$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft File: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft (raw, json) Hash identifier: OHfUl4W9MwS1ZvyXBz4tWHkS6Sz+gWAImyKh/kQgycc= Subject key identifier: E4:43:D6:68:F3:57:30:24:86:02:41:82:D6:EF:58:B3:32:FD:80:E6 Authority key identifier: CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 Certificate issuer: /CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Certificate serial: 4D0784DB7440871F83AC179A304EB18F6A4A5B42 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject info access: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft Manifest number: 02A4 Signing time: Sat 23 Aug 2025 04:17:37 +0000 Manifest this update: Sat 23 Aug 2025 04:12:37 +0000 Manifest next update: Sun 24 Aug 2025 07:16:37 +0000 Files and hashes: 1: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl (hash: 8/myNDvnr4nn8PSuySfG7XXCES/6fq9UspzwcuAJJJE=) 2: 34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa (hash: gE/DdB9YOblUsoK0HG9wnPd3YKHH2DbykTyw5B7/wBQ=) 3: 323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (hash: JKjEt0hETRYlcDbmWQLZvhZ9xRQwxepiQuRghmhAfoA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 07:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:07:84:db:74:40:87:1f:83:ac:17:9a:30:4e:b1:8f:6a:4a:5b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Validity Not Before: Aug 23 04:12:37 2025 GMT Not After : Aug 24 07:16:37 2025 GMT Subject: CN=E443D668F357302486024182D6EF58B332FD80E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:96:01:c6:e5:19:c4:49:0b:f3:96:a5:8a:9e: 16:53:be:c3:1f:b2:ed:08:6e:b7:99:91:ef:87:11: 9a:e6:71:15:26:f5:e0:fa:f6:b9:0f:86:57:e6:1c: 9f:20:51:5c:f4:b6:b0:a3:da:cd:ab:a3:9b:8d:52: ae:58:ce:67:7d:cd:99:24:49:6c:8e:9b:ce:5f:bb: 57:65:08:c6:92:fe:82:79:23:d5:f4:26:0f:0c:61: 1e:51:c6:4e:a2:35:2d:c3:0b:77:94:37:35:ba:c3: 17:8c:60:a7:00:57:b7:05:c5:ba:3a:76:f4:07:8c: b8:93:70:84:ce:79:e4:32:fd:30:af:a4:9c:56:3c: b9:4b:3b:dc:37:2e:44:14:7e:64:bf:f5:ea:2c:ce: 28:37:1d:7c:8c:a3:56:a3:b9:63:66:63:13:c8:ba: eb:f6:be:e7:35:6b:82:e1:00:c0:e6:64:ed:7f:e0: ac:b1:62:19:64:64:f7:aa:21:7f:a6:04:22:fd:db: 95:9f:e2:74:b2:a0:57:ae:72:d1:96:00:fe:dc:5d: eb:6f:fd:08:c7:b7:66:36:55:70:86:c3:7d:28:91: 45:14:f5:a5:9a:30:95:68:70:c4:2f:68:93:00:73: 1f:d6:89:98:4b:39:74:6c:f5:f8:3b:1a:48:14:cf: 00:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:43:D6:68:F3:57:30:24:86:02:41:82:D6:EF:58:B3:32:FD:80:E6 X509v3 Authority Key Identifier: keyid:CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:7f:f8:03:e1:a0:8d:7f:f9:59:fe:e5:0b:35:7e:ff:a4:a2: a5:83:c4:c3:72:8a:83:9b:d8:0b:cd:49:fa:d7:8e:b4:13:a0: 25:e0:57:24:6e:e1:27:d7:77:46:ec:b5:48:96:50:21:76:0c: 3d:04:15:2a:b5:b5:3a:41:d7:7e:00:7c:37:72:76:58:1d:28: 5e:35:47:66:07:37:0a:d7:a2:4b:73:92:40:c3:0a:48:5d:8e: 4a:c3:b0:78:87:67:0b:fc:df:33:d7:83:0c:ec:08:dd:f4:84: 42:8e:d5:f2:eb:0f:26:8c:96:3c:a3:87:a1:94:3e:e8:26:0d: 62:93:1f:5d:bf:34:b0:21:ff:54:6c:5d:6d:c0:92:f7:3d:9c: c5:a8:e8:da:97:6e:01:e7:11:36:72:b0:7b:4d:70:ce:17:3a: 66:2e:79:6c:cc:05:05:e5:7c:af:d9:c6:f2:6e:30:d1:d5:7a: 32:69:ca:f7:00:53:2f:27:7a:ac:e0:99:98:e5:46:39:97:55: 8c:bd:70:42:9a:f7:de:97:54:c6:ec:d9:00:70:31:8c:0e:84: 57:c3:46:e4:52:4f:3a:a6:92:b4:6c:dd:57:93:54:a7:48:25: ee:3a:5e:20:42:de:63:5a:17:91:17:56:d8:77:22:1f:93:fc: dd:b3:3e:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTQeE23RAhx+DrBeaME6xj2pKW0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQzNEMzg5RUU2QkFCN0NDRDVGNjYwRDYzMEE4QkU4 RTFBRTA1MzAeFw0yNTA4MjMwNDEyMzdaFw0yNTA4MjQwNzE2MzdaMDMxMTAvBgNV BAMTKEU0NDNENjY4RjM1NzMwMjQ4NjAyNDE4MkQ2RUY1OEIzMzJGRDgwRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGlgHG5RnESQvzlqWKnhZTvsMf su0IbreZke+HEZrmcRUm9eD69rkPhlfmHJ8gUVz0trCj2s2ro5uNUq5Yzmd9zZkk SWyOm85fu1dlCMaS/oJ5I9X0Jg8MYR5Rxk6iNS3DC3eUNzW6wxeMYKcAV7cFxbo6 dvQHjLiTcITOeeQy/TCvpJxWPLlLO9w3LkQUfmS/9eoszig3HXyMo1ajuWNmYxPI uuv2vuc1a4LhAMDmZO1/4KyxYhlkZPeqIX+mBCL925Wf4nSyoFeuctGWAP7cXetv /QjHt2Y2VXCGw30okUUU9aWaMJVocMQvaJMAcx/WiZhLOXRs9fg7GkgUzwCXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5EPWaPNXMCSGAkGC1u9YszL9gOYwHwYDVR0j BBgwFoAUz/w9OJ7murfM1fZg1jCovo4a4FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5 RFcvMS9DRkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRkMzRDM4OUVFNkJBQjdD Q0Q1RjY2MEQ2MzBBOEJFOEUxQUUwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5RFcvMS9D RkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyH/4A+GgjX/5Wf7lCzV+/6SipYPEw3KKg5vYC81J+teOtBOgJeBXJG7hJ9d3 Ruy1SJZQIXYMPQQVKrW1OkHXfgB8N3J2WB0oXjVHZgc3CteiS3OSQMMKSF2OSsOw eIdnC/zfM9eDDOwI3fSEQo7V8usPJoyWPKOHoZQ+6CYNYpMfXb80sCH/VGxdbcCS 9z2cxajo2pduAecRNnKwe01wzhc6Zi55bMwFBeV8r9nG8m4w0dV6MmnK9wBTLyd6 rOCZmOVGOZdVjL1wQpr33pdUxuzZAHAxjA6EV8NG5FJPOqaStGzdV5NUp0gl7jpe IELeY1oXkRdW2HciH5P83bM+aQ== -----END CERTIFICATE-----Generated at Sat Aug 23 10:28:43 2025 by rpki-client