$ rpki-client -vvf rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/17E4F0D3C469415DC7E16F41B958536392F1E579.mft File: 17E4F0D3C469415DC7E16F41B958536392F1E579.mft (raw, json) Hash identifier: 4cY001QbxF+A6wWgPdI6omkdtppVtsPNGcYs1wAPdRQ= Subject key identifier: 33:5E:4A:66:F7:C4:76:8F:0F:2A:C7:9E:45:FE:87:00:37:C6:03:D0 Authority key identifier: 17:E4:F0:D3:C4:69:41:5D:C7:E1:6F:41:B9:58:53:63:92:F1:E5:79 Certificate issuer: /CN=17E4F0D3C469415DC7E16F41B958536392F1E579 Certificate serial: 6B5BBC80D6BC21BB0B27F4DF8B401252A013FCB4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17E4F0D3C469415DC7E16F41B958536392F1E579.cer Subject info access: rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/17E4F0D3C469415DC7E16F41B958536392F1E579.mft Manifest number: 0120 Signing time: Mon 20 Oct 2025 05:08:03 +0000 Manifest this update: Mon 20 Oct 2025 05:03:03 +0000 Manifest next update: Tue 21 Oct 2025 06:39:03 +0000 Files and hashes: 1: 3133382e3235352e302e302f32322d3232203d3e20323633393530.roa (hash: N5Ov20kQQV3Voj51ATerUtGT+zaXU4lF5AgkR5X11JE=) 2: 3133382e3235352e332e302f32342d3234203d3e20323633393530.roa (hash: DL42xlGdfFraQc4N0t3WB423yh+RTia/G08ApZGH4yw=) 3: 3133382e3235352e322e302f32342d3234203d3e20323633393530.roa (hash: VE+drky5N5ozZqzGiArFdxFbtjrBd4hnSlRh6fkWzAk=) 4: 3133382e3235352e302e302f32342d3234203d3e20323633393530.roa (hash: KmRIgD3fPM3hGSPd66qq5S4vF+jrz8d573jPd3TILlk=) 5: 323830343a323834303a3a2f33322d3332203d3e20323633393530.roa (hash: igfS/h9PoM74a8WzOOYkM/cPWduSByQvu0MPYzbQ0ec=) 6: 17E4F0D3C469415DC7E16F41B958536392F1E579.crl (hash: bPJqhKpfzl6M/X6MnH/+gbuygo3AIkVXjw21IgaCtTA=) 7: 3133382e3235352e302e302f32332d3233203d3e20323633393530.roa (hash: rNGp6C3uA54Ragm7+K+Ahv8zmO28OWQz0gkdsweJEDs=) 8: 3133382e3235352e312e302f32342d3234203d3e20323633393530.roa (hash: fBT6D2jLD+njqZeic3l5TwlJCiBd50XOJPIP0ojJHrE=) 9: 3133382e3235352e322e302f32332d3233203d3e20323633393530.roa (hash: UH5wxIRJ/7EzO8sMeu6nOA+9TIeSHJ6lg6yzZVogJxg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/17E4F0D3C469415DC7E16F41B958536392F1E579.crl rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/17E4F0D3C469415DC7E16F41B958536392F1E579.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17E4F0D3C469415DC7E16F41B958536392F1E579.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:5b:bc:80:d6:bc:21:bb:0b:27:f4:df:8b:40:12:52:a0:13:fc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17E4F0D3C469415DC7E16F41B958536392F1E579 Validity Not Before: Oct 20 05:03:03 2025 GMT Not After : Oct 21 06:39:03 2025 GMT Subject: CN=335E4A66F7C4768F0F2AC79E45FE870037C603D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e1:65:7a:d3:46:42:9c:b3:0b:f7:2c:90:9a: 7e:e3:74:f1:e8:60:9b:9f:b3:6d:dd:31:db:b0:87: 37:5a:48:30:0b:16:54:8b:1d:89:eb:38:d8:6e:35: 7f:df:27:23:f0:9f:29:a2:57:b7:f0:de:fa:90:58: b6:82:ce:7d:2c:a7:88:c6:11:69:45:c0:2d:88:db: 41:19:68:8c:60:ea:66:f0:27:41:91:67:75:53:d1: 9a:07:18:b4:be:19:31:03:0b:55:b7:21:7a:d6:85: 10:0a:0e:2f:73:65:d8:06:b7:e7:e7:d3:20:aa:e1: 11:34:de:65:7f:eb:ad:24:4e:9c:fe:68:2f:2c:02: 97:71:17:f5:76:f3:91:6b:5a:d7:2e:68:70:42:25: bb:1b:29:a8:d7:17:52:0c:0d:31:0e:0e:33:66:ec: a9:08:5b:02:16:1d:58:5c:81:a7:ee:b9:b1:9e:7b: b2:75:25:58:59:a1:ee:a9:3f:60:fa:1b:19:ba:ec: 27:b7:f6:71:b2:a8:b6:86:79:93:31:76:d7:03:2e: 80:a1:d5:c0:f9:89:5c:07:29:ec:1d:f5:e4:16:c3: 05:eb:97:98:97:cc:9f:3c:90:17:f2:78:00:43:7c: f5:4f:27:b0:37:a2:a7:12:db:f4:36:52:fe:f5:1a: 57:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5E:4A:66:F7:C4:76:8F:0F:2A:C7:9E:45:FE:87:00:37:C6:03:D0 X509v3 Authority Key Identifier: keyid:17:E4:F0:D3:C4:69:41:5D:C7:E1:6F:41:B9:58:53:63:92:F1:E5:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/17E4F0D3C469415DC7E16F41B958536392F1E579.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17E4F0D3C469415DC7E16F41B958536392F1E579.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/17E4F0D3C469415DC7E16F41B958536392F1E579.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:19:12:b8:f8:d4:0f:b0:3a:9d:bc:df:ee:f8:fa:76:aa:d0: b2:92:06:58:6d:85:09:c0:37:db:c9:15:f4:b1:8a:ee:a6:92: f0:2a:03:10:5b:31:19:08:ed:00:e9:45:be:b8:3d:d9:a6:6e: 45:af:3f:e1:bf:2d:66:da:28:ac:0d:a3:d7:9b:8e:dc:b7:71: e5:4c:76:42:8b:a8:c9:ae:80:16:b6:49:b2:40:df:c6:fd:e3: b6:1c:17:d7:05:92:1f:42:7c:07:94:d7:40:c8:b7:55:dc:1c: 27:ea:e7:dd:05:f1:3e:f5:1d:ef:24:88:e1:da:fd:41:b0:d2: b6:b7:18:f7:93:6a:e1:07:7a:d0:e6:fb:e5:51:f8:7c:7b:47: 2c:8a:24:08:c8:f2:db:63:8d:c8:bd:fa:59:19:da:aa:ce:7c: 22:f7:86:01:ce:77:97:a7:86:b4:87:56:3e:e5:f3:fb:84:d5: ec:68:e3:94:11:51:32:65:b3:35:14:06:2e:52:b2:7b:21:f1: 53:79:63:71:7c:67:e3:c1:8c:9f:2e:cd:6b:7b:ab:18:27:a2: f7:9f:26:3f:98:5b:42:6c:ee:92:98:14:2a:42:47:ce:40:e1: 19:e4:4f:f5:56:61:fb:fb:09:ea:61:3d:01:f4:ba:60:03:37: 4b:88:6f:d9 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUa1u8gNa8IbsLJ/Tfi0ASUqAT/LQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdFNEYwRDNDNDY5NDE1REM3RTE2RjQxQjk1ODUzNjM5 MkYxRTU3OTAeFw0yNTEwMjAwNTAzMDNaFw0yNTEwMjEwNjM5MDNaMDMxMTAvBgNV BAMTKDMzNUU0QTY2RjdDNDc2OEYwRjJBQzc5RTQ1RkU4NzAwMzdDNjAzRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4WV600ZCnLML9yyQmn7jdPHo YJufs23dMduwhzdaSDALFlSLHYnrONhuNX/fJyPwnymiV7fw3vqQWLaCzn0sp4jG EWlFwC2I20EZaIxg6mbwJ0GRZ3VT0ZoHGLS+GTEDC1W3IXrWhRAKDi9zZdgGt+fn 0yCq4RE03mV/660kTpz+aC8sApdxF/V285FrWtcuaHBCJbsbKajXF1IMDTEODjNm 7KkIWwIWHVhcgafuubGee7J1JVhZoe6pP2D6Gxm67Ce39nGyqLaGeZMxdtcDLoCh 1cD5iVwHKewd9eQWwwXrl5iXzJ88kBfyeABDfPVPJ7A3oqcS2/Q2Uv71GldxAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUM15KZvfEdo8PKseeRf6HADfGA9AwHwYDVR0j BBgwFoAUF+Tw08RpQV3H4W9BuVhTY5Lx5XkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby8xcmtybXU0NG82NndBUHZZQzgxR21xMnVFMzdZRnY0Z1JaQ05ib2l5RDNj LzAvMTdFNEYwRDNDNDY5NDE1REM3RTE2RjQxQjk1ODUzNjM5MkYxRTU3OS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xN0U0RjBEM0M0Njk0MTVEQzdF MTZGNDFCOTU4NTM2MzkyRjFFNTc5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzFy a3JtdTQ0bzY2d0FQdllDODFHbXEydUUzN1lGdjRnUlpDTmJvaXlEM2MvMC8xN0U0 RjBEM0M0Njk0MTVEQzdFMTZGNDFCOTU4NTM2MzkyRjFFNTc5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA RRkSuPjUD7A6nbzf7vj6dqrQspIGWG2FCcA328kV9LGK7qaS8CoDEFsxGQjtAOlF vrg92aZuRa8/4b8tZtoorA2j15uO3Ldx5Ux2Qouoya6AFrZJskDfxv3jthwX1wWS H0J8B5TXQMi3VdwcJ+rn3QXxPvUd7ySI4dr9QbDStrcY95Nq4Qd60Ob75VH4fHtH LIokCMjy22ONyL36WRnaqs58IveGAc53l6eGtIdWPuXz+4TV7GjjlBFRMmWzNRQG LlKyeyHxU3ljcXxn48GMny7Na3urGCei958mP5hbQmzukpgUKkJHzkDhGeRP9VZh +/sJ6mE9AfS6YAM3S4hv2Q== -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:13 2025 by rpki-client