$ rpki-client -vvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft File: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft (raw, json) Hash identifier: bLUOxQBNtnejg8uowTX15LZDXBzjX+7+zDzWkFQJPZI= Subject key identifier: B3:24:D3:D9:55:F3:B6:EB:55:81:91:5E:DA:4C:6A:1E:21:96:78:58 Authority key identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB Certificate issuer: /CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Certificate serial: 6FC66EAB58223DE8B6D7993227549482D564B640 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft Manifest number: B7 Signing time: Mon 20 Oct 2025 12:44:39 +0000 Manifest this update: Mon 20 Oct 2025 12:39:39 +0000 Manifest next update: Tue 21 Oct 2025 16:00:39 +0000 Files and hashes: 1: 34352e37312e3232302e302f32322d3234203d3e20323637363433.roa (hash: DphYCMXiIhOunJYgpxuGmI/F5WVwTY6x8muqbHvOLD0=) 2: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl (hash: KYjIkBPGfdnHOBy3VZpL503WBqmCR4RztzqZiuPrMoQ=) 3: 323830343a343461303a3a2f33322d3438203d3e20323637363433.roa (hash: OhP4AfZLm8wKcC8NRb3lR5wasqSW+ZFcBQBWlmtzm+0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 16:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c6:6e:ab:58:22:3d:e8:b6:d7:99:32:27:54:94:82:d5:64:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Validity Not Before: Oct 20 12:39:39 2025 GMT Not After : Oct 21 16:00:39 2025 GMT Subject: CN=B324D3D955F3B6EB5581915EDA4C6A1E21967858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a5:ab:bd:e3:f7:25:ef:f2:42:ec:ed:6b:0a: 77:a4:15:45:3d:06:82:d1:f1:90:60:c2:36:1f:ea: ef:5c:7a:0e:da:f5:d8:8b:d7:62:ea:4d:ef:9f:c2: 93:c8:b3:b1:9f:58:a2:c6:a3:c1:a7:56:43:1a:0e: f9:c2:13:bf:c3:74:1e:54:7c:6e:8a:06:31:0c:bf: 89:69:87:99:26:ba:f4:4d:98:fd:de:ff:5b:e7:15: cd:df:e0:2d:c1:39:1a:f6:9d:03:12:86:02:91:64: 82:35:ec:79:7a:d9:f0:f2:5c:4f:02:16:d5:c8:a1: 29:a0:51:6c:64:1c:b7:f9:54:e4:2a:12:eb:f4:5d: 97:82:a5:f9:f8:c5:43:c3:62:e7:f5:ed:8c:c2:e5: 94:04:9d:34:0f:dc:7f:46:2b:e4:1a:bc:3b:64:a1: 76:c4:bc:c5:d9:06:03:ce:1d:92:8a:94:16:12:d1: 4e:82:ad:3b:0c:c8:c9:d3:8c:f3:ad:9c:41:d6:aa: b2:27:4b:77:51:18:f6:de:96:8d:0f:39:6a:6f:78: 47:c6:9b:f4:f1:66:0d:ae:a8:ad:70:98:58:1c:38: 4a:ab:fe:12:1a:8b:d9:d5:8b:01:6b:ff:df:4a:07: d4:1b:16:e6:3c:eb:f1:7f:84:e0:f3:0e:45:b8:9d: a0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:24:D3:D9:55:F3:B6:EB:55:81:91:5E:DA:4C:6A:1E:21:96:78:58 X509v3 Authority Key Identifier: keyid:D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:8e:1e:ab:7e:9e:7c:72:4c:a0:89:46:9d:3e:28:d5:51:68: 17:3e:76:05:fc:f8:60:23:62:41:de:58:35:77:42:93:a8:2e: 5a:cd:51:3b:82:f7:54:93:6f:fd:4c:8e:1a:6e:e2:a5:f8:d4: c8:28:1c:d4:75:58:7c:a7:92:a5:2f:27:2c:5d:94:66:06:37: af:6c:78:e2:5c:37:71:5f:ae:aa:0e:a2:8e:4e:45:69:31:aa: 89:18:af:59:61:f2:e1:f7:ae:1e:77:c4:96:a4:e3:02:cd:70: b7:38:15:e6:93:21:07:3b:c2:ce:e6:c3:2f:03:4b:17:43:b4: 61:bd:b9:34:47:56:bf:46:81:0d:9e:fd:7d:2e:7a:4f:d1:e6: c0:21:da:a2:76:4f:1e:62:e7:09:7a:e7:3c:f9:ba:4b:49:e3: 5c:5a:8d:ef:13:f3:4b:17:6e:25:47:06:34:bc:5b:fd:f6:83: 35:4b:41:7b:06:6f:9a:81:c9:3b:da:a0:05:13:0b:cf:6d:6f: 76:f8:bd:74:9f:d9:8d:2c:b7:a0:cc:2e:ac:0b:74:36:34:23: c2:48:99:2e:b4:d6:aa:d4:73:f1:ee:f7:64:f9:bc:08:34:03: 23:71:8f:3c:52:73:c1:ce:c9:32:a0:c3:1e:8b:33:2f:75:8d: f2:85:7e:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUb8Zuq1giPei215kyJ1SUgtVktkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk3MEYxN0M4NkQ0RDVBOUM2Mzk1RTlFMkQxNjAxQkJE OUZBOEJEQjAeFw0yNTEwMjAxMjM5MzlaFw0yNTEwMjExNjAwMzlaMDMxMTAvBgNV BAMTKEIzMjREM0Q5NTVGM0I2RUI1NTgxOTE1RURBNEM2QTFFMjE5Njc4NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXpau94/cl7/JC7O1rCnekFUU9 BoLR8ZBgwjYf6u9ceg7a9diL12LqTe+fwpPIs7GfWKLGo8GnVkMaDvnCE7/DdB5U fG6KBjEMv4lph5kmuvRNmP3e/1vnFc3f4C3BORr2nQMShgKRZII17Hl62fDyXE8C FtXIoSmgUWxkHLf5VOQqEuv0XZeCpfn4xUPDYuf17YzC5ZQEnTQP3H9GK+QavDtk oXbEvMXZBgPOHZKKlBYS0U6CrTsMyMnTjPOtnEHWqrInS3dRGPbelo0POWpveEfG m/TxZg2uqK1wmFgcOEqr/hIai9nViwFr/99KB9QbFuY86/F/hODzDkW4naB5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsyTT2VXztutVgZFe2kxqHiGWeFgwHwYDVR0j BBgwFoAU2XDxfIbU1anGOV6eLRYBu9n6i9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhv dmIvMS9EOTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NzBGMTdDODZENEQ1QTlD NjM5NUU5RTJEMTYwMUJCRDlGQThCREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhvdmIvMS9E OTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs44eq36efHJMoIlGnT4o1VFoFz52Bfz4YCNiQd5YNXdCk6guWs1RO4L3VJNv /UyOGm7ipfjUyCgc1HVYfKeSpS8nLF2UZgY3r2x44lw3cV+uqg6ijk5FaTGqiRiv WWHy4feuHnfElqTjAs1wtzgV5pMhBzvCzubDLwNLF0O0Yb25NEdWv0aBDZ79fS56 T9HmwCHaonZPHmLnCXrnPPm6S0njXFqN7xPzSxduJUcGNLxb/faDNUtBewZvmoHJ O9qgBRMLz21vdvi9dJ/ZjSy3oMwurAt0NjQjwkiZLrTWqtRz8e73ZPm8CDQDI3GP PFJzwc7JMqDDHoszL3WN8oV+pw== -----END CERTIFICATE-----Generated at Mon Oct 20 18:27:10 2025 by rpki-client