$ rpki-client -vvf rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.mft File: 678744E2F008A98B388D024DEEAB7AEEF09D3883.mft (raw, json) Hash identifier: thIlo+EEFqte4zy6jsCbEOoo5VuLkr1mzczSf3/NoOA= Subject key identifier: 37:A3:77:A8:E5:FA:52:E9:7E:FE:0B:9E:51:E4:08:2C:BC:96:9F:EE Authority key identifier: 67:87:44:E2:F0:08:A9:8B:38:8D:02:4D:EE:AB:7A:EE:F0:9D:38:83 Certificate issuer: /CN=678744E2F008A98B388D024DEEAB7AEEF09D3883 Certificate serial: 6D85EE258D51283326941A9FCEB6071D7C46CDCE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer Subject info access: rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.mft Manifest number: 02DF Signing time: Mon 20 Oct 2025 04:00:13 +0000 Manifest this update: Mon 20 Oct 2025 03:55:13 +0000 Manifest next update: Tue 21 Oct 2025 04:15:13 +0000 Files and hashes: 1: 323830343a323131343a3a2f33322d313238203d3e20323634353331.roa (hash: UPHvs93Rd+YmsT/7GMOYgrcgRQxytVueQsthJXQDUJg=) 2: 3133382e302e37322e302f32322d3332203d3e20323634353331.roa (hash: ws13/Y9PdSkwXG/EkX5KLQQynEeZGqRNpQpSgcgt8Fg=) 3: 678744E2F008A98B388D024DEEAB7AEEF09D3883.crl (hash: h2cz7yV4a8hzqFT6DlTcBxpc+xEPKbaNa4dc5iCfxB8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.crl rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:85:ee:25:8d:51:28:33:26:94:1a:9f:ce:b6:07:1d:7c:46:cd:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678744E2F008A98B388D024DEEAB7AEEF09D3883 Validity Not Before: Oct 20 03:55:13 2025 GMT Not After : Oct 21 04:15:13 2025 GMT Subject: CN=37A377A8E5FA52E97EFE0B9E51E4082CBC969FEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:89:d1:c7:57:6c:14:5e:80:0c:fe:37:8f: d9:90:5c:e0:f7:04:a9:6c:c3:d2:8e:33:54:b0:15: 29:fd:8a:9a:8d:17:35:69:a4:ad:1f:ac:f0:b3:f0: 60:a5:6e:c6:42:b5:41:58:52:f8:d7:22:16:4a:b1: 61:d2:69:32:c2:91:43:fc:a6:3e:b1:33:76:ae:43: 1d:e7:6b:df:98:ba:53:19:4a:72:11:0d:4e:65:ef: 01:17:bb:18:6a:4e:a4:56:49:41:41:28:7c:f7:59: 5c:77:5f:d6:e3:07:46:c0:ae:84:b0:74:a5:71:96: 49:75:5e:38:e8:e5:1a:34:fc:e0:d9:ff:77:b6:9d: d4:83:49:de:2b:c6:2b:cc:f6:8e:e6:73:4a:41:e2: 7a:c8:fb:34:14:d8:e4:b8:dd:13:b8:19:90:3c:af: 7b:79:79:35:bc:49:15:ef:28:ff:6f:c3:1d:18:95: 0b:3b:9e:b7:a0:93:28:3e:ac:3c:6e:8d:fa:1e:27: 4c:26:f0:a9:ba:63:eb:16:fe:54:80:ac:fa:d8:d1: 2a:8d:26:42:03:fd:3a:b7:2b:f4:d9:ea:e2:93:c4: 0f:38:ae:ff:d3:6d:65:11:f2:d0:6c:af:85:ff:c5: 60:0a:61:97:f2:b7:db:33:75:0a:28:90:94:a2:c6: f5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A3:77:A8:E5:FA:52:E9:7E:FE:0B:9E:51:E4:08:2C:BC:96:9F:EE X509v3 Authority Key Identifier: keyid:67:87:44:E2:F0:08:A9:8B:38:8D:02:4D:EE:AB:7A:EE:F0:9D:38:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbQFJsdihXPJ7toycY6vTcHUeRyTQrKxR6WqpdKgvw6H/1/678744E2F008A98B388D024DEEAB7AEEF09D3883.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ca:95:87:93:2d:bb:2d:3f:32:62:9f:19:ae:3b:53:7d:3f: 4f:66:5e:8d:85:9c:4f:66:1f:43:79:9a:b3:44:ad:cb:ce:f2: a3:26:5a:17:04:82:e8:6d:d3:4c:0f:f0:6a:3e:28:f9:ee:ac: af:bc:6e:82:75:a5:95:c3:07:99:3d:c3:53:b4:b9:33:60:90: fd:56:c8:87:74:a0:e5:78:a6:98:a9:7d:0b:8f:68:93:b0:3b: 29:3c:fb:9a:38:c9:7a:08:09:7e:2b:46:2d:ba:f0:0f:5a:84: 00:a6:68:0b:4c:78:aa:5d:7e:bb:cd:2c:cb:8b:93:9e:78:b1: ba:70:9c:97:3d:7a:3e:6f:b5:fe:39:f8:53:55:f7:7d:ff:ee: ce:21:4b:8a:96:7c:8b:d3:c9:69:5a:4e:df:96:71:6f:f4:a5: 94:09:30:72:f5:13:fb:fa:f7:15:d6:a8:8e:ed:33:52:c8:93: 27:9c:4b:bc:91:0c:e1:f5:38:e3:24:5c:b3:f0:fc:e2:16:29: b6:66:c8:ff:d7:e2:ad:e7:6f:0b:b4:8d:46:a2:75:5c:81:6a: 18:0f:97:5a:44:b5:cd:05:64:39:7d:06:cc:54:31:5f:c2:52: 79:82:e6:a6:c3:82:e2:6e:e3:ff:3c:1a:d5:d8:b2:eb:31:b4: eb:5b:9d:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbYXuJY1RKDMmlBqfzrYHHXxGzc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc4NzQ0RTJGMDA4QTk4QjM4OEQwMjRERUVBQjdBRUVG MDlEMzg4MzAeFw0yNTEwMjAwMzU1MTNaFw0yNTEwMjEwNDE1MTNaMDMxMTAvBgNV BAMTKDM3QTM3N0E4RTVGQTUyRTk3RUZFMEI5RTUxRTQwODJDQkM5NjlGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClyonRx1dsFF6ADP43j9mQXOD3 BKlsw9KOM1SwFSn9ipqNFzVppK0frPCz8GClbsZCtUFYUvjXIhZKsWHSaTLCkUP8 pj6xM3auQx3na9+YulMZSnIRDU5l7wEXuxhqTqRWSUFBKHz3WVx3X9bjB0bAroSw dKVxlkl1Xjjo5Ro0/ODZ/3e2ndSDSd4rxivM9o7mc0pB4nrI+zQU2OS43RO4GZA8 r3t5eTW8SRXvKP9vwx0YlQs7nregkyg+rDxujfoeJ0wm8Km6Y+sW/lSArPrY0SqN JkID/Tq3K/TZ6uKTxA84rv/TbWUR8tBsr4X/xWAKYZfyt9szdQookJSixvUnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUN6N3qOX6Uul+/gueUeQILLyWn+4wHwYDVR0j BBgwFoAUZ4dE4vAIqYs4jQJN7qt67vCdOIMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmJRRkpzZGloWFBKN3RveWNZNnZUY0hVZVJ5VFFyS3hSNldxcGRLZ3Z3 NkgvMS82Nzg3NDRFMkYwMDhBOThCMzg4RDAyNERFRUFCN0FFRUYwOUQzODgzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3ODc0NEUyRjAwOEE5OEIz ODhEMDI0REVFQUI3QUVFRjA5RDM4ODMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmJRRkpzZGloWFBKN3RveWNZNnZUY0hVZVJ5VFFyS3hSNldxcGRLZ3Z3NkgvMS82 Nzg3NDRFMkYwMDhBOThCMzg4RDAyNERFRUFCN0FFRUYwOUQzODgzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAksqVh5Mtuy0/MmKfGa47U30/T2ZejYWcT2YfQ3mas0Sty87yoyZaFwSC6G3T TA/waj4o+e6sr7xugnWllcMHmT3DU7S5M2CQ/VbIh3Sg5XimmKl9C49ok7A7KTz7 mjjJeggJfitGLbrwD1qEAKZoC0x4ql1+u80sy4uTnnixunCclz16Pm+1/jn4U1X3 ff/uziFLipZ8i9PJaVpO35Zxb/SllAkwcvUT+/r3Fdaoju0zUsiTJ5xLvJEM4fU4 4yRcs/D84hYptmbI/9firedvC7SNRqJ1XIFqGA+XWkS1zQVkOX0GzFQxX8JSeYLm psOC4m7j/zwa1diy6zG061udmg== -----END CERTIFICATE-----Generated at Mon Oct 20 12:44:31 2025 by rpki-client