$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.mft File: CC58DAF288CB59CD86B813345628DC535B34879B.mft (raw, json) Hash identifier: PVY0zoOA4qyNCw+zwgG/Nuofrm+RDjEb/BM8aXzFhD8= Subject key identifier: A4:AA:69:1D:B2:24:F1:98:0F:79:C2:13:6A:39:F2:75:55:84:02:5A Authority key identifier: CC:58:DA:F2:88:CB:59:CD:86:B8:13:34:56:28:DC:53:5B:34:87:9B Certificate issuer: /CN=CC58DAF288CB59CD86B813345628DC535B34879B Certificate serial: 67F9815DF6999EF45CD5AC0C250323E3D6D06109 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC58DAF288CB59CD86B813345628DC535B34879B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.mft Manifest number: B1 Signing time: Mon 03 Nov 2025 04:09:28 +0000 Manifest this update: Mon 03 Nov 2025 04:04:28 +0000 Manifest next update: Tue 04 Nov 2025 05:28:28 +0000 Files and hashes: 1: CC58DAF288CB59CD86B813345628DC535B34879B.crl (hash: x5c9P/DnQaUGMn3hfz1UjP1sS8PZX9ZwtkcsShKvw9k=) 2: 323830343a376163303a3a2f33322d313238203d3e20323731333930.roa (hash: Ppvv4IbCfsf4cAdoJwA/cTfEnr/80dgB5cO3AEDv01I=) 3: 3138312e3138392e3130342e302f32322d3332203d3e20323731333930.roa (hash: VThwIABcMTo7o0O0Q+gY8MqUGyELDJLqFug1TaNhSlA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.crl rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC58DAF288CB59CD86B813345628DC535B34879B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f9:81:5d:f6:99:9e:f4:5c:d5:ac:0c:25:03:23:e3:d6:d0:61:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC58DAF288CB59CD86B813345628DC535B34879B Validity Not Before: Nov 3 04:04:28 2025 GMT Not After : Nov 4 05:28:28 2025 GMT Subject: CN=A4AA691DB224F1980F79C2136A39F2755584025A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:df:13:9b:30:0c:29:ee:4f:ce:da:92:60: 9e:ab:cc:e1:cf:4b:df:3f:72:fe:a9:61:7a:82:c1: 5e:8b:ed:43:5a:fa:e5:9e:a1:88:95:18:1e:e5:d9: 72:51:99:d5:72:46:82:16:2e:41:99:d4:c0:49:ea: 02:4d:dd:a8:9a:d9:f2:ac:50:a4:0a:fe:7c:99:74: bb:06:ea:d1:db:77:4c:73:19:c9:1f:59:30:a4:ee: ac:27:46:f9:4f:ab:13:fd:8a:3c:5e:2f:8e:49:4d: e2:58:19:9c:4d:5a:6b:d5:79:35:4f:32:1a:97:66: 3f:f5:13:c0:0a:d4:25:9c:dd:ee:ab:d8:cc:05:94: 92:75:43:5d:b7:5f:57:c1:94:7e:61:b1:68:b0:a4: 87:12:14:4c:aa:88:c6:72:06:88:ce:ff:1f:00:b9: e3:b9:03:c9:f3:cf:6d:86:25:d6:e6:58:6f:bc:8e: 38:56:f6:18:fb:f1:a6:73:dc:11:49:e6:ec:ab:36: ca:41:2b:fa:f5:9f:fc:18:8f:aa:73:29:68:74:ad: 1a:13:05:bb:bf:dc:dc:99:2a:09:6b:d6:bf:d7:aa: 40:45:67:f9:55:5d:03:fd:b6:32:b9:fd:39:1f:5b: 03:74:ab:91:1d:43:a5:8a:84:ee:7b:0d:c1:65:a3: 33:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AA:69:1D:B2:24:F1:98:0F:79:C2:13:6A:39:F2:75:55:84:02:5A X509v3 Authority Key Identifier: keyid:CC:58:DA:F2:88:CB:59:CD:86:B8:13:34:56:28:DC:53:5B:34:87:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC58DAF288CB59CD86B813345628DC535B34879B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:1c:8e:ab:57:ff:ed:f1:1e:5c:9a:5e:11:43:92:cf:b6:1e: c1:af:8e:7b:8d:da:1f:3a:69:b8:f4:c5:3a:01:67:97:e5:2a: 4c:86:bf:8b:a4:6c:57:83:ab:ab:f3:66:83:a3:54:44:ea:29: 1d:76:a9:34:a2:f2:3b:ad:4e:05:9f:99:45:33:a0:a3:70:df: 66:47:9e:60:d1:55:be:86:7f:ed:47:fe:ac:72:ab:e0:51:a5: a3:f8:95:51:ae:b9:da:ae:55:2b:30:36:ee:7d:d8:0c:e8:29: ca:60:d6:5c:54:f4:9a:4f:0b:2f:47:04:04:68:dd:5b:21:36: 01:aa:cb:54:f2:ae:59:96:bf:68:44:46:86:66:d3:b5:e0:38: 28:f2:20:b8:46:79:ee:bc:f8:a4:7e:c7:4a:f8:62:20:be:4b: 56:7b:a5:a0:e2:89:91:c0:27:80:52:44:c4:d7:63:51:91:c1: b8:05:04:59:e4:8f:1a:8c:ba:a0:ed:9f:a2:2c:e6:7c:b7:14: 97:a3:19:2a:00:79:c4:0d:e2:17:86:a5:fe:08:70:b6:6d:f2: e4:50:62:7c:b6:00:a6:e0:60:0f:ef:e6:11:b0:b5:53:87:fd: c1:89:f1:df:ee:13:51:d6:66:84:48:91:37:6b:ff:14:7e:25: d8:14:35:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ/mBXfaZnvRc1awMJQMj49bQYQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M1OERBRjI4OENCNTlDRDg2QjgxMzM0NTYyOERDNTM1 QjM0ODc5QjAeFw0yNTExMDMwNDA0MjhaFw0yNTExMDQwNTI4MjhaMDMxMTAvBgNV BAMTKEE0QUE2OTFEQjIyNEYxOTgwRjc5QzIxMzZBMzlGMjc1NTU4NDAyNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHF98TmzAMKe5PztqSYJ6rzOHP S98/cv6pYXqCwV6L7UNa+uWeoYiVGB7l2XJRmdVyRoIWLkGZ1MBJ6gJN3aia2fKs UKQK/nyZdLsG6tHbd0xzGckfWTCk7qwnRvlPqxP9ijxeL45JTeJYGZxNWmvVeTVP MhqXZj/1E8AK1CWc3e6r2MwFlJJ1Q123X1fBlH5hsWiwpIcSFEyqiMZyBojO/x8A ueO5A8nzz22GJdbmWG+8jjhW9hj78aZz3BFJ5uyrNspBK/r1n/wYj6pzKWh0rRoT Bbu/3NyZKglr1r/XqkBFZ/lVXQP9tjK5/TkfWwN0q5EdQ6WKhO57DcFlozO/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpKppHbIk8ZgPecITajnydVWEAlowHwYDVR0j BBgwFoAUzFja8ojLWc2GuBM0VijcU1s0h5swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnE5dlVVZlR4VFRCb0Y0S3NCcVphUm9VTFB1SzdvOVQxVmdzaWd3dUxy VmUvMC9DQzU4REFGMjg4Q0I1OUNEODZCODEzMzQ1NjI4REM1MzVCMzQ4NzlCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDNThEQUYyODhDQjU5Q0Q4 NkI4MTMzNDU2MjhEQzUzNUIzNDg3OUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnE5dlVVZlR4VFRCb0Y0S3NCcVphUm9VTFB1SzdvOVQxVmdzaWd3dUxyVmUvMC9D QzU4REFGMjg4Q0I1OUNEODZCODEzMzQ1NjI4REM1MzVCMzQ4NzlCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcByOq1f/7fEeXJpeEUOSz7Yewa+Oe43aHzppuPTFOgFnl+UqTIa/i6RsV4Or q/Nmg6NUROopHXapNKLyO61OBZ+ZRTOgo3DfZkeeYNFVvoZ/7Uf+rHKr4FGlo/iV Ua652q5VKzA27n3YDOgpymDWXFT0mk8LL0cEBGjdWyE2AarLVPKuWZa/aERGhmbT teA4KPIguEZ57rz4pH7HSvhiIL5LVnuloOKJkcAngFJExNdjUZHBuAUEWeSPGoy6 oO2foizmfLcUl6MZKgB5xA3iF4al/ghwtm3y5FBifLYApuBgD+/mEbC1U4f9wYnx 3+4TUdZmhEiRN2v/FH4l2BQ1ew== -----END CERTIFICATE-----Generated at Mon Nov 3 12:33:55 2025 by rpki-client