$ rpki-client -vvf rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft File: CFF957416ABC451AD3955260CF69F31756051BD6.mft (raw, json) Hash identifier: dqpYQEpu+7ThQz10Ye432irn/lu6o/blVm+U4UAFrbI= Subject key identifier: 92:8A:BE:40:88:D3:58:A0:B4:99:50:25:D1:99:40:BB:4F:62:18:FD Authority key identifier: CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6 Certificate issuer: /CN=CFF957416ABC451AD3955260CF69F31756051BD6 Certificate serial: 4E6ED1D33E8C94891A4E3D955A9793C37686FC02 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer Subject info access: rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft Manifest number: 0223 Signing time: Fri 08 Aug 2025 10:18:28 +0000 Manifest this update: Fri 08 Aug 2025 10:13:28 +0000 Manifest next update: Sat 09 Aug 2025 10:32:28 +0000 Files and hashes: 1: 3137372e38372e39322e302f32322d3234203d3e203532353932.roa (hash: P5NQ1X7a5/OWP9HCAuVjTa6sRlB4EGzVBG3V/7t0LkI=) 2: 323830343a333937633a3a2f33322d3336203d3e203532353932.roa (hash: iFqIUtZ1VqOyUi9m1LdeA4diADH3tVwavREvtpL5Ng8=) 3: 3137302e3234372e36342e302f32322d3234203d3e203532353932.roa (hash: 8fyLTweS0k9O7hpJEh3lgr+BITcPp0nzYZvIMf2Fce4=) 4: CFF957416ABC451AD3955260CF69F31756051BD6.crl (hash: i5tfU/vwkEYKZtwV659MdwXy4B1WmYAGm0yhpwlWg+U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.crl rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 10:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6e:d1:d3:3e:8c:94:89:1a:4e:3d:95:5a:97:93:c3:76:86:fc:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFF957416ABC451AD3955260CF69F31756051BD6 Validity Not Before: Aug 8 10:13:28 2025 GMT Not After : Aug 9 10:32:28 2025 GMT Subject: CN=928ABE4088D358A0B4995025D19940BB4F6218FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5f:8b:60:4c:45:8a:52:93:27:b9:1d:4a:42: 65:30:a4:89:fd:dc:f8:2f:22:77:c2:2f:2d:c4:6c: 40:b9:6b:b7:de:e8:c8:1c:e3:ab:2c:85:72:c2:6c: 9b:49:17:cc:1f:99:80:af:50:c9:36:5d:2d:ac:de: 52:fa:b7:39:4a:5b:6f:4e:6a:fa:6a:22:db:88:14: e2:9c:db:5e:e4:c0:05:26:e8:f4:bf:c3:03:3d:37: a1:aa:b6:14:b7:fe:0b:4c:09:8d:04:13:77:e7:21: 04:5d:21:cd:a4:a7:ff:79:a8:d5:41:2f:4c:24:b1: 18:6c:77:4d:a1:a9:0f:87:dd:e8:21:35:71:a0:25: 0a:84:e9:97:e0:0d:41:5d:55:87:00:61:43:05:68: 80:a0:02:ab:4e:f1:93:e0:58:33:ee:16:6f:48:db: e0:03:a4:7a:df:34:72:16:c5:f7:d2:3f:cf:e5:2a: 30:a3:9a:ef:75:7a:29:0f:e7:29:11:9e:de:c6:5e: c4:b7:5e:6e:a4:97:63:1a:a4:39:24:5a:fc:fe:aa: be:03:c8:c0:62:23:82:c2:88:65:5b:b6:9c:f9:6f: e5:cf:0d:12:40:12:d7:b3:ba:a8:65:a1:66:31:79: 87:6b:7a:62:66:2e:d4:5e:60:8e:2c:7e:3d:08:26: 91:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8A:BE:40:88:D3:58:A0:B4:99:50:25:D1:99:40:BB:4F:62:18:FD X509v3 Authority Key Identifier: keyid:CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:2d:52:99:62:50:6c:3d:88:82:a7:e0:4d:1f:cd:af:e6:26: e9:11:da:49:d3:3f:81:0c:bc:0a:05:9b:7d:29:24:ad:f3:d4: 9d:a5:32:fa:04:92:0e:38:bb:e1:0e:be:7f:92:5c:0b:61:13: 6b:ed:63:56:c9:db:95:d9:79:05:9e:a5:3c:65:2b:c9:7a:f6: d1:e9:06:e0:2b:73:5f:56:5f:f8:48:95:4b:9b:7e:20:80:21: 30:7d:cd:7f:82:6b:42:9b:d6:29:2e:fd:85:ab:dd:6d:51:c9: 77:71:13:b9:05:84:b9:38:aa:65:30:71:fb:78:38:cd:f6:be: fd:ce:87:85:ef:18:70:22:5a:0f:bf:ca:0d:3a:3c:1c:72:18: 8b:71:b5:08:48:06:b9:83:20:7a:f7:45:64:bc:ae:05:64:f9: c0:38:7b:a8:c0:bf:a7:14:92:53:c3:68:6f:e9:f1:5d:ac:9f: 3d:9a:0d:6b:a9:63:15:a3:db:86:f9:1c:01:21:bd:e3:da:c9: e4:44:a6:ca:4e:c3:bd:ce:d0:2c:85:fe:83:ff:f9:a0:41:ba: c3:2c:44:30:af:47:6e:3e:e8:f4:4c:9a:ab:91:4b:9d:da:d3: 84:2f:70:62:f3:ec:55:45:33:d8:14:e0:f0:21:e5:76:f8:33: f8:34:76:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTm7R0z6MlIkaTj2VWpeTw3aG/AIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGOTU3NDE2QUJDNDUxQUQzOTU1MjYwQ0Y2OUYzMTc1 NjA1MUJENjAeFw0yNTA4MDgxMDEzMjhaFw0yNTA4MDkxMDMyMjhaMDMxMTAvBgNV BAMTKDkyOEFCRTQwODhEMzU4QTBCNDk5NTAyNUQxOTk0MEJCNEY2MjE4RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdX4tgTEWKUpMnuR1KQmUwpIn9 3PgvInfCLy3EbEC5a7fe6Mgc46sshXLCbJtJF8wfmYCvUMk2XS2s3lL6tzlKW29O avpqItuIFOKc217kwAUm6PS/wwM9N6GqthS3/gtMCY0EE3fnIQRdIc2kp/95qNVB L0wksRhsd02hqQ+H3eghNXGgJQqE6ZfgDUFdVYcAYUMFaICgAqtO8ZPgWDPuFm9I 2+ADpHrfNHIWxffSP8/lKjCjmu91eikP5ykRnt7GXsS3Xm6kl2MapDkkWvz+qr4D yMBiI4LCiGVbtpz5b+XPDRJAEtezuqhloWYxeYdremJmLtReYI4sfj0IJpE5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkoq+QIjTWKC0mVAl0ZlAu09iGP0wHwYDVR0j BBgwFoAUz/lXQWq8RRrTlVJgz2nzF1YFG9YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFY0UVIxcmJvUWp1Y2J1THpEQkVaS1dMWnJuanRQeVl6TTlrRmM2bVdj SFUvMC9DRkY5NTc0MTZBQkM0NTFBRDM5NTUyNjBDRjY5RjMxNzU2MDUxQkQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRjk1NzQxNkFCQzQ1MUFE Mzk1NTI2MENGNjlGMzE3NTYwNTFCRDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFY0UVIxcmJvUWp1Y2J1THpEQkVaS1dMWnJuanRQeVl6TTlrRmM2bVdjSFUvMC9D RkY5NTc0MTZBQkM0NTFBRDM5NTUyNjBDRjY5RjMxNzU2MDUxQkQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApC1SmWJQbD2IgqfgTR/Nr+Ym6RHaSdM/gQy8CgWbfSkkrfPUnaUy+gSSDji7 4Q6+f5JcC2ETa+1jVsnbldl5BZ6lPGUryXr20ekG4CtzX1Zf+EiVS5t+IIAhMH3N f4JrQpvWKS79havdbVHJd3ETuQWEuTiqZTBx+3g4zfa+/c6Hhe8YcCJaD7/KDTo8 HHIYi3G1CEgGuYMgevdFZLyuBWT5wDh7qMC/pxSSU8Nob+nxXayfPZoNa6ljFaPb hvkcASG949rJ5ESmyk7Dvc7QLIX+g//5oEG6wyxEMK9Hbj7o9Eyaq5FLndrThC9w YvPsVUUz2BTg8CHldvgz+DR2+A== -----END CERTIFICATE-----Generated at Fri Aug 8 21:00:10 2025 by rpki-client