$ rpki-client -vvf rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.mft File: 70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.mft (raw, json) Hash identifier: vpKj5GfZN7nUCyt+P251GfAJVo48OrpQQWwKTAlSfMA= Subject key identifier: 1A:AC:70:F8:63:35:8B:1B:B6:AE:99:2D:92:7F:88:7B:97:37:1E:63 Authority key identifier: 70:EF:5E:1A:EE:B9:FF:8D:5F:AF:7F:72:DD:2B:B9:0C:BE:10:93:45 Certificate issuer: /CN=70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345 Certificate serial: 5A46A5A161931C4E915AF3464073EB260C3030DB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.mft Manifest number: 0125 Signing time: Thu 18 Sep 2025 01:10:07 +0000 Manifest this update: Thu 18 Sep 2025 01:05:07 +0000 Manifest next update: Fri 19 Sep 2025 04:42:07 +0000 Files and hashes: 1: 3139322e3134312e37362e302f32322d3232203d3e20323637343731.roa (hash: 31GYOHVEb3h1/buaA/2oWZzLdgJpBqjQU0DB29OrJv4=) 2: 323830343a343230303a3a2f33322d3332203d3e20323637343731.roa (hash: 6S+0R47GzCMBrBMBQOI4dDSt/Rq/13LxRdIrP4yVxMY=) 3: 70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.crl (hash: LbICZKWmVmPHxQMZjIEbyVm7QYF2QTXrePkYJopDlJ4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.crl rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 04:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:46:a5:a1:61:93:1c:4e:91:5a:f3:46:40:73:eb:26:0c:30:30:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345 Validity Not Before: Sep 18 01:05:07 2025 GMT Not After : Sep 19 04:42:07 2025 GMT Subject: CN=1AAC70F863358B1BB6AE992D927F887B97371E63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:53:c7:f2:e0:00:de:98:61:87:16:a1:e8:62: 0f:50:3e:e9:db:43:4d:d2:62:e1:44:24:a1:df:8d: a8:f4:14:4c:00:22:88:87:e9:d4:5d:4b:a7:eb:37: bc:1f:01:6b:cc:b8:1b:14:92:33:3d:fd:a2:28:0b: 5b:da:a7:17:b0:37:1b:fb:6a:2d:a3:78:57:bb:75: 71:cd:ee:29:6d:dc:0b:2a:d0:ee:b2:8d:99:5e:88: b3:d2:cf:7b:d6:fc:68:99:3d:05:75:95:f4:13:a0: 5e:6b:25:10:28:e0:4f:7e:98:dc:5e:3d:37:4f:69: 30:df:f1:9d:5c:67:a7:f2:bd:34:cd:22:52:5d:ca: a8:5e:23:31:1b:4b:61:b7:42:42:95:f3:96:40:70: 15:fe:40:5e:47:ca:e5:13:ad:62:22:da:87:8a:9f: a7:aa:9d:44:c4:85:ff:5a:47:e8:6f:79:e1:d7:be: a4:66:89:61:1b:1a:60:99:a3:c0:96:e4:a6:ee:c8: a3:8c:e0:5f:46:62:99:c0:0e:f6:b0:6e:db:ea:94: 4b:e1:6b:86:bf:66:6a:ad:07:4d:f7:49:9a:9f:8b: 5c:b8:c5:ed:c1:75:5c:24:ae:d6:1b:8c:09:9b:a9: 04:1b:ce:13:62:cc:eb:87:ca:37:de:8c:3d:bb:8b: 4e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AC:70:F8:63:35:8B:1B:B6:AE:99:2D:92:7F:88:7B:97:37:1E:63 X509v3 Authority Key Identifier: keyid:70:EF:5E:1A:EE:B9:FF:8D:5F:AF:7F:72:DD:2B:B9:0C:BE:10:93:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7d:ba:22:4e:f2:2f:ad:19:f2:b5:50:4e:ad:da:5c:38:38: d0:5e:38:70:00:6a:f0:73:bd:5c:bc:0d:9b:95:7e:e7:36:a6: 00:88:1b:fa:db:b6:4e:33:84:05:0b:17:80:5f:b5:37:d5:d1: 4e:fa:82:fd:fb:81:00:05:56:09:9d:83:a7:24:2f:10:22:95: fd:ca:94:37:8c:5c:11:4e:a2:29:6b:d2:f7:44:e4:00:1d:25: 3e:e0:b1:03:b3:d4:1e:dd:e3:a6:b3:7d:4d:5c:16:87:fa:f9: 18:e0:c2:c6:cb:81:d3:06:71:6f:f5:f1:11:f6:97:2e:4d:50: e9:e4:89:41:89:95:80:3e:79:2d:4a:87:08:2b:74:0b:c3:ea: 12:ca:37:32:33:04:5b:7d:06:a4:83:c0:15:ba:50:e8:88:99: c8:c1:71:87:a0:7e:39:0e:47:9e:22:7c:f6:05:f2:1d:a6:95: 42:be:cd:d4:c8:8b:44:b4:78:dd:ae:9a:89:24:6a:af:fd:6c: 47:c0:38:79:6a:86:0a:47:2c:1a:8b:03:af:64:96:63:6f:76: 3f:5e:7d:41:92:a5:19:15:64:2b:04:67:ed:fa:f6:a2:29:43: 25:8b:1e:93:92:9d:4b:d9:48:62:f8:8f:73:2d:56:e3:fd:90: 7a:37:98:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWkaloWGTHE6RWvNGQHPrJgwwMNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBFRjVFMUFFRUI5RkY4RDVGQUY3RjcyREQyQkI5MENC RTEwOTM0NTAeFw0yNTA5MTgwMTA1MDdaFw0yNTA5MTkwNDQyMDdaMDMxMTAvBgNV BAMTKDFBQUM3MEY4NjMzNThCMUJCNkFFOTkyRDkyN0Y4ODdCOTczNzFFNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqU8fy4ADemGGHFqHoYg9QPunb Q03SYuFEJKHfjaj0FEwAIoiH6dRdS6frN7wfAWvMuBsUkjM9/aIoC1vapxewNxv7 ai2jeFe7dXHN7ilt3Asq0O6yjZleiLPSz3vW/GiZPQV1lfQToF5rJRAo4E9+mNxe PTdPaTDf8Z1cZ6fyvTTNIlJdyqheIzEbS2G3QkKV85ZAcBX+QF5HyuUTrWIi2oeK n6eqnUTEhf9aR+hveeHXvqRmiWEbGmCZo8CW5KbuyKOM4F9GYpnADvawbtvqlEvh a4a/ZmqtB033SZqfi1y4xe3BdVwkrtYbjAmbqQQbzhNizOuHyjfejD27i05PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGqxw+GM1ixu2rpktkn+Ie5c3HmMwHwYDVR0j BBgwFoAUcO9eGu65/41fr39y3Su5DL4Qk0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1lTYmRnMmRmVTl6S3FmbnN4U3BpYzhuRHB5RmJBN3R6N2VVRDhmUzV4 RHAvMC83MEVGNUUxQUVFQjlGRjhENUZBRjdGNzJERDJCQjkwQ0JFMTA5MzQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwRUY1RTFBRUVCOUZGOEQ1 RkFGN0Y3MkREMkJCOTBDQkUxMDkzNDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1lTYmRnMmRmVTl6S3FmbnN4U3BpYzhuRHB5RmJBN3R6N2VVRDhmUzV4RHAvMC83 MEVGNUUxQUVFQjlGRjhENUZBRjdGNzJERDJCQjkwQ0JFMTA5MzQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIX26Ik7yL60Z8rVQTq3aXDg40F44cABq8HO9XLwNm5V+5zamAIgb+tu2TjOE BQsXgF+1N9XRTvqC/fuBAAVWCZ2DpyQvECKV/cqUN4xcEU6iKWvS90TkAB0lPuCx A7PUHt3jprN9TVwWh/r5GODCxsuB0wZxb/XxEfaXLk1Q6eSJQYmVgD55LUqHCCt0 C8PqEso3MjMEW30GpIPAFbpQ6IiZyMFxh6B+OQ5HniJ89gXyHaaVQr7N1MiLRLR4 3a6aiSRqr/1sR8A4eWqGCkcsGosDr2SWY292P159QZKlGRVkKwRn7fr2oilDJYse k5KdS9lIYviPcy1W4/2QejeYZQ== -----END CERTIFICATE-----Generated at Thu Sep 18 10:54:02 2025 by rpki-client