$ rpki-client -vvf rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft File: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft (raw, json) Hash identifier: z314w3dV1LxCjKOXnXbWLgq4jl3yr7lXEhuZS/eOb0c= Subject key identifier: 12:4C:61:A1:3C:88:8B:6F:50:D2:72:50:53:C2:66:F8:66:07:66:EA Authority key identifier: 2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE Certificate issuer: /CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE Certificate serial: 50AFC9C6893453C1B629A6A3114C9E9E22E3792B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer Subject info access: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft Manifest number: 0280 Signing time: Sat 26 Jul 2025 23:37:53 +0000 Manifest this update: Sat 26 Jul 2025 23:32:53 +0000 Manifest next update: Sun 27 Jul 2025 23:47:53 +0000 Files and hashes: 1: 323830343a363436633a3a2f33322d3430203d3e20323639343237.roa (hash: edA3Rs6eMjpScHqME9Ghe5dGKocqfYma+Nqo84HmhRQ=) 2: 34352e3138352e36342e302f32322d3234203d3e20323639343237.roa (hash: KM9thWqBbCezSnN/udktn45yMz+Zf63QSRQur/etjgw=) 3: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl (hash: pNqkBLqbt2LznGVSWYE1uI8eRCwdVuGAb3TEHV6g9vo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 23:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:af:c9:c6:89:34:53:c1:b6:29:a6:a3:11:4c:9e:9e:22:e3:79:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE Validity Not Before: Jul 26 23:32:53 2025 GMT Not After : Jul 27 23:47:53 2025 GMT Subject: CN=124C61A13C888B6F50D2725053C266F8660766EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:03:1e:fc:61:d0:f9:16:57:ba:87:6d:cb: a2:57:71:db:57:9e:95:0b:ea:f3:73:e7:7f:2b:ae: 24:c3:44:8b:67:67:0d:1f:44:5f:f9:a6:e0:3a:52: f2:25:51:ab:0a:b3:08:56:a8:48:17:48:cc:3b:0f: 8c:64:72:8c:c3:39:a2:6d:17:60:3f:f0:91:48:ac: 3c:dd:52:1e:73:1e:64:69:c3:8b:34:88:51:39:b7: 96:04:d8:4c:71:a3:1b:c4:61:02:d9:aa:56:da:7e: f5:c8:8f:81:ca:41:dc:83:20:e4:f1:97:53:d6:ac: 2a:03:1e:bd:2d:13:38:de:71:21:c3:d5:af:bd:88: f1:8b:9a:dd:29:76:13:75:bc:4b:43:ef:c2:3d:7c: 6a:c5:e6:0a:6a:9f:b8:68:7a:83:80:14:9c:81:94: ac:89:56:f6:33:c4:ec:26:11:f6:7f:53:97:b9:eb: 24:e0:63:b6:63:e2:a9:42:08:96:be:fc:0b:29:be: 3e:b1:53:ba:21:eb:a5:a6:4f:c4:de:e8:6c:47:e3: ba:e0:dd:7c:e7:a7:2b:4f:c8:50:61:3d:0b:c1:44: 48:52:4e:55:83:fc:9e:45:45:ab:c6:02:4e:d8:d8: 5b:f9:47:a5:25:09:c7:ed:d2:7c:8a:4e:61:08:4b: 71:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4C:61:A1:3C:88:8B:6F:50:D2:72:50:53:C2:66:F8:66:07:66:EA X509v3 Authority Key Identifier: keyid:2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:39:a1:f7:d6:02:d4:1e:67:67:44:c4:c4:dc:cf:9e:fb:2c: 44:0b:75:28:64:9e:86:9d:09:b7:44:4c:4d:ff:c2:c0:df:13: b2:38:bf:55:db:06:3f:93:af:3a:28:47:aa:33:e4:8b:e1:bb: fe:2d:07:dc:d0:63:fa:11:6a:cb:15:03:b7:67:f5:46:fd:ac: a1:5f:89:39:c6:f0:36:27:56:f2:5a:ad:9e:8e:46:51:b3:88: 76:d1:ec:48:b2:40:41:d2:9b:a4:3b:bc:1e:fa:da:14:9f:18: ab:10:49:c4:b5:b6:72:c1:f7:3a:af:45:31:7a:24:57:22:51: a6:39:17:92:e3:02:0f:35:2d:49:25:7b:e0:20:44:16:a9:86: c8:7a:ac:eb:88:a9:70:d6:cb:88:e1:1f:89:fb:51:8d:a2:3c: 3e:9c:56:fc:3c:8d:86:dc:84:a6:40:ca:d3:6c:f6:db:ba:ca: 48:86:e4:53:1c:cf:d8:13:fb:f4:3d:78:ba:c1:15:ce:6f:bd: 0e:dc:2e:67:b4:b8:dd:6f:f4:7c:2d:fb:22:7d:d8:e0:54:d7: 4f:ff:ba:0e:d0:a9:30:6c:ca:22:20:57:ee:4d:e9:38:69:f1: e6:0d:88:07:15:bf:1a:df:c3:b2:04:2b:20:2f:3a:2e:40:88: fe:63:c6:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUK/Jxok0U8G2KaajEUyeniLjeSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCNTk0N0IzRUIyMjUyREMyQzI4QTFGNUY4NTYxMjMy NjAwMzZGRTAeFw0yNTA3MjYyMzMyNTNaFw0yNTA3MjcyMzQ3NTNaMDMxMTAvBgNV BAMTKDEyNEM2MUExM0M4ODhCNkY1MEQyNzI1MDUzQzI2NkY4NjYwNzY2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXgMe/GHQ+RZXuodty6JXcdtX npUL6vNz538rriTDRItnZw0fRF/5puA6UvIlUasKswhWqEgXSMw7D4xkcozDOaJt F2A/8JFIrDzdUh5zHmRpw4s0iFE5t5YE2ExxoxvEYQLZqlbafvXIj4HKQdyDIOTx l1PWrCoDHr0tEzjecSHD1a+9iPGLmt0pdhN1vEtD78I9fGrF5gpqn7hoeoOAFJyB lKyJVvYzxOwmEfZ/U5e56yTgY7Zj4qlCCJa+/Aspvj6xU7oh66WmT8Te6GxH47rg 3XznpytPyFBhPQvBREhSTlWD/J5FRavGAk7Y2Fv5R6UlCcft0nyKTmEIS3HJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEkxhoTyIi29Q0nJQU8Jm+GYHZuowHwYDVR0j BBgwFoAUK7WUez6yJS3CwoofX4VhIyYANv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNndOdzJpYnhNVms3TUdjTVRobW81Y2Y2YjlMQ2N6YmJGdlp4OTQ5ZlJn MWkvMi8yQkI1OTQ3QjNFQjIyNTJEQzJDMjhBMUY1Rjg1NjEyMzI2MDAzNkZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjU5NDdCM0VCMjI1MkRD MkMyOEExRjVGODU2MTIzMjYwMDM2RkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NndOdzJpYnhNVms3TUdjTVRobW81Y2Y2YjlMQ2N6YmJGdlp4OTQ5ZlJnMWkvMi8y QkI1OTQ3QjNFQjIyNTJEQzJDMjhBMUY1Rjg1NjEyMzI2MDAzNkZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjzmh99YC1B5nZ0TExNzPnvssRAt1KGSehp0Jt0RMTf/CwN8Tsji/VdsGP5Ov OihHqjPki+G7/i0H3NBj+hFqyxUDt2f1Rv2soV+JOcbwNidW8lqtno5GUbOIdtHs SLJAQdKbpDu8HvraFJ8YqxBJxLW2csH3Oq9FMXokVyJRpjkXkuMCDzUtSSV74CBE FqmGyHqs64ipcNbLiOEfiftRjaI8PpxW/DyNhtyEpkDK02z227rKSIbkUxzP2BP7 9D14usEVzm+9DtwuZ7S43W/0fC37In3Y4FTXT/+6DtCpMGzKIiBX7k3pOGnx5g2I BxW/Gt/DsgQrIC86LkCI/mPGAQ== -----END CERTIFICATE-----Generated at Sun Jul 27 06:09:49 2025 by rpki-client