:c4:6c:26:79:1a:f5:f0:cc:b0:3f: 89:43:88:79:68:fc:32:92:f7:40:78:5a:6f:5e:59:97:21:6a: 7e:6b:f3:41:11:0e:9b:7c:e2:ac:ad:36:2b:2a:6a:0d:1b:ad: e9:ab:93:ce:21:38:64:c8:b4:3f:ac:48:b3:94:91:22:a7:59: 92:79:96:ee:63:8e:a1:9d:6a:47:fa:4f:df:8b:2a:9a:b9:08: c8:b8:41:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDg4Vu9WpNT+VsiBy6rTaWEtPK14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGREI4NzZDQkEyRTNFMUMxMjA4MDQ1RTk5MEIzOUJE MDk3RUJDRjAeFw0yNTA4MjAxODAwMzVaFw0yNTA4MjEyMTUxMzVaMDMxMTAvBgNV BAMTKDc1RjU2MjU2RUVEM0FCMjFGMTQxQTM1NEFGNTJEMEJDMTAyNDc5OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ecwgahZ12ncK4sxa8CMBBxn8 PnCs3smuKqeGNJ/tG0Od1ybVSbmx24/xYj+GaCDhGK1e0vSYXep6GZYtIo1BvWCX fVtEKayo/SISmyQoEPeQyDKL/GmOf5xiy8T851Cn+MLusux9v0a4SMdc70npxuIu 2XPWzZcu964SCwAeoC3MfiFDODTI4vPJHirFqvOEEr4ViyvCkFtRZ5kUY10DLEKb B9oH/QI8gw3MdfqQwUdJ1UVrpfU+OYsIHnuOdqYcFOfXb7pyhGF8E+9ZbKyLG+m3 y+gyIDRZysdFSRtjT4OhBA7qZHOy09j/dmvEhXlNPl3MP5MPSK8cyqKzt8NjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdfViVu7TqyHxQaNUr1LQvBAkeZUwHwYDVR0j BBgwFoAUZv24dsui4+HBIIBF6ZCzm9CX688wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmFSemFIcWo3RmI5NzFkQTdoY3BFdkxiVndDWXUyTkttOFZDVjZMdzE4 cHIvMC82NkZEQjg3NkNCQTJFM0UxQzEyMDgwNDVFOTkwQjM5QkQwOTdFQkNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RkRCODc2Q0JBMkUzRTFD MTIwODA0NUU5OTBCMzlCRDA5N0VCQ0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmFSemFIcWo3RmI5NzFkQTdoY3BFdkxiVndDWXUyTkttOFZDVjZMdzE4cHIvMC82 NkZEQjg3NkNCQTJFM0UxQzEyMDgwNDVFOTkwQjM5QkQwOTdFQkNGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWCOQTBoSpJ5R4hLf1UWbH5CUYXW/mRwFfXsy3g8SZDJYuFWa6yE1oKNHnEQs OKxsa0CP/VwIkRrES5RB+aWhKK4qVlAdo2GtulApn03/dSOPXZfGLLARIrbhk5NG 4O2Scoe/IEY0n/VrdiArn+rI6c/A3RqzGX0ing8F+4bzEEkjTQ3HoFf90TJzqxL+ wspEA5jxdt6zbkNX1tFlU2xlFN/u2tMub/zRmgrEbCZ5GvXwzLA/iUOIeWj8MpL3 QHhab15ZlyFqfmvzQREOm3zirK02KypqDRut6auTziE4ZMi0P6xIs5SRIqdZknmW 7mOOoZ1qR/pP34sqmrkIyLhBYw== -----END CERTIFICATE-----Generated at Wed Aug 20 21:37:44 2025 by rpki-client