$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft File: 67A81E20D9B7972AADDB1C394778320F56BE023B.mft (raw, json) Hash identifier: hD2e2sAhGTz3RWrt/BSr5enKHZWZ/xG3ut16BBC8wTk= Subject key identifier: FC:D3:55:89:AD:A8:62:15:75:0F:BA:D3:6D:77:07:97:E2:3E:4E:22 Authority key identifier: 67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B Certificate issuer: /CN=67A81E20D9B7972AADDB1C394778320F56BE023B Certificate serial: 021669C6DC5E70F13E84164EC94B29FC05B79039 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject info access: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft Manifest number: 67 Signing time: Sun 10 Aug 2025 13:55:43 +0000 Manifest this update: Sun 10 Aug 2025 13:50:43 +0000 Manifest next update: Mon 11 Aug 2025 16:59:43 +0000 Files and hashes: 1: 67A81E20D9B7972AADDB1C394778320F56BE023B.crl (hash: P5HlGe6w3qCDk82akTaUx5c1t2To8D5PJdBfphqC2VU=) 2: 34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa (hash: +UFS2xAxUtJTPsgIN5GML3ACDJRqNmPSE3oSqnNkiJQ=) 3: 34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa (hash: WoMHGLPz9m8WHyv/c8eqB/ZBTGVzLYTCYHFQS4BRiVA=) 4: 34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (hash: ZfM83HfKeKzzsIlJvLRkpTey+TNllfkHWy25NrM+coc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 16:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:16:69:c6:dc:5e:70:f1:3e:84:16:4e:c9:4b:29:fc:05:b7:90:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67A81E20D9B7972AADDB1C394778320F56BE023B Validity Not Before: Aug 10 13:50:43 2025 GMT Not After : Aug 11 16:59:43 2025 GMT Subject: CN=FCD35589ADA86215750FBAD36D770797E23E4E22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:58:6a:6e:6a:da:21:1e:b7:e0:b0:f5:31:16: 0e:04:25:cb:5f:d6:ae:11:96:e0:7b:3a:d1:52:c3: 61:42:80:e8:4a:d2:5e:0f:cd:8a:b8:cd:c0:b5:f3: 44:a9:8d:54:c9:bc:82:1b:3a:fb:40:9c:48:f7:dc: 59:70:4c:bb:40:e0:15:90:b5:df:1c:c0:8e:28:90: be:cd:00:f4:1f:40:5e:cb:fc:4a:77:4f:41:18:2b: 1d:6c:45:50:87:84:cd:d7:4d:dc:e5:2a:f5:a9:da: 78:81:26:5d:6a:82:f3:19:51:a9:f8:54:a2:e7:4e: 7b:c8:08:2e:7b:66:2c:10:27:22:4c:e7:7e:d4:a7: 4b:ca:c3:75:32:e4:61:eb:5b:c1:43:47:a8:40:bf: fe:2b:b8:4a:7a:04:47:28:b3:d6:22:cd:46:fb:ba: 9e:09:09:1c:3f:57:47:93:f5:bd:d8:5a:fb:48:82: 5b:60:ad:cf:9c:6e:6b:69:6f:f9:35:3c:84:5c:b1: 58:40:a3:c4:c8:84:d2:76:ee:16:f3:dc:7f:64:80: be:f4:74:f3:ee:bc:36:96:82:16:c4:cb:2f:a7:af: 9d:bb:45:15:a0:d8:53:05:ee:ae:31:e8:2d:c8:66: 9c:93:c5:00:81:82:6b:62:28:7d:6f:4d:1c:4e:65: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D3:55:89:AD:A8:62:15:75:0F:BA:D3:6D:77:07:97:E2:3E:4E:22 X509v3 Authority Key Identifier: keyid:67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:3e:95:88:f5:92:1d:fb:cd:29:ff:fc:39:f3:4a:81:7f:ef: c1:f3:b1:81:36:72:ff:69:f9:b5:3d:6a:fe:8b:7e:d7:b0:fd: e1:16:73:b6:bb:06:57:dc:4f:b9:b3:4b:a7:73:f4:57:9e:b4: ea:13:9a:dd:f2:89:88:f4:92:58:92:ea:19:4c:06:81:ae:27: 9d:52:4e:f1:15:0e:fd:54:81:6d:43:9c:61:09:28:97:37:dd: 4d:b9:88:6e:e9:55:68:eb:b9:d2:56:32:78:c2:2f:c0:4b:95: 62:4d:16:76:e3:85:51:ce:05:b8:d3:1d:b8:10:4b:39:81:d7: 26:eb:c0:93:dc:e0:02:07:09:62:b0:30:a5:ef:60:1f:4c:b1: 5c:b1:a6:b8:b4:a3:e9:ac:1a:6d:11:b3:44:48:37:3a:d0:7e: 15:3c:65:b0:95:ef:b4:88:e1:ed:a0:2c:bb:82:7c:02:72:e9: da:ed:f4:a7:2b:f6:a6:ab:24:c2:2e:97:a7:90:ff:6b:9f:eb: fb:69:8d:8f:bc:43:6c:df:77:7f:1a:1a:4a:d6:fa:27:49:f2: 1a:ff:f6:02:22:47:2d:9a:68:dd:5b:7e:c3:ac:32:94:08:70: 21:9c:63:1f:78:3c:70:c5:e4:57:c4:c3:db:f8:e9:8e:79:e7: 63:b4:85:1d -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUAhZpxtxecPE+hBZOyUsp/AW3kDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1 NkJFMDIzQjAeFw0yNTA4MTAxMzUwNDNaFw0yNTA4MTExNjU5NDNaMDMxMTAvBgNV BAMTKEZDRDM1NTg5QURBODYyMTU3NTBGQkFEMzZENzcwNzk3RTIzRTRFMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2WGpuatohHrfgsPUxFg4EJctf 1q4RluB7OtFSw2FCgOhK0l4PzYq4zcC180SpjVTJvIIbOvtAnEj33FlwTLtA4BWQ td8cwI4okL7NAPQfQF7L/Ep3T0EYKx1sRVCHhM3XTdzlKvWp2niBJl1qgvMZUan4 VKLnTnvICC57ZiwQJyJM537Up0vKw3Uy5GHrW8FDR6hAv/4ruEp6BEcos9YizUb7 up4JCRw/V0eT9b3YWvtIgltgrc+cbmtpb/k1PIRcsVhAo8TIhNJ27hbz3H9kgL70 dPPuvDaWghbEyy+nr527RRWg2FMF7q4x6C3IZpyTxQCBgmtiKH1vTRxOZeOfAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU/NNVia2oYhV1D7rTbXcHl+I+TiIwHwYDVR0j BBgwFoAUZ6geINm3lyqt2xw5R3gyD1a+AjswDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9reVdwR0EydlA5VUVEWWZWTlh3RGt0QkNORGdzVFJySmt4elE1QmptMjM3 LzIvNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1NkJFMDIzQi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82N0E4MUUyMEQ5Qjc5NzJBQURE QjFDMzk0Nzc4MzIwRjU2QkUwMjNCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2t5 V3BHQTJ2UDlVRURZZlZOWHdEa3RCQ05EZ3NUUnJKa3h6UTVCam0yMzcvMi82N0E4 MUUyMEQ5Qjc5NzJBQUREQjFDMzk0Nzc4MzIwRjU2QkUwMjNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA Bz6ViPWSHfvNKf/8OfNKgX/vwfOxgTZy/2n5tT1q/ot+17D94RZztrsGV9xPubNL p3P0V5606hOa3fKJiPSSWJLqGUwGga4nnVJO8RUO/VSBbUOcYQkolzfdTbmIbulV aOu50lYyeMIvwEuVYk0WduOFUc4FuNMduBBLOYHXJuvAk9zgAgcJYrAwpe9gH0yx XLGmuLSj6awabRGzREg3OtB+FTxlsJXvtIjh7aAsu4J8AnLp2u30pyv2pqskwi6X p5D/a5/r+2mNj7xDbN93fxoaStb6J0nyGv/2AiJHLZpo3Vt+w6wylAhwIZxjH3g8 cMXkV8TD2/jpjnnnY7SFHQ== -----END CERTIFICATE-----Generated at Mon Aug 11 02:10:20 2025 by rpki-client