$ rpki-client -vvf rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft File: CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft (raw, json) Hash identifier: X2MOmXd1b+O6cgng+8fMxcoUhAEjzP6+IRfoPbVE4Qo= Subject key identifier: DD:D2:0B:DD:9E:01:DF:A7:E3:44:D6:01:49:0E:FC:28:46:79:AE:5A Authority key identifier: CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7 Certificate issuer: /CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7 Certificate serial: 634CA24A70185C44F043025D2B98DDA12E65EBA9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft Manifest number: 02BE Signing time: Thu 18 Sep 2025 00:22:36 +0000 Manifest this update: Thu 18 Sep 2025 00:17:36 +0000 Manifest next update: Fri 19 Sep 2025 01:16:36 +0000 Files and hashes: 1: 34352e3233312e3130302e302f32322d3234203d3e20323637323336.roa (hash: t7wZjfHEHsD5Rmlff5gVkl4UrV8eQCO1lvq1c9DJVOw=) 2: CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl (hash: W7NKfWjLqVaXLNTHbpRj2BAaKIANyC8JkL7HD0Kdc64=) 3: 323830343a346136303a3a2f33322d3438203d3e20323637323336.roa (hash: mXVXROdrhx5zziqcEEeWD0Vzy58pLNqk9Cz+8buZybE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 01:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4c:a2:4a:70:18:5c:44:f0:43:02:5d:2b:98:dd:a1:2e:65:eb:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7 Validity Not Before: Sep 18 00:17:36 2025 GMT Not After : Sep 19 01:16:36 2025 GMT Subject: CN=DDD20BDD9E01DFA7E344D601490EFC284679AE5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:01:ee:cc:b6:e6:d4:4a:af:5c:17:fc:9a: f2:99:07:ca:25:2d:d0:c9:d4:d2:9f:d6:06:47:6b: 26:48:b9:00:6c:0d:95:31:df:0e:8f:ea:26:1c:2e: a5:74:71:f4:b7:a0:6a:a5:c5:74:37:44:b4:3d:d4: 0e:2c:76:20:3a:a6:1a:4a:c9:9d:fe:8b:6f:6a:48: d3:51:ca:89:f7:39:90:99:60:62:e1:fa:43:62:31: ca:e5:2e:91:ef:ac:cb:9d:80:c5:f6:34:a9:90:b3: 84:d0:95:16:27:8a:2a:80:50:38:a6:cd:6d:50:0c: 88:93:92:a0:24:96:08:03:9e:98:e5:59:13:bd:43: c1:09:4f:cc:0e:7a:dc:92:36:8b:0c:79:e4:87:94: 78:bc:6d:9b:f7:b1:94:49:c9:cb:f7:be:e5:d9:73: c3:81:c6:80:85:fc:91:33:33:87:34:e0:ab:3c:88: 4a:7a:6a:0b:cf:bc:b0:db:d3:17:3e:32:8d:4d:ba: 2b:3c:7c:e7:f9:66:1c:ad:02:49:c1:8c:f2:dc:12: 4d:30:b7:89:2f:71:a4:98:b0:b2:53:f0:1b:50:5f: bc:43:fa:f8:5b:af:6b:0e:4e:8a:6a:db:36:95:a6: 76:8d:1b:d9:89:c0:9f:7c:f4:e6:ff:80:10:88:de: ea:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D2:0B:DD:9E:01:DF:A7:E3:44:D6:01:49:0E:FC:28:46:79:AE:5A X509v3 Authority Key Identifier: keyid:CC:EF:2D:3E:A5:BD:18:7C:45:EA:6D:3A:8F:AF:71:CD:15:F7:D2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MppwbQjErZzdCCwdxx5Kn7WGKVxckRRs5m99ampc5X6/1/CCEF2D3EA5BD187C45EA6D3A8FAF71CD15F7D2A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:78:c8:a4:60:3d:f3:d5:af:6b:f3:b4:c9:7b:6f:96:f9:df: c1:69:55:80:7d:e1:b8:a7:2a:64:be:ec:7c:17:56:20:39:78: 07:e6:8f:71:be:7b:6f:ac:34:e2:f5:4f:a3:bb:44:9f:b4:80: 29:b2:e6:71:ef:be:b7:fc:84:9b:2d:a9:a0:65:15:c3:c9:62: 14:2a:f6:11:8a:6f:13:22:e9:d6:09:5d:3c:a1:30:b6:17:5d: 59:42:91:76:67:fb:d7:4b:51:00:05:c3:26:5a:f4:8a:88:d0: 68:27:a4:a2:af:5a:b1:0a:b4:9f:9a:0e:6f:ac:ee:4d:70:63: 30:2c:e1:86:6a:bb:49:3f:84:4b:2f:d4:92:4b:2b:d8:c1:6f: ac:d4:16:ed:37:7d:fa:36:46:b1:ae:0a:da:7a:2d:b5:a1:ef: ee:f7:f4:5c:cf:54:bb:d9:f0:a4:ff:bc:52:7c:84:d3:4b:c9: 02:42:ef:45:b2:67:d8:e0:7d:76:9c:6c:46:83:cd:3a:bf:b6: 7d:b6:fb:57:e6:e9:7c:4a:13:6d:d8:2d:39:4c:db:06:2e:aa: e3:b0:37:fc:2b:31:99:6c:84:94:21:d0:25:62:35:2a:c8:78: 05:f2:4d:0f:27:56:5b:3d:de:1d:cf:99:83:6f:ec:f1:7e:7a: 93:de:60:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY0yiSnAYXETwQwJdK5jdoS5l66kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NFRjJEM0VBNUJEMTg3QzQ1RUE2RDNBOEZBRjcxQ0Qx NUY3RDJBNzAeFw0yNTA5MTgwMDE3MzZaFw0yNTA5MTkwMTE2MzZaMDMxMTAvBgNV BAMTKERERDIwQkREOUUwMURGQTdFMzQ0RDYwMTQ5MEVGQzI4NDY3OUFFNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjzAHuzLbm1EqvXBf8mvKZB8ol LdDJ1NKf1gZHayZIuQBsDZUx3w6P6iYcLqV0cfS3oGqlxXQ3RLQ91A4sdiA6phpK yZ3+i29qSNNRyon3OZCZYGLh+kNiMcrlLpHvrMudgMX2NKmQs4TQlRYniiqAUDim zW1QDIiTkqAklggDnpjlWRO9Q8EJT8wOetySNosMeeSHlHi8bZv3sZRJycv3vuXZ c8OBxoCF/JEzM4c04Ks8iEp6agvPvLDb0xc+Mo1Nuis8fOf5ZhytAknBjPLcEk0w t4kvcaSYsLJT8BtQX7xD+vhbr2sOTopq2zaVpnaNG9mJwJ989Ob/gBCI3uoVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3dIL3Z4B36fjRNYBSQ78KEZ5rlowHwYDVR0j BBgwFoAUzO8tPqW9GHxF6m06j69xzRX30qcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1wcHdiUWpFclp6ZENDd2R4eDVLbjdXR0tWeGNrUlJzNW05OWFtcGM1 WDYvMS9DQ0VGMkQzRUE1QkQxODdDNDVFQTZEM0E4RkFGNzFDRDE1RjdEMkE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDRUYyRDNFQTVCRDE4N0M0 NUVBNkQzQThGQUY3MUNEMTVGN0QyQTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1wcHdiUWpFclp6ZENDd2R4eDVLbjdXR0tWeGNrUlJzNW05OWFtcGM1WDYvMS9D Q0VGMkQzRUE1QkQxODdDNDVFQTZEM0E4RkFGNzFDRDE1RjdEMkE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC3jIpGA989Wva/O0yXtvlvnfwWlVgH3huKcqZL7sfBdWIDl4B+aPcb57b6w0 4vVPo7tEn7SAKbLmce++t/yEmy2poGUVw8liFCr2EYpvEyLp1gldPKEwthddWUKR dmf710tRAAXDJlr0iojQaCekoq9asQq0n5oOb6zuTXBjMCzhhmq7ST+ESy/Ukksr 2MFvrNQW7Td9+jZGsa4K2nottaHv7vf0XM9Uu9nwpP+8UnyE00vJAkLvRbJn2OB9 dpxsRoPNOr+2fbb7V+bpfEoTbdgtOUzbBi6q47A3/CsxmWyElCHQJWI1Ksh4BfJN DydWWz3eHc+Zg2/s8X56k95gEw== -----END CERTIFICATE-----Generated at Thu Sep 18 16:24:19 2025 by rpki-client