$ rpki-client -vvf rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft File: 67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft (raw, json) Hash identifier: MTNBkvI1oDQLzpnBZIR5yWOAPJEkSZB5SeW9xUzMYX8= Subject key identifier: C9:A7:F4:A7:8D:AE:83:90:02:96:A1:94:21:A7:47:60:6E:71:CE:59 Authority key identifier: 67:BB:A3:6A:CE:F5:5F:A3:40:77:F9:33:50:84:CB:97:EB:51:FE:E3 Certificate issuer: /CN=67BBA36ACEF55FA34077F9335084CB97EB51FEE3 Certificate serial: 3876B74DDACB69A312050AEA73D13E9AC47731F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer Subject info access: rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft Manifest number: A7 Signing time: Sun 02 Nov 2025 21:28:03 +0000 Manifest this update: Sun 02 Nov 2025 21:23:03 +0000 Manifest next update: Tue 04 Nov 2025 01:13:03 +0000 Files and hashes: 1: 67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl (hash: Q0KqfF7WKttovH6dlliTEIjbD4mSrs+kGPftn2zoVXQ=) 2: 323830343a6632343a3a2f33322d313238203d3e20323633353637.roa (hash: mjK/zjt4yzwTGIANGxBfkRBdXiLh2Sa/ZJrRKHITJgU=) 3: 3137392e3130392e33322e302f32302d3332203d3e20323633353637.roa (hash: JcmfPmpVMYSjiABXB2wmedmpymwinDaIZJseON+XBkg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 01:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:76:b7:4d:da:cb:69:a3:12:05:0a:ea:73:d1:3e:9a:c4:77:31:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67BBA36ACEF55FA34077F9335084CB97EB51FEE3 Validity Not Before: Nov 2 21:23:03 2025 GMT Not After : Nov 4 01:13:03 2025 GMT Subject: CN=C9A7F4A78DAE83900296A19421A747606E71CE59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cb:60:68:bc:e3:b4:67:15:01:b2:83:2a:f5: b3:ca:0e:10:27:df:b8:62:e4:da:18:e8:4c:fe:65: fd:ac:98:a6:67:09:66:ad:18:7a:7a:db:a4:c5:e8: 61:30:c4:72:cb:7e:60:85:81:31:af:b5:9f:23:b9: 69:e6:f8:c6:cf:e1:98:ef:6a:a9:14:4b:2e:96:16: 0c:12:9f:5a:16:0d:53:15:0d:a0:20:4e:fb:ce:a6: b6:62:e2:2c:91:cd:86:6b:b7:ba:69:df:33:7f:e6: d6:41:a6:77:aa:6d:c7:66:82:bc:12:bd:85:54:42: 9e:be:ec:27:61:2d:7c:d6:21:cf:54:ae:94:62:a0: 3d:3a:66:9d:a2:f6:b7:45:2f:d9:31:ab:ef:46:8a: 78:c7:45:90:5f:4d:21:d1:28:31:62:c2:16:f0:c5: a9:10:6f:b9:67:eb:4e:30:4c:60:43:97:3a:38:02: 83:9c:86:e8:18:cc:09:d7:cc:78:01:21:43:ad:8a: 2a:27:4f:35:a1:5c:3c:8b:29:af:57:c3:b2:ad:91: a6:18:2c:0c:73:f0:4f:41:05:db:6f:50:e1:dc:07: 9c:29:29:e7:f5:7f:c9:c7:a4:63:c1:5a:65:9a:a3: 63:38:1b:7f:67:e5:67:47:f9:80:ca:26:32:92:e3: c5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A7:F4:A7:8D:AE:83:90:02:96:A1:94:21:A7:47:60:6E:71:CE:59 X509v3 Authority Key Identifier: keyid:67:BB:A3:6A:CE:F5:5F:A3:40:77:F9:33:50:84:CB:97:EB:51:FE:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/0/67BBA36ACEF55FA34077F9335084CB97EB51FEE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:42:be:cf:80:4d:b4:4c:a3:58:b0:33:0a:45:6d:72:79:07: 85:0c:d2:33:59:9b:16:1b:2d:97:3f:ab:4d:1a:16:d7:38:65: be:f9:47:98:74:9a:6f:2a:b9:00:27:3c:32:5b:3e:4b:eb:61: f1:07:a9:ef:d3:31:5e:da:2f:f4:ff:bf:e9:fc:20:91:f4:96: 1c:2e:4d:ed:88:22:57:da:14:0d:e0:af:3e:42:39:67:51:b7: cf:81:80:0b:c1:2a:69:35:c6:32:28:40:0c:bf:03:b0:80:47: 23:9e:39:90:24:fe:cc:12:61:2f:e3:e7:5b:0f:db:b6:d0:52: ff:e1:a5:a3:45:34:44:28:ae:37:30:1a:11:66:b9:9d:c2:d6: 9b:e7:ec:bd:07:8c:d8:c2:df:85:7f:60:c8:f2:67:bf:ce:94: 23:ad:57:3f:8b:ec:66:4e:b4:99:6f:aa:08:77:7e:39:47:9e: 35:0b:ae:75:23:7b:1c:43:4d:bf:7b:c5:67:78:47:33:c5:98: 0b:9f:4d:fd:63:b5:f5:4b:2a:a7:f7:49:db:9e:51:9b:73:be: f1:04:e9:4b:2e:40:1d:5e:04:d0:fc:04:cf:1c:19:3c:33:6d: e8:5d:7d:b5:71:e8:29:f1:1e:5d:7f:08:46:d2:4b:67:0f:c5: 77:fc:bc:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOHa3TdrLaaMSBQrqc9E+msR3MfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCQkEzNkFDRUY1NUZBMzQwNzdGOTMzNTA4NENCOTdF QjUxRkVFMzAeFw0yNTExMDIyMTIzMDNaFw0yNTExMDQwMTEzMDNaMDMxMTAvBgNV BAMTKEM5QTdGNEE3OERBRTgzOTAwMjk2QTE5NDIxQTc0NzYwNkU3MUNFNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3y2BovOO0ZxUBsoMq9bPKDhAn 37hi5NoY6Ez+Zf2smKZnCWatGHp626TF6GEwxHLLfmCFgTGvtZ8juWnm+MbP4Zjv aqkUSy6WFgwSn1oWDVMVDaAgTvvOprZi4iyRzYZrt7pp3zN/5tZBpneqbcdmgrwS vYVUQp6+7CdhLXzWIc9UrpRioD06Zp2i9rdFL9kxq+9GinjHRZBfTSHRKDFiwhbw xakQb7ln604wTGBDlzo4AoOchugYzAnXzHgBIUOtiionTzWhXDyLKa9Xw7KtkaYY LAxz8E9BBdtvUOHcB5wpKef1f8nHpGPBWmWao2M4G39n5WdH+YDKJjKS48WlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyaf0p42ug5AClqGUIadHYG5xzlkwHwYDVR0j BBgwFoAUZ7ujas71X6NAd/kzUITLl+tR/uMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVhwZ3VOQmdDdlpWSnBWM2VZYVFoTGNvY0tpMVZjbkpwMkF6SGdpNk5Z ckEvMC82N0JCQTM2QUNFRjU1RkEzNDA3N0Y5MzM1MDg0Q0I5N0VCNTFGRUUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3QkJBMzZBQ0VGNTVGQTM0 MDc3RjkzMzUwODRDQjk3RUI1MUZFRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVhwZ3VOQmdDdlpWSnBWM2VZYVFoTGNvY0tpMVZjbkpwMkF6SGdpNk5ZckEvMC82 N0JCQTM2QUNFRjU1RkEzNDA3N0Y5MzM1MDg0Q0I5N0VCNTFGRUUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABEK+z4BNtEyjWLAzCkVtcnkHhQzSM1mbFhstlz+rTRoW1zhlvvlHmHSabyq5 ACc8Mls+S+th8Qep79MxXtov9P+/6fwgkfSWHC5N7YgiV9oUDeCvPkI5Z1G3z4GA C8EqaTXGMihADL8DsIBHI545kCT+zBJhL+PnWw/bttBS/+Glo0U0RCiuNzAaEWa5 ncLWm+fsvQeM2MLfhX9gyPJnv86UI61XP4vsZk60mW+qCHd+OUeeNQuudSN7HENN v3vFZ3hHM8WYC59N/WO19Usqp/dJ255Rm3O+8QTpSy5AHV4E0PwEzxwZPDNt6F19 tXHoKfEeXX8IRtJLZw/Fd/y8hg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:24:58 2025 by rpki-client