$ rpki-client -vvf rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.mft File: 66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.mft (raw, json) Hash identifier: f8lHtvhn2c/k7jBiYl6/lLU2P6AUnldQMggCTrouJTs= Subject key identifier: 74:01:DF:44:92:EC:18:4D:0A:07:82:DC:7F:85:E3:2A:57:6D:EE:CF Authority key identifier: 66:D9:C3:E2:A9:2C:90:F1:5B:EB:35:42:0B:B2:D5:3A:F4:AA:2E:EC Certificate issuer: /CN=66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC Certificate serial: 6EDDCDC1A1848482E165E6D40465C7E2A08CE7C9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.cer Subject info access: rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.mft Manifest number: 85 Signing time: Mon 20 Oct 2025 01:32:03 +0000 Manifest this update: Mon 20 Oct 2025 01:27:03 +0000 Manifest next update: Tue 21 Oct 2025 04:24:03 +0000 Files and hashes: 1: 34352e3136342e3132302e302f32322d3234203d3e20323638363233.roa (hash: VdmAjEX2uAAaqRd3+FF9lAdTZ9bQNFw2sLDrSBD9twA=) 2: 66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.crl (hash: VZE0mV/N/flh6G20ETlrB1go5Gng5KaqMGIqJi2We8s=) 3: 323830343a353430343a3a2f33322d3438203d3e20323638363233.roa (hash: QSlBE7opHGAKTl6LwF47/EkVKvSO4IVLgQaKRJH95GQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.crl rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:dd:cd:c1:a1:84:84:82:e1:65:e6:d4:04:65:c7:e2:a0:8c:e7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC Validity Not Before: Oct 20 01:27:03 2025 GMT Not After : Oct 21 04:24:03 2025 GMT Subject: CN=7401DF4492EC184D0A0782DC7F85E32A576DEECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:f7:2e:bc:6f:1c:b7:17:0d:12:3e:c1:1a: 58:8c:4a:09:9f:46:60:16:81:a3:80:2d:94:0e:db: 8a:8b:5d:3d:8f:35:ce:61:5e:7e:9c:bb:f3:a8:1a: 91:51:1c:3a:fc:2f:68:14:21:ec:03:d5:f1:1c:16: f5:1c:b2:17:9c:ae:28:38:a0:b1:54:f9:a6:69:f7: 93:d0:1b:47:81:5d:b9:c5:d0:34:61:b9:25:c7:56: a3:97:70:3a:85:23:be:9f:a3:f8:1e:b0:0b:f1:7f: f3:f7:04:b1:b9:49:ee:6d:23:23:a9:03:e8:8b:7f: b6:c2:6c:3c:9a:a8:8c:b2:87:de:bb:be:c5:c8:c1: 12:e6:cf:b4:44:9c:32:fe:03:33:ce:93:4d:2a:f5: b2:7f:15:29:d6:c9:85:8f:f0:89:5d:23:22:d7:e5: 61:cf:df:29:ec:04:e2:63:d6:8d:ed:99:7b:fa:9a: 57:a6:ef:17:ba:c8:d5:29:92:d7:73:dd:f5:28:68: 8a:47:00:99:ea:b1:39:49:72:c0:09:1d:49:5c:ce: e5:92:30:c7:41:fb:bc:51:3b:b4:0f:02:97:38:8c: a4:c2:42:07:b5:c5:46:a6:ea:90:44:f1:52:40:96: 66:2e:ce:ec:fc:4e:46:da:0c:c2:59:a1:e6:b2:86: 30:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:01:DF:44:92:EC:18:4D:0A:07:82:DC:7F:85:E3:2A:57:6D:EE:CF X509v3 Authority Key Identifier: keyid:66:D9:C3:E2:A9:2C:90:F1:5B:EB:35:42:0B:B2:D5:3A:F4:AA:2E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ce:bd:83:fe:44:ba:61:ee:d4:81:4a:e2:ff:35:e0:8d:3b: 5f:70:07:96:e0:e4:db:82:f4:cb:1a:ca:b8:70:65:14:46:eb: 99:c3:7a:b0:52:7b:f3:f7:d0:79:57:ef:9e:de:b4:e1:5a:3e: ee:8f:f1:fc:4f:04:06:d3:fb:43:49:f2:60:35:cb:ec:cc:6a: 4c:ff:a3:ee:4b:77:4d:da:19:2c:4a:2b:f5:89:bb:9b:46:81: 38:9d:da:94:76:f1:f5:78:53:9c:52:c0:e0:4c:c4:b5:67:fe: e0:63:26:a1:80:c7:11:45:c0:65:33:95:09:dd:18:53:75:43: 73:f7:e8:e3:70:6c:9d:92:47:6a:97:03:b6:28:00:15:b9:e5: f7:89:af:c9:ad:e2:81:0c:fd:47:95:9c:8e:d0:a6:28:7e:89: 5e:e8:78:17:57:9c:6d:19:5a:fe:3b:fa:16:53:6f:fc:c7:d4: 62:25:84:35:3a:0b:2a:cc:2f:f0:f3:fb:2d:62:df:ce:0d:35: 56:bb:19:9b:42:0a:f6:8e:79:65:a2:1e:24:6d:c0:e1:d4:f8: 11:5d:ef:9d:ff:5d:ca:02:20:11:82:86:f7:1e:32:d6:32:73: e0:ba:42:03:34:14:2d:89:46:b1:f6:61:d1:5a:4c:44:da:a3: a9:d1:c9:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbt3NwaGEhILhZebUBGXH4qCM58kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZEOUMzRTJBOTJDOTBGMTVCRUIzNTQyMEJCMkQ1M0FG NEFBMkVFQzAeFw0yNTEwMjAwMTI3MDNaFw0yNTEwMjEwNDI0MDNaMDMxMTAvBgNV BAMTKDc0MDFERjQ0OTJFQzE4NEQwQTA3ODJEQzdGODVFMzJBNTc2REVFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9PcuvG8ctxcNEj7BGliMSgmf RmAWgaOALZQO24qLXT2PNc5hXn6cu/OoGpFRHDr8L2gUIewD1fEcFvUcshecrig4 oLFU+aZp95PQG0eBXbnF0DRhuSXHVqOXcDqFI76fo/gesAvxf/P3BLG5Se5tIyOp A+iLf7bCbDyaqIyyh967vsXIwRLmz7REnDL+AzPOk00q9bJ/FSnWyYWP8IldIyLX 5WHP3ynsBOJj1o3tmXv6mlem7xe6yNUpktdz3fUoaIpHAJnqsTlJcsAJHUlczuWS MMdB+7xRO7QPApc4jKTCQge1xUam6pBE8VJAlmYuzuz8TkbaDMJZoeayhjBfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdAHfRJLsGE0KB4Lcf4XjKldt7s8wHwYDVR0j BBgwFoAUZtnD4qkskPFb6zVCC7LVOvSqLuwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGpQNHpLYXdINGdrbW93NDRrdWlvRnBocVZBSjM2MUxRcDZqeXljdkxG Y28vMC82NkQ5QzNFMkE5MkM5MEYxNUJFQjM1NDIwQkIyRDUzQUY0QUEyRUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RDlDM0UyQTkyQzkwRjE1 QkVCMzU0MjBCQjJENTNBRjRBQTJFRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGpQNHpLYXdINGdrbW93NDRrdWlvRnBocVZBSjM2MUxRcDZqeXljdkxGY28vMC82 NkQ5QzNFMkE5MkM5MEYxNUJFQjM1NDIwQkIyRDUzQUY0QUEyRUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGc69g/5EumHu1IFK4v814I07X3AHluDk24L0yxrKuHBlFEbrmcN6sFJ78/fQ eVfvnt604Vo+7o/x/E8EBtP7Q0nyYDXL7MxqTP+j7kt3TdoZLEor9Ym7m0aBOJ3a lHbx9XhTnFLA4EzEtWf+4GMmoYDHEUXAZTOVCd0YU3VDc/fo43BsnZJHapcDtigA Fbnl94mvya3igQz9R5WcjtCmKH6JXuh4F1ecbRla/jv6FlNv/MfUYiWENToLKswv 8PP7LWLfzg01VrsZm0IK9o55ZaIeJG3A4dT4EV3vnf9dygIgEYKG9x4y1jJz4LpC AzQULYlGsfZh0VpMRNqjqdHJaQ== -----END CERTIFICATE-----Generated at Mon Oct 20 15:25:55 2025 by rpki-client