$ rpki-client -vvf rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft File: CFF957416ABC451AD3955260CF69F31756051BD6.mft (raw, json) Hash identifier: /mmAl1D1lpR5fKue+s4PQb/RTS4R6mq8lY0w3ipUtFM= Subject key identifier: 63:78:68:A0:70:5A:4C:3B:26:17:73:56:57:33:C5:01:ED:A2:9E:F8 Authority key identifier: CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6 Certificate issuer: /CN=CFF957416ABC451AD3955260CF69F31756051BD6 Certificate serial: 149A59647F0866E9776407B502593EDE534D4ADE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer Subject info access: rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft Manifest number: 0299 Signing time: Tue 04 Nov 2025 18:20:35 +0000 Manifest this update: Tue 04 Nov 2025 18:15:35 +0000 Manifest next update: Wed 05 Nov 2025 20:26:35 +0000 Files and hashes: 1: 3137372e38372e39322e302f32322d3234203d3e203532353932.roa (hash: P5NQ1X7a5/OWP9HCAuVjTa6sRlB4EGzVBG3V/7t0LkI=) 2: 323830343a333937633a3a2f33322d3336203d3e203532353932.roa (hash: iFqIUtZ1VqOyUi9m1LdeA4diADH3tVwavREvtpL5Ng8=) 3: 3137302e3234372e36342e302f32322d3234203d3e203532353932.roa (hash: 8fyLTweS0k9O7hpJEh3lgr+BITcPp0nzYZvIMf2Fce4=) 4: CFF957416ABC451AD3955260CF69F31756051BD6.crl (hash: BfvucU04uGM5akpy/y24KcofixIfRo5VT90kCDJe5BA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.crl rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:9a:59:64:7f:08:66:e9:77:64:07:b5:02:59:3e:de:53:4d:4a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFF957416ABC451AD3955260CF69F31756051BD6 Validity Not Before: Nov 4 18:15:35 2025 GMT Not After : Nov 5 20:26:35 2025 GMT Subject: CN=637868A0705A4C3B261773565733C501EDA29EF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:35:93:56:3d:ef:d1:73:37:75:88:14:6a:72: 1f:7c:35:fe:45:4d:bf:10:b8:07:db:68:2e:c1:88: 50:53:5c:7d:8f:22:d8:47:a2:52:f1:81:30:74:17: 21:34:02:45:dc:21:cf:84:21:a7:2e:8c:c5:bb:61: f5:e4:a9:39:7b:0b:c8:06:40:33:89:e7:fc:f8:7d: 9a:89:54:72:9b:06:4a:85:d7:54:87:bc:b5:2d:90: 4c:77:72:56:dd:ac:78:44:8c:4c:85:b4:51:4f:3b: 0c:16:4c:0e:58:ac:a4:e6:56:32:cc:02:bb:53:20: 3b:5c:12:e3:48:0e:88:b5:72:75:eb:24:08:6e:da: 60:c2:12:3d:0e:98:b5:5c:f9:87:ae:34:fc:5e:0a: d7:34:fa:42:ba:05:a3:7e:05:d4:0a:73:f0:2e:18: e3:2d:81:93:98:ba:fa:10:8a:05:c9:12:30:b9:d6: 4d:55:83:79:62:86:44:a7:9e:f1:d4:49:a3:c2:ab: d3:a2:0a:5a:07:80:b5:e8:4e:21:77:27:7e:b0:0d: 4f:2e:b9:e0:2f:68:c3:88:74:18:8b:df:6f:59:04: 44:68:e2:db:ea:17:9d:14:80:09:ce:03:af:a6:9b: d4:5e:4f:e4:6b:6f:32:5b:f7:cf:fa:2c:ab:cd:da: 84:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:78:68:A0:70:5A:4C:3B:26:17:73:56:57:33:C5:01:ED:A2:9E:F8 X509v3 Authority Key Identifier: keyid:CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:24:88:09:c2:9d:11:66:57:79:7c:79:85:38:83:bb:41:18: a7:0c:61:75:f5:b4:9e:0e:97:c1:3e:a7:1c:9b:10:23:64:d1: e0:5a:2c:28:9d:7a:d4:08:63:c0:43:9f:5e:0a:4a:98:29:fd: 52:37:7b:eb:ec:05:a8:64:ba:14:39:0c:9f:f7:53:71:d4:79: cf:1c:65:52:e6:14:c2:02:d5:60:d5:04:99:71:5d:fd:ae:b4: ad:15:4f:a1:6c:c3:82:f5:bc:35:6c:73:8f:6b:34:38:3a:21: 2e:52:9d:be:44:c1:6a:ae:3e:42:2e:a5:2c:fd:01:17:17:33: 66:a0:c9:4f:e3:38:75:85:d4:15:4b:5f:7c:92:65:81:5b:83: 6c:82:5c:bf:c7:5d:6b:df:6e:10:d7:5a:d2:60:3e:a4:5d:75: 08:f2:9a:d7:bc:83:c1:79:73:58:9d:3c:20:ab:0b:ea:63:1e: 89:d1:01:dc:b2:bf:dd:a0:1f:cc:15:96:6d:95:4e:98:db:17: b0:dc:73:fe:ed:64:42:e7:c0:1a:03:29:81:e6:f1:58:ab:03: c6:31:8a:6d:18:b9:b1:3d:05:53:00:2b:87:ef:e3:e5:5e:68: 4b:65:e9:1d:08:a2:81:61:13:d5:1d:15:f9:55:92:11:73:c6: a9:0d:dd:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFJpZZH8IZul3ZAe1Alk+3lNNSt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGOTU3NDE2QUJDNDUxQUQzOTU1MjYwQ0Y2OUYzMTc1 NjA1MUJENjAeFw0yNTExMDQxODE1MzVaFw0yNTExMDUyMDI2MzVaMDMxMTAvBgNV BAMTKDYzNzg2OEEwNzA1QTRDM0IyNjE3NzM1NjU3MzNDNTAxRURBMjlFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJNZNWPe/Rczd1iBRqch98Nf5F Tb8QuAfbaC7BiFBTXH2PIthHolLxgTB0FyE0AkXcIc+EIacujMW7YfXkqTl7C8gG QDOJ5/z4fZqJVHKbBkqF11SHvLUtkEx3clbdrHhEjEyFtFFPOwwWTA5YrKTmVjLM ArtTIDtcEuNIDoi1cnXrJAhu2mDCEj0OmLVc+YeuNPxeCtc0+kK6BaN+BdQKc/Au GOMtgZOYuvoQigXJEjC51k1Vg3lihkSnnvHUSaPCq9OiCloHgLXoTiF3J36wDU8u ueAvaMOIdBiL329ZBERo4tvqF50UgAnOA6+mm9ReT+RrbzJb98/6LKvN2oR1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUY3hooHBaTDsmF3NWVzPFAe2invgwHwYDVR0j BBgwFoAUz/lXQWq8RRrTlVJgz2nzF1YFG9YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFY0UVIxcmJvUWp1Y2J1THpEQkVaS1dMWnJuanRQeVl6TTlrRmM2bVdj SFUvMC9DRkY5NTc0MTZBQkM0NTFBRDM5NTUyNjBDRjY5RjMxNzU2MDUxQkQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRjk1NzQxNkFCQzQ1MUFE Mzk1NTI2MENGNjlGMzE3NTYwNTFCRDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFY0UVIxcmJvUWp1Y2J1THpEQkVaS1dMWnJuanRQeVl6TTlrRmM2bVdjSFUvMC9D RkY5NTc0MTZBQkM0NTFBRDM5NTUyNjBDRjY5RjMxNzU2MDUxQkQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjySICcKdEWZXeXx5hTiDu0EYpwxhdfW0ng6XwT6nHJsQI2TR4FosKJ161Ahj wEOfXgpKmCn9Ujd76+wFqGS6FDkMn/dTcdR5zxxlUuYUwgLVYNUEmXFd/a60rRVP oWzDgvW8NWxzj2s0ODohLlKdvkTBaq4+Qi6lLP0BFxczZqDJT+M4dYXUFUtffJJl gVuDbIJcv8dda99uENda0mA+pF11CPKa17yDwXlzWJ08IKsL6mMeidEB3LK/3aAf zBWWbZVOmNsXsNxz/u1kQufAGgMpgebxWKsDxjGKbRi5sT0FUwArh+/j5V5oS2Xp HQiigWET1R0V+VWSEXPGqQ3dLQ== -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:18 2025 by rpki-client