$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft File: 67A81E20D9B7972AADDB1C394778320F56BE023B.mft (raw, json) Hash identifier: +v4PuSb+QlChg2z8MZb2UuDxk5Qw6Cdgz7kaX1IOoIM= Subject key identifier: 6E:9E:77:75:3F:A8:83:9B:EB:6B:99:68:3C:B9:CA:E7:C8:87:EF:98 Authority key identifier: 67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B Certificate issuer: /CN=67A81E20D9B7972AADDB1C394778320F56BE023B Certificate serial: 6AD8325417D33A446247F97B674955D3B341AD91 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject info access: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft Manifest number: 57 Signing time: Tue 29 Jul 2025 13:34:10 +0000 Manifest this update: Tue 29 Jul 2025 13:29:10 +0000 Manifest next update: Wed 30 Jul 2025 14:32:10 +0000 Files and hashes: 1: 34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa (hash: WoMHGLPz9m8WHyv/c8eqB/ZBTGVzLYTCYHFQS4BRiVA=) 2: 34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (hash: ZfM83HfKeKzzsIlJvLRkpTey+TNllfkHWy25NrM+coc=) 3: 67A81E20D9B7972AADDB1C394778320F56BE023B.crl (hash: uy4axWjrW40ex0mUvyvMKtFVXXaGDiV4GaBuuu4iFwY=) 4: 34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa (hash: +UFS2xAxUtJTPsgIN5GML3ACDJRqNmPSE3oSqnNkiJQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Jul 2025 14:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d8:32:54:17:d3:3a:44:62:47:f9:7b:67:49:55:d3:b3:41:ad:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67A81E20D9B7972AADDB1C394778320F56BE023B Validity Not Before: Jul 29 13:29:10 2025 GMT Not After : Jul 30 14:32:10 2025 GMT Subject: CN=6E9E77753FA8839BEB6B99683CB9CAE7C887EF98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:8a:90:1f:50:73:b2:8b:b1:86:ee:94:3a: 58:a3:a6:16:e5:94:f2:82:56:4f:29:81:23:39:2f: 3d:34:a0:09:95:c3:c3:5a:c0:10:41:b0:f0:56:90: cb:08:2c:ea:34:47:4a:84:30:8d:85:5d:0e:d6:95: ed:74:4e:29:9e:ea:0d:9d:09:82:fc:b3:7b:98:65: 64:3f:e2:1e:df:e9:aa:2c:2a:f5:c3:4e:c5:42:25: 53:89:03:d5:e1:c2:8e:47:e6:d8:82:ad:26:4a:b4: cc:2a:3e:7f:b9:e2:16:d7:61:97:90:97:f0:b1:78: 49:39:de:2b:78:e0:2a:69:13:0b:30:84:76:d6:ff: 9a:62:fa:83:d5:ea:35:02:5e:33:e8:cb:4d:5a:a7: c9:bd:ff:96:b7:e3:bf:75:c4:68:9f:4a:df:7f:0a: 2e:ad:4b:03:80:35:13:eb:82:0c:6b:aa:59:17:bb: 70:b2:64:b6:c1:b7:dc:83:3c:6b:9d:09:59:2f:93: 59:b9:9a:e8:d1:f5:09:c5:a5:0c:7a:bc:39:bb:4e: 88:a0:77:2e:21:8f:a2:49:b6:19:70:09:d2:98:52: 28:b0:a1:58:6c:a3:ac:59:d1:cb:ee:81:09:05:2d: b9:98:09:58:19:f8:8d:d4:87:89:1b:02:49:67:c4: 23:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9E:77:75:3F:A8:83:9B:EB:6B:99:68:3C:B9:CA:E7:C8:87:EF:98 X509v3 Authority Key Identifier: keyid:67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:47:56:63:ad:57:b0:ff:4a:72:6f:af:77:a5:f4:5f:18:6c: 73:01:a6:9f:90:7f:e7:d3:26:9f:c0:7a:1f:a0:76:aa:96:4c: b2:02:d5:56:4b:ba:84:70:51:8e:bc:3f:02:92:76:bf:bc:6d: bc:59:8e:d9:6a:18:48:ee:d4:a1:13:fc:4d:5b:13:68:74:c2: 01:b8:3f:5e:5d:6d:29:19:59:b2:02:47:cc:14:2f:37:81:92: 7a:6e:ae:e2:ba:af:3d:3f:55:b6:d9:3b:02:ac:ca:ac:f1:83: 34:da:31:fb:a6:45:29:5a:dd:8b:b0:1d:40:6b:b3:ef:4a:63: d6:d2:7e:02:37:a3:47:c9:56:27:76:db:d4:34:e3:d2:69:3c: e8:04:45:28:d7:bb:f0:e4:b1:16:71:2d:8e:62:09:06:90:79: 3a:98:4e:39:8f:ab:cf:d3:f1:2e:cc:62:44:7b:88:e4:43:03: 96:0d:a0:62:bf:f8:63:60:9b:a2:60:8f:d8:ba:09:f8:1d:1e: ef:95:3c:d7:79:40:5f:84:74:02:0d:de:49:5f:2e:58:19:79: da:e9:5c:3e:91:2c:25:8a:50:fb:27:0f:dd:00:d0:fa:14:98: 96:67:b2:84:14:1f:18:41:c5:33:ca:f7:b9:7c:fc:f6:22:81: 55:e6:0c:8b -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUatgyVBfTOkRiR/l7Z0lV07NBrZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1 NkJFMDIzQjAeFw0yNTA3MjkxMzI5MTBaFw0yNTA3MzAxNDMyMTBaMDMxMTAvBgNV BAMTKDZFOUU3Nzc1M0ZBODgzOUJFQjZCOTk2ODNDQjlDQUU3Qzg4N0VGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3R4qQH1Bzsouxhu6UOlijphbl lPKCVk8pgSM5Lz00oAmVw8NawBBBsPBWkMsILOo0R0qEMI2FXQ7Wle10Time6g2d CYL8s3uYZWQ/4h7f6aosKvXDTsVCJVOJA9Xhwo5H5tiCrSZKtMwqPn+54hbXYZeQ l/CxeEk53it44CppEwswhHbW/5pi+oPV6jUCXjPoy01ap8m9/5a34791xGifSt9/ Ci6tSwOANRPrggxrqlkXu3CyZLbBt9yDPGudCVkvk1m5mujR9QnFpQx6vDm7Toig dy4hj6JJthlwCdKYUiiwoVhso6xZ0cvugQkFLbmYCVgZ+I3Uh4kbAklnxCPLAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUbp53dT+og5vra5loPLnK58iH75gwHwYDVR0j BBgwFoAUZ6geINm3lyqt2xw5R3gyD1a+AjswDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9reVdwR0EydlA5VUVEWWZWTlh3RGt0QkNORGdzVFJySmt4elE1QmptMjM3 LzIvNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1NkJFMDIzQi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82N0E4MUUyMEQ5Qjc5NzJBQURE QjFDMzk0Nzc4MzIwRjU2QkUwMjNCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2t5 V3BHQTJ2UDlVRURZZlZOWHdEa3RCQ05EZ3NUUnJKa3h6UTVCam0yMzcvMi82N0E4 MUUyMEQ5Qjc5NzJBQUREQjFDMzk0Nzc4MzIwRjU2QkUwMjNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA jUdWY61XsP9Kcm+vd6X0XxhscwGmn5B/59Mmn8B6H6B2qpZMsgLVVku6hHBRjrw/ ApJ2v7xtvFmO2WoYSO7UoRP8TVsTaHTCAbg/Xl1tKRlZsgJHzBQvN4GSem6u4rqv PT9Vttk7AqzKrPGDNNox+6ZFKVrdi7AdQGuz70pj1tJ+AjejR8lWJ3bb1DTj0mk8 6ARFKNe78OSxFnEtjmIJBpB5OphOOY+rz9PxLsxiRHuI5EMDlg2gYr/4Y2CbomCP 2LoJ+B0e75U813lAX4R0Ag3eSV8uWBl52ulcPpEsJYpQ+ycP3QDQ+hSYlmeyhBQf GEHFM8r3uXz89iKBVeYMiw== -----END CERTIFICATE-----Generated at Tue Jul 29 15:41:23 2025 by rpki-client