$ rpki-client -vvf rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft File: 66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft (raw, json) Hash identifier: OcM3yOtsVs532eUGQXS5/IejDLKuL2jGa7kpT3JS7yc= Subject key identifier: 38:E0:CF:2B:C4:FD:20:45:D8:31:8C:EA:AF:02:A7:0E:CB:AA:3F:12 Authority key identifier: 66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF Certificate issuer: /CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF Certificate serial: 0BA8AC8A262AB3D0C8FBA08B9CA1409BD04EEDF2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer Subject info access: rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft Manifest number: 022C Signing time: Mon 20 Oct 2025 10:46:10 +0000 Manifest this update: Mon 20 Oct 2025 10:41:10 +0000 Manifest next update: Tue 21 Oct 2025 14:24:10 +0000 Files and hashes: 1: 66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl (hash: 6jElQ84oZfcqLuVGKr6elx9X5ZK6oiQYi0nPb3fv76w=) 2: 323830343a373531633a3a2f33322d3438203d3e20323731303234.roa (hash: kdiCLIBPgvx03r4z0/coVpN45suCV5e0imm5xVT80tc=) 3: 34352e3137392e3130362e302f32332d3234203d3e20323731303234.roa (hash: 5EjfMf4KxyWlNsMGlJvu26qX/Qos07VTS7AOE6/ZL6E=) 4: 34352e3232372e3130302e302f32322d3234203d3e20323731303234.roa (hash: hAS2i1VbX4dRq2s74k6OVSbnzXxGnFNj+kSSmNb1v0Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a8:ac:8a:26:2a:b3:d0:c8:fb:a0:8b:9c:a1:40:9b:d0:4e:ed:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF Validity Not Before: Oct 20 10:41:10 2025 GMT Not After : Oct 21 14:24:10 2025 GMT Subject: CN=38E0CF2BC4FD2045D8318CEAAF02A70ECBAA3F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b1:9b:df:a7:64:6a:50:86:61:7c:2d:e1:99: 09:e5:d8:c1:79:19:7e:7e:02:82:86:a6:fe:17:0c: 8b:88:3d:ad:5f:32:91:af:34:5c:a4:00:b8:73:70: c4:84:a9:d6:70:b3:51:c2:81:d8:8e:ce:24:1a:be: 01:8d:fb:95:cd:25:83:aa:6e:9b:cb:a1:00:20:44: a4:85:37:d3:1b:7d:2b:0e:4c:a4:db:95:9b:9e:61: ff:43:16:f0:93:5a:bd:2d:72:c0:2a:e4:78:02:3a: 96:93:27:0a:1d:4d:ba:91:58:68:60:6a:a9:fa:89: 5f:a3:08:78:b1:11:e0:b8:ab:f3:7c:ad:dd:e6:7d: ec:47:e0:b9:2d:2b:84:fc:c8:88:5f:4b:e1:46:7a: cb:5f:8c:3a:fc:26:4c:e6:21:5d:a0:83:f5:00:a1: 93:3e:02:99:8c:93:b0:de:31:83:0a:58:3d:87:51: 14:17:b2:58:7a:49:a7:96:e3:e1:9c:82:a3:e2:6a: c3:b9:38:42:1f:9a:a0:f5:55:4c:f1:8a:e4:6b:f1: 06:37:17:f0:fd:a9:60:e5:e7:e6:33:75:8b:6e:69: 9a:5d:41:6c:18:50:c8:c4:0c:23:58:71:36:2d:fb: 25:9b:97:23:06:48:b9:e2:bb:bd:a7:cd:25:18:42: 11:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E0:CF:2B:C4:FD:20:45:D8:31:8C:EA:AF:02:A7:0E:CB:AA:3F:12 X509v3 Authority Key Identifier: keyid:66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:24:2a:9c:aa:bd:8d:da:fd:5f:ed:0e:ea:71:85:87:02:53: c8:b7:3a:f5:46:13:04:19:0d:93:f7:65:d5:67:f7:b7:1d:de: 11:50:66:b8:fd:f9:ef:f4:f2:8c:af:70:b8:40:02:42:94:ac: 15:9d:34:56:0a:93:29:1c:82:b6:b5:ed:e2:f2:b8:99:76:5d: 13:4c:a4:19:9e:82:55:f5:53:95:91:cf:5c:43:e0:22:00:6a: 9b:6e:c3:fa:de:1e:09:72:e3:ee:55:72:eb:f6:4c:52:8d:47: 6a:92:d7:11:74:70:8d:6d:47:51:41:61:02:da:24:f1:98:7d: 7d:53:0c:38:92:be:4c:2d:68:52:b0:3b:d8:dc:8d:03:b0:eb: e0:23:47:aa:31:c1:22:25:09:5d:2a:a7:33:5c:79:99:0d:fd: 60:da:46:b8:27:1b:72:65:b6:b5:7f:10:60:9a:1a:d7:e2:16: 14:9f:42:1a:45:7b:e3:ce:05:fb:43:fc:1b:15:5b:78:24:01: ad:24:d3:30:22:e5:f8:4e:35:ba:00:b3:eb:d0:2f:4b:4c:67: 32:84:75:55:13:c0:bf:fd:fd:85:58:4f:87:3f:6d:67:bc:3c: 8a:c9:c2:84:f0:48:6d:8c:88:fe:29:ae:b9:a6:33:64:6d:f9: 92:db:f7:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUC6isiiYqs9DI+6CLnKFAm9BO7fIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGREI4NzZDQkEyRTNFMUMxMjA4MDQ1RTk5MEIzOUJE MDk3RUJDRjAeFw0yNTEwMjAxMDQxMTBaFw0yNTEwMjExNDI0MTBaMDMxMTAvBgNV BAMTKDM4RTBDRjJCQzRGRDIwNDVEODMxOENFQUFGMDJBNzBFQ0JBQTNGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMsZvfp2RqUIZhfC3hmQnl2MF5 GX5+AoKGpv4XDIuIPa1fMpGvNFykALhzcMSEqdZws1HCgdiOziQavgGN+5XNJYOq bpvLoQAgRKSFN9MbfSsOTKTblZueYf9DFvCTWr0tcsAq5HgCOpaTJwodTbqRWGhg aqn6iV+jCHixEeC4q/N8rd3mfexH4LktK4T8yIhfS+FGestfjDr8JkzmIV2gg/UA oZM+ApmMk7DeMYMKWD2HURQXslh6SaeW4+GcgqPiasO5OEIfmqD1VUzxiuRr8QY3 F/D9qWDl5+YzdYtuaZpdQWwYUMjEDCNYcTYt+yWblyMGSLniu72nzSUYQhElAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOODPK8T9IEXYMYzqrwKnDsuqPxIwHwYDVR0j BBgwFoAUZv24dsui4+HBIIBF6ZCzm9CX688wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmFSemFIcWo3RmI5NzFkQTdoY3BFdkxiVndDWXUyTkttOFZDVjZMdzE4 cHIvMC82NkZEQjg3NkNCQTJFM0UxQzEyMDgwNDVFOTkwQjM5QkQwOTdFQkNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RkRCODc2Q0JBMkUzRTFD MTIwODA0NUU5OTBCMzlCRDA5N0VCQ0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmFSemFIcWo3RmI5NzFkQTdoY3BFdkxiVndDWXUyTkttOFZDVjZMdzE4cHIvMC82 NkZEQjg3NkNCQTJFM0UxQzEyMDgwNDVFOTkwQjM5QkQwOTdFQkNGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoyQqnKq9jdr9X+0O6nGFhwJTyLc69UYTBBkNk/dl1Wf3tx3eEVBmuP357/Ty jK9wuEACQpSsFZ00VgqTKRyCtrXt4vK4mXZdE0ykGZ6CVfVTlZHPXEPgIgBqm27D +t4eCXLj7lVy6/ZMUo1HapLXEXRwjW1HUUFhAtok8Zh9fVMMOJK+TC1oUrA72NyN A7Dr4CNHqjHBIiUJXSqnM1x5mQ39YNpGuCcbcmW2tX8QYJoa1+IWFJ9CGkV7484F +0P8GxVbeCQBrSTTMCLl+E41ugCz69AvS0xnMoR1VRPAv/39hVhPhz9tZ7w8isnC hPBIbYyI/imuuaYzZG35ktv3Eg== -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:29 2025 by rpki-client