$ rpki-client -vvf rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft File: CFF957416ABC451AD3955260CF69F31756051BD6.mft (raw, json) Hash identifier: MuySMoLW6uVsV6bcXumbmGE3jHAMpiH+nqVkMjeGteI= Subject key identifier: D3:10:7D:94:01:61:8B:A4:51:99:96:FC:67:68:FB:DF:6A:EB:1E:EE Authority key identifier: CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6 Certificate issuer: /CN=CFF957416ABC451AD3955260CF69F31756051BD6 Certificate serial: 1C3C8213CA05A881B0C8770B8F51CC6ED83355CD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer Subject info access: rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft Manifest number: 01DD Signing time: Tue 17 Jun 2025 23:15:43 +0000 Manifest this update: Tue 17 Jun 2025 23:10:43 +0000 Manifest next update: Thu 19 Jun 2025 01:13:43 +0000 Files and hashes: 1: CFF957416ABC451AD3955260CF69F31756051BD6.crl (hash: 2/C8Czy9dtAUuMgY06v9Gnn4zFiuE10Vj4/5ziDA7Ok=) 2: 323830343a333937633a3a2f33322d3336203d3e203532353932.roa (hash: iFqIUtZ1VqOyUi9m1LdeA4diADH3tVwavREvtpL5Ng8=) 3: 3137372e38372e39322e302f32322d3234203d3e203532353932.roa (hash: P5NQ1X7a5/OWP9HCAuVjTa6sRlB4EGzVBG3V/7t0LkI=) 4: 3137302e3234372e36342e302f32322d3234203d3e203532353932.roa (hash: 8fyLTweS0k9O7hpJEh3lgr+BITcPp0nzYZvIMf2Fce4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.crl rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 01:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3c:82:13:ca:05:a8:81:b0:c8:77:0b:8f:51:cc:6e:d8:33:55:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFF957416ABC451AD3955260CF69F31756051BD6 Validity Not Before: Jun 17 23:10:43 2025 GMT Not After : Jun 19 01:13:43 2025 GMT Subject: CN=D3107D9401618BA4519996FC6768FBDF6AEB1EEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3c:16:58:87:2f:9f:8c:23:14:99:1b:4d:61: aa:3d:ee:6c:9c:0e:03:82:fd:11:d6:6d:16:8f:a7: a3:05:bc:cf:66:fa:b2:ec:73:fc:7d:ee:b8:d8:bf: 40:c3:84:81:aa:08:88:1f:86:1e:b2:d2:cb:91:7d: 3b:83:55:21:e9:d6:a6:99:94:b2:fa:0d:da:92:f4: c0:de:ec:42:44:68:f2:59:07:7d:76:c8:4e:6b:3d: b3:35:2c:39:dc:c5:44:81:27:12:23:49:c7:43:ae: 18:7d:b5:5b:cf:97:7b:2d:a1:6b:94:1f:a3:fc:85: af:b4:15:5f:d7:c1:0b:36:64:43:01:7e:8a:02:8f: d4:11:bc:68:6a:6d:63:8b:10:ff:71:8b:68:86:2a: e1:ad:68:09:0f:db:4a:44:77:89:b5:43:c2:dd:a8: d9:ad:1b:2c:ea:d7:2a:29:2f:47:59:5e:48:ad:37: 41:a0:16:64:30:90:1c:db:2c:2e:34:20:54:d0:fb: 01:9e:af:90:e3:98:24:7c:6d:fe:c2:53:42:20:54: 58:4e:95:85:05:83:70:c8:6d:3c:a1:83:f2:b6:aa: bc:99:03:f5:78:d3:61:c1:3c:c8:db:18:b3:63:82: 8e:17:d9:ee:81:79:07:23:9a:86:21:3f:b3:c9:04: ed:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:10:7D:94:01:61:8B:A4:51:99:96:FC:67:68:FB:DF:6A:EB:1E:EE X509v3 Authority Key Identifier: keyid:CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:c9:96:43:74:a9:83:4b:d3:e3:9a:2b:b9:f1:6f:06:6e:ff: 29:1f:d7:ed:81:d6:e1:00:e3:db:73:18:c0:ce:91:d3:d1:63: 64:ae:53:93:c1:5e:0e:a5:79:f5:7b:86:d4:ae:7b:36:52:70: 57:1d:c2:91:91:6b:28:9d:30:9f:1c:97:31:3e:ed:c9:b1:82: c5:33:c3:2f:05:00:0c:8a:98:25:55:8c:8c:e6:9b:b4:96:de: cc:eb:ac:cc:7c:87:c9:00:06:ec:08:29:09:24:ba:04:f8:86: a0:a6:8d:da:df:6c:58:05:07:c1:1c:d2:3b:5b:f0:06:a8:fe: e0:20:7b:75:ca:53:fd:e2:7b:a1:3f:15:c0:6e:68:71:cb:65: 24:3d:a1:fd:37:ac:33:b6:3a:ca:22:1d:a0:9c:75:64:26:fe: 17:b6:5d:89:8c:e9:53:d6:60:0e:5d:9f:7f:90:04:dd:f3:f6: 80:c6:b6:68:9f:5e:3c:3f:6e:0e:a9:6b:e0:ef:a3:32:89:cc: 37:42:8c:47:e3:95:cb:74:25:8a:32:c3:b5:04:91:4d:51:5a: 02:1b:3c:9a:2b:97:47:03:9d:c4:f0:f7:fa:25:fa:0f:9d:8e: 3e:52:6a:2b:27:5d:d6:22:ab:19:b7:74:10:60:64:27:7a:9e: 65:f1:08:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHDyCE8oFqIGwyHcLj1HMbtgzVc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGOTU3NDE2QUJDNDUxQUQzOTU1MjYwQ0Y2OUYzMTc1 NjA1MUJENjAeFw0yNTA2MTcyMzEwNDNaFw0yNTA2MTkwMTEzNDNaMDMxMTAvBgNV BAMTKEQzMTA3RDk0MDE2MThCQTQ1MTk5OTZGQzY3NjhGQkRGNkFFQjFFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWPBZYhy+fjCMUmRtNYao97myc DgOC/RHWbRaPp6MFvM9m+rLsc/x97rjYv0DDhIGqCIgfhh6y0suRfTuDVSHp1qaZ lLL6DdqS9MDe7EJEaPJZB312yE5rPbM1LDncxUSBJxIjScdDrhh9tVvPl3stoWuU H6P8ha+0FV/XwQs2ZEMBfooCj9QRvGhqbWOLEP9xi2iGKuGtaAkP20pEd4m1Q8Ld qNmtGyzq1yopL0dZXkitN0GgFmQwkBzbLC40IFTQ+wGer5DjmCR8bf7CU0IgVFhO lYUFg3DIbTyhg/K2qryZA/V402HBPMjbGLNjgo4X2e6BeQcjmoYhP7PJBO2vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0xB9lAFhi6RRmZb8Z2j732rrHu4wHwYDVR0j BBgwFoAUz/lXQWq8RRrTlVJgz2nzF1YFG9YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFY0UVIxcmJvUWp1Y2J1THpEQkVaS1dMWnJuanRQeVl6TTlrRmM2bVdj SFUvMC9DRkY5NTc0MTZBQkM0NTFBRDM5NTUyNjBDRjY5RjMxNzU2MDUxQkQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRjk1NzQxNkFCQzQ1MUFE Mzk1NTI2MENGNjlGMzE3NTYwNTFCRDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFY0UVIxcmJvUWp1Y2J1THpEQkVaS1dMWnJuanRQeVl6TTlrRmM2bVdjSFUvMC9D RkY5NTc0MTZBQkM0NTFBRDM5NTUyNjBDRjY5RjMxNzU2MDUxQkQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvMmWQ3Spg0vT45orufFvBm7/KR/X7YHW4QDj23MYwM6R09FjZK5Tk8FeDqV5 9XuG1K57NlJwVx3CkZFrKJ0wnxyXMT7tybGCxTPDLwUADIqYJVWMjOabtJbezOus zHyHyQAG7AgpCSS6BPiGoKaN2t9sWAUHwRzSO1vwBqj+4CB7dcpT/eJ7oT8VwG5o cctlJD2h/TesM7Y6yiIdoJx1ZCb+F7ZdiYzpU9ZgDl2ff5AE3fP2gMa2aJ9ePD9u Dqlr4O+jMonMN0KMR+OVy3QlijLDtQSRTVFaAhs8miuXRwOdxPD3+iX6D52OPlJq Kydd1iKrGbd0EGBkJ3qeZfEITA== -----END CERTIFICATE-----Generated at Wed Jun 18 16:13:33 2025 by rpki-client