$ rpki-client -vvf rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.mft File: CC8086D196E8A5C61982081F90E17B277D50F224.mft (raw, json) Hash identifier: 3l9RVwyJEqNaCj4ef05H9YX74LkOfWR9Lc398M47zHs= Subject key identifier: 08:AB:93:07:CB:C8:DE:CD:98:81:4F:EE:BA:1E:91:77:80:E3:AF:EE Authority key identifier: CC:80:86:D1:96:E8:A5:C6:19:82:08:1F:90:E1:7B:27:7D:50:F2:24 Certificate issuer: /CN=CC8086D196E8A5C61982081F90E17B277D50F224 Certificate serial: 27AD284666475261A0E536C82EC46357A8CC82B3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8086D196E8A5C61982081F90E17B277D50F224.cer Subject info access: rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.mft Manifest number: 02F2 Signing time: Mon 20 Oct 2025 09:30:00 +0000 Manifest this update: Mon 20 Oct 2025 09:25:00 +0000 Manifest next update: Tue 21 Oct 2025 12:55:00 +0000 Files and hashes: 1: 323830343a336661383a3a2f33322d3334203d3e20323635393035.roa (hash: qgrx0B2fzRiY47gXpq+yGna7KKXinyEb5ugH1d9L0GA=) 2: 3133312e3139362e3130302e302f32322d3234203d3e20323635393035.roa (hash: 7rU9aTdzNPtasJu1My8RTNY/tWo9mK2SMy8Pd77r0+I=) 3: CC8086D196E8A5C61982081F90E17B277D50F224.crl (hash: 6TqDR9c6wjvof0ObGgH9B/ZpYobJl6FyUcw3GhHiL1g=) 4: 34352e3136312e3139362e302f32322d3234203d3e20323635393035.roa (hash: vLmdo9KQ58nXNGaKvn9M76mAb5Rkp6osL4lr4pCuSjQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.crl rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8086D196E8A5C61982081F90E17B277D50F224.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ad:28:46:66:47:52:61:a0:e5:36:c8:2e:c4:63:57:a8:cc:82:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8086D196E8A5C61982081F90E17B277D50F224 Validity Not Before: Oct 20 09:25:00 2025 GMT Not After : Oct 21 12:55:00 2025 GMT Subject: CN=08AB9307CBC8DECD98814FEEBA1E917780E3AFEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0e:ab:e3:34:00:4d:5d:3f:2f:27:bc:27:1d: 46:c2:a1:76:d3:66:09:c0:be:c7:88:16:6c:e0:50: 3a:f0:3c:22:ad:4c:b1:f1:18:94:76:43:35:e6:bd: b2:6e:96:71:67:a9:d4:6a:20:8b:45:e1:4d:7e:b4: bb:82:6d:a3:29:cd:d4:92:a7:1b:c4:49:ff:25:4b: dc:30:41:b5:32:6b:2d:d3:cb:95:dd:de:1c:f5:36: 58:4a:cb:2e:44:29:b1:08:a1:58:bd:2c:44:11:02: 90:db:7f:26:01:00:96:63:86:30:f9:bd:5a:98:e4: 78:8c:5f:6c:c0:68:1b:c1:c6:58:cd:55:48:93:33: 76:c2:da:cc:72:c7:c0:b2:ac:31:18:ac:fb:7d:b7: 22:47:4a:81:42:91:38:14:8c:28:bc:90:bc:aa:ab: 8b:79:e9:c2:02:86:98:53:60:91:2c:be:29:b1:82: ba:08:8b:0b:de:ea:12:44:9e:85:05:35:81:40:9d: b2:9c:c4:95:af:a8:7c:48:82:19:58:8e:9b:dc:95: e4:d6:74:7e:f2:b1:e6:57:20:44:8c:d7:ef:b8:37: 4f:ba:fc:cd:0a:76:37:9a:35:f9:8f:8c:b0:de:ee: ea:0c:e9:4d:b1:3f:9c:57:2e:cb:aa:23:07:92:39: 65:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AB:93:07:CB:C8:DE:CD:98:81:4F:EE:BA:1E:91:77:80:E3:AF:EE X509v3 Authority Key Identifier: keyid:CC:80:86:D1:96:E8:A5:C6:19:82:08:1F:90:E1:7B:27:7D:50:F2:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8086D196E8A5C61982081F90E17B277D50F224.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b3:05:34:6d:f6:d2:1d:1f:de:ae:16:9e:17:dd:98:2b:19: af:83:f1:2c:6b:5a:83:c2:75:61:29:91:63:9d:a8:44:d5:5c: c0:70:5a:08:e1:b3:ce:5a:72:23:71:66:56:34:2a:d1:01:39: b5:55:82:b2:f2:4e:58:c0:4d:43:27:b9:79:b1:b8:a0:fd:31: 14:a7:2b:43:91:36:9d:b2:b6:15:e6:24:11:d6:2d:09:40:e3: 8d:f1:59:42:6f:57:db:2e:79:d1:a1:e4:7a:06:59:36:e3:7e: d9:75:f8:5a:f1:bd:f2:62:e8:d4:94:ab:b7:33:f0:94:6f:ca: 6d:56:65:0a:6f:a5:1d:6f:b7:db:aa:d9:ec:80:6a:bb:db:08: 1e:2d:9a:b7:76:e3:3a:48:8a:b8:7c:1d:0e:9b:98:81:c2:15: 7c:45:01:53:e8:3d:e4:0e:73:8a:ae:87:54:66:c7:d8:14:b5: cd:cd:08:1b:02:b7:99:09:36:e5:6d:03:a3:70:10:57:c7:28: 08:34:2b:0c:4e:a0:af:49:40:7a:6a:62:b2:95:44:65:ed:21: 9a:51:0d:2c:39:95:d2:b1:9a:65:54:d6:63:d7:bc:12:ae:e4: bc:0c:b4:a1:e5:3d:94:07:00:1d:94:9b:28:ed:97:2b:ea:39: 5f:78:38:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ60oRmZHUmGg5TbILsRjV6jMgrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4MDg2RDE5NkU4QTVDNjE5ODIwODFGOTBFMTdCMjc3 RDUwRjIyNDAeFw0yNTEwMjAwOTI1MDBaFw0yNTEwMjExMjU1MDBaMDMxMTAvBgNV BAMTKDA4QUI5MzA3Q0JDOERFQ0Q5ODgxNEZFRUJBMUU5MTc3ODBFM0FGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDqvjNABNXT8vJ7wnHUbCoXbT ZgnAvseIFmzgUDrwPCKtTLHxGJR2QzXmvbJulnFnqdRqIItF4U1+tLuCbaMpzdSS pxvESf8lS9wwQbUyay3Ty5Xd3hz1NlhKyy5EKbEIoVi9LEQRApDbfyYBAJZjhjD5 vVqY5HiMX2zAaBvBxljNVUiTM3bC2sxyx8CyrDEYrPt9tyJHSoFCkTgUjCi8kLyq q4t56cIChphTYJEsvimxgroIiwve6hJEnoUFNYFAnbKcxJWvqHxIghlYjpvcleTW dH7yseZXIESM1++4N0+6/M0KdjeaNfmPjLDe7uoM6U2xP5xXLsuqIweSOWVLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCKuTB8vI3s2YgU/uuh6Rd4Djr+4wHwYDVR0j BBgwFoAUzICG0ZbopcYZgggfkOF7J31Q8iQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWZDMVlVUHY1ajhFOGtuYzdDWXREd3BudlgzNW5Ld0VTUGZEbXhTdUN1 RkovMS9DQzgwODZEMTk2RThBNUM2MTk4MjA4MUY5MEUxN0IyNzdENTBGMjI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDODA4NkQxOTZFOEE1QzYx OTgyMDgxRjkwRTE3QjI3N0Q1MEYyMjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWZDMVlVUHY1ajhFOGtuYzdDWXREd3BudlgzNW5Ld0VTUGZEbXhTdUN1RkovMS9D QzgwODZEMTk2RThBNUM2MTk4MjA4MUY5MEUxN0IyNzdENTBGMjI0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd7MFNG320h0f3q4WnhfdmCsZr4PxLGtag8J1YSmRY52oRNVcwHBaCOGzzlpy I3FmVjQq0QE5tVWCsvJOWMBNQye5ebG4oP0xFKcrQ5E2nbK2FeYkEdYtCUDjjfFZ Qm9X2y550aHkegZZNuN+2XX4WvG98mLo1JSrtzPwlG/KbVZlCm+lHW+326rZ7IBq u9sIHi2at3bjOkiKuHwdDpuYgcIVfEUBU+g95A5ziq6HVGbH2BS1zc0IGwK3mQk2 5W0Do3AQV8coCDQrDE6gr0lAempispVEZe0hmlENLDmV0rGaZVTWY9e8Eq7kvAy0 oeU9lAcAHZSbKO2XK+o5X3g4sg== -----END CERTIFICATE-----Generated at Mon Oct 20 17:49:22 2025 by rpki-client