$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft File: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft (raw, json) Hash identifier: 0MCJpnHs4EYmBKJ6zID9YmGgjNzDADskLGZCmB7LjRA= Subject key identifier: 2D:54:02:15:62:89:53:76:C4:EA:00:70:4A:0F:68:64:36:1A:76:53 Authority key identifier: CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 Certificate issuer: /CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Certificate serial: 1482B1C5C6EFA882A73007226821214DF766F96E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject info access: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft Manifest number: 024E Signing time: Wed 18 Jun 2025 22:57:20 +0000 Manifest this update: Wed 18 Jun 2025 22:52:20 +0000 Manifest next update: Fri 20 Jun 2025 00:16:20 +0000 Files and hashes: 1: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl (hash: 3OeqJ14V3cl2wzZXiLnRgHlEr6GgHyDrze/bw38ZJoI=) 2: 34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa (hash: gE/DdB9YOblUsoK0HG9wnPd3YKHH2DbykTyw5B7/wBQ=) 3: 323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (hash: JKjEt0hETRYlcDbmWQLZvhZ9xRQwxepiQuRghmhAfoA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 00:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:82:b1:c5:c6:ef:a8:82:a7:30:07:22:68:21:21:4d:f7:66:f9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Validity Not Before: Jun 18 22:52:20 2025 GMT Not After : Jun 20 00:16:20 2025 GMT Subject: CN=2D54021562895376C4EA00704A0F6864361A7653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4b:53:b5:dc:78:99:af:b5:af:cb:7c:15:5f: f5:b2:56:50:dc:54:a3:ad:62:ce:ea:38:b6:c5:d5: ab:62:74:4d:f2:c6:ae:ac:84:91:6a:de:9f:9f:98: 4f:50:ed:ec:d2:6b:31:58:b8:01:59:bd:87:ba:93: 1e:6b:4a:c3:85:e5:59:19:b7:6d:55:77:d4:8a:b8: 93:bb:4c:81:c0:28:28:d5:ef:3e:84:5c:12:95:40: d6:bd:7f:9d:ae:e2:2d:c2:3e:7b:e7:72:80:c2:0a: f9:19:b7:09:80:5a:1b:3f:f6:53:b1:7a:e0:55:76: 4c:20:d0:cc:bf:1c:75:50:3d:7c:b1:db:a4:f6:ae: 98:9d:8b:3d:e2:36:55:df:16:b2:8a:3b:d6:7c:b1: 97:a9:4c:0f:b7:c1:d6:a6:25:f8:94:0e:e1:12:0d: f5:31:03:f7:28:15:95:dd:a9:77:3a:9e:57:d0:48: 5b:cb:6d:52:30:21:06:20:ae:15:ff:d8:d4:d5:eb: db:ad:18:5c:ec:a3:ee:53:6b:be:6b:55:26:28:fc: 0a:7a:e4:46:b9:ba:d5:ee:80:b1:a1:9d:08:65:4d: 14:24:9b:4d:26:c5:03:68:41:9f:9c:e6:21:83:b6: 71:bc:c6:d4:d7:bc:70:b0:9b:39:03:4d:15:34:1f: 56:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:54:02:15:62:89:53:76:C4:EA:00:70:4A:0F:68:64:36:1A:76:53 X509v3 Authority Key Identifier: keyid:CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:54:2e:55:0b:6e:b7:23:4e:3e:e8:02:4b:82:30:76:5a:ca: 59:d6:9e:00:de:fa:d4:06:e4:dd:60:db:66:ce:a5:89:29:44: 50:da:4e:60:2e:4a:82:87:63:e7:c3:5d:e9:64:60:64:95:df: 7a:19:6a:43:50:c4:18:52:55:67:2d:80:2a:6a:3d:61:ec:78: 69:65:b7:5c:3a:33:a5:15:32:79:9e:0f:14:c7:17:48:1d:b1: bc:ad:9e:57:28:08:5b:8f:c4:cd:5d:fa:24:4a:82:e2:b9:5b: 49:7e:fe:8e:36:3e:18:4d:10:58:0d:84:62:cf:3b:ed:a1:f6: 35:ce:18:76:0f:a9:20:e6:9d:22:7a:c1:4b:a6:57:7c:4e:47: 8e:c4:b1:4a:c5:87:cd:96:6e:ca:21:aa:a0:67:35:ee:82:7c: 14:0d:4f:5a:5b:17:1a:63:7b:ae:43:b8:cb:26:a8:fa:a3:fa: f9:21:9d:ae:52:b3:3b:f2:e7:2b:2f:ec:e0:dc:64:7f:85:03: e5:4b:f2:35:51:ec:0c:5b:d7:0f:e7:89:cf:73:21:45:cb:28: f2:22:d2:91:be:5b:e7:79:6c:4c:75:43:b4:d3:ce:9d:bb:64: 8c:70:44:52:1d:fa:c3:57:b7:41:de:28:05:f4:9b:26:93:57: e5:bd:df:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFIKxxcbvqIKnMAciaCEhTfdm+W4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQzNEMzg5RUU2QkFCN0NDRDVGNjYwRDYzMEE4QkU4 RTFBRTA1MzAeFw0yNTA2MTgyMjUyMjBaFw0yNTA2MjAwMDE2MjBaMDMxMTAvBgNV BAMTKDJENTQwMjE1NjI4OTUzNzZDNEVBMDA3MDRBMEY2ODY0MzYxQTc2NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOS1O13HiZr7Wvy3wVX/WyVlDc VKOtYs7qOLbF1atidE3yxq6shJFq3p+fmE9Q7ezSazFYuAFZvYe6kx5rSsOF5VkZ t21Vd9SKuJO7TIHAKCjV7z6EXBKVQNa9f52u4i3CPnvncoDCCvkZtwmAWhs/9lOx euBVdkwg0My/HHVQPXyx26T2rpidiz3iNlXfFrKKO9Z8sZepTA+3wdamJfiUDuES DfUxA/coFZXdqXc6nlfQSFvLbVIwIQYgrhX/2NTV69utGFzso+5Ta75rVSYo/Ap6 5Ea5utXugLGhnQhlTRQkm00mxQNoQZ+c5iGDtnG8xtTXvHCwmzkDTRU0H1Z5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULVQCFWKJU3bE6gBwSg9oZDYadlMwHwYDVR0j BBgwFoAUz/w9OJ7murfM1fZg1jCovo4a4FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5 RFcvMS9DRkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRkMzRDM4OUVFNkJBQjdD Q0Q1RjY2MEQ2MzBBOEJFOEUxQUUwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5RFcvMS9D RkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZlQuVQtutyNOPugCS4IwdlrKWdaeAN761Abk3WDbZs6liSlEUNpOYC5Kgodj 58Nd6WRgZJXfehlqQ1DEGFJVZy2AKmo9Yex4aWW3XDozpRUyeZ4PFMcXSB2xvK2e VygIW4/EzV36JEqC4rlbSX7+jjY+GE0QWA2EYs877aH2Nc4Ydg+pIOadInrBS6ZX fE5HjsSxSsWHzZZuyiGqoGc17oJ8FA1PWlsXGmN7rkO4yyao+qP6+SGdrlKzO/Ln Ky/s4Nxkf4UD5UvyNVHsDFvXD+eJz3MhRcso8iLSkb5b53lsTHVDtNPOnbtkjHBE Uh36w1e3Qd4oBfSbJpNX5b3fPQ== -----END CERTIFICATE-----Generated at Thu Jun 19 09:21:10 2025 by rpki-client