$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft File: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft (raw, json) Hash identifier: MiBL8350x8U1QkFxoTZx4TXWtL2MRtUB9PI9ydf1Z5Y= Subject key identifier: CF:0E:39:6E:86:4A:F1:A5:E5:EF:6D:12:DB:C3:D7:BB:3C:D2:73:E4 Authority key identifier: CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 Certificate issuer: /CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Certificate serial: 7CD1B3A384784F0AF677E7C641EBF1BA0019970D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject info access: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft Manifest number: 02F2 Signing time: Mon 20 Oct 2025 11:19:39 +0000 Manifest this update: Mon 20 Oct 2025 11:14:39 +0000 Manifest next update: Tue 21 Oct 2025 13:14:39 +0000 Files and hashes: 1: 34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa (hash: gE/DdB9YOblUsoK0HG9wnPd3YKHH2DbykTyw5B7/wBQ=) 2: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl (hash: 9Jpzq+j1u3pg2rTjq2t5yrLp5APQbCI3ruE0/1Padv4=) 3: 323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (hash: JKjEt0hETRYlcDbmWQLZvhZ9xRQwxepiQuRghmhAfoA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d1:b3:a3:84:78:4f:0a:f6:77:e7:c6:41:eb:f1:ba:00:19:97:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Validity Not Before: Oct 20 11:14:39 2025 GMT Not After : Oct 21 13:14:39 2025 GMT Subject: CN=CF0E396E864AF1A5E5EF6D12DBC3D7BB3CD273E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9f:97:00:34:93:3f:33:89:de:85:83:34:5c: 59:d9:65:b7:92:40:6a:c2:95:a2:dd:02:f5:7c:5d: af:87:c6:e8:9d:4f:75:19:c7:70:a6:a9:2e:9c:bc: 47:56:44:d6:27:34:96:83:e3:d1:60:1a:56:45:a4: 0a:b2:82:0e:19:97:6d:3d:29:2d:bb:76:5e:42:98: ef:57:20:56:b5:52:4e:1e:d7:ca:5a:31:f7:6d:60: e7:f7:90:dc:46:88:2f:fc:f7:3a:c3:65:91:f4:8e: 7b:90:6d:a1:e7:eb:5e:57:53:69:a5:8c:63:bd:8a: 42:12:2e:4a:61:ce:b8:43:85:ad:ce:59:7a:e7:77: 34:e8:94:eb:c9:49:ba:74:e8:74:2e:8f:18:59:20: a7:d9:4c:88:66:94:4d:6b:78:f1:f4:2f:8b:34:97: 93:82:92:66:a5:04:cb:f5:09:a6:2c:c8:45:d4:c0: 03:82:1a:32:33:9d:50:fd:12:e0:12:49:b0:75:61: 74:76:71:cb:84:80:9a:35:5a:f4:60:6f:e5:9b:87: ab:b3:7f:03:e9:e9:3a:f0:b1:a7:cb:e5:69:da:a5: 24:9a:72:e2:6d:29:8a:43:08:58:88:e6:89:9f:b6: 5a:3e:cc:2a:74:b9:c5:a4:d7:4c:5e:f9:26:68:57: f4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0E:39:6E:86:4A:F1:A5:E5:EF:6D:12:DB:C3:D7:BB:3C:D2:73:E4 X509v3 Authority Key Identifier: keyid:CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:96:6e:df:e3:83:67:f0:91:35:c4:38:d3:f1:a9:c4:35:7b: 71:1f:da:05:b1:31:df:9b:36:77:a2:63:8b:0d:97:cb:7e:a0: 6b:44:c1:4a:fc:66:35:37:f0:0d:61:c4:d0:3b:ba:6b:af:a3: 2d:fa:ec:12:dd:42:85:00:30:81:8f:22:e4:17:84:fe:2f:96: 22:ee:e2:d8:bf:73:e7:bf:f0:4c:f8:1e:5b:00:12:08:7d:27: 7a:f8:80:70:27:2e:0e:ae:c1:0e:cb:7e:d8:9b:14:00:2b:d8: 56:23:9c:be:0e:53:fd:75:ee:22:0e:75:be:8c:a7:dc:b8:a6: 5f:69:51:d3:d5:18:a3:3f:77:5f:24:e8:93:a5:e8:c9:ef:4c: 76:f5:80:9a:2e:54:a3:a1:7a:ec:ea:c9:de:5f:9f:91:72:b6: e9:52:77:ac:ec:33:21:a5:d8:5c:17:86:b6:6c:13:0f:eb:4b: 99:73:77:bb:b2:2d:82:f7:a2:e5:af:cd:4d:cf:17:e1:da:c6: ad:e2:f4:70:db:df:ef:8f:f8:3e:6d:2c:09:49:b0:fb:47:5a: 5b:4c:6b:17:65:83:0e:db:8e:26:c0:96:c4:c5:75:7a:f7:b7: de:e6:71:87:7c:ab:2b:3b:bc:d3:61:cd:6a:2a:64:ca:d8:03: cb:85:d6:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfNGzo4R4Twr2d+fGQevxugAZlw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQzNEMzg5RUU2QkFCN0NDRDVGNjYwRDYzMEE4QkU4 RTFBRTA1MzAeFw0yNTEwMjAxMTE0MzlaFw0yNTEwMjExMzE0MzlaMDMxMTAvBgNV BAMTKENGMEUzOTZFODY0QUYxQTVFNUVGNkQxMkRCQzNEN0JCM0NEMjczRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKn5cANJM/M4nehYM0XFnZZbeS QGrClaLdAvV8Xa+HxuidT3UZx3CmqS6cvEdWRNYnNJaD49FgGlZFpAqygg4Zl209 KS27dl5CmO9XIFa1Uk4e18paMfdtYOf3kNxGiC/89zrDZZH0jnuQbaHn615XU2ml jGO9ikISLkphzrhDha3OWXrndzTolOvJSbp06HQujxhZIKfZTIhmlE1rePH0L4s0 l5OCkmalBMv1CaYsyEXUwAOCGjIznVD9EuASSbB1YXR2ccuEgJo1WvRgb+Wbh6uz fwPp6TrwsafL5WnapSSacuJtKYpDCFiI5omftlo+zCp0ucWk10xe+SZoV/SzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzw45boZK8aXl720S28PXuzzSc+QwHwYDVR0j BBgwFoAUz/w9OJ7murfM1fZg1jCovo4a4FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5 RFcvMS9DRkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRkMzRDM4OUVFNkJBQjdD Q0Q1RjY2MEQ2MzBBOEJFOEUxQUUwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5RFcvMS9D RkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEJZu3+ODZ/CRNcQ40/GpxDV7cR/aBbEx35s2d6Jjiw2Xy36ga0TBSvxmNTfw DWHE0Du6a6+jLfrsEt1ChQAwgY8i5BeE/i+WIu7i2L9z57/wTPgeWwASCH0neviA cCcuDq7BDst+2JsUACvYViOcvg5T/XXuIg51voyn3LimX2lR09UYoz93XyTok6Xo ye9MdvWAmi5Uo6F67OrJ3l+fkXK26VJ3rOwzIaXYXBeGtmwTD+tLmXN3u7Itgvei 5a/NTc8X4drGreL0cNvf74/4Pm0sCUmw+0daW0xrF2WDDtuOJsCWxMV1eve33uZx h3yrKzu802HNaipkytgDy4XWxQ== -----END CERTIFICATE-----Generated at Mon Oct 20 15:43:02 2025 by rpki-client