$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft File: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json) Hash identifier: aLXOuMHoVmu5YsmaZeLODTWhX7ZvHBOrqwDr3XV8LrQ= Subject key identifier: D1:0B:46:CE:1B:97:20:BF:5C:3E:94:21:4B:9F:8E:A2:35:3E:7D:7B Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Certificate serial: 2116D1E771F1768FF0B6E2AFC4653915C232ADBA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft Manifest number: 0307 Signing time: Mon 03 Nov 2025 06:09:30 +0000 Manifest this update: Mon 03 Nov 2025 06:04:30 +0000 Manifest next update: Tue 04 Nov 2025 06:30:30 +0000 Files and hashes: 1: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: pHe20fgS6bL7ZvEJKidcB+JgUSmBa1tgaD8A085JDEs=) 2: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: Qo7jd7bqgZ8RaIGB3HsVpFHOePniB9jZXdO3Roenvho=) 3: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: 7KaEu9sw42ksNhOklCsT9hgtSIgophy55hML3k/smrA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 06:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:16:d1:e7:71:f1:76:8f:f0:b6:e2:af:c4:65:39:15:c2:32:ad:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Validity Not Before: Nov 3 06:04:30 2025 GMT Not After : Nov 4 06:30:30 2025 GMT Subject: CN=D10B46CE1B9720BF5C3E94214B9F8EA2353E7D7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:9b:12:45:c6:15:7e:f5:80:46:80:86:13: 94:e2:2b:5c:fb:ab:d3:1b:cb:60:96:cc:09:72:40: a0:47:72:3b:61:77:20:65:50:fe:d8:78:f6:3e:3b: 83:f3:13:ba:36:f7:ed:58:2e:ee:73:73:1d:04:8d: cb:b5:a0:e3:f6:a3:ed:4f:2b:0e:bf:68:f4:27:ef: 9f:a9:dd:65:78:78:95:57:e4:bb:c5:4b:70:df:84: fe:80:94:d7:38:11:47:19:5d:f4:1e:27:4a:03:c7: 1c:65:e2:33:cb:5a:7e:08:15:d2:ee:f4:27:c6:11: 8d:cc:ab:9f:92:25:5a:10:56:b8:68:1e:af:0a:b3: a0:19:b9:9c:14:5d:cd:e1:a9:ed:05:01:7a:1f:7f: 46:b5:0a:28:fd:f6:ca:d9:6a:ad:f8:a0:f0:8a:ad: a2:87:4a:5d:f1:82:6b:a2:38:96:22:4c:70:82:6a: 3f:d0:9f:cd:cd:ed:fb:5a:8d:39:fb:b0:e4:a9:fe: f6:a9:8a:38:4d:ca:aa:a4:63:93:d4:81:31:39:fe: 13:29:fa:f7:d9:ad:f1:67:1b:7e:ab:14:57:8f:4a: 61:cd:4d:8d:b7:e4:2d:d7:c6:0f:dd:72:14:5b:96: d6:f1:79:a1:50:96:1c:96:93:8b:6f:63:88:3b:c3: 37:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0B:46:CE:1B:97:20:BF:5C:3E:94:21:4B:9F:8E:A2:35:3E:7D:7B X509v3 Authority Key Identifier: keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:b3:ab:bf:d6:03:73:ee:b3:6a:69:75:20:44:bc:39:20:d5: ba:4e:19:f8:c7:6e:04:ef:ce:8d:82:c7:f9:a0:44:e0:7d:64: ee:c5:d9:1a:e3:64:c7:7f:57:0c:17:20:06:d9:ae:73:d8:d9: 70:7b:3d:d7:c9:4d:57:b0:94:aa:d0:34:1c:23:54:be:c8:5a: ab:3b:02:21:c8:97:0f:b3:78:c5:6c:dd:fd:e5:51:3f:09:8b: f7:ff:26:d4:aa:20:20:ef:09:a4:18:48:b3:69:0b:40:6b:10: e4:f1:24:d0:2d:55:32:53:a0:84:af:49:c2:78:5a:46:1e:4f: 64:99:98:5e:27:01:61:10:d5:75:f6:f8:6f:f8:e0:0f:3f:e3: 2d:57:06:8b:69:55:07:b1:ef:d8:37:99:d5:85:3c:d1:62:4b: a9:5f:a1:ce:cb:56:55:8e:7b:a1:4a:8c:bc:bd:03:a4:ad:e0: a7:97:0d:ce:4c:9b:ec:60:64:87:ec:be:ec:2f:41:ce:23:45: 5d:9d:d0:03:7b:02:a0:dd:44:fd:50:2c:48:38:d9:83:7d:ad: 7d:50:e4:b4:c3:15:ce:aa:36:fb:e8:44:7f:09:ea:1e:4a:3f: ee:6a:eb:10:72:7b:03:02:18:91:37:10:10:a0:62:35:56:14: d2:7f:13:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIRbR53Hxdo/wtuKvxGU5FcIyrbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0 ODdBMkVDOTAeFw0yNTExMDMwNjA0MzBaFw0yNTExMDQwNjMwMzBaMDMxMTAvBgNV BAMTKEQxMEI0NkNFMUI5NzIwQkY1QzNFOTQyMTRCOUY4RUEyMzUzRTdEN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlJsSRcYVfvWARoCGE5TiK1z7 q9Mby2CWzAlyQKBHcjthdyBlUP7YePY+O4PzE7o29+1YLu5zcx0Ejcu1oOP2o+1P Kw6/aPQn75+p3WV4eJVX5LvFS3DfhP6AlNc4EUcZXfQeJ0oDxxxl4jPLWn4IFdLu 9CfGEY3Mq5+SJVoQVrhoHq8Ks6AZuZwUXc3hqe0FAXoff0a1Cij99srZaq34oPCK raKHSl3xgmuiOJYiTHCCaj/Qn83N7ftajTn7sOSp/vapijhNyqqkY5PUgTE5/hMp +vfZrfFnG36rFFePSmHNTY235C3Xxg/dchRbltbxeaFQlhyWk4tvY4g7wzfrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0QtGzhuXIL9cPpQhS5+OojU+fXswHwYDVR0j BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5 QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRoU1gvMS9D RDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtLOrv9YDc+6zaml1IES8OSDVuk4Z+MduBO/OjYLH+aBE4H1k7sXZGuNkx39X DBcgBtmuc9jZcHs918lNV7CUqtA0HCNUvshaqzsCIciXD7N4xWzd/eVRPwmL9/8m 1KogIO8JpBhIs2kLQGsQ5PEk0C1VMlOghK9JwnhaRh5PZJmYXicBYRDVdfb4b/jg Dz/jLVcGi2lVB7Hv2DeZ1YU80WJLqV+hzstWVY57oUqMvL0DpK3gp5cNzkyb7GBk h+y+7C9BziNFXZ3QA3sCoN1E/VAsSDjZg32tfVDktMMVzqo2++hEfwnqHko/7mrr EHJ7AwIYkTcQEKBiNVYU0n8Tfg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:30:26 2025 by rpki-client