$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft File: 67A81E20D9B7972AADDB1C394778320F56BE023B.mft (raw, json) Hash identifier: 5D4ZoBbiuUHVGtKkOLEkTdMgmMIVOM6HTD+3T5Wg8z4= Subject key identifier: 19:7D:D8:86:CB:A2:5F:F7:0E:0E:12:6B:F6:F8:14:93:D6:B1:E3:65 Authority key identifier: 67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B Certificate issuer: /CN=67A81E20D9B7972AADDB1C394778320F56BE023B Certificate serial: 2F707F260CE684F9AB84EE374F671DB9B9567986 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject info access: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft Manifest number: 26 Signing time: Sun 22 Jun 2025 01:30:55 +0000 Manifest this update: Sun 22 Jun 2025 01:25:55 +0000 Manifest next update: Mon 23 Jun 2025 04:47:55 +0000 Files and hashes: 1: 34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa (hash: +UFS2xAxUtJTPsgIN5GML3ACDJRqNmPSE3oSqnNkiJQ=) 2: 67A81E20D9B7972AADDB1C394778320F56BE023B.crl (hash: crZfOkpiXZ3lCIU20EmbccTgtkBDJJe3ebsehoDZXTA=) 3: 34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa (hash: WoMHGLPz9m8WHyv/c8eqB/ZBTGVzLYTCYHFQS4BRiVA=) 4: 34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (hash: ZfM83HfKeKzzsIlJvLRkpTey+TNllfkHWy25NrM+coc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Jun 2025 02:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:70:7f:26:0c:e6:84:f9:ab:84:ee:37:4f:67:1d:b9:b9:56:79:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67A81E20D9B7972AADDB1C394778320F56BE023B Validity Not Before: Jun 22 01:25:55 2025 GMT Not After : Jun 23 04:47:55 2025 GMT Subject: CN=197DD886CBA25FF70E0E126BF6F81493D6B1E365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d9:27:e8:68:27:b9:cb:be:7f:bf:19:09:a0: bb:5a:da:01:e6:e5:ad:fa:2e:1f:1b:58:df:ab:42: 02:2c:57:a2:33:3d:44:05:61:57:cd:e6:6c:ef:8a: d2:45:5d:f5:56:0f:9c:fa:dc:8f:a7:2b:36:2d:8f: ab:3d:fa:e6:10:cc:b7:73:88:e7:bd:8a:b8:41:d4: 5f:ec:dc:bb:22:7d:ee:c2:87:2f:3f:2a:3d:44:13: 34:d5:53:99:1d:35:ca:02:9d:76:ef:ce:7f:4b:15: 49:75:99:b1:cb:24:3e:66:3e:b7:a0:de:69:bf:10: 2f:af:19:67:a8:6c:33:ee:90:e9:06:bb:1e:bc:ed: 2e:61:bd:37:70:ee:8e:9e:87:9b:81:5c:ab:66:7f: e1:2d:49:17:90:7c:d5:5d:d0:91:68:77:b7:63:69: 77:cf:6d:0e:0e:1c:b3:5b:42:5c:e8:a5:5a:ab:ec: 51:36:41:a0:e6:d0:5e:e2:e1:12:e6:46:a6:ab:d0: 14:18:3f:a4:df:14:bc:6e:cb:3c:68:50:72:0f:a9: 50:c9:b2:f6:31:35:d3:b4:84:fb:5b:d2:99:e8:10: 1c:5e:6e:41:da:69:ee:23:d1:f9:37:11:a0:02:ae: 9b:51:21:8a:ba:6d:e3:86:8b:15:29:a2:46:3e:da: 65:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7D:D8:86:CB:A2:5F:F7:0E:0E:12:6B:F6:F8:14:93:D6:B1:E3:65 X509v3 Authority Key Identifier: keyid:67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e0:d8:31:a2:78:58:ab:a3:8c:b5:a3:bf:49:0c:42:3c:d5: b2:e7:52:41:d2:e2:ec:93:40:b9:4c:ce:ed:45:e0:05:c4:99: 97:3f:c5:7e:bd:cd:f9:ae:ae:d2:a5:d8:20:16:b9:8e:3f:23: 77:1e:4e:13:66:f8:51:e2:64:d7:84:d4:7e:72:61:c1:9b:99: 99:d4:ef:52:fb:08:d9:00:87:7a:4f:6a:ad:3a:09:40:3e:a7: 2d:f7:72:1a:f6:6b:c3:3d:e9:73:4d:26:72:60:f9:75:18:2d: 73:d4:22:33:ef:03:32:00:68:45:a3:a2:21:4f:07:ca:2f:fc: 26:d9:59:05:1e:22:ba:d7:f8:67:7e:dd:03:98:72:ff:de:f0: 5f:3d:fc:40:9e:be:22:b1:dd:79:4d:71:9b:71:2e:74:9c:ef: 2a:4a:3a:57:5d:13:4e:30:e6:05:47:e2:7e:d0:b7:a1:84:07: d9:61:3c:bd:a0:70:66:46:36:d3:76:d1:40:2b:92:49:ae:c1: 88:27:1e:75:a5:da:f4:75:0f:d4:b0:bc:43:1f:da:d9:08:38: b4:4d:c5:57:19:ca:7a:0a:2e:c9:3a:fd:2a:4f:38:d8:96:02: 0f:0f:47:e5:33:f9:d0:f0:69:60:a5:e2:ca:43:48:c7:48:4d: dc:ca:3b:0e -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUL3B/JgzmhPmrhO43T2cdublWeYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1 NkJFMDIzQjAeFw0yNTA2MjIwMTI1NTVaFw0yNTA2MjMwNDQ3NTVaMDMxMTAvBgNV BAMTKDE5N0REODg2Q0JBMjVGRjcwRTBFMTI2QkY2RjgxNDkzRDZCMUUzNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2SfoaCe5y75/vxkJoLta2gHm 5a36Lh8bWN+rQgIsV6IzPUQFYVfN5mzvitJFXfVWD5z63I+nKzYtj6s9+uYQzLdz iOe9irhB1F/s3Lsife7Chy8/Kj1EEzTVU5kdNcoCnXbvzn9LFUl1mbHLJD5mPreg 3mm/EC+vGWeobDPukOkGux687S5hvTdw7o6eh5uBXKtmf+EtSReQfNVd0JFod7dj aXfPbQ4OHLNbQlzopVqr7FE2QaDm0F7i4RLmRqar0BQYP6TfFLxuyzxoUHIPqVDJ svYxNdO0hPtb0pnoEBxebkHaae4j0fk3EaACrptRIYq6beOGixUpokY+2mVPAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUGX3YhsuiX/cODhJr9vgUk9ax42UwHwYDVR0j BBgwFoAUZ6geINm3lyqt2xw5R3gyD1a+AjswDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9reVdwR0EydlA5VUVEWWZWTlh3RGt0QkNORGdzVFJySmt4elE1QmptMjM3 LzIvNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1NkJFMDIzQi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82N0E4MUUyMEQ5Qjc5NzJBQURE QjFDMzk0Nzc4MzIwRjU2QkUwMjNCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2t5 V3BHQTJ2UDlVRURZZlZOWHdEa3RCQ05EZ3NUUnJKa3h6UTVCam0yMzcvMi82N0E4 MUUyMEQ5Qjc5NzJBQUREQjFDMzk0Nzc4MzIwRjU2QkUwMjNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA l+DYMaJ4WKujjLWjv0kMQjzVsudSQdLi7JNAuUzO7UXgBcSZlz/Ffr3N+a6u0qXY IBa5jj8jdx5OE2b4UeJk14TUfnJhwZuZmdTvUvsI2QCHek9qrToJQD6nLfdyGvZr wz3pc00mcmD5dRgtc9QiM+8DMgBoRaOiIU8Hyi/8JtlZBR4iutf4Z37dA5hy/97w Xz38QJ6+IrHdeU1xm3EudJzvKko6V10TTjDmBUfiftC3oYQH2WE8vaBwZkY203bR QCuSSa7BiCcedaXa9HUP1LC8Qx/a2Qg4tE3FVxnKegouyTr9Kk842JYCDw9H5TP5 0PBpYKXiykNIx0hN3Mo7Dg== -----END CERTIFICATE-----Generated at Sun Jun 22 06:19:58 2025 by rpki-client