$ rpki-client -vvf rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/674C6DEE42B678F441522977D02D745008709FB2.mft File: 674C6DEE42B678F441522977D02D745008709FB2.mft (raw, json) Hash identifier: j0rQW2PFVaBJCSeFR+PkAJugvL1UqY9E1a0Ge7uICig= Subject key identifier: 71:6D:F7:72:E9:E1:AB:6E:C1:2D:EC:43:C0:F3:C9:ED:7D:AE:EC:D7 Authority key identifier: 67:4C:6D:EE:42:B6:78:F4:41:52:29:77:D0:2D:74:50:08:70:9F:B2 Certificate issuer: /CN=674C6DEE42B678F441522977D02D745008709FB2 Certificate serial: 32C7BCDB09F604E3215979E8995B6EB56EA3379D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/674C6DEE42B678F441522977D02D745008709FB2.cer Subject info access: rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/674C6DEE42B678F441522977D02D745008709FB2.mft Manifest number: 17 Signing time: Tue 04 Nov 2025 09:57:20 +0000 Manifest this update: Tue 04 Nov 2025 09:52:20 +0000 Manifest next update: Wed 05 Nov 2025 13:32:20 +0000 Files and hashes: 1: 323830343a343061303a3a2f33322d313238203d3e20323635393731.roa (hash: cg3UamPi9eHM/6LKiQrc9xYcyTHMfVKtMiVvraUXBAo=) 2: 674C6DEE42B678F441522977D02D745008709FB2.crl (hash: zFTh6Ksvb7xZNdxMF8ri75nO4KjIxNd1I3QRuNYJKQI=) 3: 3136342e3136332e3139362e302f32322d3332203d3e20323635393731.roa (hash: vrcHssSNlo9t33zE/pJyLtyi96KDuhX0nZpGvm4erVs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/674C6DEE42B678F441522977D02D745008709FB2.crl rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/674C6DEE42B678F441522977D02D745008709FB2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/674C6DEE42B678F441522977D02D745008709FB2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 13:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c7:bc:db:09:f6:04:e3:21:59:79:e8:99:5b:6e:b5:6e:a3:37:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674C6DEE42B678F441522977D02D745008709FB2 Validity Not Before: Nov 4 09:52:20 2025 GMT Not After : Nov 5 13:32:20 2025 GMT Subject: CN=716DF772E9E1AB6EC12DEC43C0F3C9ED7DAEECD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:73:67:42:52:f6:ad:5a:93:53:b1:b6:43:0f: 9a:ce:e5:4d:ed:01:3d:c9:fe:2b:e4:9f:57:44:57: 60:bc:ac:7d:2a:0a:3c:3d:b2:3f:08:89:6f:4d:9d: 2d:c2:21:8b:0b:f8:86:8b:26:ae:8e:f5:3b:d9:79: 28:03:19:db:14:70:d2:9c:8d:14:9e:3f:20:4f:dd: ba:1f:96:39:46:b3:99:89:3b:7c:d5:dc:cc:56:ff: 7e:84:2b:37:85:4e:4f:22:04:49:fc:f7:3a:e5:1f: 01:30:bd:6c:e1:77:f1:f6:53:5a:2f:cd:d0:b5:86: 0c:47:b2:8f:9a:42:05:30:fb:5e:4b:71:1e:11:ce: f1:da:81:18:cc:48:d1:ff:1b:da:d2:78:f1:6f:3b: 8b:55:85:d3:95:7f:06:66:05:26:6f:00:7e:e0:c9: 69:b6:9a:28:d0:f4:de:c0:81:17:b6:6b:8d:6b:2b: f7:6e:16:a6:29:cb:6e:63:07:5e:a5:92:1a:2b:aa: 65:96:25:76:dd:b5:b5:d5:9d:fa:18:c4:7c:b8:9d: 5c:8f:ea:d7:d8:34:a7:67:d7:92:29:00:88:c8:37: 5c:3b:f7:df:7d:0d:00:ed:a2:fd:78:50:d6:40:1e: 4c:65:61:fe:00:05:2e:fb:a0:eb:95:b7:96:f7:bf: b0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6D:F7:72:E9:E1:AB:6E:C1:2D:EC:43:C0:F3:C9:ED:7D:AE:EC:D7 X509v3 Authority Key Identifier: keyid:67:4C:6D:EE:42:B6:78:F4:41:52:29:77:D0:2D:74:50:08:70:9F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/674C6DEE42B678F441522977D02D745008709FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/674C6DEE42B678F441522977D02D745008709FB2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7tVZsHQzkxeCmJwzsLw3Qd5rhER5UuFrpUuU5FfaXJVL/0/674C6DEE42B678F441522977D02D745008709FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e7:e6:af:e3:bb:3d:9b:b8:ff:4e:b2:df:c2:ef:41:45:f1: 16:4a:61:0b:d3:ff:85:f4:ea:0b:f0:be:18:a7:b4:1d:63:43: 9d:33:0e:bb:99:d8:db:e1:40:6c:7a:23:7f:30:53:04:06:3f: 5d:11:e0:16:db:b8:fd:a1:a1:f4:0e:b9:b4:92:58:67:c0:04: ff:5f:fb:6b:9a:9d:1f:86:22:98:1d:47:2f:a3:72:f6:f8:82: c1:9b:e6:5d:5b:9b:41:79:d3:93:80:87:3c:a0:8c:be:01:6d: 5a:6d:9b:0c:fa:c2:71:d3:33:f1:83:49:c2:ea:57:dc:89:23: f8:39:97:f5:8f:06:fb:04:ef:7e:e7:6f:4d:7c:fb:36:8e:88: 3b:b9:cc:35:3d:3e:b2:02:27:73:3f:45:6e:88:d9:a3:9d:98: cb:7c:7f:a0:15:a3:49:0d:a5:99:ea:86:2b:e2:b8:ae:8d:60: d4:17:ce:3e:b1:4c:af:83:22:7b:bc:d9:e6:73:f7:be:74:f9: e4:83:a8:29:0b:ae:dc:df:d4:4a:7d:6e:13:28:ff:65:7b:7e: 49:8a:b2:bf:6d:30:76:e5:12:33:ea:8c:97:1b:6e:64:ad:47: fd:9d:63:b9:23:a9:d9:b6:9d:ab:93:d4:69:b1:4a:17:c6:8e: 41:32:b7:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMse82wn2BOMhWXnomVtutW6jN50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc0QzZERUU0MkI2NzhGNDQxNTIyOTc3RDAyRDc0NTAw ODcwOUZCMjAeFw0yNTExMDQwOTUyMjBaFw0yNTExMDUxMzMyMjBaMDMxMTAvBgNV BAMTKDcxNkRGNzcyRTlFMUFCNkVDMTJERUM0M0MwRjNDOUVEN0RBRUVDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXc2dCUvatWpNTsbZDD5rO5U3t AT3J/ivkn1dEV2C8rH0qCjw9sj8IiW9NnS3CIYsL+IaLJq6O9TvZeSgDGdsUcNKc jRSePyBP3bofljlGs5mJO3zV3MxW/36EKzeFTk8iBEn89zrlHwEwvWzhd/H2U1ov zdC1hgxHso+aQgUw+15LcR4RzvHagRjMSNH/G9rSePFvO4tVhdOVfwZmBSZvAH7g yWm2mijQ9N7AgRe2a41rK/duFqYpy25jB16lkhorqmWWJXbdtbXVnfoYxHy4nVyP 6tfYNKdn15IpAIjIN1w79999DQDtov14UNZAHkxlYf4ABS77oOuVt5b3v7CFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcW33cunhq27BLexDwPPJ7X2u7NcwHwYDVR0j BBgwFoAUZ0xt7kK2ePRBUil30C10UAhwn7IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3RWWnNIUXpreGVDbUp3enNMdzNRZDVyaEVSNVV1RnJwVXVVNUZmYVhK VkwvMC82NzRDNkRFRTQyQjY3OEY0NDE1MjI5NzdEMDJENzQ1MDA4NzA5RkIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3NEM2REVFNDJCNjc4RjQ0 MTUyMjk3N0QwMkQ3NDUwMDg3MDlGQjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N3RWWnNIUXpreGVDbUp3enNMdzNRZDVyaEVSNVV1RnJwVXVVNUZmYVhKVkwvMC82 NzRDNkRFRTQyQjY3OEY0NDE1MjI5NzdEMDJENzQ1MDA4NzA5RkIyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALOfmr+O7PZu4/06y38LvQUXxFkphC9P/hfTqC/C+GKe0HWNDnTMOu5nY2+FA bHojfzBTBAY/XRHgFtu4/aGh9A65tJJYZ8AE/1/7a5qdH4YimB1HL6Ny9viCwZvm XVubQXnTk4CHPKCMvgFtWm2bDPrCcdMz8YNJwupX3Ikj+DmX9Y8G+wTvfudvTXz7 No6IO7nMNT0+sgIncz9FbojZo52Yy3x/oBWjSQ2lmeqGK+K4ro1g1BfOPrFMr4Mi e7zZ5nP3vnT55IOoKQuu3N/USn1uEyj/ZXt+SYqyv20wduUSM+qMlxtuZK1H/Z1j uSOp2badq5PUabFKF8aOQTK3kg== -----END CERTIFICATE-----Generated at Wed Nov 5 02:37:00 2025 by rpki-client