$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft File: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft (raw, json) Hash identifier: k8VgaAo0J5AlOPT9wNCymkQUGwLT0F1c1V0Dw654L4g= Subject key identifier: D8:ED:B1:E9:51:47:CA:5C:C8:85:6F:24:B0:6B:EC:D1:08:B1:D7:B2 Authority key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1 Certificate issuer: /CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1 Certificate serial: 7A1C67C8E02C25D04F0B20E6EAE756DA8D251F0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer Subject info access: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft Manifest number: 028A Signing time: Wed 06 Aug 2025 02:29:41 +0000 Manifest this update: Wed 06 Aug 2025 02:24:41 +0000 Manifest next update: Thu 07 Aug 2025 03:59:41 +0000 Files and hashes: 1: 323830343a323832633a3a2f33322d313238203d3e20323633393435.roa (hash: nlVhDanKVg64ya0hokzfUPThna0mKMIOPZJ9pKVwclg=) 2: CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl (hash: FBAgGS5CT9jp/DC+nCMmSPifSenqBiKW8PA76bXsEwY=) 3: 3137302e38342e37322e302f32322d3332203d3e20323633393435.roa (hash: t8HVSafrX1OjhJjFHS8Bmtbbsk9VCeE3SLniXiYbwmM=) 4: 3133382e3231392e3138302e302f32322d3332203d3e20323633393435.roa (hash: MszwjcuIe9rjs+cHuQWMig87jp5DXLRmq5gNTuVD1fY=) 5: 34352e3138382e32342e302f32322d3332203d3e20323633393435.roa (hash: lfLBExi7aLPt672tmYUHeQIJlNv5s8Hx5DVc0Wer/Iw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 Aug 2025 03:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:1c:67:c8:e0:2c:25:d0:4f:0b:20:e6:ea:e7:56:da:8d:25:1f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1 Validity Not Before: Aug 6 02:24:41 2025 GMT Not After : Aug 7 03:59:41 2025 GMT Subject: CN=D8EDB1E95147CA5CC8856F24B06BECD108B1D7B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:40:77:6d:60:1d:60:b6:8a:78:e8:ad:a1:f9: b2:1f:4e:e5:5c:70:d6:ca:3f:c9:a6:c1:83:e8:65: 1c:22:2e:1e:59:37:32:d4:a7:08:14:20:de:4d:9d: 3b:92:c2:fd:ab:33:31:56:6a:a1:a3:1a:e9:97:34: 9f:d4:50:2f:2b:22:95:b0:aa:57:60:32:69:a1:a9: f0:4d:85:78:91:89:62:be:b4:79:0a:50:dd:a9:90: a2:12:d6:e6:48:be:ee:30:3a:ba:44:0b:0e:a4:a8: ac:41:23:04:88:aa:e7:e0:ea:77:b8:10:5c:5b:f8: d2:5b:1e:41:d3:00:bb:3b:90:45:16:84:93:fb:2d: 8c:77:23:a4:47:6b:17:ca:17:84:2b:c5:31:06:36: 65:9e:ca:1b:57:5a:c2:d9:3f:a4:8f:54:c5:f0:2f: 78:64:b9:19:3f:61:2c:33:48:7b:d0:ed:26:ba:b6: d0:bc:8a:a5:ef:98:39:b0:a5:42:ee:0a:18:42:0c: 01:b5:bc:c8:a9:73:2f:a0:4a:d6:a0:d6:92:0a:cb: 99:6d:27:69:6d:60:d3:da:de:7b:ea:f3:08:0c:11: 9a:22:fd:c9:23:61:99:af:da:04:ee:2a:14:e6:4c: 0d:94:e9:e6:fd:c1:f8:f4:80:15:6c:ce:c0:09:32: 07:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:ED:B1:E9:51:47:CA:5C:C8:85:6F:24:B0:6B:EC:D1:08:B1:D7:B2 X509v3 Authority Key Identifier: keyid:CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0e:21:ac:91:60:7b:4c:a8:39:1b:64:f0:71:0a:13:d0:ed: a5:c1:24:a1:62:95:e2:be:cc:07:5a:8c:a8:45:c0:13:6a:29: 91:3b:3b:67:3d:20:34:8e:85:a2:05:34:cd:33:c8:ef:65:fe: 9d:59:46:9d:cf:7a:55:9e:7c:66:13:78:15:9b:4c:4d:0b:03: e2:bf:ba:77:0e:52:e2:30:5f:57:4d:df:bc:2f:52:1b:04:9a: d7:a1:71:4a:c2:34:86:2b:da:70:5c:b8:4a:ae:36:5c:e7:5c: de:e2:1c:53:ce:0c:de:c1:c2:9c:13:94:98:26:09:d9:a3:a0: 04:cb:24:e2:13:bd:6a:b5:e7:22:69:1b:bf:10:15:20:6c:67: b2:db:c6:b1:e4:15:47:06:ed:5c:3d:73:a8:eb:e1:d2:3a:0a: 2d:08:6a:a1:fa:ef:ec:4e:3a:23:31:35:b9:e6:66:db:bf:25: 66:f2:f0:95:6d:ff:e7:ab:6e:61:44:c9:ea:cc:23:56:c7:d2: f0:52:7c:69:3e:99:ff:e3:e6:3b:50:7e:92:59:9f:2d:47:33: 5b:56:80:cb:a6:56:54:c2:36:16:09:6d:bd:8d:dc:97:95:29: b0:29:a3:30:39:fb:1c:82:f5:7a:4a:a2:24:1b:a2:96:15:19: 5a:b8:64:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUehxnyOAsJdBPCyDm6udW2o0lHwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NERkIyNTI4NEQxNDExQTA1QzJENUE5ODE2OUJBQTA5 MEVFRjRFMTAeFw0yNTA4MDYwMjI0NDFaFw0yNTA4MDcwMzU5NDFaMDMxMTAvBgNV BAMTKEQ4RURCMUU5NTE0N0NBNUNDODg1NkYyNEIwNkJFQ0QxMDhCMUQ3QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNQHdtYB1gtop46K2h+bIfTuVc cNbKP8mmwYPoZRwiLh5ZNzLUpwgUIN5NnTuSwv2rMzFWaqGjGumXNJ/UUC8rIpWw qldgMmmhqfBNhXiRiWK+tHkKUN2pkKIS1uZIvu4wOrpECw6kqKxBIwSIqufg6ne4 EFxb+NJbHkHTALs7kEUWhJP7LYx3I6RHaxfKF4QrxTEGNmWeyhtXWsLZP6SPVMXw L3hkuRk/YSwzSHvQ7Sa6ttC8iqXvmDmwpULuChhCDAG1vMipcy+gStag1pIKy5lt J2ltYNPa3nvq8wgMEZoi/ckjYZmv2gTuKhTmTA2U6eb9wfj0gBVszsAJMgetAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2O2x6VFHylzIhW8ksGvs0Qix17IwHwYDVR0j BBgwFoAUzN+yUoTRQRoFwtWpgWm6oJDu9OEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0VrcnFvcGtpVGttVlp0ZDdmYWoyd2FtR3lCYWtwdHE1ZVdLelNUQ2dl bncvMS9DQ0RGQjI1Mjg0RDE0MTFBMDVDMkQ1QTk4MTY5QkFBMDkwRUVGNEUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDREZCMjUyODREMTQxMUEw NUMyRDVBOTgxNjlCQUEwOTBFRUY0RTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0VrcnFvcGtpVGttVlp0ZDdmYWoyd2FtR3lCYWtwdHE1ZVdLelNUQ2dlbncvMS9D Q0RGQjI1Mjg0RDE0MTFBMDVDMkQ1QTk4MTY5QkFBMDkwRUVGNEUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOw4hrJFge0yoORtk8HEKE9DtpcEkoWKV4r7MB1qMqEXAE2opkTs7Zz0gNI6F ogU0zTPI72X+nVlGnc96VZ58ZhN4FZtMTQsD4r+6dw5S4jBfV03fvC9SGwSa16Fx SsI0hivacFy4Sq42XOdc3uIcU84M3sHCnBOUmCYJ2aOgBMsk4hO9arXnImkbvxAV IGxnstvGseQVRwbtXD1zqOvh0joKLQhqofrv7E46IzE1ueZm278lZvLwlW3/56tu YUTJ6swjVsfS8FJ8aT6Z/+PmO1B+klmfLUczW1aAy6ZWVMI2FgltvY3cl5UpsCmj MDn7HIL1ekqiJBuilhUZWrhkgw== -----END CERTIFICATE-----Generated at Wed Aug 6 07:49:59 2025 by rpki-client