$ rpki-client -vvf rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft File: CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft (raw, json) Hash identifier: choSIRpMI0z02/T8GC0f60cR8lzuqdJ7eTQny+k26vY= Subject key identifier: 4A:FD:72:D6:57:4D:F3:46:0B:76:C5:B3:98:78:29:4C:0F:31:30:49 Authority key identifier: CF:F1:45:5C:F4:B4:90:8D:40:46:AE:3E:29:67:ED:5F:4E:2C:C2:6A Certificate issuer: /CN=CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A Certificate serial: 1FBD00223F73DA91FE02C4CE01CDB3C4C5F68362 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.cer Subject info access: rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft Manifest number: 14 Signing time: Tue 04 Nov 2025 16:04:51 +0000 Manifest this update: Tue 04 Nov 2025 15:59:51 +0000 Manifest next update: Wed 05 Nov 2025 18:20:51 +0000 Files and hashes: 1: CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.crl (hash: DBsD5FSF2gA93seRwfw3MPJ4WYzeP1Nr4u75/vLuuc0=) 2: 3138312e3233322e3132382e302f32322d3234203d3e20323731353132.roa (hash: iSKt+O/N+iNmfjUfkl/1zsDgFZ6/Nhl0ym5tKlT/l5M=) 3: 323830343a376362303a3a2f33322d3438203d3e20323731353132.roa (hash: 5Br5hbvYBXoc32hzXjNMrP/gjwU0zbkYoTihpOwr6ok=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.crl rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 18:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:bd:00:22:3f:73:da:91:fe:02:c4:ce:01:cd:b3:c4:c5:f6:83:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A Validity Not Before: Nov 4 15:59:51 2025 GMT Not After : Nov 5 18:20:51 2025 GMT Subject: CN=4AFD72D6574DF3460B76C5B39878294C0F313049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4c:09:2f:42:fd:76:59:4c:23:a6:90:8b:20: fa:af:58:76:d0:b7:19:d3:54:5e:8c:67:8e:ce:eb: b4:fe:0e:a7:6f:2b:cb:40:45:0b:dc:de:cf:3d:b8: 3b:65:e8:d6:b1:c1:f3:d4:3f:d0:97:42:9e:10:b6: e6:71:4e:c8:46:ee:2f:22:d3:3f:55:d4:3b:9b:23: fc:f3:04:8b:74:f7:d2:97:6a:65:bd:d8:95:b8:87: cd:71:9a:40:4c:7d:c7:14:2b:dd:6a:09:e3:7d:14: 81:9e:07:ee:05:b0:7b:b1:09:8e:71:a7:db:3b:33: 96:3b:f7:39:fd:cf:d0:4d:18:5d:24:be:72:33:65: 4b:26:17:2e:d9:53:4c:d3:f8:4d:6d:1d:68:0f:81: 8e:21:27:ad:3e:61:28:fa:bc:d8:69:66:0e:14:2c: 52:8d:3c:36:92:57:f6:55:29:0d:4f:f4:09:90:fa: b8:d7:31:c8:67:f2:98:d4:be:25:bc:33:b5:ad:3f: 98:39:0a:1b:4d:47:d8:ce:3d:95:3e:39:b8:c8:79: 70:47:f0:42:98:64:5a:d4:24:56:56:b5:d6:82:e1: 30:ec:27:b0:8e:28:a1:f7:8a:dd:21:29:4a:00:fe: f8:a9:df:5c:85:a2:07:1d:df:07:6c:85:67:fd:3e: 35:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FD:72:D6:57:4D:F3:46:0B:76:C5:B3:98:78:29:4C:0F:31:30:49 X509v3 Authority Key Identifier: keyid:CF:F1:45:5C:F4:B4:90:8D:40:46:AE:3E:29:67:ED:5F:4E:2C:C2:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4pZJcwuvhHdZ84Cc3KECpWX1BrfQjgUhCMmuhn19sM/0/CFF1455CF4B4908D4046AE3E2967ED5F4E2CC26A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:8d:11:ac:07:d0:ec:36:24:04:f4:ba:fc:9f:3a:ec:e1:46: 4e:de:6e:11:de:65:2b:c4:07:4c:97:22:c7:c0:71:4b:cf:ef: f8:44:32:82:07:e5:c9:54:68:07:ba:3e:12:3c:0a:26:16:d2: 43:99:91:f5:71:2a:c5:33:10:f8:55:b9:ea:11:df:1a:b3:b8: 6c:59:ce:ba:20:7c:73:94:49:0e:da:cd:d4:22:6a:ee:5e:ef: 2d:70:66:e6:4e:e6:70:a6:11:22:a6:88:9d:36:f9:c8:fc:45: ed:6e:08:a8:f6:32:66:4b:9e:fe:d4:f9:6a:40:6f:2f:b2:5e: 63:2b:47:bd:21:8b:07:71:58:75:82:f8:38:5b:4e:e3:ad:a2: 04:84:b1:34:7c:23:59:0a:48:5d:5f:38:ae:8f:8b:4a:ce:e1: f9:dd:92:b7:d5:1a:00:69:78:91:68:34:9c:e4:27:dd:da:46: bd:64:9b:b6:84:0e:1c:b3:98:d1:57:6f:e3:31:bb:0d:ac:55: f3:a9:fe:15:1b:29:05:24:15:cd:06:07:23:5a:2f:a0:28:f2: ab:3f:ff:40:09:66:3d:2f:a6:26:64:4c:73:c4:74:1e:d2:34: cc:3a:e1:95:84:d3:b4:8a:25:96:4e:db:62:b8:bd:5d:99:d8: 84:b4:1e:43 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUH70AIj9z2pH+AsTOAc2zxMX2g2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGMTQ1NUNGNEI0OTA4RDQwNDZBRTNFMjk2N0VENUY0 RTJDQzI2QTAeFw0yNTExMDQxNTU5NTFaFw0yNTExMDUxODIwNTFaMDMxMTAvBgNV BAMTKDRBRkQ3MkQ2NTc0REYzNDYwQjc2QzVCMzk4NzgyOTRDMEYzMTMwNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxTAkvQv12WUwjppCLIPqvWHbQ txnTVF6MZ47O67T+DqdvK8tARQvc3s89uDtl6NaxwfPUP9CXQp4QtuZxTshG7i8i 0z9V1DubI/zzBIt099KXamW92JW4h81xmkBMfccUK91qCeN9FIGeB+4FsHuxCY5x p9s7M5Y79zn9z9BNGF0kvnIzZUsmFy7ZU0zT+E1tHWgPgY4hJ60+YSj6vNhpZg4U LFKNPDaSV/ZVKQ1P9AmQ+rjXMchn8pjUviW8M7WtP5g5ChtNR9jOPZU+ObjIeXBH 8EKYZFrUJFZWtdaC4TDsJ7COKKH3it0hKUoA/vip31yFogcd3wdshWf9PjX7AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUSv1y1ldN80YLdsWzmHgpTA8xMEkwHwYDVR0j BBgwFoAUz/FFXPS0kI1ARq4+KWftX04swmowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9KNHBaSmN3dXZoSGRaODRDYzNLRUNwV1gxQnJmUWpnVWhDTW11aG4xOXNN LzAvQ0ZGMTQ1NUNGNEI0OTA4RDQwNDZBRTNFMjk2N0VENUY0RTJDQzI2QS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DRkYxNDU1Q0Y0QjQ5MDhENDA0 NkFFM0UyOTY3RUQ1RjRFMkNDMjZBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0o0 cFpKY3d1dmhIZFo4NENjM0tFQ3BXWDFCcmZRamdVaENNbXVobjE5c00vMC9DRkYx NDU1Q0Y0QjQ5MDhENDA0NkFFM0UyOTY3RUQ1RjRFMkNDMjZBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA c40RrAfQ7DYkBPS6/J867OFGTt5uEd5lK8QHTJcix8BxS8/v+EQyggflyVRoB7o+ EjwKJhbSQ5mR9XEqxTMQ+FW56hHfGrO4bFnOuiB8c5RJDtrN1CJq7l7vLXBm5k7m cKYRIqaInTb5yPxF7W4IqPYyZkue/tT5akBvL7JeYytHvSGLB3FYdYL4OFtO462i BISxNHwjWQpIXV84ro+LSs7h+d2St9UaAGl4kWg0nOQn3dpGvWSbtoQOHLOY0Vdv 4zG7DaxV86n+FRspBSQVzQYHI1ovoCjyqz//QAlmPS+mJmRMc8R0HtI0zDrhlYTT tIollk7bYri9XZnYhLQeQw== -----END CERTIFICATE-----Generated at Wed Nov 5 03:37:45 2025 by rpki-client