$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft File: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft (raw, json) Hash identifier: 9Zmg7/3od5MFuNgqpo+B3dum8rqz+NQdeSvwg4p5mJ0= Subject key identifier: 9F:37:C0:F0:AB:AB:2B:9F:8C:7F:E1:D8:39:8C:99:E0:E5:6D:F2:FA Authority key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1 Certificate issuer: /CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1 Certificate serial: 6086CFD708B2D39A09ECC1CA558C36243BDF33F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer Subject info access: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft Manifest number: 0247 Signing time: Mon 16 Jun 2025 10:05:57 +0000 Manifest this update: Mon 16 Jun 2025 10:00:57 +0000 Manifest next update: Tue 17 Jun 2025 10:11:57 +0000 Files and hashes: 1: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl (hash: uWk2gWi63aKb9gtt2QgxjvrMSwp8z2nxmCQ+sksz9Uo=) 2: 323830343a323832633a3a2f33322d313238203d3e20323633393435.roa (hash: nlVhDanKVg64ya0hokzfUPThna0mKMIOPZJ9pKVwclg=) 3: 34352e3138382e32342e302f32322d3332203d3e20323633393435.roa (hash: lfLBExi7aLPt672tmYUHeQIJlNv5s8Hx5DVc0Wer/Iw=) 4: 3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa (hash: MszwjcuIe9rjs+cHuQWMig87jp5DXLRmq5gNTuVD1fY=) 5: 3137302e38342e37322e302f32322d3332203d3e20323633393435.roa (hash: t8HVSafrX1OjhJjFHS8Bmtbbsk9VCeE3SLniXiYbwmM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 10:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:86:cf:d7:08:b2:d3:9a:09:ec:c1:ca:55:8c:36:24:3b:df:33:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1 Validity Not Before: Jun 16 10:00:57 2025 GMT Not After : Jun 17 10:11:57 2025 GMT Subject: CN=9F37C0F0ABAB2B9F8C7FE1D8398C99E0E56DF2FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b3:9f:bf:0d:df:9c:72:fd:32:6b:d8:d2:e3: 58:04:bc:7e:37:39:63:93:7e:6c:7d:b2:fe:b9:70: 4d:43:75:a4:74:41:51:6f:d5:d6:65:2f:e3:14:e8: 36:4d:15:58:ca:7c:21:9f:82:52:d5:e1:f0:fb:f9: 33:bf:c3:f3:3e:f0:81:23:84:40:91:e6:57:d9:51: a7:39:9e:f5:82:57:8c:ac:e4:7f:39:c3:1b:d1:0c: 97:cf:1d:90:bb:76:04:8d:67:be:08:5a:d9:77:09: cd:78:6b:86:9c:af:f4:9b:95:d1:9f:ff:d1:1f:dc: 1b:3f:b4:bd:de:60:c0:79:11:14:76:fc:9b:53:c5: be:b6:02:f1:6a:75:e7:85:dc:ce:03:64:47:f8:c5: 7e:5b:5c:01:67:fc:e9:a2:6d:25:68:5c:fe:08:02: 29:12:a6:da:a5:2d:0f:ae:b7:1a:45:3b:16:25:b9: 9b:2b:98:9d:ce:8a:92:dc:7c:3e:b8:14:90:63:db: 90:7d:47:a7:1a:1a:08:7b:4c:66:9b:29:08:d0:03: e0:99:e0:c9:92:77:67:fd:b8:45:23:f0:be:1e:5a: 39:6c:b4:6b:da:e6:3a:c4:36:77:c3:4e:f8:54:5d: 0f:c9:ad:36:97:53:d5:1b:a3:6f:71:60:32:81:1b: b0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:37:C0:F0:AB:AB:2B:9F:8C:7F:E1:D8:39:8C:99:E0:E5:6D:F2:FA X509v3 Authority Key Identifier: keyid:CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fd:5f:49:71:0f:4e:d5:c5:8a:70:c6:bb:7a:e4:5f:8d:d5: 55:d4:ad:d0:0c:50:72:dd:b6:e3:76:a8:27:60:5d:36:dc:e9: 7f:87:b9:8e:10:86:b7:d8:12:43:eb:6a:ee:b7:e0:c0:28:1f: 30:27:0d:3b:82:2f:77:40:90:8f:12:b8:f4:4d:52:32:b1:40: 6b:15:0e:51:9d:bd:7c:f2:09:64:8f:6a:1c:49:43:21:80:35: 81:1d:86:37:84:7e:a3:66:9d:1e:78:2e:88:ce:0e:05:6d:32: c1:ee:5f:28:a7:75:43:4b:e3:86:ab:a5:00:9a:c3:0f:70:ba: cb:3b:4b:9a:a3:ed:fc:5f:07:ec:ef:34:d4:a4:00:c6:db:f1: af:08:e7:6f:0f:44:7b:11:e3:ba:48:6a:cd:f4:d1:39:29:36: 94:8b:a1:7a:ca:96:d7:b9:8c:83:8e:a3:4c:df:65:4f:95:75: fe:1a:d8:7f:32:23:6b:16:d0:b5:3e:d3:17:0d:5f:6c:91:b6: 84:52:c2:b8:1f:a7:75:4f:16:5d:5d:2c:14:3f:18:0e:10:e9: 17:5b:47:cb:62:d2:c5:11:30:a3:55:eb:aa:1d:d5:38:ff:36: da:0b:8f:0e:7c:bb:55:c1:56:80:3d:ce:8e:89:06:45:c1:ae: b3:61:fd:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYIbP1wiy05oJ7MHKVYw2JDvfM/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NERkIyNTI4NEQxNDExQTA1QzJENUE5ODE2OUJBQTA5 MEVFRjRFMTAeFw0yNTA2MTYxMDAwNTdaFw0yNTA2MTcxMDExNTdaMDMxMTAvBgNV BAMTKDlGMzdDMEYwQUJBQjJCOUY4QzdGRTFEODM5OEM5OUUwRTU2REYyRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSs5+/Dd+ccv0ya9jS41gEvH43 OWOTfmx9sv65cE1DdaR0QVFv1dZlL+MU6DZNFVjKfCGfglLV4fD7+TO/w/M+8IEj hECR5lfZUac5nvWCV4ys5H85wxvRDJfPHZC7dgSNZ74IWtl3Cc14a4acr/SbldGf /9Ef3Bs/tL3eYMB5ERR2/JtTxb62AvFqdeeF3M4DZEf4xX5bXAFn/OmibSVoXP4I AikSptqlLQ+utxpFOxYluZsrmJ3OipLcfD64FJBj25B9R6caGgh7TGabKQjQA+CZ 4MmSd2f9uEUj8L4eWjlstGva5jrENnfDTvhUXQ/JrTaXU9Ubo29xYDKBG7D3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnzfA8KurK5+Mf+HYOYyZ4OVt8vowHwYDVR0j BBgwFoAUzN+yUoTRQRoFwtWpgWm6oJDu9OEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0VrcnFvcGtpVGttVlp0ZDdmYWoyd2FtR3lCYWtwdHE1ZVdLelNUQ2dl bncvMS9DQ0RGQjI1Mjg0RDE0MTFBMDVDMkQ1QTk4MTY5QkFBMDkwRUVGNEUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDREZCMjUyODREMTQxMUEw NUMyRDVBOTgxNjlCQUEwOTBFRUY0RTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0VrcnFvcGtpVGttVlp0ZDdmYWoyd2FtR3lCYWtwdHE1ZVdLelNUQ2dlbncvMS9D Q0RGQjI1Mjg0RDE0MTFBMDVDMkQ1QTk4MTY5QkFBMDkwRUVGNEUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACv1fSXEPTtXFinDGu3rkX43VVdSt0AxQct2243aoJ2BdNtzpf4e5jhCGt9gS Q+tq7rfgwCgfMCcNO4Ivd0CQjxK49E1SMrFAaxUOUZ29fPIJZI9qHElDIYA1gR2G N4R+o2adHnguiM4OBW0ywe5fKKd1Q0vjhqulAJrDD3C6yztLmqPt/F8H7O801KQA xtvxrwjnbw9EexHjukhqzfTROSk2lIuhesqW17mMg46jTN9lT5V1/hrYfzIjaxbQ tT7TFw1fbJG2hFLCuB+ndU8WXV0sFD8YDhDpF1tHy2LSxREwo1Xrqh3VOP822guP Dny7VcFWgD3OjokGRcGus2H9Aw== -----END CERTIFICATE-----Generated at Mon Jun 16 18:34:38 2025 by rpki-client