$ rpki-client -vvf rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.mft File: CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.mft (raw, json) Hash identifier: RMmlFZyyect1OSMprAEu2jVpus1DIzQZqnb8XkrqgAY= Subject key identifier: DA:6E:3C:A5:14:71:31:B5:F3:6C:AF:FA:B1:59:AF:3D:75:FB:8C:39 Authority key identifier: CC:70:3E:02:28:D3:E2:59:1C:D7:B2:1A:9C:27:F1:54:2E:0D:BD:09 Certificate issuer: /CN=CC703E0228D3E2591CD7B21A9C27F1542E0DBD09 Certificate serial: 7196486ED53E78EF2B671F77D011D1833DD0287F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.cer Subject info access: rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.mft Manifest number: 14 Signing time: Fri 04 Jul 2025 11:03:44 +0000 Manifest this update: Fri 04 Jul 2025 10:58:44 +0000 Manifest next update: Sat 05 Jul 2025 11:27:44 +0000 Files and hashes: 1: 34352e3232372e37362e302f32322d3234203d3e20323637303535.roa (hash: cvm5TvyGB+eGHjDcZDEwAZq2Jex/pRAreV/44pY5uyM=) 2: CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.crl (hash: ZaggHWf5J+pwEGULiUilsupCxm0+KzjPPVLdL3tpL1g=) 3: 323830343a343737343a3a2f33322d3438203d3e20323637303535.roa (hash: cVsXL9zzKnxJrQTMHMgMaF0pGRDjh9GVMVfwM+AegAE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.crl rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 11:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:96:48:6e:d5:3e:78:ef:2b:67:1f:77:d0:11:d1:83:3d:d0:28:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC703E0228D3E2591CD7B21A9C27F1542E0DBD09 Validity Not Before: Jul 4 10:58:44 2025 GMT Not After : Jul 5 11:27:44 2025 GMT Subject: CN=DA6E3CA5147131B5F36CAFFAB159AF3D75FB8C39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:3c:0c:18:73:f9:ed:2a:fc:a4:8e:31:a8: 1b:0a:18:93:86:82:aa:a4:df:c5:17:8b:e9:14:9a: 54:29:19:73:b4:9b:2a:4b:56:91:57:8b:d5:d8:d2: fc:4e:f9:a0:d0:5a:72:ee:a0:2a:26:60:a9:4f:de: 01:68:e7:0a:79:66:6f:55:7c:07:27:33:d3:7f:da: fe:de:76:7a:ec:07:7d:8e:8a:8a:e3:c6:ac:6c:49: 29:ca:fb:e4:59:03:6e:09:d4:46:19:a9:30:6f:7c: 36:d9:c7:0d:7b:08:a4:2c:98:95:6f:1b:03:9c:7f: b8:15:d7:fd:89:25:d8:ef:bd:57:80:1d:6b:78:78: 84:8f:22:1b:29:5e:f1:e5:a2:a9:fc:1a:12:e5:fd: ae:e8:f3:33:39:37:75:1a:bf:b9:d9:a9:59:28:a8: 3b:ac:b3:f3:dc:ab:20:18:46:a0:7c:40:fc:d9:be: 7a:6b:2a:d4:81:9a:5f:99:a6:0c:d1:f9:85:b2:19: 9a:9d:9d:cf:be:d7:33:ae:79:8b:22:14:cd:84:5c: 5d:f8:7f:97:46:44:5c:41:a8:20:2b:99:c6:dc:2f: f3:a4:7c:d6:e0:96:bd:de:74:1b:99:b2:fb:52:29: 5e:18:82:8e:40:58:1d:7d:37:03:42:b5:40:55:12: a3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6E:3C:A5:14:71:31:B5:F3:6C:AF:FA:B1:59:AF:3D:75:FB:8C:39 X509v3 Authority Key Identifier: keyid:CC:70:3E:02:28:D3:E2:59:1C:D7:B2:1A:9C:27:F1:54:2E:0D:BD:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/0/CC703E0228D3E2591CD7B21A9C27F1542E0DBD09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:34:0f:04:b6:89:bd:b0:c9:a5:20:7a:d1:6f:ec:a2:2a:ed: 6e:89:e6:68:64:df:3c:48:94:0e:2c:3f:95:2d:a3:a1:25:50: 15:47:f3:61:93:00:1a:4f:cf:bb:2d:31:74:54:77:25:08:c0: 5f:e6:ec:f9:c5:29:a7:4c:ae:6d:20:4d:a7:92:cd:46:2d:0e: b7:60:17:9b:26:df:70:93:a1:42:ff:fa:46:8d:9f:8f:19:7f: 83:be:24:04:89:9e:d6:7d:14:9e:de:9b:1f:b2:4d:73:0c:6f: 4e:8f:f8:e2:18:ea:b1:04:8f:6c:f8:bf:ff:4f:8f:47:99:58: 54:ab:47:bd:77:ff:b1:08:14:83:2c:12:ce:4a:e9:4f:ed:2e: 60:34:fa:ea:82:b8:df:98:52:d1:0d:70:9a:4c:f0:14:f6:ab: 3c:8d:2f:f6:fc:ab:03:fb:b3:7b:46:f0:e7:bd:57:24:4a:39: 08:bd:b1:7c:70:8f:39:86:bf:1f:14:fb:f4:85:98:05:9d:4c: e1:3d:3b:d4:03:60:cd:6d:72:64:a6:de:14:69:69:95:7e:22: 22:20:dd:b9:1a:ea:d9:79:0f:d3:e3:7c:99:18:a3:a4:7c:6d: 57:ea:95:f1:46:0b:66:ff:78:84:16:21:4a:3d:57:29:ad:63: 74:2f:d1:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcZZIbtU+eO8rZx930BHRgz3QKH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3MDNFMDIyOEQzRTI1OTFDRDdCMjFBOUMyN0YxNTQy RTBEQkQwOTAeFw0yNTA3MDQxMDU4NDRaFw0yNTA3MDUxMTI3NDRaMDMxMTAvBgNV BAMTKERBNkUzQ0E1MTQ3MTMxQjVGMzZDQUZGQUIxNTlBRjNENzVGQjhDMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBzwMGHP57Sr8pI4xqBsKGJOG gqqk38UXi+kUmlQpGXO0mypLVpFXi9XY0vxO+aDQWnLuoComYKlP3gFo5wp5Zm9V fAcnM9N/2v7ednrsB32OiorjxqxsSSnK++RZA24J1EYZqTBvfDbZxw17CKQsmJVv GwOcf7gV1/2JJdjvvVeAHWt4eISPIhspXvHloqn8GhLl/a7o8zM5N3Uav7nZqVko qDuss/PcqyAYRqB8QPzZvnprKtSBml+ZpgzR+YWyGZqdnc++1zOueYsiFM2EXF34 f5dGRFxBqCArmcbcL/OkfNbglr3edBuZsvtSKV4Ygo5AWB19NwNCtUBVEqMtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2m48pRRxMbXzbK/6sVmvPXX7jDkwHwYDVR0j BBgwFoAUzHA+AijT4lkc17IanCfxVC4NvQkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWd4Q1pSMmZNQTllVmlFZmJtYTFQMlhwMURHUUZ4VlZ1cGVrY243UHJO Z24vMC9DQzcwM0UwMjI4RDNFMjU5MUNEN0IyMUE5QzI3RjE1NDJFMERCRDA5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDNzAzRTAyMjhEM0UyNTkx Q0Q3QjIxQTlDMjdGMTU0MkUwREJEMDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWd4Q1pSMmZNQTllVmlFZmJtYTFQMlhwMURHUUZ4VlZ1cGVrY243UHJOZ24vMC9D QzcwM0UwMjI4RDNFMjU5MUNEN0IyMUE5QzI3RjE1NDJFMERCRDA5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZDQPBLaJvbDJpSB60W/soirtbonmaGTfPEiUDiw/lS2joSVQFUfzYZMAGk/P uy0xdFR3JQjAX+bs+cUpp0yubSBNp5LNRi0Ot2AXmybfcJOhQv/6Ro2fjxl/g74k BIme1n0Unt6bH7JNcwxvTo/44hjqsQSPbPi//0+PR5lYVKtHvXf/sQgUgywSzkrp T+0uYDT66oK435hS0Q1wmkzwFParPI0v9vyrA/uze0bw571XJEo5CL2xfHCPOYa/ HxT79IWYBZ1M4T071ANgzW1yZKbeFGlplX4iIiDduRrq2XkP0+N8mRijpHxtV+qV 8UYLZv94hBYhSj1XKa1jdC/R7A== -----END CERTIFICATE-----Generated at Fri Jul 4 14:55:16 2025 by rpki-client