$ rpki-client -vvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft File: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft (raw, json) Hash identifier: th6Kk783bWV62MMl959wl3tbuCmm1YaebZjoCX+cqDA= Subject key identifier: 57:F6:F3:EC:C1:EF:7D:BC:C3:C6:2B:E0:B1:99:AE:57:FB:E7:DF:95 Authority key identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB Certificate issuer: /CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Certificate serial: 48A31A78836ADF75AD8D952778106F26D21327BE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft Manifest number: 68 Signing time: Wed 20 Aug 2025 11:18:13 +0000 Manifest this update: Wed 20 Aug 2025 11:13:13 +0000 Manifest next update: Thu 21 Aug 2025 14:13:13 +0000 Files and hashes: 1: 34352e37312e3232302e302f32322d3234203d3e20323637363433.roa (hash: DphYCMXiIhOunJYgpxuGmI/F5WVwTY6x8muqbHvOLD0=) 2: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl (hash: zHTRSdOkmIFYD5dVsz0fS/OX5M8HT0kb2G1FYrwkUW8=) 3: 323830343a343461303a3a2f33322d3438203d3e20323637363433.roa (hash: OhP4AfZLm8wKcC8NRb3lR5wasqSW+ZFcBQBWlmtzm+0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 14:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a3:1a:78:83:6a:df:75:ad:8d:95:27:78:10:6f:26:d2:13:27:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Validity Not Before: Aug 20 11:13:13 2025 GMT Not After : Aug 21 14:13:13 2025 GMT Subject: CN=57F6F3ECC1EF7DBCC3C62BE0B199AE57FBE7DF95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4b:b9:35:1d:e9:c5:0f:b0:6e:06:8d:9c:cf: bc:50:07:f5:9c:35:8d:7f:f2:85:d2:5c:f8:0b:91: 58:01:6d:80:d5:d2:a5:64:77:17:33:ff:80:5a:a9: 8a:0a:70:df:c1:74:77:33:4e:96:21:93:bc:1f:6b: 94:09:82:0e:72:53:99:24:90:7f:f6:66:51:f8:67: 43:7d:9b:f3:9f:c1:0a:08:76:c3:b0:bd:3c:0a:a6: ae:95:2b:2e:88:4e:d6:6d:2a:04:f4:3d:52:15:8d: 98:97:bd:af:07:cf:14:c4:0e:4b:7d:07:5b:55:a6: 44:2a:74:2a:05:36:d4:6d:5f:4a:d0:16:4b:e2:0d: 3c:af:81:87:8e:13:5d:14:d4:24:41:f1:8a:63:91: 9d:90:14:ea:6c:61:da:af:e9:5b:98:62:e7:34:0c: 95:60:65:c0:15:e9:50:b5:f9:b7:a9:6d:a4:41:00: 82:02:f6:b8:a1:cc:5f:3c:d7:e4:64:cd:b0:88:9b: 01:a4:bc:9f:05:29:5e:16:89:05:c9:55:75:4a:91: 9f:13:e3:c2:31:06:37:20:a4:32:77:9c:e8:cc:c4: a7:04:dc:22:d6:c2:42:38:91:3f:dd:67:72:db:8a: b2:f5:2e:3a:d5:9f:78:ff:9c:6b:c1:11:ce:e0:9f: cd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F6:F3:EC:C1:EF:7D:BC:C3:C6:2B:E0:B1:99:AE:57:FB:E7:DF:95 X509v3 Authority Key Identifier: keyid:D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:7c:2e:76:10:a9:06:f8:e8:ba:9f:a7:79:ed:f0:94:fc:c6: 1f:ba:41:18:c3:8d:06:8a:86:03:d6:65:80:c5:ea:e6:e0:9e: b5:99:1a:98:38:be:6e:73:3f:2b:3f:0e:dd:b8:38:b3:75:46: 71:65:b0:0e:d9:42:c7:b5:e6:fb:d0:3f:ce:6c:1d:40:e3:7b: 19:10:16:90:38:36:19:48:82:d8:e2:46:5a:de:7b:7c:e5:79: f1:30:49:89:6c:64:e2:e9:a6:b7:1b:c0:ef:22:6e:0b:9f:eb: 8b:c1:81:73:36:25:b1:34:e8:64:91:59:34:86:e9:9c:19:28: c0:e2:83:ee:a4:54:66:16:aa:d4:dd:e0:a8:9a:53:40:90:d8: 8e:4e:d1:50:6d:4f:b0:1c:0e:a5:62:61:64:29:42:92:87:a6: e6:04:f7:ad:a9:fb:57:f7:f1:7f:af:2a:23:cb:f9:6e:73:90: 25:58:94:57:3e:7c:33:5d:39:80:0c:f5:d2:d4:8b:57:ab:0f: 6f:92:43:e4:df:18:97:d1:3c:f3:b5:43:18:19:c1:0e:c5:32: c5:68:8c:06:d8:a8:ca:1a:50:10:58:20:72:ff:d7:e3:1f:05: f5:b2:41:53:14:71:75:ce:43:9a:32:12:c3:b6:a9:0f:08:9b: 50:49:ee:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSKMaeINq33WtjZUneBBvJtITJ74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk3MEYxN0M4NkQ0RDVBOUM2Mzk1RTlFMkQxNjAxQkJE OUZBOEJEQjAeFw0yNTA4MjAxMTEzMTNaFw0yNTA4MjExNDEzMTNaMDMxMTAvBgNV BAMTKDU3RjZGM0VDQzFFRjdEQkNDM0M2MkJFMEIxOTlBRTU3RkJFN0RGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIS7k1HenFD7BuBo2cz7xQB/Wc NY1/8oXSXPgLkVgBbYDV0qVkdxcz/4BaqYoKcN/BdHczTpYhk7wfa5QJgg5yU5kk kH/2ZlH4Z0N9m/OfwQoIdsOwvTwKpq6VKy6ITtZtKgT0PVIVjZiXva8HzxTEDkt9 B1tVpkQqdCoFNtRtX0rQFkviDTyvgYeOE10U1CRB8YpjkZ2QFOpsYdqv6VuYYuc0 DJVgZcAV6VC1+bepbaRBAIIC9rihzF881+RkzbCImwGkvJ8FKV4WiQXJVXVKkZ8T 48IxBjcgpDJ3nOjMxKcE3CLWwkI4kT/dZ3LbirL1LjrVn3j/nGvBEc7gn809AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUV/bz7MHvfbzDxivgsZmuV/vn35UwHwYDVR0j BBgwFoAU2XDxfIbU1anGOV6eLRYBu9n6i9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhv dmIvMS9EOTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NzBGMTdDODZENEQ1QTlD NjM5NUU5RTJEMTYwMUJCRDlGQThCREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhvdmIvMS9E OTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl3wudhCpBvjoup+nee3wlPzGH7pBGMONBoqGA9ZlgMXq5uCetZkamDi+bnM/ Kz8O3bg4s3VGcWWwDtlCx7Xm+9A/zmwdQON7GRAWkDg2GUiC2OJGWt57fOV58TBJ iWxk4ummtxvA7yJuC5/ri8GBczYlsTToZJFZNIbpnBkowOKD7qRUZhaq1N3gqJpT QJDYjk7RUG1PsBwOpWJhZClCkoem5gT3ran7V/fxf68qI8v5bnOQJViUVz58M105 gAz10tSLV6sPb5JD5N8Yl9E887VDGBnBDsUyxWiMBtioyhpQEFggcv/X4x8F9bJB UxRxdc5DmjISw7apDwibUEnu2A== -----END CERTIFICATE-----Generated at Wed Aug 20 19:51:27 2025 by rpki-client