$ rpki-client -vvf rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.mft File: 66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.mft (raw, json) Hash identifier: R+VzaiOkBFqVqruciEOtNgToSJYyRQgN7E0YuAQuvT0= Subject key identifier: 8F:A7:0E:79:24:0E:49:74:BD:AD:D4:F1:42:17:EF:7D:2E:58:C4:F3 Authority key identifier: 66:D9:C3:E2:A9:2C:90:F1:5B:EB:35:42:0B:B2:D5:3A:F4:AA:2E:EC Certificate issuer: /CN=66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC Certificate serial: 15F96D1E6849AE8035A56F0BAB96944088D58FA8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.cer Subject info access: rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.mft Manifest number: 22 Signing time: Wed 06 Aug 2025 19:17:18 +0000 Manifest this update: Wed 06 Aug 2025 19:12:18 +0000 Manifest next update: Thu 07 Aug 2025 22:36:18 +0000 Files and hashes: 1: 323830343a353430343a3a2f33322d3438203d3e20323638363233.roa (hash: QSlBE7opHGAKTl6LwF47/EkVKvSO4IVLgQaKRJH95GQ=) 2: 34352e3136342e3132302e302f32322d3234203d3e20323638363233.roa (hash: VdmAjEX2uAAaqRd3+FF9lAdTZ9bQNFw2sLDrSBD9twA=) 3: 66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.crl (hash: eS7hhptDZf9QxGa7d7t3f8FjLxUbro2IIX1Pfbqw1uM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.crl rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 Aug 2025 22:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f9:6d:1e:68:49:ae:80:35:a5:6f:0b:ab:96:94:40:88:d5:8f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC Validity Not Before: Aug 6 19:12:18 2025 GMT Not After : Aug 7 22:36:18 2025 GMT Subject: CN=8FA70E79240E4974BDADD4F14217EF7D2E58C4F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:20:b7:d9:e6:a8:15:d7:f5:b8:41:c6:ce: 92:ec:ca:4d:b2:b6:06:1d:3e:0c:e8:4a:14:70:ce: 73:94:de:8b:82:a4:ab:74:41:1a:ea:56:2b:f8:39: 01:ff:1e:ee:2f:26:5a:b6:3b:9e:15:18:ea:1e:73: 14:7d:25:4e:e8:f6:49:c7:d2:8f:47:2b:73:b6:e3: 5c:55:de:b1:2f:ad:02:84:bd:4d:fe:6c:f5:8f:0b: 4d:e4:db:30:b6:e0:7a:1e:a1:79:e7:30:71:a0:28: 2f:b3:78:f9:c8:43:3a:b0:32:12:20:8c:6b:8c:bf: 7c:6c:a6:56:f7:45:2f:b0:be:73:b6:ab:51:82:99: ea:4e:64:61:5e:bd:36:dd:f3:18:5a:3d:c9:11:17: 77:26:b2:7d:d1:7f:41:66:55:e7:fc:57:33:60:34: ce:9f:a5:07:22:95:4b:54:89:fa:84:ad:87:2f:cc: ff:9c:39:42:5a:1c:27:14:96:76:14:8f:14:09:03: 2d:48:e2:bb:57:49:9e:00:ec:d2:dd:8b:ce:82:d8: 27:d5:12:89:d8:00:ea:f0:dc:da:74:c7:75:d8:d3: 49:d1:72:fb:de:ae:b3:65:03:73:db:88:88:2d:f0: 52:58:5c:5d:73:80:87:9e:47:f8:11:6e:79:80:f6: e1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A7:0E:79:24:0E:49:74:BD:AD:D4:F1:42:17:EF:7D:2E:58:C4:F3 X509v3 Authority Key Identifier: keyid:66:D9:C3:E2:A9:2C:90:F1:5B:EB:35:42:0B:B2:D5:3A:F4:AA:2E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/66D9C3E2A92C90F15BEB35420BB2D53AF4AA2EEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ff:6b:39:48:70:0b:43:dd:2f:e0:bd:6a:81:d6:f1:46:76: 28:86:06:fc:aa:2f:c3:f5:fb:0c:f9:09:8a:db:72:43:da:84: 66:d6:a4:44:5f:ca:14:47:44:7d:48:2a:de:88:9c:fe:55:b4: c1:45:4b:25:b6:10:d0:da:da:a2:b4:48:29:f6:3f:08:73:e5: f2:14:d1:b4:26:cc:9a:a0:dd:ae:a8:00:27:fa:b0:2f:9d:cd: 35:8f:c8:e9:8e:43:81:a7:0e:e0:b1:d9:23:dc:40:59:df:b4: d7:0e:a1:0d:3b:69:25:6a:16:39:5c:2d:81:cd:40:19:91:ee: 79:0f:51:e0:4a:4b:a7:bb:30:34:61:16:96:1c:ab:3c:bb:dd: ff:c5:f7:00:86:5c:e0:73:37:b3:21:f2:5d:34:2c:da:21:f5: 8e:d3:e2:18:b0:9e:0e:1c:35:40:9e:e4:c2:01:1e:fa:8c:e5: 9b:94:00:ef:ac:2b:28:fc:68:80:29:d1:36:93:95:10:4e:39: 4e:51:20:48:63:88:ce:e6:e1:0a:b6:8f:1b:c8:b2:6a:25:2f: c5:b9:20:ec:5b:ec:05:52:f9:17:9a:66:e6:78:47:36:fe:94: 5a:91:61:1a:12:3d:fa:16:6d:66:89:71:b1:eb:c9:00:b2:f8: dc:c8:32:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFfltHmhJroA1pW8Lq5aUQIjVj6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZEOUMzRTJBOTJDOTBGMTVCRUIzNTQyMEJCMkQ1M0FG NEFBMkVFQzAeFw0yNTA4MDYxOTEyMThaFw0yNTA4MDcyMjM2MThaMDMxMTAvBgNV BAMTKDhGQTcwRTc5MjQwRTQ5NzRCREFERDRGMTQyMTdFRjdEMkU1OEM0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADSC32eaoFdf1uEHGzpLsyk2y tgYdPgzoShRwznOU3ouCpKt0QRrqViv4OQH/Hu4vJlq2O54VGOoecxR9JU7o9knH 0o9HK3O241xV3rEvrQKEvU3+bPWPC03k2zC24HoeoXnnMHGgKC+zePnIQzqwMhIg jGuMv3xsplb3RS+wvnO2q1GCmepOZGFevTbd8xhaPckRF3cmsn3Rf0FmVef8VzNg NM6fpQcilUtUifqErYcvzP+cOUJaHCcUlnYUjxQJAy1I4rtXSZ4A7NLdi86C2CfV EonYAOrw3Np0x3XY00nRcvverrNlA3PbiIgt8FJYXF1zgIeeR/gRbnmA9uEnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUj6cOeSQOSXS9rdTxQhfvfS5YxPMwHwYDVR0j BBgwFoAUZtnD4qkskPFb6zVCC7LVOvSqLuwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGpQNHpLYXdINGdrbW93NDRrdWlvRnBocVZBSjM2MUxRcDZqeXljdkxG Y28vMC82NkQ5QzNFMkE5MkM5MEYxNUJFQjM1NDIwQkIyRDUzQUY0QUEyRUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2RDlDM0UyQTkyQzkwRjE1 QkVCMzU0MjBCQjJENTNBRjRBQTJFRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGpQNHpLYXdINGdrbW93NDRrdWlvRnBocVZBSjM2MUxRcDZqeXljdkxGY28vMC82 NkQ5QzNFMkE5MkM5MEYxNUJFQjM1NDIwQkIyRDUzQUY0QUEyRUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfP9rOUhwC0PdL+C9aoHW8UZ2KIYG/Kovw/X7DPkJittyQ9qEZtakRF/KFEdE fUgq3oic/lW0wUVLJbYQ0NraorRIKfY/CHPl8hTRtCbMmqDdrqgAJ/qwL53NNY/I 6Y5DgacO4LHZI9xAWd+01w6hDTtpJWoWOVwtgc1AGZHueQ9R4EpLp7swNGEWlhyr PLvd/8X3AIZc4HM3syHyXTQs2iH1jtPiGLCeDhw1QJ7kwgEe+ozlm5QA76wrKPxo gCnRNpOVEE45TlEgSGOIzubhCraPG8iyaiUvxbkg7FvsBVL5F5pm5nhHNv6UWpFh GhI9+hZtZolxsevJALL43Mgy8A== -----END CERTIFICATE-----Generated at Thu Aug 7 02:05:58 2025 by rpki-client