$ rpki-client -vvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.mft File: 206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.mft (raw, json) Hash identifier: MPaPg2I1Ecmj0QospbnonioYdA5Y5XCIs6GC36MwN3I= Subject key identifier: 7A:B4:AF:11:57:CE:2B:13:C4:00:8F:EF:B5:FB:95:11:68:D9:CC:A8 Authority key identifier: 20:6D:33:F3:A8:B7:25:D8:32:6C:B6:CF:3F:2E:8C:BB:B7:14:85:9E Certificate issuer: /CN=206D33F3A8B725D8326CB6CF3F2E8CBBB714859E Certificate serial: 1A1DD59FEF77A40307B13635CC2539A34F6DA450 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.cer Subject info access: rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.mft Manifest number: 67 Signing time: Mon 20 Oct 2025 09:30:29 +0000 Manifest this update: Mon 20 Oct 2025 09:25:29 +0000 Manifest next update: Tue 21 Oct 2025 12:34:29 +0000 Files and hashes: 1: 323830343a343838633a3a2f33322d3334203d3e20323637313238.roa (hash: 7ioWv+IRXQuJci/BwSCDSwxhkzBb2TZETCwqNrFzMro=) 2: 206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.crl (hash: ZjgoxBIqCSq5YZMw1dvMctKITtFscHm69l4hctDGlFs=) 3: 34352e3232392e3133382e302f32332d3234203d3e20323637313238.roa (hash: uoxMT0+Qwrn8/UFFomaTSHIR6EUnfse/nfjoC/xfdAk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.crl rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1d:d5:9f:ef:77:a4:03:07:b1:36:35:cc:25:39:a3:4f:6d:a4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206D33F3A8B725D8326CB6CF3F2E8CBBB714859E Validity Not Before: Oct 20 09:25:29 2025 GMT Not After : Oct 21 12:34:29 2025 GMT Subject: CN=7AB4AF1157CE2B13C4008FEFB5FB951168D9CCA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:3c:d9:62:be:f2:29:c2:e3:08:55:9f:3d: b2:49:06:6a:66:4f:1e:46:d4:e9:45:1d:7e:2b:18: 9f:a1:1a:e3:69:55:91:19:94:ff:47:8a:c8:de:c5: 6e:6c:1d:4f:54:aa:b0:04:5a:d1:07:0d:d2:31:11: f3:6b:76:b0:aa:e9:c1:cd:18:80:59:eb:24:80:91: 99:5c:81:cc:e5:89:53:08:4d:16:78:55:f4:f9:45: 53:dd:64:d1:6c:4b:d0:e9:be:d6:85:e2:fa:80:3a: 58:5e:4a:da:44:7a:f4:83:fc:f9:36:f2:db:02:e3: 2a:90:d3:f5:82:91:44:1f:34:c2:0d:d4:50:58:ff: 61:cc:8e:e4:73:2e:f9:26:2f:81:05:2c:72:a7:7b: cc:79:13:b7:6a:38:56:bb:a9:fc:72:57:34:04:17: fd:33:ce:be:ec:0e:e6:44:04:ce:7b:31:93:40:93: 1a:a4:1d:b4:6a:c4:26:f2:a4:3c:a9:0e:f4:63:a2: 6e:bf:63:b2:72:29:c5:ca:80:0b:18:5c:79:7b:5f: dc:a8:2c:1d:0d:b2:ff:98:3a:68:14:6f:8d:cc:3b: dc:21:71:cb:8d:d5:52:16:ac:d6:c2:a2:df:65:8e: 59:a2:6f:5a:d6:ae:3c:1f:3a:05:47:c7:98:b5:e3: 38:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B4:AF:11:57:CE:2B:13:C4:00:8F:EF:B5:FB:95:11:68:D9:CC:A8 X509v3 Authority Key Identifier: keyid:20:6D:33:F3:A8:B7:25:D8:32:6C:B6:CF:3F:2E:8C:BB:B7:14:85:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/206D33F3A8B725D8326CB6CF3F2E8CBBB714859E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c0:17:84:1c:30:8a:0e:ea:37:2e:41:da:b0:41:c8:13:d7: 33:a9:b6:3e:5e:13:f5:a4:17:59:6e:ab:18:47:37:10:59:67: 5e:c6:28:a0:66:9b:dd:58:37:64:41:ee:bc:73:5a:7e:5e:d6: 41:c2:33:fc:03:9e:19:56:c4:4f:e9:59:e2:6d:01:71:69:b3: db:93:e6:a3:4b:e3:55:e8:dc:c8:00:3d:cb:06:95:fa:6d:07: fd:68:fd:bd:ec:51:b2:6b:6d:f4:e4:c0:9d:9a:f7:c8:c9:bd: e3:92:98:24:fd:80:fc:1d:ce:a3:9d:c4:06:4e:4a:48:90:81: 22:de:08:b4:1c:74:3d:da:4c:13:85:67:09:c3:96:93:f3:15: bb:5e:bf:87:0f:5f:e6:48:67:b2:a8:da:07:79:b5:97:8e:72: 2a:f5:b7:a9:19:b7:40:e1:a3:72:70:eb:28:5b:e0:7c:0a:05: c8:ab:26:2f:c7:64:8a:ce:73:2b:d1:85:35:59:f0:71:f2:04: 4f:17:c8:64:72:fa:d4:98:72:60:db:99:66:55:51:1c:19:b1: 21:51:5d:91:c6:ae:1e:37:e9:51:b1:a8:4c:98:3c:f0:cb:1a: ee:21:ab:3f:b1:5b:08:94:ca:24:cb:e2:25:08:c0:cf:68:02: bf:4e:0b:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGh3Vn+93pAMHsTY1zCU5o09tpFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA2RDMzRjNBOEI3MjVEODMyNkNCNkNGM0YyRThDQkJC NzE0ODU5RTAeFw0yNTEwMjAwOTI1MjlaFw0yNTEwMjExMjM0MjlaMDMxMTAvBgNV BAMTKDdBQjRBRjExNTdDRTJCMTNDNDAwOEZFRkI1RkI5NTExNjhEOUNDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnFzzZYr7yKcLjCFWfPbJJBmpm Tx5G1OlFHX4rGJ+hGuNpVZEZlP9HisjexW5sHU9UqrAEWtEHDdIxEfNrdrCq6cHN GIBZ6ySAkZlcgczliVMITRZ4VfT5RVPdZNFsS9DpvtaF4vqAOlheStpEevSD/Pk2 8tsC4yqQ0/WCkUQfNMIN1FBY/2HMjuRzLvkmL4EFLHKne8x5E7dqOFa7qfxyVzQE F/0zzr7sDuZEBM57MZNAkxqkHbRqxCbypDypDvRjom6/Y7JyKcXKgAsYXHl7X9yo LB0Nsv+YOmgUb43MO9whccuN1VIWrNbCot9ljlmib1rWrjwfOgVHx5i14zjVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUerSvEVfOKxPEAI/vtfuVEWjZzKgwHwYDVR0j BBgwFoAUIG0z86i3JdgybLbPPy6Mu7cUhZ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3pGbWdZSzJaVnRzV2g0d05ZUDVkSkt2b1hCeHpEOU5ybk52eEgyb1Ra ZmsvMC8yMDZEMzNGM0E4QjcyNUQ4MzI2Q0I2Q0YzRjJFOENCQkI3MTQ4NTlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwNkQzM0YzQThCNzI1RDgz MjZDQjZDRjNGMkU4Q0JCQjcxNDg1OUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3pGbWdZSzJaVnRzV2g0d05ZUDVkSkt2b1hCeHpEOU5ybk52eEgyb1RaZmsvMC8y MDZEMzNGM0E4QjcyNUQ4MzI2Q0I2Q0YzRjJFOENCQkI3MTQ4NTlFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANcAXhBwwig7qNy5B2rBByBPXM6m2Pl4T9aQXWW6rGEc3EFlnXsYooGab3Vg3 ZEHuvHNafl7WQcIz/AOeGVbET+lZ4m0BcWmz25Pmo0vjVejcyAA9ywaV+m0H/Wj9 vexRsmtt9OTAnZr3yMm945KYJP2A/B3Oo53EBk5KSJCBIt4ItBx0PdpME4VnCcOW k/MVu16/hw9f5khnsqjaB3m1l45yKvW3qRm3QOGjcnDrKFvgfAoFyKsmL8dkis5z K9GFNVnwcfIETxfIZHL61JhyYNuZZlVRHBmxIVFdkcauHjfpUbGoTJg88Msa7iGr P7FbCJTKJMviJQjAz2gCv04LIg== -----END CERTIFICATE-----Generated at Mon Oct 20 11:32:20 2025 by rpki-client