$ rpki-client -vvf rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft File: CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft (raw, json) Hash identifier: wvfL1D9qB1dqFsDwZmkakH5X3QCebKFwrZdxQzj6PQ8= Subject key identifier: 70:8F:01:B2:CC:B8:E6:46:C0:62:A2:A1:94:28:4C:B5:16:73:AA:C6 Authority key identifier: CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7 Certificate issuer: /CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7 Certificate serial: 755BBD33EE89B3E3391D67254FF80253AD4B9AB1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft Manifest number: 02FD Signing time: Tue 04 Nov 2025 11:24:01 +0000 Manifest this update: Tue 04 Nov 2025 11:19:01 +0000 Manifest next update: Wed 05 Nov 2025 11:31:01 +0000 Files and hashes: 1: 323830343a346136303a3a2f33322d3438203d3e20323637323336.roa (hash: mXVXROdrhx5zziqcEEeWD0Vzy58pLNqk9Cz+8buZybE=) 2: 34352e3233312e3130302e302f32322d3234203d3e20323637323336.roa (hash: t7wZjfHEHsD5Rmlff5gVkl4UrV8eQCO1lvq1c9DJVOw=) 3: CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl (hash: q5P+LM/vouNlvy5T1oDapJm66+iy16MHwtyCNh2RNLc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 11:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:5b:bd:33:ee:89:b3:e3:39:1d:67:25:4f:f8:02:53:ad:4b:9a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7 Validity Not Before: Nov 4 11:19:01 2025 GMT Not After : Nov 5 11:31:01 2025 GMT Subject: CN=708F01B2CCB8E646C062A2A194284CB51673AAC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:57:b7:77:6b:8f:b9:19:4f:7d:49:35:8f:bc: fa:94:99:0e:18:d7:a2:49:fc:7a:58:03:53:f0:96: 8a:b5:d1:32:8e:74:31:bf:9a:a5:40:e1:eb:8d:ee: cd:f4:9f:8f:6c:61:6c:78:f3:d1:81:4a:c6:4d:4b: 31:2c:38:7b:61:dc:1b:ce:c0:99:76:b9:25:14:59: d8:7f:8a:b4:c4:47:91:56:0f:b3:88:1a:6c:c5:db: 4b:24:a1:46:19:54:5d:f7:bc:50:e5:5e:5e:cc:14: 28:88:26:f0:78:3a:a9:03:40:2d:eb:3e:77:f7:6c: 98:76:d4:56:c1:9c:e7:b7:00:63:3a:61:ae:66:ab: 0c:84:9b:99:c0:f5:51:e2:e0:3b:16:a3:36:8e:7d: 0b:de:ce:8f:58:1f:51:24:a9:ba:23:3c:80:58:e7: c8:6b:ae:5e:20:1c:0a:3e:d7:56:69:fb:34:81:c4: da:7c:81:98:c3:81:6c:70:2d:24:48:2b:09:a6:d6: 50:5c:be:88:aa:2d:57:f3:4b:cc:f1:54:04:d9:cb: e6:28:15:73:dd:dc:5e:31:9c:b9:7e:33:cb:67:14: 1a:d9:7e:c5:8f:d2:2d:c3:81:cc:88:d5:c9:ce:a6: 3a:5d:8d:12:25:24:61:51:7e:60:dc:62:d6:73:aa: c8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8F:01:B2:CC:B8:E6:46:C0:62:A2:A1:94:28:4C:B5:16:73:AA:C6 X509v3 Authority Key Identifier: keyid:CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:72:44:6a:a7:22:77:47:1d:19:74:53:6f:b5:76:e3:13:17: d7:02:f1:7f:d8:60:7b:7e:70:62:c4:63:35:97:62:b2:4c:55: 72:85:2e:30:6d:df:3a:18:3d:70:61:22:6a:58:92:5c:fb:b3: 43:46:b4:23:c3:ef:5f:0f:65:2e:52:03:b1:ee:e7:25:27:4a: ce:0b:e2:c1:8f:59:6c:94:7e:9a:82:df:5e:83:1c:f7:ca:64: 7a:b5:40:f4:61:1a:be:76:1a:5d:be:17:c9:39:d3:45:e1:f8: e7:ec:1b:dd:d2:b5:1f:5c:0e:0a:3d:5a:38:d7:c3:cc:26:f1: e4:88:e4:06:94:80:78:6f:50:52:fe:c2:0d:dc:63:7e:54:23: a4:59:51:24:ce:92:19:1b:5f:2f:a8:d0:dd:2b:94:b7:57:96: b9:47:ef:65:82:e0:3a:68:84:8d:9d:aa:72:33:81:1f:c5:d1: f6:69:98:6a:5c:6e:c3:f3:54:76:88:ff:cd:53:09:48:7e:11: d0:c7:73:d1:d1:7b:c6:f6:88:0e:b4:d8:ed:b0:ae:37:1b:2c: 21:d9:f9:bc:60:75:57:18:6f:6d:8d:a6:c8:37:9a:ce:b3:c4: bc:15:c6:a9:70:87:76:78:5e:a6:89:6b:f8:9a:cb:4a:25:b3: e4:1b:91:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdVu9M+6Js+M5HWclT/gCU61LmrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NFRjJEM0VBNUJEMTg3QzQ1RUE2RDNBOEZBRjcxQ0Qx NUY3RDJBNzAeFw0yNTExMDQxMTE5MDFaFw0yNTExMDUxMTMxMDFaMDMxMTAvBgNV BAMTKDcwOEYwMUIyQ0NCOEU2NDZDMDYyQTJBMTk0Mjg0Q0I1MTY3M0FBQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmV7d3a4+5GU99STWPvPqUmQ4Y 16JJ/HpYA1Pwloq10TKOdDG/mqVA4euN7s30n49sYWx489GBSsZNSzEsOHth3BvO wJl2uSUUWdh/irTER5FWD7OIGmzF20skoUYZVF33vFDlXl7MFCiIJvB4OqkDQC3r Pnf3bJh21FbBnOe3AGM6Ya5mqwyEm5nA9VHi4DsWozaOfQvezo9YH1EkqbojPIBY 58hrrl4gHAo+11Zp+zSBxNp8gZjDgWxwLSRIKwmm1lBcvoiqLVfzS8zxVATZy+Yo FXPd3F4xnLl+M8tnFBrZfsWP0i3DgcyI1cnOpjpdjRIlJGFRfmDcYtZzqshtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcI8Bssy45kbAYqKhlChMtRZzqsYwHwYDVR0j BBgwFoAUzO8tPqW9GHxF6m06j69xzRX30qcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1wcHdiUWpFclp6ZENDd2R4eDVLbjdXR0tWeGNrUlJzNW05OWFtcGM1 WDYvMS9DQ0VGMkQzRUE1QkQxODdDNDVFQTZEM0E4RkFGNzFDRDE1RjdEMkE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDRUYyRDNFQTVCRDE4N0M0 NUVBNkQzQThGQUY3MUNEMTVGN0QyQTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1wcHdiUWpFclp6ZENDd2R4eDVLbjdXR0tWeGNrUlJzNW05OWFtcGM1WDYvMS9D Q0VGMkQzRUE1QkQxODdDNDVFQTZEM0E4RkFGNzFDRDE1RjdEMkE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV3JEaqcid0cdGXRTb7V24xMX1wLxf9hge35wYsRjNZdiskxVcoUuMG3fOhg9 cGEialiSXPuzQ0a0I8PvXw9lLlIDse7nJSdKzgviwY9ZbJR+moLfXoMc98pkerVA 9GEavnYaXb4XyTnTReH45+wb3dK1H1wOCj1aONfDzCbx5IjkBpSAeG9QUv7CDdxj flQjpFlRJM6SGRtfL6jQ3SuUt1eWuUfvZYLgOmiEjZ2qcjOBH8XR9mmYalxuw/NU doj/zVMJSH4R0Mdz0dF7xvaIDrTY7bCuNxssIdn5vGB1VxhvbY2myDeazrPEvBXG qXCHdnhepolr+JrLSiWz5BuRDA== -----END CERTIFICATE-----Generated at Wed Nov 5 03:17:15 2025 by rpki-client