$ rpki-client -vvf rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.mft File: CC8086D196E8A5C61982081F90E17B277D50F224.mft (raw, json) Hash identifier: wAn3LeusdZ45TWrjvVO8tbCzeah9At5E6IM/cU0Uoq8= Subject key identifier: 5C:FE:D2:EB:2A:96:2C:30:01:DA:D1:95:E9:48:B5:32:97:EE:0E:E3 Authority key identifier: CC:80:86:D1:96:E8:A5:C6:19:82:08:1F:90:E1:7B:27:7D:50:F2:24 Certificate issuer: /CN=CC8086D196E8A5C61982081F90E17B277D50F224 Certificate serial: 47E8F8D78459B7AFE95F93F3E3156FB83291F531 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8086D196E8A5C61982081F90E17B277D50F224.cer Subject info access: rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.mft Manifest number: 0304 Signing time: Mon 03 Nov 2025 05:20:00 +0000 Manifest this update: Mon 03 Nov 2025 05:15:00 +0000 Manifest next update: Tue 04 Nov 2025 09:05:00 +0000 Files and hashes: 1: CC8086D196E8A5C61982081F90E17B277D50F224.crl (hash: qqI1VTsw3vglkw+DrRRfNUgWe9yeNdviyZMffhZr3M0=) 2: 34352e3136312e3139362e302f32322d3234203d3e20323635393035.roa (hash: vLmdo9KQ58nXNGaKvn9M76mAb5Rkp6osL4lr4pCuSjQ=) 3: 3133312e3139362e3130302e302f32322d3234203d3e20323635393035.roa (hash: 7rU9aTdzNPtasJu1My8RTNY/tWo9mK2SMy8Pd77r0+I=) 4: 323830343a336661383a3a2f33322d3334203d3e20323635393035.roa (hash: qgrx0B2fzRiY47gXpq+yGna7KKXinyEb5ugH1d9L0GA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.crl rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8086D196E8A5C61982081F90E17B277D50F224.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e8:f8:d7:84:59:b7:af:e9:5f:93:f3:e3:15:6f:b8:32:91:f5:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8086D196E8A5C61982081F90E17B277D50F224 Validity Not Before: Nov 3 05:15:00 2025 GMT Not After : Nov 4 09:05:00 2025 GMT Subject: CN=5CFED2EB2A962C3001DAD195E948B53297EE0EE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:49:b1:17:56:35:93:c4:83:a2:c5:1f:3d:13: 97:bc:fb:36:4a:dc:b9:9a:a8:22:e3:4c:3b:f5:6f: 76:1e:24:36:e6:3d:c7:9d:f1:22:2c:98:24:1e:d4: 4f:6c:a2:3a:87:45:7d:51:05:5b:d1:4d:83:6b:29: bf:f2:80:fb:1e:2f:cb:a8:cd:9f:ec:1f:e7:79:ab: ee:86:18:76:11:c1:c2:ca:3b:a8:25:5b:4a:6b:d1: 63:ec:e8:e6:d9:80:50:bd:ec:a1:74:85:67:1f:19: d3:d5:47:03:5e:17:b0:cf:21:b3:8f:31:70:dd:7c: cd:71:b4:6c:34:f6:8e:09:fd:73:63:a4:c4:46:bb: ba:6e:f4:69:e7:22:7c:a6:42:ac:9d:ff:d9:71:3e: 90:5d:1d:1c:37:08:bd:a4:f9:25:13:b4:e5:b3:91: d5:03:a8:a0:ba:0a:dd:33:e4:50:60:57:2e:25:40: 33:5a:8d:2f:00:f4:28:e0:76:a0:36:55:5b:d8:46: c3:17:e5:82:11:04:d4:10:e1:3f:f2:48:f6:35:51: 8b:40:d8:3b:9b:1e:eb:6e:13:12:ef:38:c0:c3:b7: b6:3b:ae:30:79:48:28:61:7b:b6:15:f8:53:22:bb: d7:d4:aa:22:e1:3f:d0:f0:2f:cc:6e:7a:1b:26:0b: 77:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FE:D2:EB:2A:96:2C:30:01:DA:D1:95:E9:48:B5:32:97:EE:0E:E3 X509v3 Authority Key Identifier: keyid:CC:80:86:D1:96:E8:A5:C6:19:82:08:1F:90:E1:7B:27:7D:50:F2:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC8086D196E8A5C61982081F90E17B277D50F224.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/1/CC8086D196E8A5C61982081F90E17B277D50F224.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:82:be:d4:f4:2c:34:e3:57:a4:c8:17:49:65:70:06:28:c4: e2:e3:d3:30:3e:06:fb:c4:5f:c9:dd:c1:8e:de:66:c9:a2:a4: 5a:c3:c7:57:2c:a1:d6:eb:d9:cd:59:5d:c8:36:9d:38:b5:50: de:32:3d:99:59:16:07:24:d4:5f:d9:60:0a:ff:7a:d3:20:3d: b0:3d:31:9f:1f:f8:b0:41:e5:b5:6e:76:c3:e4:89:51:8a:22: 14:e5:50:01:70:88:9f:f2:93:28:4c:ee:1d:c2:30:dc:db:da: a8:a9:8c:16:19:70:9a:a2:2a:11:8c:1c:cf:85:94:8c:38:68: 7f:a4:fe:05:14:d4:f6:b3:d1:1e:8e:7a:82:b5:e8:c3:a0:b2: 99:9b:b1:18:4e:d9:7b:1e:00:97:8d:a5:c8:6f:3c:b3:d6:75: 3a:0e:c8:0e:71:a7:bd:05:96:d5:d0:b7:7b:bb:aa:ae:28:66: 84:a3:18:bc:71:30:ba:02:11:c6:9e:16:17:77:3f:e1:a2:ea: 66:7d:75:d6:ad:48:55:bc:32:11:e4:27:6c:dc:17:6b:d6:53: 64:2b:55:04:1b:ea:81:ad:98:5e:49:f8:f9:e2:cc:6a:8a:83: 44:30:0b:5a:3c:4d:e1:19:d2:b0:17:0a:46:bc:88:b1:25:97: 16:44:e8:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR+j414RZt6/pX5Pz4xVvuDKR9TEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4MDg2RDE5NkU4QTVDNjE5ODIwODFGOTBFMTdCMjc3 RDUwRjIyNDAeFw0yNTExMDMwNTE1MDBaFw0yNTExMDQwOTA1MDBaMDMxMTAvBgNV BAMTKDVDRkVEMkVCMkE5NjJDMzAwMURBRDE5NUU5NDhCNTMyOTdFRTBFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDESbEXVjWTxIOixR89E5e8+zZK 3LmaqCLjTDv1b3YeJDbmPced8SIsmCQe1E9sojqHRX1RBVvRTYNrKb/ygPseL8uo zZ/sH+d5q+6GGHYRwcLKO6glW0pr0WPs6ObZgFC97KF0hWcfGdPVRwNeF7DPIbOP MXDdfM1xtGw09o4J/XNjpMRGu7pu9GnnInymQqyd/9lxPpBdHRw3CL2k+SUTtOWz kdUDqKC6Ct0z5FBgVy4lQDNajS8A9CjgdqA2VVvYRsMX5YIRBNQQ4T/ySPY1UYtA 2DubHutuExLvOMDDt7Y7rjB5SChhe7YV+FMiu9fUqiLhP9DwL8xuehsmC3cbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXP7S6yqWLDAB2tGV6Ui1MpfuDuMwHwYDVR0j BBgwFoAUzICG0ZbopcYZgggfkOF7J31Q8iQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWZDMVlVUHY1ajhFOGtuYzdDWXREd3BudlgzNW5Ld0VTUGZEbXhTdUN1 RkovMS9DQzgwODZEMTk2RThBNUM2MTk4MjA4MUY5MEUxN0IyNzdENTBGMjI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDODA4NkQxOTZFOEE1QzYx OTgyMDgxRjkwRTE3QjI3N0Q1MEYyMjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWZDMVlVUHY1ajhFOGtuYzdDWXREd3BudlgzNW5Ld0VTUGZEbXhTdUN1RkovMS9D QzgwODZEMTk2RThBNUM2MTk4MjA4MUY5MEUxN0IyNzdENTBGMjI0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATYK+1PQsNONXpMgXSWVwBijE4uPTMD4G+8Rfyd3Bjt5myaKkWsPHVyyh1uvZ zVldyDadOLVQ3jI9mVkWByTUX9lgCv960yA9sD0xnx/4sEHltW52w+SJUYoiFOVQ AXCIn/KTKEzuHcIw3NvaqKmMFhlwmqIqEYwcz4WUjDhof6T+BRTU9rPRHo56grXo w6CymZuxGE7Zex4Al42lyG88s9Z1Og7IDnGnvQWW1dC3e7uqrihmhKMYvHEwugIR xp4WF3c/4aLqZn111q1IVbwyEeQnbNwXa9ZTZCtVBBvqga2YXkn4+eLMaoqDRDAL WjxN4RnSsBcKRryIsSWXFkTozA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:25:42 2025 by rpki-client