$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft File: 67A81E20D9B7972AADDB1C394778320F56BE023B.mft (raw, json) Hash identifier: 8kCHHrjPnme2hsVoQGt/ZB3L2a4Vu+Q+764Gto5RxfQ= Subject key identifier: D4:98:04:62:E3:09:A4:14:06:D1:0F:53:C2:E4:B9:8C:61:68:92:CE Authority key identifier: 67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B Certificate issuer: /CN=67A81E20D9B7972AADDB1C394778320F56BE023B Certificate serial: 1D8C3AFC75ADA1E987382918813A7B933A12B1A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject info access: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft Manifest number: 78 Signing time: Sat 23 Aug 2025 08:12:31 +0000 Manifest this update: Sat 23 Aug 2025 08:07:31 +0000 Manifest next update: Sun 24 Aug 2025 09:13:31 +0000 Files and hashes: 1: 34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa (hash: WoMHGLPz9m8WHyv/c8eqB/ZBTGVzLYTCYHFQS4BRiVA=) 2: 34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (hash: ZfM83HfKeKzzsIlJvLRkpTey+TNllfkHWy25NrM+coc=) 3: 67A81E20D9B7972AADDB1C394778320F56BE023B.crl (hash: XoAsHm0RxcZcYwrRnaFByfs9vajiympzeFn4yVTK8hg=) 4: 34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa (hash: +UFS2xAxUtJTPsgIN5GML3ACDJRqNmPSE3oSqnNkiJQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 09:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:8c:3a:fc:75:ad:a1:e9:87:38:29:18:81:3a:7b:93:3a:12:b1:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67A81E20D9B7972AADDB1C394778320F56BE023B Validity Not Before: Aug 23 08:07:31 2025 GMT Not After : Aug 24 09:13:31 2025 GMT Subject: CN=D4980462E309A41406D10F53C2E4B98C616892CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:73:c4:84:b7:8b:35:ad:84:1d:38:35:2d: 03:b6:44:2f:ae:93:be:59:c4:b2:01:88:a2:06:5d: 3a:c5:89:58:cb:a6:bd:a0:7f:5f:92:bc:ed:a3:8b: 25:77:55:9f:7e:a5:02:01:f0:dd:33:1b:d1:59:b8: c3:4e:30:19:a8:b4:79:0c:31:e8:88:73:4b:9a:3d: bb:83:63:77:04:f0:0a:71:da:64:84:8d:ac:d9:ea: 4f:28:0c:51:08:3a:e5:fc:82:36:38:b8:a4:25:d2: 9a:f2:d5:d7:28:2b:96:10:33:6a:06:62:ca:42:24: af:e0:c0:eb:ce:66:a1:8d:d2:3c:0f:f7:3e:20:3f: 89:39:f7:f6:50:ee:37:f8:bc:04:ad:82:fb:ee:1a: e8:84:15:e3:17:cb:8f:11:43:60:5a:cf:a3:4f:84: 51:58:23:88:28:de:39:bb:39:ce:87:57:aa:22:6a: b4:21:8b:ce:4e:ee:ab:89:b2:f3:db:60:e5:47:fd: f3:af:1b:0e:bd:10:ef:04:ef:5b:22:b2:83:15:81: 4d:77:88:20:91:32:73:3c:34:85:f0:60:1a:bc:3a: 23:b7:a2:8f:3b:8a:af:a1:64:6a:73:ff:62:87:0a: b1:5d:bc:24:11:35:f1:ff:2d:b7:d1:ac:13:65:12: 8d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:98:04:62:E3:09:A4:14:06:D1:0F:53:C2:E4:B9:8C:61:68:92:CE X509v3 Authority Key Identifier: keyid:67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:25:ca:4e:4d:64:ec:13:24:3f:6e:63:5d:ae:bc:38:2f:5d: 5a:34:9b:ce:31:30:02:8f:08:2d:5d:c2:f4:d5:07:d3:6b:e7: 42:71:5b:92:17:ab:ee:73:2b:04:e4:6d:9d:0d:74:d4:2f:a5: 8d:4e:0c:a3:c7:4a:3d:c9:54:c8:c3:c4:de:3f:b2:39:e0:ac: 5b:85:dd:25:fd:25:f3:93:d2:a4:2f:23:31:3c:e7:83:e2:1f: 12:4e:8b:7f:ca:62:f7:05:91:24:3e:28:20:23:02:b4:9f:82: 4b:68:f0:d9:f5:30:90:cf:b9:41:2d:2e:4e:35:d4:42:34:64: 45:24:3a:a9:04:21:fa:f7:af:f8:35:f4:0e:ec:95:23:e0:a5: cf:07:c1:b1:6f:c0:58:b2:17:5d:89:7c:36:66:73:07:b2:b2: f1:95:40:2a:2d:83:ca:b6:44:9f:72:d9:8d:39:ba:31:62:cb: 14:ec:8f:cd:f9:13:bc:a3:29:b4:83:c0:8a:b5:52:17:08:4f: df:56:aa:da:bc:2b:b0:b8:ca:6a:92:f4:c8:90:5c:bf:ad:b8: c2:da:99:c9:d9:b3:07:fd:89:aa:61:d1:77:12:41:77:78:1a: ea:0d:0a:c6:f6:62:05:ed:f8:f6:8e:0c:9c:70:1c:ca:7c:73: 9c:10:2a:81 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUHYw6/HWtoemHOCkYgTp7kzoSsaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1 NkJFMDIzQjAeFw0yNTA4MjMwODA3MzFaFw0yNTA4MjQwOTEzMzFaMDMxMTAvBgNV BAMTKEQ0OTgwNDYyRTMwOUE0MTQwNkQxMEY1M0MyRTRCOThDNjE2ODkyQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpv3PEhLeLNa2EHTg1LQO2RC+u k75ZxLIBiKIGXTrFiVjLpr2gf1+SvO2jiyV3VZ9+pQIB8N0zG9FZuMNOMBmotHkM MeiIc0uaPbuDY3cE8Apx2mSEjazZ6k8oDFEIOuX8gjY4uKQl0pry1dcoK5YQM2oG YspCJK/gwOvOZqGN0jwP9z4gP4k59/ZQ7jf4vAStgvvuGuiEFeMXy48RQ2Baz6NP hFFYI4go3jm7Oc6HV6oiarQhi85O7quJsvPbYOVH/fOvGw69EO8E71sisoMVgU13 iCCRMnM8NIXwYBq8OiO3oo87iq+hZGpz/2KHCrFdvCQRNfH/LbfRrBNlEo0RAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU1JgEYuMJpBQG0Q9TwuS5jGFoks4wHwYDVR0j BBgwFoAUZ6geINm3lyqt2xw5R3gyD1a+AjswDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9reVdwR0EydlA5VUVEWWZWTlh3RGt0QkNORGdzVFJySmt4elE1QmptMjM3 LzIvNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1NkJFMDIzQi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82N0E4MUUyMEQ5Qjc5NzJBQURE QjFDMzk0Nzc4MzIwRjU2QkUwMjNCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2t5 V3BHQTJ2UDlVRURZZlZOWHdEa3RCQ05EZ3NUUnJKa3h6UTVCam0yMzcvMi82N0E4 MUUyMEQ5Qjc5NzJBQUREQjFDMzk0Nzc4MzIwRjU2QkUwMjNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA iCXKTk1k7BMkP25jXa68OC9dWjSbzjEwAo8ILV3C9NUH02vnQnFbkher7nMrBORt nQ101C+ljU4Mo8dKPclUyMPE3j+yOeCsW4XdJf0l85PSpC8jMTzng+IfEk6Lf8pi 9wWRJD4oICMCtJ+CS2jw2fUwkM+5QS0uTjXUQjRkRSQ6qQQh+vev+DX0DuyVI+Cl zwfBsW/AWLIXXYl8NmZzB7Ky8ZVAKi2DyrZEn3LZjTm6MWLLFOyPzfkTvKMptIPA irVSFwhP31aq2rwrsLjKapL0yJBcv624wtqZydmzB/2JqmHRdxJBd3ga6g0KxvZi Be349o4MnHAcynxznBAqgQ== -----END CERTIFICATE-----Generated at Sat Aug 23 11:01:32 2025 by rpki-client