$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft File: 67A81E20D9B7972AADDB1C394778320F56BE023B.mft (raw, json) Hash identifier: pWZi7IIxah2/IKUN6J6tTpbQcYh7F71qmtUKjtsYOnU= Subject key identifier: 2A:AC:C0:BA:68:58:E8:26:D9:F9:D7:B8:3D:C6:7C:BF:0A:96:6A:1F Authority key identifier: 67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B Certificate issuer: /CN=67A81E20D9B7972AADDB1C394778320F56BE023B Certificate serial: 0C3E0966F96E04ED80416E212283D60FBDEF80B3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject info access: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft Manifest number: 1B Signing time: Fri 13 Jun 2025 16:34:16 +0000 Manifest this update: Fri 13 Jun 2025 16:29:16 +0000 Manifest next update: Sat 14 Jun 2025 20:19:16 +0000 Files and hashes: 1: 34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (hash: ZfM83HfKeKzzsIlJvLRkpTey+TNllfkHWy25NrM+coc=) 2: 34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa (hash: WoMHGLPz9m8WHyv/c8eqB/ZBTGVzLYTCYHFQS4BRiVA=) 3: 34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa (hash: +UFS2xAxUtJTPsgIN5GML3ACDJRqNmPSE3oSqnNkiJQ=) 4: 67A81E20D9B7972AADDB1C394778320F56BE023B.crl (hash: 1EEyiIVkIPt4bz892KCUaJpS00BFv0eyTuDWfVbIgG4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 14 Jun 2025 20:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:3e:09:66:f9:6e:04:ed:80:41:6e:21:22:83:d6:0f:bd:ef:80:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67A81E20D9B7972AADDB1C394778320F56BE023B Validity Not Before: Jun 13 16:29:16 2025 GMT Not After : Jun 14 20:19:16 2025 GMT Subject: CN=2AACC0BA6858E826D9F9D7B83DC67CBF0A966A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:32:77:f3:c9:c1:40:b1:4d:a4:70:16:ff:76: 37:81:b4:69:9e:e1:a9:59:96:86:d4:b8:e8:ef:64: 46:c4:9b:73:78:42:72:35:d6:d1:b3:75:42:19:d0: 8b:7a:f2:df:01:ad:8c:04:74:90:41:13:12:f7:13: 78:e2:fe:8b:ea:90:c7:f2:7e:d4:92:fc:d1:c7:67: 0b:cb:cc:35:e0:76:f3:a2:d6:03:57:80:dd:f3:1e: 1c:8d:cc:87:dd:d4:f7:6d:46:16:36:74:01:f6:ba: 8b:f1:8b:b9:cc:e2:5c:b5:e8:c5:fb:34:4b:aa:07: 23:10:94:06:59:82:0b:15:66:81:fe:3c:61:41:3f: 80:b6:df:fa:89:22:19:18:1c:c8:69:6f:f1:30:eb: df:3b:ee:dc:d1:c8:72:3f:a6:01:b9:c6:40:1d:df: 32:a6:5b:dd:fa:e0:fc:59:08:a3:8f:52:b2:bf:e6: 80:c7:ed:ba:5e:7e:9f:0a:09:2f:eb:a4:9d:9a:b0: 00:99:16:da:a4:1b:b7:f9:17:80:a7:7e:c2:6e:48: e7:77:38:e0:77:44:59:55:9a:bc:44:31:b2:76:5b: 2c:a4:0a:bb:1d:18:35:0e:95:4f:2c:90:c2:1f:b5: da:07:04:49:df:c8:27:5e:a7:cd:fb:62:7f:55:72: 48:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AC:C0:BA:68:58:E8:26:D9:F9:D7:B8:3D:C6:7C:BF:0A:96:6A:1F X509v3 Authority Key Identifier: keyid:67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:6d:b0:c5:a6:80:a1:44:5b:69:5f:3b:8c:c1:fe:b7:dd:5d: a6:ba:21:51:5d:95:4d:ba:0d:b6:ca:fa:ef:b2:6d:11:2d:78: ca:8e:f7:55:08:43:3a:b4:02:a6:63:10:33:bc:cf:36:5e:21: 4e:05:e2:4a:55:7b:94:47:b6:d9:73:0c:71:d3:5d:24:95:50: 6f:ec:54:e8:c1:97:9b:f3:38:6d:28:7b:4a:ba:a7:5a:4e:ce: 0d:91:8e:3a:02:47:47:70:30:fb:6a:ac:f5:9e:f4:81:b2:86: 90:59:c9:d1:e7:69:25:49:d0:79:f4:78:4e:3e:4c:e7:08:6a: be:d0:dc:29:e8:ec:7f:d2:4d:50:fb:15:af:91:db:f8:a7:5e: b3:8e:f8:67:40:18:a3:9f:fa:c4:5c:25:92:a1:9a:53:9c:b9: d4:14:9c:0b:c5:e3:3d:63:32:ec:ac:2f:57:4d:8c:12:f6:7c: 2f:76:a6:3d:16:e8:b5:d3:b7:6d:41:b7:ba:ec:2b:3f:a8:69: b3:37:24:cf:f0:71:f5:0d:98:d8:a8:09:a5:77:26:22:00:58: b2:2f:aa:c3:e9:88:da:95:d7:c9:c6:c1:3c:25:77:c3:e4:cc: a3:b7:a7:63:71:72:16:66:6b:c0:c0:6c:f4:ab:52:be:dc:ed: 79:16:58:cc -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUDD4JZvluBO2AQW4hIoPWD73vgLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1 NkJFMDIzQjAeFw0yNTA2MTMxNjI5MTZaFw0yNTA2MTQyMDE5MTZaMDMxMTAvBgNV BAMTKDJBQUNDMEJBNjg1OEU4MjZEOUY5RDdCODNEQzY3Q0JGMEE5NjZBMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZMnfzycFAsU2kcBb/djeBtGme 4alZlobUuOjvZEbEm3N4QnI11tGzdUIZ0It68t8BrYwEdJBBExL3E3ji/ovqkMfy ftSS/NHHZwvLzDXgdvOi1gNXgN3zHhyNzIfd1PdtRhY2dAH2uovxi7nM4ly16MX7 NEuqByMQlAZZggsVZoH+PGFBP4C23/qJIhkYHMhpb/Ew69877tzRyHI/pgG5xkAd 3zKmW9364PxZCKOPUrK/5oDH7bpefp8KCS/rpJ2asACZFtqkG7f5F4CnfsJuSOd3 OOB3RFlVmrxEMbJ2WyykCrsdGDUOlU8skMIftdoHBEnfyCdep837Yn9VckiJAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUKqzAumhY6CbZ+de4PcZ8vwqWah8wHwYDVR0j BBgwFoAUZ6geINm3lyqt2xw5R3gyD1a+AjswDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9reVdwR0EydlA5VUVEWWZWTlh3RGt0QkNORGdzVFJySmt4elE1QmptMjM3 LzIvNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1NkJFMDIzQi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82N0E4MUUyMEQ5Qjc5NzJBQURE QjFDMzk0Nzc4MzIwRjU2QkUwMjNCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2t5 V3BHQTJ2UDlVRURZZlZOWHdEa3RCQ05EZ3NUUnJKa3h6UTVCam0yMzcvMi82N0E4 MUUyMEQ5Qjc5NzJBQUREQjFDMzk0Nzc4MzIwRjU2QkUwMjNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA pW2wxaaAoURbaV87jMH+t91dprohUV2VTboNtsr677JtES14yo73VQhDOrQCpmMQ M7zPNl4hTgXiSlV7lEe22XMMcdNdJJVQb+xU6MGXm/M4bSh7SrqnWk7ODZGOOgJH R3Aw+2qs9Z70gbKGkFnJ0edpJUnQefR4Tj5M5whqvtDcKejsf9JNUPsVr5Hb+Kde s474Z0AYo5/6xFwlkqGaU5y51BScC8XjPWMy7KwvV02MEvZ8L3amPRbotdO3bUG3 uuwrP6hpszckz/Bx9Q2Y2KgJpXcmIgBYsi+qw+mI2pXXycbBPCV3w+TMo7enY3Fy FmZrwMBs9KtSvtzteRZYzA== -----END CERTIFICATE-----Generated at Sat Jun 14 08:16:37 2025 by rpki-client