$ rpki-client -vvf rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft File: 66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft (raw, json) Hash identifier: paEeGuj7/Qu3vjzbTJ+mtZhL+7NGIY+nIwx10+KKOBU= Subject key identifier: 97:FE:4C:22:31:6A:E6:CD:DE:27:4E:50:E6:3D:7E:BA:EE:72:65:A3 Authority key identifier: 66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A Certificate issuer: /CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A Certificate serial: 0AFF117E6B48002CA24E494CE4E03D1FAB4B2B6D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer Subject info access: rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft Manifest number: 0120 Signing time: Mon 03 Nov 2025 08:52:55 +0000 Manifest this update: Mon 03 Nov 2025 08:47:55 +0000 Manifest next update: Tue 04 Nov 2025 10:08:55 +0000 Files and hashes: 1: 66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl (hash: iC36GqippwlWQUM5q1bPKRA6KImIBeQwhhwp/dRr6gs=) 2: 34352e37312e3233362e302f32342d3234203d3e20323637363235.roa (hash: VUTn+Y8YyzHneDvvRQcoyorG1q5ZDQSxPkSxk5vT2hY=) 3: 34352e37312e3233382e302f32342d3234203d3e20323637363235.roa (hash: usuDM2FAYkWoIM3CCbZCOoUM273ijs0GyzSA6Jp+vII=) 4: 34352e37312e3233392e302f32342d3234203d3e20323637363235.roa (hash: hPSaKo57ySusHDN0f4CdKQ0QS4fQ2++vIqAa8DQVylk=) 5: 34352e37312e3233372e302f32342d3234203d3e20323637363235.roa (hash: iUnbmlTouB10xnx8TOK+EWUlJuN+cWOIF6iqgO4OrK4=) 6: 34352e37312e3233362e302f32322d3233203d3e20323637363235.roa (hash: 9Ayla/+sosVGnmtIxYAHJNLCvzWyM6XzIGWav1hvbBg=) 7: 323830343a343435343a3a2f33322d3438203d3e20323637363235.roa (hash: /WjYyisieWtzaIuL75i3lmBc4NoZr/0fgfXNHo2u2Is=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ff:11:7e:6b:48:00:2c:a2:4e:49:4c:e4:e0:3d:1f:ab:4b:2b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66D4FE79ED8A8E0D195041C335EEB1B748A12F0A Validity Not Before: Nov 3 08:47:55 2025 GMT Not After : Nov 4 10:08:55 2025 GMT Subject: CN=97FE4C22316AE6CDDE274E50E63D7EBAEE7265A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ee:c1:e5:55:4b:94:d6:d4:4d:80:1e:46:df: 99:21:ec:9d:09:19:2b:82:60:47:5d:07:76:4e:ee: a0:c9:3b:d0:82:27:41:17:2e:85:a7:9b:fe:a1:d9: 0e:7a:6a:a5:45:d3:ff:69:2b:20:1a:d0:55:2b:fc: 37:45:d5:f7:23:56:15:e6:56:ad:f7:ee:a4:7e:8f: fd:39:d4:8e:fd:bd:ce:73:25:3f:fe:f8:2a:2f:9b: 30:4a:21:b9:94:58:e4:9d:89:82:e1:29:c6:22:c9: b9:2a:ce:7f:11:f7:5a:53:c8:1e:92:ff:c3:d6:60: 6f:7c:79:87:f6:cf:02:05:98:55:f3:ae:fe:c7:78: 93:1a:de:f6:50:0a:99:15:d8:cc:9d:a5:2d:40:94: 24:53:10:aa:59:a5:35:46:b8:ef:4b:06:c4:86:0c: a4:47:be:48:05:50:6f:8f:2c:d3:88:38:02:c3:11: 98:37:a8:55:c0:03:87:d9:18:2c:80:f2:fa:6c:f5: 5f:49:32:89:db:06:b3:31:bc:33:e6:f8:68:25:72: 1f:fb:46:e3:74:cb:ce:87:87:cb:aa:ef:c7:d6:90: e0:53:51:7e:fa:1c:d4:94:27:02:2a:fc:ce:26:29: 8a:7c:58:26:cf:15:a8:bb:70:d8:63:28:a9:1d:bf: ba:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FE:4C:22:31:6A:E6:CD:DE:27:4E:50:E6:3D:7E:BA:EE:72:65:A3 X509v3 Authority Key Identifier: keyid:66:D4:FE:79:ED:8A:8E:0D:19:50:41:C3:35:EE:B1:B7:48:A1:2F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ACZjHpkAeWL7QWzbw5YtBCAUpGqNjRxmkFJfFms4U6GF/0/66D4FE79ED8A8E0D195041C335EEB1B748A12F0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:6a:7e:1a:a3:4d:02:f0:2b:b1:a2:da:3d:8b:a6:21:b7:0d: b3:80:c6:bc:8b:f0:bd:31:3d:10:47:68:bf:7a:b1:7e:12:45: 37:85:e8:4a:8f:33:95:47:ac:fb:fa:8b:88:db:eb:cf:dc:bd: 18:a4:c4:54:ea:35:b5:4b:b5:75:2e:24:9b:1b:3a:b2:50:fd: b7:34:82:65:14:2b:c6:32:2d:96:4b:05:b3:57:85:b7:a4:f9: fd:b6:14:c7:6d:c9:a3:c5:b0:c3:81:1d:a8:3a:be:ad:bc:b4: 2f:8d:7c:55:62:ed:fb:42:02:bd:9c:47:6b:a3:47:8c:34:2a: 97:2c:f5:be:2c:34:5c:76:4b:c1:92:ff:12:02:b7:b0:bd:ca: 24:78:ea:15:a6:9f:6c:ea:44:5f:9d:8c:99:06:e7:76:78:25: d5:1f:16:e4:be:c8:fe:50:85:38:0d:00:0d:52:e0:89:3a:bf: 8c:17:6f:9e:ea:c8:b4:27:e8:8a:77:5f:25:ba:b9:1d:5d:b5: e1:fe:6e:77:75:95:5f:a9:70:28:64:44:1f:77:d5:ff:ff:76: 90:1e:2e:33:ca:88:46:1d:0c:9a:db:43:76:e1:ce:52:8e:f6: f3:80:42:01:1c:ae:38:0d:7a:be:2d:0c:f8:d4:e4:25:7d:bd: 47:35:cc:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCv8RfmtIACyiTklM5OA9H6tLK20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZENEZFNzlFRDhBOEUwRDE5NTA0MUMzMzVFRUIxQjc0 OEExMkYwQTAeFw0yNTExMDMwODQ3NTVaFw0yNTExMDQxMDA4NTVaMDMxMTAvBgNV BAMTKDk3RkU0QzIyMzE2QUU2Q0RERTI3NEU1MEU2M0Q3RUJBRUU3MjY1QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe7sHlVUuU1tRNgB5G35kh7J0J GSuCYEddB3ZO7qDJO9CCJ0EXLoWnm/6h2Q56aqVF0/9pKyAa0FUr/DdF1fcjVhXm Vq337qR+j/051I79vc5zJT/++CovmzBKIbmUWOSdiYLhKcYiybkqzn8R91pTyB6S /8PWYG98eYf2zwIFmFXzrv7HeJMa3vZQCpkV2MydpS1AlCRTEKpZpTVGuO9LBsSG DKRHvkgFUG+PLNOIOALDEZg3qFXAA4fZGCyA8vps9V9JMonbBrMxvDPm+Gglch/7 RuN0y86Hh8uq78fWkOBTUX76HNSUJwIq/M4mKYp8WCbPFai7cNhjKKkdv7rBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUl/5MIjFq5s3eJ05Q5j1+uu5yZaMwHwYDVR0j BBgwFoAUZtT+ee2Kjg0ZUEHDNe6xt0ihLwowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUNaakhwa0FlV0w3UVd6Ync1WXRCQ0FVcEdxTmpSeG1rRkpmRm1zNFU2 R0YvMC82NkQ0RkU3OUVEOEE4RTBEMTk1MDQxQzMzNUVFQjFCNzQ4QTEyRjBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RDRGRTc5RUQ4QThFMEQx OTUwNDFDMzM1RUVCMUI3NDhBMTJGMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUNaakhwa0FlV0w3UVd6Ync1WXRCQ0FVcEdxTmpSeG1rRkpmRm1zNFU2R0YvMC82 NkQ0RkU3OUVEOEE4RTBEMTk1MDQxQzMzNUVFQjFCNzQ4QTEyRjBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlWp+GqNNAvArsaLaPYumIbcNs4DGvIvwvTE9EEdov3qxfhJFN4XoSo8zlUes +/qLiNvrz9y9GKTEVOo1tUu1dS4kmxs6slD9tzSCZRQrxjItlksFs1eFt6T5/bYU x23Jo8Www4EdqDq+rby0L418VWLt+0ICvZxHa6NHjDQqlyz1viw0XHZLwZL/EgK3 sL3KJHjqFaafbOpEX52MmQbndngl1R8W5L7I/lCFOA0ADVLgiTq/jBdvnurItCfo indfJbq5HV214f5ud3WVX6lwKGREH3fV//92kB4uM8qIRh0MmttDduHOUo7284BC ARyuOA16vi0M+NTkJX29RzXMNQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:47 2025 by rpki-client