$ rpki-client -vvf rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft File: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft (raw, json) Hash identifier: YfGn89NQCUi70CCSPsz9bu1KlGoY0jbFvi26/zqEfWg= Subject key identifier: 3D:BA:6F:0B:7F:0C:E5:05:1E:5D:02:5E:E7:D0:3B:87:23:2B:1D:90 Authority key identifier: D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11 Certificate issuer: /CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211 Certificate serial: 3CEA1718F6575EF0F20AD6D6652A5BC0EBB1D6E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer Subject info access: rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft Manifest number: 67 Signing time: Wed 20 Aug 2025 05:42:18 +0000 Manifest this update: Wed 20 Aug 2025 05:37:18 +0000 Manifest next update: Thu 21 Aug 2025 08:14:18 +0000 Files and hashes: 1: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl (hash: M2O32w3T0q9wM8BxqYAZFx1n75F8QM56P/Qr5KrJDIg=) 2: 323830343a386262633a3a2f33322d313238203d3e20323733373535.roa (hash: 3uQTnhhz7H1wtPzniSKTigXw3gRffdvQaJmnZ+hmrrA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 08:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ea:17:18:f6:57:5e:f0:f2:0a:d6:d6:65:2a:5b:c0:eb:b1:d6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211 Validity Not Before: Aug 20 05:37:18 2025 GMT Not After : Aug 21 08:14:18 2025 GMT Subject: CN=3DBA6F0B7F0CE5051E5D025EE7D03B87232B1D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c2:2e:cc:a9:b7:01:2e:0f:d6:78:33:4f:e6: c3:16:9d:39:d0:d5:d0:0a:a8:ad:47:c6:3d:83:67: 96:9a:43:56:6f:a7:73:c5:a3:16:44:9a:c8:73:d9: 25:95:e0:e7:40:cd:89:85:f1:0c:05:8f:f2:f0:cf: 07:b2:a1:5d:45:8b:b1:65:67:39:bd:b6:46:42:1b: f2:ab:11:c0:fc:3b:23:04:1c:dc:97:79:de:3d:fc: 4d:51:8b:53:d1:bf:60:63:e5:32:e7:bf:28:19:f3: 57:89:ab:6b:f9:41:07:28:1d:05:75:e2:6e:02:33: 47:f5:e0:ae:05:06:54:c0:69:3c:39:de:ae:2f:95: 22:9b:ca:9a:5e:e6:77:35:45:f4:eb:53:78:42:a0: cb:ce:f8:83:58:3c:e1:83:03:6f:47:e1:60:82:9d: 92:43:e5:65:9a:40:71:be:6e:35:a6:70:48:20:5b: 7f:cc:8d:e5:7b:c1:97:fd:a2:04:05:66:f7:a3:4e: b4:ee:bf:65:4a:be:17:90:b8:f6:b2:3e:fc:e6:b4: 64:1f:22:dd:44:f1:16:ca:25:99:80:44:4d:6d:a9: bd:f5:1e:e8:1f:32:d8:69:c9:b2:d3:ca:d6:b7:09: 8f:aa:6c:88:50:63:6a:f0:27:48:04:d0:32:e0:4d: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BA:6F:0B:7F:0C:E5:05:1E:5D:02:5E:E7:D0:3B:87:23:2B:1D:90 X509v3 Authority Key Identifier: keyid:D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:25:34:d1:2c:60:ff:f4:a6:26:67:8f:91:8a:e2:3d:c4:7b: 5e:b4:b2:5c:93:66:6c:dd:26:d1:07:52:7f:f6:6c:66:1f:87: 86:d5:7d:3d:70:95:d7:da:d5:18:2a:80:f2:53:6d:67:42:b4: 61:79:0a:8e:a5:1d:5a:f9:19:95:7f:c2:8d:3a:ac:1e:bd:ac: 46:07:77:bd:6e:1b:96:94:0c:aa:bb:cd:8d:94:cc:45:5f:00: f9:55:53:cf:88:04:48:23:76:b2:aa:08:17:ef:c6:09:71:26: c2:af:3f:8f:e7:82:56:e4:51:ac:a6:fc:92:84:7e:02:6a:04: 3e:1c:f2:2e:e2:4f:f5:bd:c4:aa:33:0e:59:17:ca:15:91:35: f1:77:1a:ec:9a:52:e8:cb:56:87:9d:35:f7:74:73:08:9d:bd: 58:7e:a8:c8:fc:f3:e4:54:1a:a4:94:5e:ea:f9:be:58:35:3f: 69:cb:99:ea:46:92:34:10:05:a2:ea:85:ea:44:b3:d8:0d:a2: 3d:f3:65:d0:e9:b5:eb:be:96:b1:a8:5c:9e:55:8e:b0:65:43: 37:4f:55:ec:1c:a8:2f:ee:10:8b:6f:be:bc:5f:84:08:31:c0: 46:87:41:41:0c:5b:0e:6b:09:7c:65:b1:bd:ca:f1:af:50:18: 07:e0:a2:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPOoXGPZXXvDyCtbWZSpbwOux1ucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3RDNFQUM3RDYwQ0FCN0JFODQxQUY1MkZFNUJEM0JF NzhEQjIxMTAeFw0yNTA4MjAwNTM3MThaFw0yNTA4MjEwODE0MThaMDMxMTAvBgNV BAMTKDNEQkE2RjBCN0YwQ0U1MDUxRTVEMDI1RUU3RDAzQjg3MjMyQjFEOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwi7MqbcBLg/WeDNP5sMWnTnQ 1dAKqK1Hxj2DZ5aaQ1Zvp3PFoxZEmshz2SWV4OdAzYmF8QwFj/LwzweyoV1Fi7Fl Zzm9tkZCG/KrEcD8OyMEHNyXed49/E1Ri1PRv2Bj5TLnvygZ81eJq2v5QQcoHQV1 4m4CM0f14K4FBlTAaTw53q4vlSKbyppe5nc1RfTrU3hCoMvO+INYPOGDA29H4WCC nZJD5WWaQHG+bjWmcEggW3/MjeV7wZf9ogQFZvejTrTuv2VKvheQuPayPvzmtGQf It1E8RbKJZmARE1tqb31HugfMthpybLTyta3CY+qbIhQY2rwJ0gE0DLgTfsdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPbpvC38M5QUeXQJe59A7hyMrHZAwHwYDVR0j BBgwFoAU0H0+rH1gyre+hBr1L+W9O+eNshEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODZoa2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZR eDMvMC9EMDdEM0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwN0QzRUFDN0Q2MENBQjdC RTg0MUFGNTJGRTVCRDNCRTc4REIyMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODZoa2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZReDMvMC9E MDdEM0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMCU00Sxg//SmJmePkYriPcR7XrSyXJNmbN0m0QdSf/ZsZh+HhtV9PXCV19rV GCqA8lNtZ0K0YXkKjqUdWvkZlX/CjTqsHr2sRgd3vW4blpQMqrvNjZTMRV8A+VVT z4gESCN2sqoIF+/GCXEmwq8/j+eCVuRRrKb8koR+AmoEPhzyLuJP9b3EqjMOWRfK FZE18Xca7JpS6MtWh50193RzCJ29WH6oyPzz5FQapJRe6vm+WDU/acuZ6kaSNBAF ouqF6kSz2A2iPfNl0Om1676WsahcnlWOsGVDN09V7ByoL+4Qi2++vF+ECDHARodB QQxbDmsJfGWxvcrxr1AYB+Ci8Q== -----END CERTIFICATE-----Generated at Wed Aug 20 21:12:56 2025 by rpki-client