$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft File: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft (raw, json) Hash identifier: vy1tSsklT8xI/FiSDkquwjPJ8pkg55Gpn5SYId+Hx/k= Subject key identifier: 9E:38:0A:9D:40:3C:1F:6C:92:63:3C:D5:D4:3F:02:8A:82:E9:64:74 Authority key identifier: CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 Certificate issuer: /CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Certificate serial: 4B0A69C8F5263BAEE9E6231FBD2B14C0A1DBF0C6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject info access: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft Manifest number: 0304 Signing time: Mon 03 Nov 2025 00:09:01 +0000 Manifest this update: Mon 03 Nov 2025 00:04:01 +0000 Manifest next update: Tue 04 Nov 2025 02:40:01 +0000 Files and hashes: 1: CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl (hash: j0fEKcP+S8OjPhJTi3/1bp7P88iJK0JzAJk1kTyyWF8=) 2: 323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (hash: JKjEt0hETRYlcDbmWQLZvhZ9xRQwxepiQuRghmhAfoA=) 3: 34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa (hash: gE/DdB9YOblUsoK0HG9wnPd3YKHH2DbykTyw5B7/wBQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 02:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:0a:69:c8:f5:26:3b:ae:e9:e6:23:1f:bd:2b:14:c0:a1:db:f0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053 Validity Not Before: Nov 3 00:04:01 2025 GMT Not After : Nov 4 02:40:01 2025 GMT Subject: CN=9E380A9D403C1F6C92633CD5D43F028A82E96474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:ab:33:d0:48:49:a9:11:0a:e1:1b:0d:ee: 03:56:04:18:f2:d9:5e:a0:14:27:90:af:3f:08:e9: f5:c2:09:50:ff:e3:85:7d:c2:75:6e:6c:9b:e3:87: 28:1c:7b:aa:3c:87:ad:1a:09:b8:85:d7:8e:0f:c1: 1c:48:1c:ed:a6:d2:6c:66:4d:de:12:6a:1d:8d:8a: 4c:62:ec:f9:d2:49:30:6c:40:50:a7:e0:72:b9:a4: d8:65:9a:6c:2e:f1:65:1a:6a:81:1f:5c:fc:c7:7c: cb:81:41:5c:1a:5f:ee:f7:49:e5:79:4b:44:20:64: 60:97:3f:1d:62:7e:ae:59:e0:87:44:90:c5:1b:74: 0b:a4:7b:4f:28:31:b3:9e:c7:70:7e:73:42:b8:61: 61:d7:16:d1:1c:d9:2a:73:e7:10:b3:fc:fb:24:2b: c0:7a:c7:d8:ba:80:7a:af:76:e3:12:c1:dd:da:9f: fc:20:6c:86:3c:8f:a3:b5:4a:25:2e:ef:8f:ff:3a: 60:29:30:fd:98:23:1f:71:4a:41:b7:aa:cf:e8:6c: ea:16:29:3a:81:4d:bc:6a:57:17:83:a5:ec:4a:0b: e4:17:54:43:e0:27:93:5c:6b:a1:d6:4a:86:cc:0c: 6f:d2:7e:b7:84:21:00:c7:3d:89:03:e2:1c:ed:91: 6d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:38:0A:9D:40:3C:1F:6C:92:63:3C:D5:D4:3F:02:8A:82:E9:64:74 X509v3 Authority Key Identifier: keyid:CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:59:84:dc:84:f0:85:e3:5d:11:51:93:c8:f8:09:d7:93:b1: 97:92:14:6e:d3:54:c5:b5:c4:0b:5a:f6:54:1d:d6:b9:eb:61: 28:48:1f:bb:87:0c:16:35:d7:d7:58:1c:32:0a:5d:0b:ed:f2: f3:a1:f0:62:d7:67:ec:89:aa:20:96:8e:1b:8a:08:f1:28:92: 1d:6e:da:e0:45:2e:92:e4:dc:c4:b0:25:a4:7f:3e:0b:83:26: 93:7f:f7:49:8b:2a:93:a7:22:c5:30:ac:0d:2b:8d:6a:33:69: 5d:00:9d:2c:7b:63:89:38:96:bd:47:8c:b1:a5:60:3c:54:6f: 6e:1a:fd:a9:cc:45:2b:c0:e8:d4:6e:5f:bf:9c:f3:ec:4b:99: 86:ed:c1:5d:b7:b0:d1:a3:87:35:99:eb:79:12:78:e0:34:f9: 15:ed:3b:96:00:d9:af:31:af:18:af:ef:0d:d3:52:1b:69:6b: b7:65:29:64:43:06:9c:55:78:8c:fa:ae:1a:12:4d:6b:31:66: 66:1d:d4:93:ff:35:c8:f0:68:3d:f9:6e:5b:90:88:b8:da:b5: 25:e9:f4:68:ff:9c:94:27:cb:b4:11:af:78:f8:1f:5f:e2:b3: 2f:7e:91:d7:ae:28:50:04:b5:9f:2f:9a:d9:20:84:d6:e2:e0: 4b:58:d5:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSwppyPUmO67p5iMfvSsUwKHb8MYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGQzNEMzg5RUU2QkFCN0NDRDVGNjYwRDYzMEE4QkU4 RTFBRTA1MzAeFw0yNTExMDMwMDA0MDFaFw0yNTExMDQwMjQwMDFaMDMxMTAvBgNV BAMTKDlFMzgwQTlENDAzQzFGNkM5MjYzM0NENUQ0M0YwMjhBODJFOTY0NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqmasz0EhJqREK4RsN7gNWBBjy 2V6gFCeQrz8I6fXCCVD/44V9wnVubJvjhygce6o8h60aCbiF144PwRxIHO2m0mxm Td4Sah2Nikxi7PnSSTBsQFCn4HK5pNhlmmwu8WUaaoEfXPzHfMuBQVwaX+73SeV5 S0QgZGCXPx1ifq5Z4IdEkMUbdAuke08oMbOex3B+c0K4YWHXFtEc2Spz5xCz/Psk K8B6x9i6gHqvduMSwd3an/wgbIY8j6O1SiUu74//OmApMP2YIx9xSkG3qs/obOoW KTqBTbxqVxeDpexKC+QXVEPgJ5Nca6HWSobMDG/SfreEIQDHPYkD4hztkW3PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnjgKnUA8H2ySYzzV1D8CioLpZHQwHwYDVR0j BBgwFoAUz/w9OJ7murfM1fZg1jCovo4a4FMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5 RFcvMS9DRkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGRkMzRDM4OUVFNkJBQjdD Q0Q1RjY2MEQ2MzBBOEJFOEUxQUUwNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODlLRlJtYWZuWlV2N1VMa2dycjZMeWhzMzJNWUd2QnE0S3FMQkJzS1k5RFcvMS9D RkZDM0QzODlFRTZCQUI3Q0NENUY2NjBENjMwQThCRThFMUFFMDUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK1mE3ITwheNdEVGTyPgJ15Oxl5IUbtNUxbXEC1r2VB3WuethKEgfu4cMFjXX 11gcMgpdC+3y86HwYtdn7ImqIJaOG4oI8SiSHW7a4EUukuTcxLAlpH8+C4Mmk3/3 SYsqk6cixTCsDSuNajNpXQCdLHtjiTiWvUeMsaVgPFRvbhr9qcxFK8Do1G5fv5zz 7EuZhu3BXbew0aOHNZnreRJ44DT5Fe07lgDZrzGvGK/vDdNSG2lrt2UpZEMGnFV4 jPquGhJNazFmZh3Uk/81yPBoPfluW5CIuNq1Jen0aP+clCfLtBGvePgfX+KzL36R 164oUAS1ny+a2SCE1uLgS1jVfQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:31:07 2025 by rpki-client