$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft File: 67A81E20D9B7972AADDB1C394778320F56BE023B.mft (raw, json) Hash identifier: h5FbqNg+O2xgoQBG9Ae/b4y2Hd0T5GB07rBvgkR1sUE= Subject key identifier: 56:AE:EE:D3:5D:6F:6D:0A:67:35:9A:B0:8F:01:B3:ED:55:34:A4:20 Authority key identifier: 67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B Certificate issuer: /CN=67A81E20D9B7972AADDB1C394778320F56BE023B Certificate serial: 447629285258AED68CFFB023E7DBFA84F22109B0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject info access: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft Manifest number: C5 Signing time: Mon 20 Oct 2025 07:33:06 +0000 Manifest this update: Mon 20 Oct 2025 07:28:06 +0000 Manifest next update: Tue 21 Oct 2025 11:03:06 +0000 Files and hashes: 1: 34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (hash: ZfM83HfKeKzzsIlJvLRkpTey+TNllfkHWy25NrM+coc=) 2: 34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa (hash: WoMHGLPz9m8WHyv/c8eqB/ZBTGVzLYTCYHFQS4BRiVA=) 3: 67A81E20D9B7972AADDB1C394778320F56BE023B.crl (hash: bmSF/LmAz8RnHKtparCzdF+0tNr6ZKp+j2TB+UZH0i8=) 4: 34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa (hash: +UFS2xAxUtJTPsgIN5GML3ACDJRqNmPSE3oSqnNkiJQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 09:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:76:29:28:52:58:ae:d6:8c:ff:b0:23:e7:db:fa:84:f2:21:09:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67A81E20D9B7972AADDB1C394778320F56BE023B Validity Not Before: Oct 20 07:28:06 2025 GMT Not After : Oct 21 11:03:06 2025 GMT Subject: CN=56AEEED35D6F6D0A67359AB08F01B3ED5534A420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:d4:26:04:8f:22:10:91:e0:04:58:de:0d: 77:38:c6:cb:f7:ad:84:ec:34:b8:b9:2c:80:eb:3c: ad:07:08:f9:44:31:11:df:b8:4b:09:7d:d4:0c:d5: 7d:36:d6:8d:8d:a0:c7:1a:fc:fc:3c:a7:12:70:13: a6:28:9c:cb:b4:62:70:46:0e:0f:f4:71:99:c7:a4: b3:3f:03:03:ea:7a:dc:8f:4b:ac:1a:08:8a:4a:7d: 37:94:91:15:bf:07:21:d8:e9:9c:05:f5:13:c7:b3: 46:9e:e3:dd:57:3b:ca:9d:50:d6:71:36:f5:65:45: 45:07:74:db:e9:66:bc:9f:47:0a:b7:f2:a6:32:67: 64:64:38:04:6b:19:5a:15:68:b1:27:5d:ac:1c:ab: 15:b4:1f:40:dd:92:c4:23:7d:4f:c1:03:52:5a:b3: 0a:62:c2:ba:34:4f:97:ba:a9:d7:01:91:da:c5:aa: 55:f0:aa:bf:5f:c0:28:74:09:74:dd:24:15:8a:c4: 85:b9:b4:51:ab:10:8d:a2:4d:e0:9c:44:dc:c5:fb: d5:b6:3c:2e:45:85:76:97:e0:40:e2:d2:2b:2d:cc: 2a:62:e4:a5:b8:15:03:b7:85:f9:27:2e:83:6b:cc: 47:35:45:99:33:82:da:85:5c:f5:6a:87:78:e1:b2: 3c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AE:EE:D3:5D:6F:6D:0A:67:35:9A:B0:8F:01:B3:ED:55:34:A4:20 X509v3 Authority Key Identifier: keyid:67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:d0:d3:53:08:75:fa:2c:fc:35:78:20:bd:cc:c6:cb:25:79: c4:80:ec:39:3e:8b:64:e7:f0:83:cb:2f:52:dc:aa:eb:3e:64: d7:08:2e:92:af:cd:92:71:2b:41:54:ec:73:ab:75:f7:85:15: e0:61:e4:ed:66:f1:16:e9:19:ce:c1:82:76:37:20:57:fa:d9: 12:64:e9:9b:e4:30:33:31:a3:ed:a9:32:b6:8c:4f:33:1b:22: 72:5b:f0:f5:58:e3:6d:97:c7:c3:ea:fa:a1:66:be:d9:ec:17: 8f:7f:8c:b5:06:c8:b9:2a:24:cf:fa:5b:51:b6:8d:59:23:14: 7c:95:30:48:fc:a9:7c:e5:73:1b:eb:c3:28:29:93:8d:7b:66: 2c:67:b9:9d:8e:8d:66:b9:1e:12:41:15:83:d2:56:25:06:63: d9:1c:66:c5:27:39:f5:67:c0:a8:83:b4:0e:f4:52:d1:24:2d: 32:51:81:f1:78:b3:bb:06:c9:8c:78:53:63:dc:5d:c8:a5:a5: f9:5f:82:f4:78:8b:15:27:56:c5:74:5a:8e:39:49:62:c4:ce: 17:ed:f2:b1:e9:4b:ff:ec:20:ba:63:1c:40:e0:b0:30:44:f3: 68:0c:89:e5:90:b5:c4:cb:95:06:58:4d:5e:d7:6d:3c:be:3e: 5f:65:6b:3e -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIURHYpKFJYrtaM/7Aj59v6hPIhCbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1 NkJFMDIzQjAeFw0yNTEwMjAwNzI4MDZaFw0yNTEwMjExMTAzMDZaMDMxMTAvBgNV BAMTKDU2QUVFRUQzNUQ2RjZEMEE2NzM1OUFCMDhGMDFCM0VENTUzNEE0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/tQmBI8iEJHgBFjeDXc4xsv3 rYTsNLi5LIDrPK0HCPlEMRHfuEsJfdQM1X021o2NoMca/Pw8pxJwE6YonMu0YnBG Dg/0cZnHpLM/AwPqetyPS6waCIpKfTeUkRW/ByHY6ZwF9RPHs0ae491XO8qdUNZx NvVlRUUHdNvpZryfRwq38qYyZ2RkOARrGVoVaLEnXawcqxW0H0DdksQjfU/BA1Ja swpiwro0T5e6qdcBkdrFqlXwqr9fwCh0CXTdJBWKxIW5tFGrEI2iTeCcRNzF+9W2 PC5FhXaX4EDi0istzCpi5KW4FQO3hfknLoNrzEc1RZkzgtqFXPVqh3jhsjz5AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUVq7u011vbQpnNZqwjwGz7VU0pCAwHwYDVR0j BBgwFoAUZ6geINm3lyqt2xw5R3gyD1a+AjswDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9reVdwR0EydlA5VUVEWWZWTlh3RGt0QkNORGdzVFJySmt4elE1QmptMjM3 LzIvNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1NkJFMDIzQi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82N0E4MUUyMEQ5Qjc5NzJBQURE QjFDMzk0Nzc4MzIwRjU2QkUwMjNCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2t5 V3BHQTJ2UDlVRURZZlZOWHdEa3RCQ05EZ3NUUnJKa3h6UTVCam0yMzcvMi82N0E4 MUUyMEQ5Qjc5NzJBQUREQjFDMzk0Nzc4MzIwRjU2QkUwMjNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA UtDTUwh1+iz8NXggvczGyyV5xIDsOT6LZOfwg8svUtyq6z5k1wgukq/NknErQVTs c6t194UV4GHk7WbxFukZzsGCdjcgV/rZEmTpm+QwMzGj7akytoxPMxsiclvw9Vjj bZfHw+r6oWa+2ewXj3+MtQbIuSokz/pbUbaNWSMUfJUwSPypfOVzG+vDKCmTjXtm LGe5nY6NZrkeEkEVg9JWJQZj2RxmxSc59WfAqIO0DvRS0SQtMlGB8XizuwbJjHhT Y9xdyKWl+V+C9HiLFSdWxXRajjlJYsTOF+3yselL/+wgumMcQOCwMETzaAyJ5ZC1 xMuVBlhNXtdtPL4+X2VrPg== -----END CERTIFICATE-----Generated at Mon Oct 20 10:50:53 2025 by rpki-client