$ rpki-client -vvf rpki-repo.registro.br/repo/J99rAV4feugeNmbWMazXQiSPuAg3urtjFo5HeCSTUUqP/0/B70B1C7FA0C5C18CE5053825342F1D0D6119950C.mft File: B70B1C7FA0C5C18CE5053825342F1D0D6119950C.mft (raw, json) Hash identifier: ccOTXP6JHGWiAceWqPu/KuwCTHS869kQoJOXHyCfj8s= Subject key identifier: A7:07:CF:7A:AD:6B:FC:56:2F:F6:DD:D4:32:EF:A1:D5:D2:F8:4E:CB Authority key identifier: B7:0B:1C:7F:A0:C5:C1:8C:E5:05:38:25:34:2F:1D:0D:61:19:95:0C Certificate issuer: /CN=B70B1C7FA0C5C18CE5053825342F1D0D6119950C Certificate serial: 35464718379884C30CAB5E0044FEF7DBAEFF89CD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B70B1C7FA0C5C18CE5053825342F1D0D6119950C.cer Subject info access: rsync://rpki-repo.registro.br/repo/J99rAV4feugeNmbWMazXQiSPuAg3urtjFo5HeCSTUUqP/0/B70B1C7FA0C5C18CE5053825342F1D0D6119950C.mft Manifest number: FD Signing time: Mon 20 Oct 2025 09:47:48 +0000 Manifest this update: Mon 20 Oct 2025 09:42:47 +0000 Manifest next update: Tue 21 Oct 2025 12:23:47 +0000 Files and hashes: 1: 3137302e38332e39322e302f32322d3332203d3e203532383137.roa (hash: 6sQNGQXch8LDVEPlC50dRhVXniM2Lt87QVuf4AjydCo=) 2: 323830343a313661383a3a2f33322d3634203d3e203532383137.roa (hash: b9KnNNCPfcDF1FORKJelONvpmGrZNjS0eZW+JLXxXnE=) 3: B70B1C7FA0C5C18CE5053825342F1D0D6119950C.crl (hash: Wy5ApmikmCWH0+50oxUSEzTfOu88vWXIWfAOmVC9V9A=) 4: 3137372e37322e32382e302f32322d3332203d3e203532383137.roa (hash: XLI+nVomUXV8Hy+HHumZmPPwK65cjtKWeSOLr61lVxw=) 5: 3137392e3132342e3230342e302f32322d3332203d3e203532383137.roa (hash: oo2ss7CpPiLXsDh5m5eL3mzuS0Sogz0FjobDehaQw7E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J99rAV4feugeNmbWMazXQiSPuAg3urtjFo5HeCSTUUqP/0/B70B1C7FA0C5C18CE5053825342F1D0D6119950C.crl rsync://rpki-repo.registro.br/repo/J99rAV4feugeNmbWMazXQiSPuAg3urtjFo5HeCSTUUqP/0/B70B1C7FA0C5C18CE5053825342F1D0D6119950C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B70B1C7FA0C5C18CE5053825342F1D0D6119950C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:46:47:18:37:98:84:c3:0c:ab:5e:00:44:fe:f7:db:ae:ff:89:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70B1C7FA0C5C18CE5053825342F1D0D6119950C Validity Not Before: Oct 20 09:42:47 2025 GMT Not After : Oct 21 12:23:47 2025 GMT Subject: CN=A707CF7AAD6BFC562FF6DDD432EFA1D5D2F84ECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:40:60:cb:29:06:b9:f2:08:d4:22:94:b6: 82:54:14:4b:a7:31:77:1d:da:d0:90:1d:9c:bc:13: 35:13:83:6c:24:6c:c3:e5:b3:44:43:60:5f:3c:24: 08:1d:83:dc:15:c1:c0:10:67:0b:52:2d:86:80:b9: 31:7c:60:2c:01:07:fa:01:75:fb:34:b0:59:52:05: 0f:a0:46:66:83:b6:6d:00:6a:62:6f:a3:0f:3a:1e: 03:d3:fe:2c:08:8b:b0:8c:cf:41:40:2f:e2:0f:89: 1c:8d:5d:17:f0:b4:a8:94:24:cf:91:f2:44:eb:71: 2e:07:23:89:a5:06:d9:fd:cc:c4:7d:a0:36:63:ce: 7f:5b:b2:f3:c1:00:ad:8e:18:3f:72:35:74:03:d5: 8c:0b:5d:f8:80:db:7d:bc:cf:57:3d:12:cb:c5:66: 8a:e0:a6:3e:6d:d0:a6:f5:36:97:d8:35:d6:ef:53: 3b:49:f5:81:01:7f:2e:27:60:3d:cd:6b:4b:f8:89: 30:8e:40:e2:a0:f9:4d:41:45:c8:58:5a:f9:65:3c: fb:9d:c3:44:f6:09:4c:52:81:c7:9e:c2:46:57:06: 3a:50:1c:59:79:85:d4:7f:77:10:a0:08:8b:98:2c: 82:f8:b5:16:01:5f:4b:7c:92:58:df:f3:6a:e9:91: fe:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:07:CF:7A:AD:6B:FC:56:2F:F6:DD:D4:32:EF:A1:D5:D2:F8:4E:CB X509v3 Authority Key Identifier: keyid:B7:0B:1C:7F:A0:C5:C1:8C:E5:05:38:25:34:2F:1D:0D:61:19:95:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J99rAV4feugeNmbWMazXQiSPuAg3urtjFo5HeCSTUUqP/0/B70B1C7FA0C5C18CE5053825342F1D0D6119950C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B70B1C7FA0C5C18CE5053825342F1D0D6119950C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J99rAV4feugeNmbWMazXQiSPuAg3urtjFo5HeCSTUUqP/0/B70B1C7FA0C5C18CE5053825342F1D0D6119950C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:cb:77:41:cc:a7:c6:29:66:71:68:24:a9:78:8a:f8:af:54: 26:50:26:56:5c:e5:fc:b9:7b:af:9b:6a:f2:95:be:6e:57:6e: c7:2c:2d:06:37:0b:02:1d:32:d2:f2:07:2a:94:7c:6b:b5:aa: 1a:bb:7c:fb:0e:c1:3d:c1:c7:5f:e2:b8:f3:57:7f:34:a5:ba: b8:49:c1:ac:70:fc:1d:28:67:73:12:41:11:7d:fd:d6:b4:f7: 6c:c7:5a:5c:43:07:69:80:2f:a1:d7:0b:79:8d:c8:d1:7f:7a: 31:9f:f3:af:6a:3d:9a:dd:97:9f:01:b0:0f:ab:89:ac:74:12: 2b:b1:fa:6a:a8:bf:2c:3c:b4:65:a5:d3:7f:d0:a1:3c:c7:35: 4f:8d:01:21:68:96:e5:93:5a:ab:2e:1f:32:9d:01:2e:51:80: 4f:3b:5e:ae:53:00:f4:0f:d7:ea:a6:4d:4c:9e:06:fd:74:37: 9d:e4:93:73:29:f8:59:bc:3e:65:fe:4e:d5:1f:a5:cb:88:8b: 60:4d:db:7d:1d:26:2b:4a:3b:a2:93:c8:92:92:25:dc:2a:8b: 48:8e:d2:f5:5a:ca:bf:b4:f8:fb:86:f8:fe:4e:f5:b6:ae:8a: 16:8d:49:f2:41:b7:c1:4f:41:d4:12:15:bd:7d:b8:fa:6f:90: 6b:d7:4f:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNUZHGDeYhMMMq14ARP73267/ic0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQjFDN0ZBMEM1QzE4Q0U1MDUzODI1MzQyRjFEMEQ2 MTE5OTUwQzAeFw0yNTEwMjAwOTQyNDdaFw0yNTEwMjExMjIzNDdaMDMxMTAvBgNV BAMTKEE3MDdDRjdBQUQ2QkZDNTYyRkY2RERENDMyRUZBMUQ1RDJGODRFQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHOkBgyykGufII1CKUtoJUFEun MXcd2tCQHZy8EzUTg2wkbMPls0RDYF88JAgdg9wVwcAQZwtSLYaAuTF8YCwBB/oB dfs0sFlSBQ+gRmaDtm0AamJvow86HgPT/iwIi7CMz0FAL+IPiRyNXRfwtKiUJM+R 8kTrcS4HI4mlBtn9zMR9oDZjzn9bsvPBAK2OGD9yNXQD1YwLXfiA2328z1c9EsvF Zorgpj5t0Kb1NpfYNdbvUztJ9YEBfy4nYD3Na0v4iTCOQOKg+U1BRchYWvllPPud w0T2CUxSgceewkZXBjpQHFl5hdR/dxCgCIuYLIL4tRYBX0t8kljf82rpkf4lAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpwfPeq1r/FYv9t3UMu+h1dL4TsswHwYDVR0j BBgwFoAUtwscf6DFwYzlBTglNC8dDWEZlQwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjk5ckFWNGZldWdlTm1iV01helhRaVNQdUFnM3VydGpGbzVIZUNTVFVV cVAvMC9CNzBCMUM3RkEwQzVDMThDRTUwNTM4MjUzNDJGMUQwRDYxMTk5NTBDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3MEIxQzdGQTBDNUMxOENF NTA1MzgyNTM0MkYxRDBENjExOTk1MEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Sjk5ckFWNGZldWdlTm1iV01helhRaVNQdUFnM3VydGpGbzVIZUNTVFVVcVAvMC9C NzBCMUM3RkEwQzVDMThDRTUwNTM4MjUzNDJGMUQwRDYxMTk5NTBDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy8t3QcynxilmcWgkqXiK+K9UJlAmVlzl/Ll7r5tq8pW+blduxywtBjcLAh0y 0vIHKpR8a7WqGrt8+w7BPcHHX+K481d/NKW6uEnBrHD8HShncxJBEX391rT3bMda XEMHaYAvodcLeY3I0X96MZ/zr2o9mt2XnwGwD6uJrHQSK7H6aqi/LDy0ZaXTf9Ch PMc1T40BIWiW5ZNaqy4fMp0BLlGATzterlMA9A/X6qZNTJ4G/XQ3neSTcyn4Wbw+ Zf5O1R+ly4iLYE3bfR0mK0o7opPIkpIl3CqLSI7S9VrKv7T4+4b4/k71tq6KFo1J 8kG3wU9B1BIVvX24+m+Qa9dPyw== -----END CERTIFICATE-----Generated at Mon Oct 20 17:55:21 2025 by rpki-client