$ rpki-client -vvf rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.mft File: 66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.mft (raw, json) Hash identifier: 0rWA33uhAWJv9YNIU7fE4BD6u8Kc+2ryqpYHvWHCaFM= Subject key identifier: F3:19:AD:CD:E4:8C:E5:30:D0:7D:F4:69:47:05:FA:32:27:DD:69:5F Authority key identifier: 66:B9:37:96:F4:23:90:B6:81:A3:DC:1C:C9:9F:8E:8E:43:CE:7B:DF Certificate issuer: /CN=66B93796F42390B681A3DC1CC99F8E8E43CE7BDF Certificate serial: 01007135F703DFC96B06B16E965381D9A1F4A06F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer Subject info access: rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.mft Manifest number: 02F7 Signing time: Mon 20 Oct 2025 10:49:34 +0000 Manifest this update: Mon 20 Oct 2025 10:44:34 +0000 Manifest next update: Tue 21 Oct 2025 12:32:34 +0000 Files and hashes: 1: 66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.crl (hash: aH3z9ebauKTXZ6aaFINU/0MXVgn+M7yLVy9f55ZfRPo=) 2: 323830343a313636343a3a2f33322d3438203d3e20323633323835.roa (hash: IykaJyg/AsXZgUh62JGyxoGnvtYsPgfFici7X++NqU0=) 3: 3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa (hash: dfyP0Df5w0Z+yCi+3DT4Tz2E4groDxQVIK8Ud1lRssE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.crl rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:00:71:35:f7:03:df:c9:6b:06:b1:6e:96:53:81:d9:a1:f4:a0:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66B93796F42390B681A3DC1CC99F8E8E43CE7BDF Validity Not Before: Oct 20 10:44:34 2025 GMT Not After : Oct 21 12:32:34 2025 GMT Subject: CN=F319ADCDE48CE530D07DF4694705FA3227DD695F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:63:c7:df:5d:8e:cd:4e:cd:15:d5:7a:f2: 2e:52:cf:82:27:08:a8:ca:92:77:79:c1:2e:b7:7e: 6a:a3:8f:d3:25:69:67:fc:77:e9:9f:e7:a8:03:f5: e2:6d:24:13:7f:82:a2:f1:3b:5d:7d:cf:14:4b:e1: 08:de:d9:eb:fe:0b:81:9d:77:c6:2d:f6:08:d1:7c: 83:42:e8:5b:fb:94:12:73:3e:59:d7:2f:18:c7:07: 34:bf:61:3b:fb:8a:e2:2c:89:72:76:20:dc:01:7d: a0:aa:e0:e7:6a:9e:cf:ff:ce:bf:03:10:30:8e:76: b3:ed:52:77:1c:ec:9e:89:5f:a2:e4:f3:ed:fb:c6: ec:b4:0b:50:79:7a:01:4c:8e:35:62:82:cb:1d:bb: 96:3b:b0:13:ec:fd:2c:e8:da:1c:bf:f9:4f:ca:d2: eb:1f:29:72:1f:0b:e7:ae:8e:43:8b:82:8a:04:55: 42:91:70:57:27:0d:72:03:e3:d1:ae:fb:d4:c3:43: 23:eb:50:f9:62:94:8d:5f:fa:35:29:56:f4:3b:06: 93:d1:19:c9:fd:94:9c:82:a5:92:2c:bb:fa:9c:c4: 3d:d3:45:56:3a:5f:03:31:49:86:8c:10:20:8f:00: a1:7e:17:53:92:98:c3:1a:37:bc:a1:c3:34:62:bb: b0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:19:AD:CD:E4:8C:E5:30:D0:7D:F4:69:47:05:FA:32:27:DD:69:5F X509v3 Authority Key Identifier: keyid:66:B9:37:96:F4:23:90:B6:81:A3:DC:1C:C9:9F:8E:8E:43:CE:7B:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:3b:9c:1b:5d:ad:92:6b:8d:7d:e7:04:0d:57:4b:1f:7b:d8: f2:1b:74:3f:b7:ce:92:bc:68:7d:da:44:01:63:de:2c:74:6f: fe:2e:65:8a:27:ed:26:e3:0e:20:f8:f9:13:0d:48:95:b5:56: 42:5c:1e:51:a3:b8:31:97:96:76:8b:61:21:4e:98:41:38:5e: 7e:e2:3f:80:66:db:da:68:5f:7b:f6:08:cb:e8:cb:7e:b8:07: 4b:45:f6:93:d2:a1:30:c3:be:65:33:6e:29:54:d2:be:e2:5b: d5:d1:a9:78:22:66:76:b4:e7:62:aa:4a:00:44:68:0f:25:b5: d9:75:b9:69:98:0c:0e:49:2e:22:3b:b0:0c:22:eb:6a:2e:0a: 68:12:56:5f:25:2a:a6:66:bc:11:34:2e:59:a0:3a:8b:59:39: 28:3e:cc:ef:ab:f6:e9:62:f3:64:e0:39:be:4b:ed:6b:a7:32: 5e:99:d2:5f:30:b0:35:ce:ef:28:1a:be:4b:bd:0c:76:47:13: e8:e4:da:1d:12:1f:44:05:64:3a:aa:a4:c4:30:e5:7b:02:fa: 63:0f:a4:5a:28:4e:cf:34:e6:ba:56:06:19:5a:18:87:4c:6e: 12:32:75:1c:1f:90:30:08:57:02:d3:0d:41:8d:25:21:cd:15: 39:47:12:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAQBxNfcD38lrBrFullOB2aH0oG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZCOTM3OTZGNDIzOTBCNjgxQTNEQzFDQzk5RjhFOEU0 M0NFN0JERjAeFw0yNTEwMjAxMDQ0MzRaFw0yNTEwMjExMjMyMzRaMDMxMTAvBgNV BAMTKEYzMTlBRENERTQ4Q0U1MzBEMDdERjQ2OTQ3MDVGQTMyMjdERDY5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qWPH312OzU7NFdV68i5Sz4In CKjKknd5wS63fmqjj9MlaWf8d+mf56gD9eJtJBN/gqLxO119zxRL4Qje2ev+C4Gd d8Yt9gjRfINC6Fv7lBJzPlnXLxjHBzS/YTv7iuIsiXJ2INwBfaCq4Odqns//zr8D EDCOdrPtUncc7J6JX6Lk8+37xuy0C1B5egFMjjVigssdu5Y7sBPs/Szo2hy/+U/K 0usfKXIfC+eujkOLgooEVUKRcFcnDXID49Gu+9TDQyPrUPlilI1f+jUpVvQ7BpPR Gcn9lJyCpZIsu/qcxD3TRVY6XwMxSYaMECCPAKF+F1OSmMMaN7yhwzRiu7D9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8xmtzeSM5TDQffRpRwX6MifdaV8wHwYDVR0j BBgwFoAUZrk3lvQjkLaBo9wcyZ+OjkPOe98wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFZXY1hOajNLSEVFNGF5WXZoNGdFR0ZoR3ROZnlTYmkxWEFvVlllNkcy NXcvMS82NkI5Mzc5NkY0MjM5MEI2ODFBM0RDMUNDOTlGOEU4RTQzQ0U3QkRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2QjkzNzk2RjQyMzkwQjY4 MUEzREMxQ0M5OUY4RThFNDNDRTdCREYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFZXY1hOajNLSEVFNGF5WXZoNGdFR0ZoR3ROZnlTYmkxWEFvVlllNkcyNXcvMS82 NkI5Mzc5NkY0MjM5MEI2ODFBM0RDMUNDOTlGOEU4RTQzQ0U3QkRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuTucG12tkmuNfecEDVdLH3vY8ht0P7fOkrxofdpEAWPeLHRv/i5liiftJuMO IPj5Ew1IlbVWQlweUaO4MZeWdothIU6YQThefuI/gGbb2mhfe/YIy+jLfrgHS0X2 k9KhMMO+ZTNuKVTSvuJb1dGpeCJmdrTnYqpKAERoDyW12XW5aZgMDkkuIjuwDCLr ai4KaBJWXyUqpma8ETQuWaA6i1k5KD7M76v26WLzZOA5vkvta6cyXpnSXzCwNc7v KBq+S70MdkcT6OTaHRIfRAVkOqqkxDDlewL6Yw+kWihOzzTmulYGGVoYh0xuEjJ1 HB+QMAhXAtMNQY0lIc0VOUcSMQ== -----END CERTIFICATE-----Generated at Mon Oct 20 19:28:51 2025 by rpki-client