$ rpki-client -vvf rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/2/CF15C8D7D516810DCF3125064D7826895FDF86CE.mft File: CF15C8D7D516810DCF3125064D7826895FDF86CE.mft (raw, json) Hash identifier: ON3jh7jyZor6l8WzJZbsX8j24DjXIlz1IsVc9y1j86E= Subject key identifier: DF:BB:B6:1B:8D:F8:BC:5F:08:D1:AF:A8:51:05:2B:C5:4A:11:60:AA Authority key identifier: CF:15:C8:D7:D5:16:81:0D:CF:31:25:06:4D:78:26:89:5F:DF:86:CE Certificate issuer: /CN=CF15C8D7D516810DCF3125064D7826895FDF86CE Certificate serial: 6A0102DA7B7029DA2C64A55E6233BA833EB0705C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15C8D7D516810DCF3125064D7826895FDF86CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/2/CF15C8D7D516810DCF3125064D7826895FDF86CE.mft Manifest number: 02F0 Signing time: Mon 20 Oct 2025 03:19:49 +0000 Manifest this update: Mon 20 Oct 2025 03:14:49 +0000 Manifest next update: Tue 21 Oct 2025 07:13:49 +0000 Files and hashes: 1: 323830343a333230303a3a2f33322d3334203d3e20323635303530.roa (hash: q2IwcgnrbosIAf2+IlnmGTqVlNma5YNsNpHbfRWkML4=) 2: CF15C8D7D516810DCF3125064D7826895FDF86CE.crl (hash: n168n2nO6cFnsjKZU3zxW9NvqWFbP5NocXMr9PzbgsM=) 3: 3137302e3135302e3232302e302f32322d3234203d3e20323635303530.roa (hash: dBz0704nfNIxV/X35A1lBAqCLc3dG3RDfh5SmUakuvc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/2/CF15C8D7D516810DCF3125064D7826895FDF86CE.crl rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/2/CF15C8D7D516810DCF3125064D7826895FDF86CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15C8D7D516810DCF3125064D7826895FDF86CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:01:02:da:7b:70:29:da:2c:64:a5:5e:62:33:ba:83:3e:b0:70:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF15C8D7D516810DCF3125064D7826895FDF86CE Validity Not Before: Oct 20 03:14:49 2025 GMT Not After : Oct 21 07:13:49 2025 GMT Subject: CN=DFBBB61B8DF8BC5F08D1AFA851052BC54A1160AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:08:4c:0c:2e:eb:14:4f:e6:37:7f:5b:a4: d3:18:da:ce:ad:54:73:41:77:cc:2b:c6:c7:a4:aa: 2f:7d:65:ff:52:28:f9:ee:70:4c:e4:7a:23:b0:3e: 2b:85:4e:d8:79:3c:3b:ed:45:76:22:1f:45:48:f1: 05:fb:4e:7c:d8:a9:28:33:c5:23:d5:03:52:7b:d2: 1a:4b:0b:b8:2e:ea:e7:64:43:da:2c:54:89:b4:f3: 45:07:07:19:25:14:7f:b2:22:4e:b4:de:1f:46:6d: cf:80:ea:2d:7b:7f:13:ee:c2:95:7d:c4:7d:67:d9: c7:b2:58:e6:5f:3c:cb:3f:3d:bf:00:48:30:10:0b: c4:fa:9b:a6:a2:33:c2:1d:88:4c:75:68:aa:b0:a9: 30:a0:26:45:dc:79:d3:39:c8:03:31:c6:79:57:33: 59:d9:ca:4b:d2:36:29:a4:98:0f:01:4c:55:fb:66: f4:15:d0:18:d4:5b:c0:95:8c:fe:20:3f:1e:b1:8a: 8c:82:47:06:52:bd:43:07:a5:bf:eb:35:b4:6c:8e: 60:0c:85:5c:23:0c:b3:66:3d:4c:ed:01:58:69:78: b1:a7:85:6c:0f:16:9f:97:bf:5c:ba:78:0f:05:35: 7c:cf:e5:5f:64:39:5a:fe:fa:ab:bd:b0:8b:1e:f0: ba:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BB:B6:1B:8D:F8:BC:5F:08:D1:AF:A8:51:05:2B:C5:4A:11:60:AA X509v3 Authority Key Identifier: keyid:CF:15:C8:D7:D5:16:81:0D:CF:31:25:06:4D:78:26:89:5F:DF:86:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/2/CF15C8D7D516810DCF3125064D7826895FDF86CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15C8D7D516810DCF3125064D7826895FDF86CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/2/CF15C8D7D516810DCF3125064D7826895FDF86CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:44:49:ac:6c:2b:7f:11:57:e4:a5:2e:3d:97:85:b5:c9:83: 3a:3e:a2:b1:ba:71:5b:0c:8a:d9:ae:a1:93:0a:bd:85:b7:58: fb:69:9a:0f:15:1a:d1:4e:3a:b3:a8:b7:8b:b4:fb:40:d3:aa: d3:53:22:a2:bc:28:3b:b3:01:68:a8:6e:cc:51:de:62:3e:14: 41:5c:2e:f4:37:17:01:8c:ce:bf:db:77:a7:95:ed:64:d9:47: e5:c8:d5:e5:44:d3:83:36:cd:89:c4:ed:70:1e:56:1e:30:5b: ee:a3:18:5c:b9:77:7a:0d:09:55:a8:83:b2:21:a4:cf:70:ed: e7:93:7e:85:65:fb:2e:64:23:59:73:55:44:d8:12:72:6c:67: d2:fc:29:4d:b8:d4:c8:d2:bc:54:00:9a:bc:af:c0:08:1e:8f: d3:4d:2e:89:9a:2b:2d:f0:c7:1b:ad:bd:dc:60:36:78:be:28: cd:a6:03:bf:41:ac:92:ac:c2:b5:5b:62:78:a3:c3:6b:05:e3: b5:91:f7:89:18:91:b1:35:b5:b4:a9:08:74:5a:03:d9:e3:58: fb:d0:52:3a:30:27:d9:8a:ba:09:4c:f2:51:65:1a:81:53:c5: 06:48:6e:b3:31:a2:5b:04:81:2d:5f:df:d3:73:2e:67:bd:4f: 86:06:33:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUagEC2ntwKdosZKVeYjO6gz6wcFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YxNUM4RDdENTE2ODEwRENGMzEyNTA2NEQ3ODI2ODk1 RkRGODZDRTAeFw0yNTEwMjAwMzE0NDlaFw0yNTEwMjEwNzEzNDlaMDMxMTAvBgNV BAMTKERGQkJCNjFCOERGOEJDNUYwOEQxQUZBODUxMDUyQkM1NEExMTYwQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvaghMDC7rFE/mN39bpNMY2s6t VHNBd8wrxsekqi99Zf9SKPnucEzkeiOwPiuFTth5PDvtRXYiH0VI8QX7TnzYqSgz xSPVA1J70hpLC7gu6udkQ9osVIm080UHBxklFH+yIk603h9Gbc+A6i17fxPuwpV9 xH1n2ceyWOZfPMs/Pb8ASDAQC8T6m6aiM8IdiEx1aKqwqTCgJkXcedM5yAMxxnlX M1nZykvSNimkmA8BTFX7ZvQV0BjUW8CVjP4gPx6xioyCRwZSvUMHpb/rNbRsjmAM hVwjDLNmPUztAVhpeLGnhWwPFp+Xv1y6eA8FNXzP5V9kOVr++qu9sIse8Lr3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU37u2G434vF8I0a+oUQUrxUoRYKowHwYDVR0j BBgwFoAUzxXI19UWgQ3PMSUGTXgmiV/fhs4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR205bnFXMjFFVnNmeWJVSFNvYldwTExDRUcxSzRQS1N6SndRRjNwZHJ1 dDcvMi9DRjE1QzhEN0Q1MTY4MTBEQ0YzMTI1MDY0RDc4MjY4OTVGREY4NkNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTVDOEQ3RDUxNjgxMERD RjMxMjUwNjRENzgyNjg5NUZERjg2Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R205bnFXMjFFVnNmeWJVSFNvYldwTExDRUcxSzRQS1N6SndRRjNwZHJ1dDcvMi9D RjE1QzhEN0Q1MTY4MTBEQ0YzMTI1MDY0RDc4MjY4OTVGREY4NkNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWkRJrGwrfxFX5KUuPZeFtcmDOj6isbpxWwyK2a6hkwq9hbdY+2maDxUa0U46 s6i3i7T7QNOq01MiorwoO7MBaKhuzFHeYj4UQVwu9DcXAYzOv9t3p5XtZNlH5cjV 5UTTgzbNicTtcB5WHjBb7qMYXLl3eg0JVaiDsiGkz3Dt55N+hWX7LmQjWXNVRNgS cmxn0vwpTbjUyNK8VACavK/ACB6P000uiZorLfDHG6293GA2eL4ozaYDv0GskqzC tVtieKPDawXjtZH3iRiRsTW1tKkIdFoD2eNY+9BSOjAn2Yq6CUzyUWUagVPFBkhu szGiWwSBLV/f03MuZ71PhgYzzA== -----END CERTIFICATE-----Generated at Mon Oct 20 15:20:24 2025 by rpki-client