$ rpki-client -vvf rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft File: 32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft (raw, json) Hash identifier: CVbwzVI3lDLlFvb06o3nhTINDTAtXsqSsjwo4KrVHvM= Subject key identifier: FD:51:2C:91:DB:47:9B:65:FF:BE:5C:17:97:7C:E1:CF:E3:43:BE:28 Authority key identifier: 32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA Certificate issuer: /CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA Certificate serial: 44FD3201AC190352896051946DD94E03D0D0021F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft Manifest number: 02C8 Signing time: Fri 19 Sep 2025 06:19:23 +0000 Manifest this update: Fri 19 Sep 2025 06:14:23 +0000 Manifest next update: Sat 20 Sep 2025 08:57:23 +0000 Files and hashes: 1: 32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl (hash: vAOAATuViKvfQAhkHbBdi/9EdLw1Q3MfYNFNmBQ2/pw=) 2: 34352e36352e3233362e302f32322d3234203d3e20323636353236.roa (hash: 6Tw1Qh3+7pbuMN+p/b0CjOJVcWYBSbeaPsx04md2eiM=) 3: 323830343a336435633a3a2f33322d3336203d3e20323636353236.roa (hash: hG9C5493PGDbutLPKxkFc3n6WKuxTqsTbH82yybndLw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 20 Sep 2025 08:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:fd:32:01:ac:19:03:52:89:60:51:94:6d:d9:4e:03:d0:d0:02:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA Validity Not Before: Sep 19 06:14:23 2025 GMT Not After : Sep 20 08:57:23 2025 GMT Subject: CN=FD512C91DB479B65FFBE5C17977CE1CFE343BE28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:38:e1:29:2c:e4:00:8e:09:c7:a6:80:f0: 1d:03:2e:2f:d1:09:52:6e:96:9c:f8:f1:42:bc:7c: 99:f4:81:3d:47:95:cf:d1:33:69:02:c3:02:81:b5: 80:15:ff:fd:af:5b:7e:69:d5:88:12:ac:a3:4c:29: 68:4f:9a:50:2c:3f:c1:94:3d:35:7d:dd:11:13:95: d0:bd:b4:c8:8e:93:bf:05:e5:d6:ac:76:57:18:59: a8:64:66:f0:21:9c:cc:92:9b:0a:c8:cd:10:41:20: 02:95:f5:22:16:27:ba:e0:17:ec:6a:e9:f5:90:cf: dd:35:3c:9e:aa:08:a6:12:39:66:da:f0:84:1f:fd: 80:c3:6e:b1:72:a3:9c:27:9f:13:46:67:4e:55:3f: d5:35:76:e6:ff:cc:8b:15:1a:2e:41:7a:58:1a:7d: 2c:eb:52:3f:45:4e:42:43:6c:90:56:e3:09:d5:3f: 22:87:86:a3:e0:73:5f:81:e7:56:72:bf:b1:e3:8e: f2:60:08:47:55:73:83:85:8d:db:dd:24:a4:cb:20: 71:f9:3d:f2:76:e7:11:19:b0:dd:1a:64:1e:77:3d: 9d:1c:b3:cd:c1:77:a6:4f:16:bb:81:66:92:40:f8: 69:46:8b:45:aa:e9:73:3e:e2:0e:05:7a:52:50:48: 52:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:51:2C:91:DB:47:9B:65:FF:BE:5C:17:97:7C:E1:CF:E3:43:BE:28 X509v3 Authority Key Identifier: keyid:32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:17:57:3a:12:13:5c:e3:48:0f:6d:a1:d6:e9:95:36:e1:c2: 40:b7:0c:85:ae:44:d0:2d:e4:9e:54:8f:7b:79:0c:3f:d8:f9: 5b:f5:c0:4e:8b:7c:d9:0d:59:c2:a1:5e:93:db:c3:37:9e:f5: 24:bc:dc:3e:61:a6:8e:02:ea:cf:d7:b2:f2:0c:ca:c6:04:92: 43:9e:c2:c9:cb:9e:df:a2:fa:08:7c:27:5c:bc:b7:04:3b:f9: 68:8a:55:ce:e4:ab:82:81:72:da:30:12:a7:64:a8:32:5b:7d: 33:c2:b5:ae:f4:98:ad:3c:ea:9e:9b:81:ff:c3:32:0a:b0:38: d9:59:5c:34:35:a5:72:b2:39:9b:5d:a1:56:f0:ad:58:2f:27: 5e:12:5c:ae:cc:18:0b:cd:c4:1b:6b:12:a2:0d:4c:12:1a:d5: a4:dc:0f:cd:84:67:91:93:fb:16:c8:d1:92:db:8e:92:2b:6b: 69:5e:d1:87:23:08:6f:dc:b3:67:89:63:10:0c:63:07:ac:98: e3:ad:6b:48:dc:1f:8c:9b:a8:ab:7a:89:dc:b3:21:12:fb:8d: 4d:0f:25:b4:82:a1:54:69:44:1e:ef:72:ba:94:f7:32:7b:d7: dc:32:99:c0:3d:b9:ca:48:30:ce:ae:4c:f4:f6:ec:1a:0b:a0: d4:18:3e:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURP0yAawZA1KJYFGUbdlOA9DQAh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIwNjhDRUIxQjkzMTYxOEZCMjlBMEVDRDUyRjlEMjJG QjAzMDREQTAeFw0yNTA5MTkwNjE0MjNaFw0yNTA5MjAwODU3MjNaMDMxMTAvBgNV BAMTKEZENTEyQzkxREI0NzlCNjVGRkJFNUMxNzk3N0NFMUNGRTM0M0JFMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSWTjhKSzkAI4Jx6aA8B0DLi/R CVJulpz48UK8fJn0gT1Hlc/RM2kCwwKBtYAV//2vW35p1YgSrKNMKWhPmlAsP8GU PTV93RETldC9tMiOk78F5dasdlcYWahkZvAhnMySmwrIzRBBIAKV9SIWJ7rgF+xq 6fWQz901PJ6qCKYSOWba8IQf/YDDbrFyo5wnnxNGZ05VP9U1dub/zIsVGi5Belga fSzrUj9FTkJDbJBW4wnVPyKHhqPgc1+B51Zyv7HjjvJgCEdVc4OFjdvdJKTLIHH5 PfJ25xEZsN0aZB53PZ0cs83Bd6ZPFruBZpJA+GlGi0Wq6XM+4g4FelJQSFL1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/VEskdtHm2X/vlwXl3zhz+NDvigwHwYDVR0j BBgwFoAUMgaM6xuTFhj7KaDs1S+dIvsDBNowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHRoM2QycFVrOHJyN2N6YzhrM3VFMmVyTkF0UmlzcXBFMmpodnFZY2hG dFIvMS8zMjA2OENFQjFCOTMxNjE4RkIyOUEwRUNENTJGOUQyMkZCMDMwNERBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyMDY4Q0VCMUI5MzE2MThG QjI5QTBFQ0Q1MkY5RDIyRkIwMzA0REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHRoM2QycFVrOHJyN2N6YzhrM3VFMmVyTkF0UmlzcXBFMmpodnFZY2hGdFIvMS8z MjA2OENFQjFCOTMxNjE4RkIyOUEwRUNENTJGOUQyMkZCMDMwNERBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhRdXOhITXONID22h1umVNuHCQLcMha5E0C3knlSPe3kMP9j5W/XATot82Q1Z wqFek9vDN571JLzcPmGmjgLqz9ey8gzKxgSSQ57Cycue36L6CHwnXLy3BDv5aIpV zuSrgoFy2jASp2SoMlt9M8K1rvSYrTzqnpuB/8MyCrA42VlcNDWlcrI5m12hVvCt WC8nXhJcrswYC83EG2sSog1MEhrVpNwPzYRnkZP7FsjRktuOkitraV7RhyMIb9yz Z4ljEAxjB6yY461rSNwfjJuoq3qJ3LMhEvuNTQ8ltIKhVGlEHu9yupT3MnvX3DKZ wD25ykgwzq5M9PbsGgug1Bg+Aw== -----END CERTIFICATE-----Generated at Fri Sep 19 14:28:51 2025 by rpki-client