$ rpki-client -vvf rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft File: DB87B78475D3067687137BE8069FFB8CBC613CAF.mft (raw, json) Hash identifier: YqgvC1SBXjsM8wvDrCIgXEYko/5Cd3hA14m5VU4W5Gw= Subject key identifier: 67:E9:E7:94:85:8C:CF:4E:28:69:49:61:A4:7E:37:17:71:EE:A2:16 Authority key identifier: DB:87:B7:84:75:D3:06:76:87:13:7B:E8:06:9F:FB:8C:BC:61:3C:AF Certificate issuer: /CN=DB87B78475D3067687137BE8069FFB8CBC613CAF Certificate serial: 20678E0A7F67C622471B83C65A45123FB8E6DFAF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer Subject info access: rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft Manifest number: 02F1 Signing time: Sun 19 Oct 2025 20:24:58 +0000 Manifest this update: Sun 19 Oct 2025 20:19:58 +0000 Manifest next update: Mon 20 Oct 2025 23:59:58 +0000 Files and hashes: 1: DB87B78475D3067687137BE8069FFB8CBC613CAF.crl (hash: HBPOOWheHcFVfCzSRd4bZf/To9m8j65VUE7t1+1oumA=) 2: 323830343a376663383a3a2f33322d3332203d3e20323731373039.roa (hash: zsQhMCE2rF1VO32MT/KDA+4cVlXckYhvlXLp+ghtzdc=) 3: 3138312e3139322e39362e302f32322d3234203d3e20323731373039.roa (hash: 4Jqjhfm8UELWTGuiuZ4hZgYSLa1cKWN0n4f8z7pkohI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.crl rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 23:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:67:8e:0a:7f:67:c6:22:47:1b:83:c6:5a:45:12:3f:b8:e6:df:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB87B78475D3067687137BE8069FFB8CBC613CAF Validity Not Before: Oct 19 20:19:58 2025 GMT Not After : Oct 20 23:59:58 2025 GMT Subject: CN=67E9E794858CCF4E28694961A47E371771EEA216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1c:ba:d4:c5:90:fa:43:f8:4d:a3:86:ba:38: e4:91:7a:53:8c:37:78:87:32:c8:c9:46:04:c5:74: 21:96:a7:98:28:99:ff:53:59:43:80:cb:d9:bf:e7: fb:4a:c0:ae:cc:44:f1:e0:3c:21:89:a7:18:13:5d: 09:1f:6e:ad:86:3c:4e:32:e2:2e:e0:ba:f0:18:6a: 7d:68:08:3e:83:6e:08:28:40:82:b1:1f:e9:e2:15: 0b:23:49:fb:47:38:21:85:65:c7:25:1e:b6:02:fa: 51:5f:0d:e4:ef:5d:70:da:9a:e7:a0:4a:7c:bb:12: 43:e0:74:0b:d3:42:29:be:bc:5a:0a:0f:f1:f7:32: f7:b2:24:34:2c:c0:54:c0:2c:a5:49:d0:51:b1:bb: 10:fd:1b:c2:b6:c2:8b:de:4a:84:59:83:d9:f2:19: 9c:64:9f:12:a3:50:68:95:61:78:b6:5c:e2:a7:d7: 68:18:7f:47:bd:90:ed:23:68:81:11:30:c5:ca:ee: 2f:56:8f:bb:c7:b9:a2:d9:10:75:23:a6:c7:4f:21: 48:31:95:92:07:fa:f6:3b:66:ce:10:ec:84:af:2f: cf:ca:7a:65:66:f3:d3:c6:18:5c:4f:91:22:a7:f9: c4:9b:e6:51:27:ce:4a:58:6e:91:2c:ae:27:ba:6f: 51:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E9:E7:94:85:8C:CF:4E:28:69:49:61:A4:7E:37:17:71:EE:A2:16 X509v3 Authority Key Identifier: keyid:DB:87:B7:84:75:D3:06:76:87:13:7B:E8:06:9F:FB:8C:BC:61:3C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:25:8a:7d:e1:b5:65:7e:be:cf:24:f7:5e:88:7d:77:55:11: cd:30:38:33:67:10:d7:d7:d0:5d:75:c1:b3:30:dc:a0:c2:c4: dd:c5:4d:16:6d:6e:1a:cf:ca:cb:80:e6:a0:50:1e:d6:23:2b: 47:65:85:5f:77:28:e0:ef:d2:59:97:bf:84:56:e7:50:3a:b2: 14:99:19:48:bd:56:c6:6f:0e:2d:ff:5e:62:85:38:a8:49:75: 04:c4:5e:7f:6a:22:51:b7:c3:0d:75:b5:85:4a:37:13:db:f0: 6e:57:be:e8:99:11:7b:2d:f0:f5:27:39:bf:51:df:5c:dc:7f: 66:e1:97:1a:55:30:20:86:f8:42:23:20:22:5a:56:39:ba:e7: a6:53:72:95:72:18:07:27:76:d1:cc:b5:28:98:30:dd:af:9f: 9c:86:2f:f4:50:4d:19:12:87:2a:2c:3f:1f:04:36:b8:01:2e: 91:9c:34:4c:c5:fd:47:9e:40:9c:f1:b2:f4:72:fc:02:b5:0e: 1a:3b:4b:03:c5:6e:fd:6c:5c:89:f6:be:70:8a:3a:52:20:5a: 80:a9:9e:d1:d3:74:70:49:28:cc:43:28:30:41:db:42:b3:3c: a8:22:19:20:f7:35:7d:ec:8e:11:b9:e0:03:c1:50:33:78:3e: af:4e:e0:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIGeOCn9nxiJHG4PGWkUSP7jm368wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI4N0I3ODQ3NUQzMDY3Njg3MTM3QkU4MDY5RkZCOENC QzYxM0NBRjAeFw0yNTEwMTkyMDE5NThaFw0yNTEwMjAyMzU5NThaMDMxMTAvBgNV BAMTKDY3RTlFNzk0ODU4Q0NGNEUyODY5NDk2MUE0N0UzNzE3NzFFRUEyMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnHLrUxZD6Q/hNo4a6OOSRelOM N3iHMsjJRgTFdCGWp5gomf9TWUOAy9m/5/tKwK7MRPHgPCGJpxgTXQkfbq2GPE4y 4i7guvAYan1oCD6DbggoQIKxH+niFQsjSftHOCGFZcclHrYC+lFfDeTvXXDamueg Sny7EkPgdAvTQim+vFoKD/H3MveyJDQswFTALKVJ0FGxuxD9G8K2woveSoRZg9ny GZxknxKjUGiVYXi2XOKn12gYf0e9kO0jaIERMMXK7i9Wj7vHuaLZEHUjpsdPIUgx lZIH+vY7Zs4Q7ISvL8/KemVm89PGGFxPkSKn+cSb5lEnzkpYbpEsrie6b1FjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZ+nnlIWMz04oaUlhpH43F3HuohYwHwYDVR0j BBgwFoAU24e3hHXTBnaHE3voBp/7jLxhPK8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzROa1JBczRRN2c5Wml4S3prWUFLQXhxdFFlcG53eEVRUERkckp2RVU3 YVUvMS9EQjg3Qjc4NDc1RDMwNjc2ODcxMzdCRTgwNjlGRkI4Q0JDNjEzQ0FGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCODdCNzg0NzVEMzA2NzY4 NzEzN0JFODA2OUZGQjhDQkM2MTNDQUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzROa1JBczRRN2c5Wml4S3prWUFLQXhxdFFlcG53eEVRUERkckp2RVU3YVUvMS9E Qjg3Qjc4NDc1RDMwNjc2ODcxMzdCRTgwNjlGRkI4Q0JDNjEzQ0FGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADyWKfeG1ZX6+zyT3Xoh9d1URzTA4M2cQ19fQXXXBszDcoMLE3cVNFm1uGs/K y4DmoFAe1iMrR2WFX3co4O/SWZe/hFbnUDqyFJkZSL1Wxm8OLf9eYoU4qEl1BMRe f2oiUbfDDXW1hUo3E9vwble+6JkRey3w9Sc5v1HfXNx/ZuGXGlUwIIb4QiMgIlpW ObrnplNylXIYByd20cy1KJgw3a+fnIYv9FBNGRKHKiw/HwQ2uAEukZw0TMX9R55A nPGy9HL8ArUOGjtLA8Vu/Wxcifa+cIo6UiBagKme0dN0cEkozEMoMEHbQrM8qCIZ IPc1feyOEbngA8FQM3g+r07g1w== -----END CERTIFICATE-----Generated at Mon Oct 20 13:35:09 2025 by rpki-client