$ rpki-client -vvf rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft File: 37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft (raw, json) Hash identifier: sd8OXAX82vmxLE7P+gejd5t6AJC9BGrysVKKAoFkO2w= Subject key identifier: A2:0D:26:34:47:18:4B:94:71:00:DD:FC:49:6A:A7:0C:2B:A7:83:E3 Authority key identifier: 37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87 Certificate issuer: /CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87 Certificate serial: 03CFF12584526D2520D15520BE82658F61630637 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft Manifest number: 02A8 Signing time: Wed 20 Aug 2025 14:48:02 +0000 Manifest this update: Wed 20 Aug 2025 14:43:02 +0000 Manifest next update: Thu 21 Aug 2025 16:13:02 +0000 Files and hashes: 1: 37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl (hash: 1izge0ZijtzDON3A85h+8YpOmoBcD4wM5JDf0duzNmE=) 2: 3134332e302e3139362e302f32322d3234203d3e20323634303130.roa (hash: wfuDZyzxxzfnOOIqzYL69wZq2lthDLjupE8Io4WDAqo=) 3: 323830343a323935383a3a2f33322d3430203d3e20323634303130.roa (hash: cLNURStJu5eQongcSd5F/uNBcK5qxK2dTs84ITmqdTY=) 4: 3137372e35342e38302e302f32302d3234203d3e20323634303130.roa (hash: H+IBgnyrvLId3jMJF5jADUvdFmFLXsJ/4k9Cnr4cTrM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 16:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:cf:f1:25:84:52:6d:25:20:d1:55:20:be:82:65:8f:61:63:06:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87 Validity Not Before: Aug 20 14:43:02 2025 GMT Not After : Aug 21 16:13:02 2025 GMT Subject: CN=A20D263447184B947100DDFC496AA70C2BA783E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f7:e8:d3:73:6a:c3:0f:55:c6:d9:19:ca:d3: fc:fc:b3:f6:6d:86:7b:c9:79:2f:39:bf:6c:04:98: 76:e2:89:bc:60:27:16:d5:e8:e4:c8:77:d6:12:6b: 5d:9f:93:f4:2a:8b:06:90:e3:58:bc:80:e2:24:cf: f5:40:aa:78:d2:15:82:13:9b:b9:8d:0a:2c:14:a2: 4a:7a:a3:7a:a2:a6:be:fb:07:70:7f:5f:56:2c:da: 17:ac:03:38:70:99:c8:40:f7:17:18:30:af:dd:56: cb:fc:dc:5f:31:1f:4d:0d:28:61:3e:bf:ce:a1:16: ed:7a:f6:48:4b:9d:c5:b7:16:09:95:10:b8:78:f6: b4:a5:8a:d0:89:f4:c9:01:86:8d:3a:23:05:47:61: 9e:5f:e4:09:76:46:ac:89:4a:d2:ea:36:33:64:e1: 03:8f:28:88:c8:4a:4a:42:eb:d2:15:68:35:54:58: a2:4c:8f:6c:4e:07:98:da:b0:8f:db:8f:f0:3c:3c: 65:b7:4c:dc:65:87:c4:a4:b2:a5:8f:81:de:af:5b: f8:07:66:f3:f4:df:1a:27:93:56:60:a9:1d:70:14: f5:a3:44:8b:d0:6c:bd:f7:12:7d:f1:76:9b:bd:72: 81:48:6e:9c:25:67:5c:e2:4e:2f:97:11:a0:d1:40: 0b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0D:26:34:47:18:4B:94:71:00:DD:FC:49:6A:A7:0C:2B:A7:83:E3 X509v3 Authority Key Identifier: keyid:37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d8:a6:47:75:21:b9:cb:9b:98:11:4b:14:e2:92:5c:5a:1b: ee:99:b1:85:7f:16:b5:a9:4f:5b:df:f9:00:c1:86:a8:1c:ed: 2b:2c:54:0c:57:66:5f:91:5f:33:6f:27:ed:bf:bc:31:86:ab: 2e:65:8a:e3:c8:07:21:29:1e:4f:84:aa:5b:49:e8:58:7f:cb: 28:6b:ce:7e:91:4e:b6:bb:bd:c8:ee:6c:d1:0f:52:a1:b5:4d: 76:c7:db:ce:a6:e9:0a:4a:f6:67:cb:bc:82:e2:99:95:9f:e7: cb:f0:9b:de:1d:6a:49:16:d2:a9:41:2c:e1:03:1f:37:b0:41: 53:e5:ae:83:7f:8f:c9:a8:a3:1b:16:56:cb:9b:67:8e:79:12: 13:c5:dd:67:d9:0b:85:ae:9a:ee:c2:60:e7:25:d7:fd:da:72: a8:c0:d4:13:b4:2f:22:72:8b:50:05:0c:29:bd:8c:73:b6:e2: 25:72:4b:93:32:b2:94:ea:09:99:f4:23:5b:68:8a:f3:f8:4f: 2a:9d:ee:a9:0c:53:48:65:53:12:33:d0:31:fe:e8:63:5a:40: 03:c3:5f:26:f9:57:a4:42:f1:87:e2:c0:1f:21:44:0e:26:b3: 25:c6:2c:50:8e:66:db:ce:ee:b3:ac:3d:d8:83:4d:4c:6a:a1: 42:48:14:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA8/xJYRSbSUg0VUgvoJlj2FjBjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFQzY2RTZENTE1M0UzMzVDNEExMUI1MUM3REZCNDgx RTkxQ0I4NzAeFw0yNTA4MjAxNDQzMDJaFw0yNTA4MjExNjEzMDJaMDMxMTAvBgNV BAMTKEEyMEQyNjM0NDcxODRCOTQ3MTAwRERGQzQ5NkFBNzBDMkJBNzgzRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19+jTc2rDD1XG2RnK0/z8s/Zt hnvJeS85v2wEmHbiibxgJxbV6OTId9YSa12fk/QqiwaQ41i8gOIkz/VAqnjSFYIT m7mNCiwUokp6o3qipr77B3B/X1Ys2hesAzhwmchA9xcYMK/dVsv83F8xH00NKGE+ v86hFu169khLncW3FgmVELh49rSlitCJ9MkBho06IwVHYZ5f5Al2RqyJStLqNjNk 4QOPKIjISkpC69IVaDVUWKJMj2xOB5jasI/bj/A8PGW3TNxlh8SksqWPgd6vW/gH ZvP03xonk1ZgqR1wFPWjRIvQbL33En3xdpu9coFIbpwlZ1ziTi+XEaDRQAu9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUog0mNEcYS5RxAN38SWqnDCung+MwHwYDVR0j BBgwFoAUN+xm5tUVPjNcShG1HH37SB6Ry4cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHd3MUNmRmFGeWRYdjNlMzdBaEVWSEYxRXpjTDlXNjJnTWIxUmp0ZXBj Mk0vMS8zN0VDNjZFNkQ1MTUzRTMzNUM0QTExQjUxQzdERkI0ODFFOTFDQjg3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3RUM2NkU2RDUxNTNFMzM1 QzRBMTFCNTFDN0RGQjQ4MUU5MUNCODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHd3MUNmRmFGeWRYdjNlMzdBaEVWSEYxRXpjTDlXNjJnTWIxUmp0ZXBjMk0vMS8z N0VDNjZFNkQ1MTUzRTMzNUM0QTExQjUxQzdERkI0ODFFOTFDQjg3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbtimR3UhucubmBFLFOKSXFob7pmxhX8WtalPW9/5AMGGqBztKyxUDFdmX5Ff M28n7b+8MYarLmWK48gHISkeT4SqW0noWH/LKGvOfpFOtru9yO5s0Q9SobVNdsfb zqbpCkr2Z8u8guKZlZ/ny/Cb3h1qSRbSqUEs4QMfN7BBU+Wug3+PyaijGxZWy5tn jnkSE8XdZ9kLha6a7sJg5yXX/dpyqMDUE7QvInKLUAUMKb2Mc7biJXJLkzKylOoJ mfQjW2iK8/hPKp3uqQxTSGVTEjPQMf7oY1pAA8NfJvlXpELxh+LAHyFEDiazJcYs UI5m287us6w92INNTGqhQkgUOA== -----END CERTIFICATE-----Generated at Wed Aug 20 20:18:28 2025 by rpki-client