$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft File: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft (raw, json) Hash identifier: CTDn5dFo9cIQPTBasvirmZzrSIRUyIkf4JiqOUmZ+cU= Subject key identifier: 25:EF:B3:1A:EF:6E:4A:63:5A:25:42:6D:C9:08:1A:02:6E:5F:57:46 Authority key identifier: CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 Certificate issuer: /CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Certificate serial: 54C529298EB8F26F7907881ABC4AFCEF9693EB82 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject info access: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft Manifest number: 0290 Signing time: Fri 08 Aug 2025 01:30:42 +0000 Manifest this update: Fri 08 Aug 2025 01:25:42 +0000 Manifest next update: Sat 09 Aug 2025 02:47:42 +0000 Files and hashes: 1: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl (hash: G8X83ACduoc/zqcpru+BrhWnLRMc17HEuI9vgngCVWE=) 2: 323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (hash: JKjEt0hETRYlcDbmWQLZvhZ9xRQwxepiQuRghmhAfoA=) 3: 34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa (hash: gE/DdB9YOblUsoK0HG9wnPd3YKHH2DbykTyw5B7/wBQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 02:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:c5:29:29:8e:b8:f2:6f:79:07:88:1a:bc:4a:fc:ef:96:93:eb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Validity Not Before: Aug 8 01:25:42 2025 GMT Not After : Aug 9 02:47:42 2025 GMT Subject: CN=25EFB31AEF6E4A635A25426DC9081A026E5F5746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:63:cc:fe:e2:1b:8b:7a:38:0a:c5:c2:b6:8e: c9:c7:ed:e4:c0:e7:44:37:7f:f3:c0:80:af:03:95: be:1a:b1:cc:3d:a4:0e:04:75:0b:0f:2b:9b:d2:91: ac:d0:ef:c4:91:fb:97:94:5f:15:79:67:77:28:3f: 28:a9:72:4a:a0:f5:b0:8f:f6:95:a8:a5:75:79:93: 79:1e:f2:39:b9:48:19:fd:0f:fb:a1:12:28:a9:27: 8f:dc:81:c0:d7:7e:86:d4:20:30:c8:94:b9:e0:4a: 3b:95:26:b0:0c:14:3f:0e:19:91:24:48:1d:f1:af: 25:5f:5a:84:ea:f3:03:3c:30:b6:a0:e8:c7:e1:2c: ea:d1:d3:60:8b:f1:15:08:4f:aa:27:b0:83:34:28: ee:4a:9f:68:b4:76:c5:b3:b4:be:c4:25:3b:c6:86: 53:35:38:a7:46:af:02:5d:ae:bb:7d:e7:01:36:91: e7:e3:16:f1:cc:e5:41:d0:98:9d:cc:d8:00:68:2d: 3a:69:ab:67:f8:f6:b3:4a:03:0f:c9:c4:84:60:b6: 00:07:6a:af:cc:66:9d:dc:7e:4e:3e:eb:79:f5:b1: 11:01:33:3b:59:5c:da:49:aa:c5:1f:f1:4f:a2:5a: b0:96:2e:d4:e3:ef:36:89:e7:05:c5:c4:1d:1e:9c: 3a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EF:B3:1A:EF:6E:4A:63:5A:25:42:6D:C9:08:1A:02:6E:5F:57:46 X509v3 Authority Key Identifier: keyid:CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:64:f9:7c:39:c4:f0:77:34:9e:5b:00:f5:5d:54:22:66:1c: 95:d0:c4:c2:e5:5f:a5:2d:46:02:1b:dc:bf:eb:53:e9:44:9f: 53:2c:c7:15:80:f5:fe:de:c4:41:e2:ea:12:e2:dc:a4:93:20: 33:ee:ad:8e:54:53:89:59:0d:47:2b:17:0a:b3:77:bf:2e:c6: 6d:a7:83:a8:91:a5:ae:6a:b5:2e:b9:6d:5a:f8:6b:4f:41:c6: 7c:7e:25:a8:6e:a4:e4:42:06:3d:6f:02:ac:23:d0:07:a3:8b: cd:a1:01:83:43:4c:a7:a3:5a:0d:b4:52:b3:c0:d6:88:cb:23: e1:4a:50:c8:c8:6b:93:04:ed:f4:08:12:09:a4:99:9e:d2:fb: 10:b3:6e:b9:50:cd:b2:31:53:6a:7d:9c:e8:b2:1c:20:dc:c8: 64:67:48:03:8c:52:06:a3:19:05:05:ad:03:af:d6:c5:6a:5a: a2:19:77:bd:6b:5c:35:e2:fb:e8:1d:0f:be:17:0c:a3:b0:2c: ea:b0:00:07:f3:6f:9c:5a:b0:96:56:9f:19:e7:29:33:1e:24: ba:c0:e6:a8:81:60:56:ab:55:eb:55:1c:05:8b:9a:67:b0:3c: 6e:d0:f7:b4:8f:e6:1f:d3:7c:e1:fa:fa:55:7d:f6:f4:ea:f5: 02:0a:ec:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVMUpKY648m95B4gavEr875aT64IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQzNEMzg5RUU2QkFCN0NDRDVGNjYwRDYzMEE4QkU4 RTFBRTA1MzAeFw0yNTA4MDgwMTI1NDJaFw0yNTA4MDkwMjQ3NDJaMDMxMTAvBgNV BAMTKDI1RUZCMzFBRUY2RTRBNjM1QTI1NDI2REM5MDgxQTAyNkU1RjU3NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIY8z+4huLejgKxcK2jsnH7eTA 50Q3f/PAgK8Dlb4ascw9pA4EdQsPK5vSkazQ78SR+5eUXxV5Z3coPyipckqg9bCP 9pWopXV5k3ke8jm5SBn9D/uhEiipJ4/cgcDXfobUIDDIlLngSjuVJrAMFD8OGZEk SB3xryVfWoTq8wM8MLag6MfhLOrR02CL8RUIT6onsIM0KO5Kn2i0dsWztL7EJTvG hlM1OKdGrwJdrrt95wE2kefjFvHM5UHQmJ3M2ABoLTppq2f49rNKAw/JxIRgtgAH aq/MZp3cfk4+63n1sREBMztZXNpJqsUf8U+iWrCWLtTj7zaJ5wXFxB0enDpVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJe+zGu9uSmNaJUJtyQgaAm5fV0YwHwYDVR0j BBgwFoAUz/w9OJ7murfM1fZg1jCovo4a4FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5 RFcvMS9DRkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRkMzRDM4OUVFNkJBQjdD Q0Q1RjY2MEQ2MzBBOEJFOEUxQUUwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5RFcvMS9D RkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzmT5fDnE8Hc0nlsA9V1UImYcldDEwuVfpS1GAhvcv+tT6USfUyzHFYD1/t7E QeLqEuLcpJMgM+6tjlRTiVkNRysXCrN3vy7GbaeDqJGlrmq1LrltWvhrT0HGfH4l qG6k5EIGPW8CrCPQB6OLzaEBg0NMp6NaDbRSs8DWiMsj4UpQyMhrkwTt9AgSCaSZ ntL7ELNuuVDNsjFTan2c6LIcINzIZGdIA4xSBqMZBQWtA6/WxWpaohl3vWtcNeL7 6B0PvhcMo7As6rAAB/NvnFqwllafGecpMx4kusDmqIFgVqtV61UcBYuaZ7A8btD3 tI/mH9N84fr6VX329Or1Agrs/A== -----END CERTIFICATE-----Generated at Fri Aug 8 10:19:44 2025 by rpki-client