$ rpki-client -vvf rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft File: 67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft (raw, json) Hash identifier: j1Eb+jBZT2G56PoQx7gSdLgzEiPVYDVcvIK1HAlqXjg= Subject key identifier: 69:11:0C:B3:C2:10:A6:FB:5F:2B:EA:C2:76:01:4F:AB:12:C8:49:C5 Authority key identifier: 67:BB:A3:6A:CE:F5:5F:A3:40:77:F9:33:50:84:CB:97:EB:51:FE:E3 Certificate issuer: /CN=67BBA36ACEF55FA34077F9335084CB97EB51FEE3 Certificate serial: 5DE43F9292DAFD1B6DB5B133B43791EB7DBBF265 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer Subject info access: rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft Manifest number: 45 Signing time: Wed 20 Aug 2025 12:23:19 +0000 Manifest this update: Wed 20 Aug 2025 12:18:17 +0000 Manifest next update: Thu 21 Aug 2025 15:30:17 +0000 Files and hashes: 1: 67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl (hash: RSlyHORG3KtnC9NNn+/1KFIreSs/AR7cKGYCH4h2pGw=) 2: 3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa (hash: JcmfPmpVMYSjiABXB2wmedmpymwinDaIZJseON+XBkg=) 3: 323830343a6632343a3a2f33322d313238203d3e20323633353637.roa (hash: mjK/zjt4yzwTGIANGxBfkRBdXiLh2Sa/ZJrRKHITJgU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 15:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e4:3f:92:92:da:fd:1b:6d:b5:b1:33:b4:37:91:eb:7d:bb:f2:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67BBA36ACEF55FA34077F9335084CB97EB51FEE3 Validity Not Before: Aug 20 12:18:17 2025 GMT Not After : Aug 21 15:30:17 2025 GMT Subject: CN=69110CB3C210A6FB5F2BEAC276014FAB12C849C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9f:c1:71:f8:45:08:9b:28:02:3b:78:81:91: a2:33:b8:78:72:ab:80:1f:44:29:2c:15:89:4c:f4: cc:4b:88:02:7e:ab:52:55:33:a5:13:c2:45:2a:1f: 92:25:6a:c9:02:fb:2b:18:b0:2b:9d:bb:34:f1:08: 41:ed:6b:dc:ee:a1:29:ef:1b:3f:6c:35:6d:48:2c: cc:a4:53:7b:8d:fd:1d:5b:5d:46:89:01:05:06:62: 1e:b2:4a:f0:dd:a7:aa:ac:2b:c5:03:6b:73:ab:76: 52:5e:54:cf:51:61:eb:30:b1:ea:c3:d3:32:09:fd: 0c:a0:f4:5a:20:a2:fb:35:bb:0e:50:04:55:7c:e9: 21:a9:d1:77:5f:0b:7c:02:fe:32:db:e9:d2:8d:4b: a0:3b:da:8d:cc:c6:87:a3:53:b7:76:b1:98:9a:db: 93:24:f1:a6:23:7b:7b:c9:c5:70:59:2d:76:70:3a: 9b:97:24:e9:d6:67:cd:0f:c3:ac:5e:64:de:c5:22: 07:45:cb:da:a4:98:36:7c:1f:d7:d3:92:8a:20:1d: a3:73:57:19:5b:49:36:74:f3:09:09:67:8a:64:f2: b1:ec:1f:27:f8:5e:c5:9a:52:d8:60:00:4a:c9:bf: ca:fd:3e:5f:e9:11:f8:b2:9b:4c:80:28:c9:83:da: cd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:11:0C:B3:C2:10:A6:FB:5F:2B:EA:C2:76:01:4F:AB:12:C8:49:C5 X509v3 Authority Key Identifier: keyid:67:BB:A3:6A:CE:F5:5F:A3:40:77:F9:33:50:84:CB:97:EB:51:FE:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:dd:6e:e4:a4:e8:bc:7a:dc:01:bc:ad:a1:14:96:19:46:38: 59:38:1a:a0:75:b4:c9:c1:4c:74:9d:c5:49:42:28:6a:bc:d7: 1c:60:a5:88:6b:9b:0f:b7:88:bb:1c:18:1f:c8:89:47:8b:ae: 0c:c3:6d:d1:eb:4d:53:9b:b4:1a:04:66:d4:ef:a7:92:e1:db: 8c:5f:e9:4a:00:2f:f1:98:cf:ce:5f:c3:78:19:45:be:f4:df: 9a:f2:e3:71:1a:9f:da:4f:b2:d8:c2:d9:93:15:6b:50:97:70: cb:fe:16:a5:0b:f2:0d:26:64:b3:a4:25:ca:07:d7:b3:d5:4b: b7:70:f6:50:21:53:9a:9d:25:6e:04:47:ab:43:70:79:c7:d2: b6:17:1c:67:93:98:11:7b:c1:d7:0c:17:cf:0e:a2:3f:80:9c: 9f:c5:fe:97:d1:a6:bb:2e:6c:15:a3:34:b5:b0:c3:1c:84:cd: 86:d2:8a:d0:1a:b1:c2:1f:68:1e:71:6d:78:80:0a:41:1c:44: 95:dc:a9:f2:4c:fa:a5:0f:d4:d4:d5:ac:e5:6b:9d:16:2f:af: c5:f1:07:14:25:bd:30:35:74:3d:d5:5c:ef:c8:20:74:dc:e2: 34:13:f2:97:04:4b:74:7a:5e:2f:39:f8:8a:fc:02:72:85:31: e6:05:52:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXeQ/kpLa/RtttbEztDeR63278mUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCQkEzNkFDRUY1NUZBMzQwNzdGOTMzNTA4NENCOTdF QjUxRkVFMzAeFw0yNTA4MjAxMjE4MTdaFw0yNTA4MjExNTMwMTdaMDMxMTAvBgNV BAMTKDY5MTEwQ0IzQzIxMEE2RkI1RjJCRUFDMjc2MDE0RkFCMTJDODQ5QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIn8Fx+EUImygCO3iBkaIzuHhy q4AfRCksFYlM9MxLiAJ+q1JVM6UTwkUqH5IlaskC+ysYsCuduzTxCEHta9zuoSnv Gz9sNW1ILMykU3uN/R1bXUaJAQUGYh6ySvDdp6qsK8UDa3OrdlJeVM9RYeswserD 0zIJ/Qyg9Fogovs1uw5QBFV86SGp0XdfC3wC/jLb6dKNS6A72o3MxoejU7d2sZia 25Mk8aYje3vJxXBZLXZwOpuXJOnWZ80Pw6xeZN7FIgdFy9qkmDZ8H9fTkoogHaNz VxlbSTZ08wkJZ4pk8rHsHyf4XsWaUthgAErJv8r9Pl/pEfiym0yAKMmD2s2BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaREMs8IQpvtfK+rCdgFPqxLIScUwHwYDVR0j BBgwFoAUZ7ujas71X6NAd/kzUITLl+tR/uMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVhwZ3VOQmdDdlpWSnBWM2VZYVFoTGNvY0tpMVZjbkpwMkF6SGdpNk5Z ckEvMC82N0JCQTM2QUNFRjU1RkEzNDA3N0Y5MzM1MDg0Q0I5N0VCNTFGRUUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3QkJBMzZBQ0VGNTVGQTM0 MDc3RjkzMzUwODRDQjk3RUI1MUZFRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVhwZ3VOQmdDdlpWSnBWM2VZYVFoTGNvY0tpMVZjbkpwMkF6SGdpNk5ZckEvMC82 N0JCQTM2QUNFRjU1RkEzNDA3N0Y5MzM1MDg0Q0I5N0VCNTFGRUUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsN1u5KTovHrcAbytoRSWGUY4WTgaoHW0ycFMdJ3FSUIoarzXHGCliGubD7eI uxwYH8iJR4uuDMNt0etNU5u0GgRm1O+nkuHbjF/pSgAv8ZjPzl/DeBlFvvTfmvLj cRqf2k+y2MLZkxVrUJdwy/4WpQvyDSZks6QlygfXs9VLt3D2UCFTmp0lbgRHq0Nw ecfSthccZ5OYEXvB1wwXzw6iP4Ccn8X+l9Gmuy5sFaM0tbDDHITNhtKK0Bqxwh9o HnFteIAKQRxEldyp8kz6pQ/U1NWs5WudFi+vxfEHFCW9MDV0PdVc78ggdNziNBPy lwRLdHpeLzn4ivwCcoUx5gVS8A== -----END CERTIFICATE-----Generated at Wed Aug 20 21:31:39 2025 by rpki-client