$ rpki-client -vvf rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft File: CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft (raw, json) Hash identifier: lhIHn6sL8J/j4M1GKQFCvtkK21+eh1kSzO4PWr2ZY/k= Subject key identifier: 14:4F:9F:EE:1F:25:DE:50:13:A9:78:32:C0:1D:B6:27:32:E2:EF:A0 Authority key identifier: CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52 Certificate issuer: /CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752 Certificate serial: 3571FCD4C494B8F6175C22D2DBDFEE957AF2A7E3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer Subject info access: rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft Manifest number: CF Signing time: Tue 04 Nov 2025 16:48:49 +0000 Manifest this update: Tue 04 Nov 2025 16:43:49 +0000 Manifest next update: Wed 05 Nov 2025 19:00:49 +0000 Files and hashes: 1: 323830343a326565633a3a2f33322d3438203d3e20323634383631.roa (hash: Pmd2oHMVN3RO65spy8KBeP91n4F+2uJwEIYTdWohKkU=) 2: CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl (hash: nxyAZHC57236KVZYI7m53gWSRrOh6JxoHq3kfs80zUE=) 3: 3136382e3230352e35322e302f32322d3234203d3e20323634383631.roa (hash: sszuikLyJCfK/q7HZ7Bf5gDMhQQ8QEhvjEDczDvmx9s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:71:fc:d4:c4:94:b8:f6:17:5c:22:d2:db:df:ee:95:7a:f2:a7:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752 Validity Not Before: Nov 4 16:43:49 2025 GMT Not After : Nov 5 19:00:49 2025 GMT Subject: CN=144F9FEE1F25DE5013A97832C01DB62732E2EFA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:dd:f0:7d:61:2b:65:04:3e:1b:f2:34:97: 30:a1:82:de:40:57:ef:b4:fd:d5:b6:5b:99:96:a0: 05:a6:33:0d:ae:37:2f:87:d8:d8:e5:8b:3d:f0:1e: 1f:81:1e:b7:71:a2:2a:5c:c2:ed:6c:49:74:ca:e7: 94:fc:bd:b5:a2:09:37:be:7e:57:7d:7b:5f:28:39: d7:09:91:9a:96:e0:10:7c:4c:c6:16:52:30:3d:7d: 01:b8:4e:9d:6c:cf:8b:e5:69:75:d2:12:14:d0:39: 16:9e:d9:c0:b4:81:39:3c:18:68:78:11:a4:b4:ee: 04:e5:a5:c3:b7:be:86:fc:b8:83:04:5b:ea:f1:a3: e8:04:fb:3b:b6:97:e9:77:60:48:bf:7b:45:c9:5e: c1:c2:07:2e:bb:8b:6a:77:58:92:f6:7d:b9:b0:54: 3e:cf:1a:14:f4:88:7f:9f:29:da:3f:6e:d6:ca:8a: a8:0d:21:2f:c3:91:a4:03:29:ad:83:ea:72:d8:f0: 5e:ef:a9:0d:b1:b8:78:52:87:9d:2d:d7:22:ca:80: 3e:19:09:35:44:88:d1:fe:ad:5f:b7:10:ee:01:99: d4:79:41:c6:ad:94:46:71:68:6c:c6:0f:ca:78:dc: a7:95:e6:2d:68:bb:55:55:4b:30:eb:58:c1:f6:90: f7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4F:9F:EE:1F:25:DE:50:13:A9:78:32:C0:1D:B6:27:32:E2:EF:A0 X509v3 Authority Key Identifier: keyid:CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:79:d1:3d:8c:88:9b:3d:a6:a5:85:53:d9:ee:e0:c1:dc:9a: 42:14:c1:3f:65:58:ae:e7:3e:46:0e:3c:90:0a:ed:09:7d:86: a1:7c:76:d0:93:39:1e:56:11:77:63:96:b3:a5:cc:1f:3e:ca: 83:fa:2f:dd:b0:25:cb:ea:8d:98:de:b7:a0:b9:0c:da:bf:98: 2d:3c:88:98:4e:dd:80:73:2c:a6:a2:b0:73:e7:ae:e2:b3:c9: b4:dd:34:17:32:e3:4f:03:6d:06:5a:a3:f2:63:60:bb:55:b1: 6e:4a:ad:06:d6:79:93:e9:73:01:1f:e5:46:7f:3f:56:88:0d: df:54:26:06:95:81:a6:a8:ce:bc:db:5b:bf:0a:22:6b:da:a7: 8e:8b:88:26:be:3b:5b:01:d1:0f:62:47:09:40:2a:07:37:82: 48:68:a2:6e:68:be:12:c0:48:e0:c4:cb:fd:06:df:1e:15:0b: 61:16:ed:e2:31:88:4f:3a:b4:30:b2:08:9a:70:70:7a:8f:bc: 9e:ba:94:1f:1a:cc:17:bb:d5:66:b6:51:82:74:4e:6a:ca:88: 3c:0a:07:06:da:d2:51:91:a9:7c:6d:bb:63:d7:02:f3:9b:07: f3:bf:10:d2:af:df:d0:d9:82:ca:be:3d:0a:17:98:39:87:1c: 1b:f7:e3:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNXH81MSUuPYXXCLS29/ulXryp+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZDODg2RUM0RDlGMkM0QTMxRUU1M0FDMTU3MTRCRDRF NzAyODc1MjAeFw0yNTExMDQxNjQzNDlaFw0yNTExMDUxOTAwNDlaMDMxMTAvBgNV BAMTKDE0NEY5RkVFMUYyNURFNTAxM0E5NzgzMkMwMURCNjI3MzJFMkVGQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0w93wfWErZQQ+G/I0lzChgt5A V++0/dW2W5mWoAWmMw2uNy+H2Njliz3wHh+BHrdxoipcwu1sSXTK55T8vbWiCTe+ fld9e18oOdcJkZqW4BB8TMYWUjA9fQG4Tp1sz4vlaXXSEhTQORae2cC0gTk8GGh4 EaS07gTlpcO3vob8uIMEW+rxo+gE+zu2l+l3YEi/e0XJXsHCBy67i2p3WJL2fbmw VD7PGhT0iH+fKdo/btbKiqgNIS/DkaQDKa2D6nLY8F7vqQ2xuHhSh50t1yLKgD4Z CTVEiNH+rV+3EO4BmdR5QcatlEZxaGzGD8p43KeV5i1ou1VVSzDrWMH2kPdrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFE+f7h8l3lATqXgywB22JzLi76AwHwYDVR0j BBgwFoAUz8iG7E2fLEox7lOsFXFL1OcCh1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUJ0b2F0UDY4RWRKeWd0U1hobUdKNUFQSFJ0czlYNDVETUdKSlNZV2Q4 U0wvMC9DRkM4ODZFQzREOUYyQzRBMzFFRTUzQUMxNTcxNEJENEU3MDI4NzUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGQzg4NkVDNEQ5RjJDNEEz MUVFNTNBQzE1NzE0QkQ0RTcwMjg3NTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUJ0b2F0UDY4RWRKeWd0U1hobUdKNUFQSFJ0czlYNDVETUdKSlNZV2Q4U0wvMC9D RkM4ODZFQzREOUYyQzRBMzFFRTUzQUMxNTcxNEJENEU3MDI4NzUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADHnRPYyImz2mpYVT2e7gwdyaQhTBP2VYruc+Rg48kArtCX2GoXx20JM5HlYR d2OWs6XMHz7Kg/ov3bAly+qNmN63oLkM2r+YLTyImE7dgHMspqKwc+eu4rPJtN00 FzLjTwNtBlqj8mNgu1WxbkqtBtZ5k+lzAR/lRn8/VogN31QmBpWBpqjOvNtbvwoi a9qnjouIJr47WwHRD2JHCUAqBzeCSGiibmi+EsBI4MTL/QbfHhULYRbt4jGITzq0 MLIImnBweo+8nrqUHxrMF7vVZrZRgnROasqIPAoHBtrSUZGpfG27Y9cC85sH878Q 0q/f0NmCyr49CheYOYccG/fjFA== -----END CERTIFICATE-----Generated at Wed Nov 5 04:55:17 2025 by rpki-client