$ rpki-client -vvf rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft File: CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft (raw, json) Hash identifier: 19lHwFo6i9vO9blYp5sKhX7VQtBBpvNpb2S4VbGwC7E= Subject key identifier: CE:C9:73:CC:2F:B9:90:7C:29:05:DC:F0:F7:35:02:CB:0A:49:2B:67 Authority key identifier: CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE Certificate issuer: /CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE Certificate serial: 467EBD6878D3598AC2AFA8ECF834F16C45B81B0E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer Subject info access: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft Manifest number: 02C8 Signing time: Thu 18 Sep 2025 04:18:25 +0000 Manifest this update: Thu 18 Sep 2025 04:13:25 +0000 Manifest next update: Fri 19 Sep 2025 07:43:25 +0000 Files and hashes: 1: CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl (hash: GqyQlM/NVmNF+Tn/YTeYRmjHbCGp8g9GW1IB2J/i9cA=) 2: 3133382e3131382e3235322e302f32322d3234203d3e203532373432.roa (hash: VlQMtP6NQInhiwVIoJiXBUj4Ie/wB4WGdHL21LfKPc8=) 3: 323830343a6362303a3a2f33322d3438203d3e203532373432.roa (hash: mRxu11XcEscOClSKiTBJjxbSJvEsYBDMWoxEVFfNJj8=) 4: 3137372e3133302e31362e302f32302d3234203d3e203532373432.roa (hash: 9l8kTSfO14FYIp88kOmGp0EuZJyDmBsCUWflQkx6Kmo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 07:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:7e:bd:68:78:d3:59:8a:c2:af:a8:ec:f8:34:f1:6c:45:b8:1b:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE Validity Not Before: Sep 18 04:13:25 2025 GMT Not After : Sep 19 07:43:25 2025 GMT Subject: CN=CEC973CC2FB9907C2905DCF0F73502CB0A492B67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9e:30:fb:e7:ea:c9:a7:4e:f4:26:a7:46:20: bd:03:8a:0c:96:a9:96:80:e9:e0:ee:4c:eb:5d:24: 09:39:b9:31:00:1e:b7:4d:96:38:4d:39:4e:1c:d3: cc:40:ee:c1:e9:53:e7:7b:1b:22:cb:cb:1b:82:76: 8a:ad:4c:e9:0f:49:61:9e:42:e1:da:8e:25:46:e0: e7:14:0b:f3:8f:86:3d:71:b1:95:ae:9e:50:00:34: 8b:22:f0:7f:89:71:bd:6b:d0:fd:a3:3a:ab:3e:a4: 94:41:1e:9f:77:98:57:3c:98:fd:0f:ee:35:94:a3: a9:a1:de:eb:a3:dc:53:39:81:49:e0:5b:fb:c4:98: c7:7d:79:95:90:97:cc:54:24:7e:24:27:8c:6c:fd: d7:17:17:32:88:e2:50:c1:81:53:98:ce:73:d6:27: e3:6e:c1:5f:5f:ed:d1:f7:11:86:c9:57:97:85:5d: 49:7e:ca:9d:57:83:9f:f6:a9:5f:79:09:8f:c4:89: 58:fc:56:50:89:b9:85:74:ef:80:35:bd:9e:df:4c: 41:fd:0c:b6:fc:bd:1f:c9:b9:cb:6a:d7:3c:a9:c4: 77:9f:9e:98:a3:68:73:b0:d7:ae:ae:79:ae:50:92: e4:76:0e:e3:53:54:fe:4f:12:24:ed:59:f8:c8:69: e7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C9:73:CC:2F:B9:90:7C:29:05:DC:F0:F7:35:02:CB:0A:49:2B:67 X509v3 Authority Key Identifier: keyid:CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:bf:af:72:b8:04:06:af:a4:2d:9e:c3:3f:94:ad:ed:1a:cb: 82:3a:82:33:4a:f2:5e:3e:e2:65:81:75:03:b8:84:11:96:18: 2a:77:ea:ce:46:65:c2:93:bf:85:ca:2d:8e:28:a6:5b:04:24: cf:a0:48:a8:41:ce:b2:8c:02:bb:e7:19:84:05:ce:0e:52:db: a7:f6:28:50:42:74:14:a5:4d:f2:f1:8f:e1:02:73:c2:00:51: af:02:9a:25:c3:e3:a5:5e:17:61:36:25:f7:4c:90:8e:c6:ad: 32:99:ce:51:91:85:37:d6:99:48:b2:8f:0b:89:c4:1d:3b:0c: 5a:d9:71:78:f8:e0:ff:96:2a:e4:86:1c:e5:83:a8:b3:1d:a2: 4b:2e:83:84:9c:78:64:6b:39:9c:e1:c4:07:e6:bc:93:c2:f0: 62:7a:7c:4f:0a:96:30:bc:57:47:94:73:5f:9a:3d:1a:41:bf: f5:20:73:05:a3:bd:82:ff:36:94:59:99:91:27:26:49:3d:ff: 57:b2:8f:c2:7e:dc:c6:90:1e:21:7d:83:90:da:0b:89:f6:90: 84:bd:af:51:8f:36:f1:0d:76:62:5b:f1:7a:ae:7f:05:05:fa: fd:c4:84:c3:01:60:14:21:c2:14:c8:da:28:83:95:1c:60:f1: 4f:82:d1:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURn69aHjTWYrCr6js+DTxbEW4Gw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCNzU4MkYyODY5OUYzNTEwNjlDOEM3NkNDOTcxNjdC RjdCQjJFRTAeFw0yNTA5MTgwNDEzMjVaFw0yNTA5MTkwNzQzMjVaMDMxMTAvBgNV BAMTKENFQzk3M0NDMkZCOTkwN0MyOTA1RENGMEY3MzUwMkNCMEE0OTJCNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrnjD75+rJp070JqdGIL0DigyW qZaA6eDuTOtdJAk5uTEAHrdNljhNOU4c08xA7sHpU+d7GyLLyxuCdoqtTOkPSWGe QuHajiVG4OcUC/OPhj1xsZWunlAANIsi8H+Jcb1r0P2jOqs+pJRBHp93mFc8mP0P 7jWUo6mh3uuj3FM5gUngW/vEmMd9eZWQl8xUJH4kJ4xs/dcXFzKI4lDBgVOYznPW J+NuwV9f7dH3EYbJV5eFXUl+yp1Xg5/2qV95CY/EiVj8VlCJuYV074A1vZ7fTEH9 DLb8vR/Juctq1zypxHefnpijaHOw166uea5QkuR2DuNTVP5PEiTtWfjIaectAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzslzzC+5kHwpBdzw9zUCywpJK2cwHwYDVR0j BBgwFoAUz7dYLyhpnzUQacjHbMlxZ797su4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVy VDcvMS9DRkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGQjc1ODJGMjg2OTlGMzUx MDY5QzhDNzZDQzk3MTY3QkY3QkIyRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVyVDcvMS9D RkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK7+vcrgEBq+kLZ7DP5St7RrLgjqCM0ryXj7iZYF1A7iEEZYYKnfqzkZlwpO/ hcotjiimWwQkz6BIqEHOsowCu+cZhAXODlLbp/YoUEJ0FKVN8vGP4QJzwgBRrwKa JcPjpV4XYTYl90yQjsatMpnOUZGFN9aZSLKPC4nEHTsMWtlxePjg/5Yq5IYc5YOo sx2iSy6DhJx4ZGs5nOHEB+a8k8LwYnp8TwqWMLxXR5RzX5o9GkG/9SBzBaO9gv82 lFmZkScmST3/V7KPwn7cxpAeIX2DkNoLifaQhL2vUY828Q12Ylvxeq5/BQX6/cSE wwFgFCHCFMjaKIOVHGDxT4LRgg== -----END CERTIFICATE-----Generated at Thu Sep 18 08:55:40 2025 by rpki-client