$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft File: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft (raw, json) Hash identifier: XsmXJqUrwfEhG+ojxDfZVNXpobLhUfSbgUHwUAZR5rc= Subject key identifier: 1D:45:16:D8:D7:91:D7:33:D9:96:AA:36:3C:39:E8:FB:CF:B4:85:82 Authority key identifier: CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 Certificate issuer: /CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Certificate serial: 5227D4E629B8A7BFAE19EBE1A5C02322D1046676 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject info access: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft Manifest number: 0306 Signing time: Tue 04 Nov 2025 14:14:38 +0000 Manifest this update: Tue 04 Nov 2025 14:09:38 +0000 Manifest next update: Wed 05 Nov 2025 14:51:38 +0000 Files and hashes: 1: 34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa (hash: gE/DdB9YOblUsoK0HG9wnPd3YKHH2DbykTyw5B7/wBQ=) 2: 323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (hash: JKjEt0hETRYlcDbmWQLZvhZ9xRQwxepiQuRghmhAfoA=) 3: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl (hash: pwa1AmXKRQpyY8uekhwY3+PQuM5YCer85XKcPGYmV6A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:27:d4:e6:29:b8:a7:bf:ae:19:eb:e1:a5:c0:23:22:d1:04:66:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Validity Not Before: Nov 4 14:09:38 2025 GMT Not After : Nov 5 14:51:38 2025 GMT Subject: CN=1D4516D8D791D733D996AA363C39E8FBCFB48582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8d:36:dc:09:e6:c9:86:bc:ce:05:c7:80:2d: 09:2c:48:d8:42:3b:17:95:65:db:cb:3d:75:44:ae: 43:e9:34:ea:c0:40:8f:64:3f:23:7c:62:47:a5:45: 72:d9:e1:04:b6:4c:47:3a:84:ba:f7:9f:ee:26:e1: 7f:71:91:84:ae:e7:f2:af:da:8b:ae:73:93:76:0d: 52:b2:1c:f8:aa:7e:2c:02:4a:30:12:4d:2e:cf:6d: ab:76:c3:c2:4c:a7:90:09:cd:a1:3a:2d:d1:f5:e7: 00:c2:c4:58:4e:fa:92:83:3f:d1:08:1d:3d:af:b5: 83:e7:3f:0c:74:64:a1:b0:a4:00:b2:8e:30:0c:bc: 97:71:ec:5f:58:dc:fa:d4:4b:55:cf:21:d6:59:2c: 7a:3e:35:2a:4f:c9:98:56:1a:99:62:58:5c:98:50: 75:23:b1:7b:3e:72:93:fc:01:6b:de:92:86:04:2f: d8:32:75:55:96:82:97:0e:ac:85:75:20:23:55:5e: e2:04:dd:cc:83:bd:ce:0b:a8:64:42:41:e3:1d:0a: 17:7c:9f:63:a4:cf:a8:6d:9a:33:09:91:ea:9a:d4: de:10:84:85:9c:c4:05:5a:4f:61:ce:43:59:cc:cd: bc:ee:41:cb:f4:8c:5b:78:9d:d8:81:d4:e9:b5:eb: cf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:45:16:D8:D7:91:D7:33:D9:96:AA:36:3C:39:E8:FB:CF:B4:85:82 X509v3 Authority Key Identifier: keyid:CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:45:2a:37:22:46:20:40:88:98:88:22:09:bf:8a:2b:41:a2: 08:f2:60:34:49:c5:0c:ba:ac:30:72:07:80:71:9b:9e:fa:1a: 66:f4:5d:20:7e:01:81:51:2e:f7:17:5d:22:7c:56:dc:31:e7: 52:60:07:1d:5c:88:39:cc:93:db:6a:ab:35:ca:7b:0e:87:16: 7a:be:c5:b0:da:4f:2f:24:73:1d:c0:88:38:98:a3:2e:72:db: 69:52:f7:c0:4e:c3:d3:55:93:dc:dd:99:d4:4a:0f:ed:68:e1: fd:e1:cc:34:33:10:aa:79:11:4f:c3:bb:30:55:cc:25:86:55: 10:cb:54:4c:e1:97:2a:c5:2a:01:ae:92:f8:a1:45:17:89:d3: 05:c7:d4:8b:28:cb:5e:c9:10:c0:c1:a3:8b:61:af:77:87:fa: 4d:db:e9:9e:b7:7b:94:54:03:a5:81:6c:fd:bc:34:cf:9c:ac: ba:a6:81:37:99:df:56:93:21:65:95:b1:9e:ee:9c:7a:13:c5: 37:76:f6:86:bb:7a:92:a4:c8:b5:af:02:5a:3b:1e:1d:69:98: f9:ce:90:ae:7e:63:7d:28:b2:c8:de:d9:a6:d2:63:e9:bb:27: ea:25:9f:f0:f8:65:61:7f:98:65:55:ca:b6:82:18:20:ef:dc: d0:0c:82:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUifU5im4p7+uGevhpcAjItEEZnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQzNEMzg5RUU2QkFCN0NDRDVGNjYwRDYzMEE4QkU4 RTFBRTA1MzAeFw0yNTExMDQxNDA5MzhaFw0yNTExMDUxNDUxMzhaMDMxMTAvBgNV BAMTKDFENDUxNkQ4RDc5MUQ3MzNEOTk2QUEzNjNDMzlFOEZCQ0ZCNDg1ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCojTbcCebJhrzOBceALQksSNhC OxeVZdvLPXVErkPpNOrAQI9kPyN8YkelRXLZ4QS2TEc6hLr3n+4m4X9xkYSu5/Kv 2ouuc5N2DVKyHPiqfiwCSjASTS7Pbat2w8JMp5AJzaE6LdH15wDCxFhO+pKDP9EI HT2vtYPnPwx0ZKGwpACyjjAMvJdx7F9Y3PrUS1XPIdZZLHo+NSpPyZhWGpliWFyY UHUjsXs+cpP8AWvekoYEL9gydVWWgpcOrIV1ICNVXuIE3cyDvc4LqGRCQeMdChd8 n2Okz6htmjMJkeqa1N4QhIWcxAVaT2HOQ1nMzbzuQcv0jFt4ndiB1Om168+7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHUUW2NeR1zPZlqo2PDno+8+0hYIwHwYDVR0j BBgwFoAUz/w9OJ7murfM1fZg1jCovo4a4FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5 RFcvMS9DRkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRkMzRDM4OUVFNkJBQjdD Q0Q1RjY2MEQ2MzBBOEJFOEUxQUUwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5RFcvMS9D RkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzEUqNyJGIECImIgiCb+KK0GiCPJgNEnFDLqsMHIHgHGbnvoaZvRdIH4BgVEu 9xddInxW3DHnUmAHHVyIOcyT22qrNcp7DocWer7FsNpPLyRzHcCIOJijLnLbaVL3 wE7D01WT3N2Z1EoP7Wjh/eHMNDMQqnkRT8O7MFXMJYZVEMtUTOGXKsUqAa6S+KFF F4nTBcfUiyjLXskQwMGji2Gvd4f6Tdvpnrd7lFQDpYFs/bw0z5ysuqaBN5nfVpMh ZZWxnu6cehPFN3b2hrt6kqTIta8CWjseHWmY+c6Qrn5jfSiyyN7ZptJj6bsn6iWf 8PhlYX+YZVXKtoIYIO/c0AyCpw== -----END CERTIFICATE-----Generated at Wed Nov 5 03:19:43 2025 by rpki-client