$ rpki-client -vvf rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft File: CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft (raw, json) Hash identifier: exbnj0ayn4/OZbkfJnlhkfbsE/TudiTwnTNge8bGjYk= Subject key identifier: D1:A6:F5:EA:C9:6F:B4:B3:7B:D7:96:1D:D5:FA:BF:33:51:FC:99:4D Authority key identifier: CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7 Certificate issuer: /CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7 Certificate serial: 735AE0E6599B50FBF07E92A739C9F80F1913198D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft Manifest number: 02E9 Signing time: Mon 20 Oct 2025 03:46:36 +0000 Manifest this update: Mon 20 Oct 2025 03:41:36 +0000 Manifest next update: Tue 21 Oct 2025 04:54:36 +0000 Files and hashes: 1: 323830343a346136303a3a2f33322d3438203d3e20323637323336.roa (hash: mXVXROdrhx5zziqcEEeWD0Vzy58pLNqk9Cz+8buZybE=) 2: CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl (hash: +K2bSrImxKtMejwthbnB3DEKJ19WF/9E9ALBh5nEzQY=) 3: 34352e3233312e3130302e302f32322d3234203d3e20323637323336.roa (hash: t7wZjfHEHsD5Rmlff5gVkl4UrV8eQCO1lvq1c9DJVOw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5a:e0:e6:59:9b:50:fb:f0:7e:92:a7:39:c9:f8:0f:19:13:19:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7 Validity Not Before: Oct 20 03:41:36 2025 GMT Not After : Oct 21 04:54:36 2025 GMT Subject: CN=D1A6F5EAC96FB4B37BD7961DD5FABF3351FC994D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:0d:e0:c6:e6:21:2a:b3:25:c8:27:1b:9d: 0e:e9:da:0d:2a:a1:26:ff:8d:71:64:7c:12:21:fd: 05:30:e0:56:47:98:81:99:19:d9:a3:1b:3a:2c:ba: 49:24:d7:17:8e:13:7b:61:ff:37:96:97:09:00:eb: cd:d2:ab:05:93:0d:93:e4:33:db:73:be:5e:ae:9f: 05:c9:ec:ba:e0:f1:96:2d:74:99:b0:3b:dd:ec:c9: 86:14:fd:43:86:b6:4e:0d:78:2e:ee:56:58:37:59: 8e:20:00:63:d4:d8:d2:7c:a2:ed:ca:11:fd:10:2e: 6a:5b:95:68:19:f1:13:a1:87:ad:3a:90:21:c0:84: 4b:df:e7:8b:7d:c5:21:63:95:ef:49:ae:df:a9:ee: 55:da:5f:7d:ff:fb:bd:88:07:7f:5f:98:3a:92:ef: db:bd:14:8d:e5:74:19:e9:d6:4d:5e:53:2d:f8:d9: 8d:04:f2:d9:d1:a4:9b:2b:40:33:da:ad:4d:d8:bc: 81:e4:69:d4:4a:62:a7:ba:5a:7d:55:39:85:bb:0a: f6:f0:2a:6d:25:0e:89:89:f2:8c:6f:9a:cd:36:f0: bd:da:d3:ae:1a:e5:6f:6f:30:6a:b2:d2:db:37:19: 7b:2b:51:03:d6:d2:36:b5:37:c8:9f:28:c4:fb:ce: 4c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A6:F5:EA:C9:6F:B4:B3:7B:D7:96:1D:D5:FA:BF:33:51:FC:99:4D X509v3 Authority Key Identifier: keyid:CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:75:d9:94:fd:42:61:b2:03:4a:34:22:c0:77:62:cb:bd:4a: 34:84:9e:8d:bd:af:ae:eb:94:e0:78:1f:bd:c4:8d:33:c0:ee: 9f:a0:e0:04:5e:bb:6a:29:70:35:a1:f1:30:1a:d7:ee:2b:4c: 9d:47:97:57:de:ba:39:1d:a5:2f:00:98:54:f9:80:2f:d4:e6: 7a:3a:f9:c2:df:fc:33:5c:15:27:b9:b0:1e:2a:0f:ac:a7:8d: 0d:08:63:e9:5d:71:32:43:02:ba:15:a6:e1:8c:6b:93:58:13: 93:ad:3a:1e:9d:5b:fb:29:57:16:7c:40:83:19:e9:0a:38:4b: 94:be:5e:a9:68:de:21:c2:57:12:f0:6b:ee:ae:fd:51:4d:1a: 27:04:32:de:95:96:db:45:be:43:51:f5:2b:eb:20:a3:1c:36: 11:66:ef:65:c9:75:af:e6:58:25:5a:ac:ed:82:0b:2d:9c:56: 9a:f4:0c:fc:96:d9:54:b5:a6:b2:93:33:e9:52:80:8f:57:69: 0e:a5:47:a8:cd:07:fd:5e:92:92:01:7b:67:f4:fb:22:19:fe: 3a:8f:2c:01:c8:d1:c4:32:45:83:36:82:89:0a:ae:a1:48:85: 59:77:96:41:63:79:17:f5:da:a2:db:35:8a:df:85:0c:1c:e1: da:b6:a8:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc1rg5lmbUPvwfpKnOcn4DxkTGY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NFRjJEM0VBNUJEMTg3QzQ1RUE2RDNBOEZBRjcxQ0Qx NUY3RDJBNzAeFw0yNTEwMjAwMzQxMzZaFw0yNTEwMjEwNDU0MzZaMDMxMTAvBgNV BAMTKEQxQTZGNUVBQzk2RkI0QjM3QkQ3OTYxREQ1RkFCRjMzNTFGQzk5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tg3gxuYhKrMlyCcbnQ7p2g0q oSb/jXFkfBIh/QUw4FZHmIGZGdmjGzosukkk1xeOE3th/zeWlwkA683SqwWTDZPk M9tzvl6unwXJ7Lrg8ZYtdJmwO93syYYU/UOGtk4NeC7uVlg3WY4gAGPU2NJ8ou3K Ef0QLmpblWgZ8ROhh606kCHAhEvf54t9xSFjle9Jrt+p7lXaX33/+72IB39fmDqS 79u9FI3ldBnp1k1eUy342Y0E8tnRpJsrQDParU3YvIHkadRKYqe6Wn1VOYW7Cvbw Km0lDomJ8oxvms028L3a064a5W9vMGqy0ts3GXsrUQPW0ja1N8ifKMT7zkw1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0ab16slvtLN715Yd1fq/M1H8mU0wHwYDVR0j BBgwFoAUzO8tPqW9GHxF6m06j69xzRX30qcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1wcHdiUWpFclp6ZENDd2R4eDVLbjdXR0tWeGNrUlJzNW05OWFtcGM1 WDYvMS9DQ0VGMkQzRUE1QkQxODdDNDVFQTZEM0E4RkFGNzFDRDE1RjdEMkE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDRUYyRDNFQTVCRDE4N0M0 NUVBNkQzQThGQUY3MUNEMTVGN0QyQTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1wcHdiUWpFclp6ZENDd2R4eDVLbjdXR0tWeGNrUlJzNW05OWFtcGM1WDYvMS9D Q0VGMkQzRUE1QkQxODdDNDVFQTZEM0E4RkFGNzFDRDE1RjdEMkE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACXXZlP1CYbIDSjQiwHdiy71KNISejb2vruuU4HgfvcSNM8Dun6DgBF67ailw NaHxMBrX7itMnUeXV966OR2lLwCYVPmAL9Tmejr5wt/8M1wVJ7mwHioPrKeNDQhj 6V1xMkMCuhWm4Yxrk1gTk606Hp1b+ylXFnxAgxnpCjhLlL5eqWjeIcJXEvBr7q79 UU0aJwQy3pWW20W+Q1H1K+sgoxw2EWbvZcl1r+ZYJVqs7YILLZxWmvQM/JbZVLWm spMz6VKAj1dpDqVHqM0H/V6SkgF7Z/T7Ihn+Oo8sAcjRxDJFgzaCiQquoUiFWXeW QWN5F/Xaots1it+FDBzh2rao5Q== -----END CERTIFICATE-----Generated at Mon Oct 20 18:27:13 2025 by rpki-client