$ rpki-client -vvf rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft File: 2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft (raw, json) Hash identifier: B3mHj+/DHZOkwakoUgxnpIndqDr5acwHsvWcWhRWyh4= Subject key identifier: C1:39:98:2C:40:C7:95:22:40:E6:D5:32:F3:19:C5:4E:D4:9A:CF:80 Authority key identifier: 2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6 Certificate issuer: /CN=2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6 Certificate serial: 3EE34E2D1279666F7C47D2630CEF1953908BCB58 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer Subject info access: rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft Manifest number: 02D4 Signing time: Tue 04 Nov 2025 07:11:37 +0000 Manifest this update: Tue 04 Nov 2025 07:06:37 +0000 Manifest next update: Wed 05 Nov 2025 07:12:37 +0000 Files and hashes: 1: 2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl (hash: 8lGALId6VnjnM1/jf6UijvT3sqk4jb5pvCv/HJyQkxI=) 2: 323830343a356430303a3a2f33322d3438203d3e20323638393435.roa (hash: /NSh8I/Rslc7iMVh1K0i0LpvmuhofwUNcvRYRGnVjho=) 3: 34352e3137362e3134342e302f32332d3234203d3e20323638393435.roa (hash: 81icqWDhCQ5V80cybeQHXgFbX2Iogys+OdUbZvWvCZw=) 4: 34352e3137362e3134362e302f32332d3234203d3e20323638393435.roa (hash: 7ZVR7VTEAxId3uH0BE8kESLLV++QhSgdU6a0PidruW4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 07:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e3:4e:2d:12:79:66:6f:7c:47:d2:63:0c:ef:19:53:90:8b:cb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6 Validity Not Before: Nov 4 07:06:37 2025 GMT Not After : Nov 5 07:12:37 2025 GMT Subject: CN=C139982C40C7952240E6D532F319C54ED49ACF80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a8:5c:2b:42:db:67:c6:24:c2:c4:b5:a4:83: e3:52:ab:89:77:dc:44:ad:aa:fe:00:24:4f:27:0e: 82:b5:52:c0:8e:3c:cb:19:6b:f4:a7:1e:fd:3f:34: 2c:96:13:6b:e4:d4:a9:49:89:de:eb:81:9d:64:3f: ce:d3:40:b6:b0:7c:28:2a:4a:26:a5:95:ea:93:48: 46:ac:97:b1:b0:b4:1d:c1:73:8a:bd:a9:ad:ed:5a: c4:02:0f:18:7a:16:1f:01:aa:31:18:75:33:e3:8d: f3:2b:5a:72:64:a7:65:07:4c:42:10:25:38:90:ab: 3b:68:32:58:72:3e:c1:21:90:f3:ae:5c:f7:f8:c1: 86:9d:15:73:79:6f:3f:1d:d2:4c:34:3a:07:7d:ee: 36:23:44:59:4a:3f:47:24:a4:e1:3a:21:85:14:f8: 40:ea:8e:3e:d2:04:2b:0a:8f:22:53:1e:97:35:0f: 8f:69:c0:96:c5:25:dc:38:88:26:9f:a0:a4:c1:68: e5:fe:af:a6:ca:cd:f3:b6:40:2e:b3:47:30:5b:74: 6f:ef:71:70:9a:f6:e5:ab:fc:4b:5f:51:28:b9:16: ac:48:12:8f:df:5d:59:9d:ac:d8:fa:24:30:1d:c6: fd:49:bb:25:56:08:9a:90:91:0a:2f:29:6b:c7:b3: ad:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:39:98:2C:40:C7:95:22:40:E6:D5:32:F3:19:C5:4E:D4:9A:CF:80 X509v3 Authority Key Identifier: keyid:2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a3:7f:d0:aa:7c:ac:ce:cf:fc:65:5e:38:28:d1:17:5e:8b: 8b:d1:3a:a8:15:2e:f8:b6:a8:67:a8:d0:38:f5:b2:af:64:f2: 53:46:8f:61:31:c2:fd:d2:84:cb:3d:dc:61:0b:4d:bf:54:32: f0:56:e1:ee:18:e4:f2:73:a9:45:3d:01:7b:8e:db:92:3a:d7: 24:d5:e3:b3:99:94:6f:16:2d:73:f1:24:e9:c1:82:7b:9f:a8: cc:30:cf:82:6e:83:d5:f3:64:b3:0c:01:78:f7:1b:55:cd:00: e1:99:40:16:ed:21:e1:0a:ea:e5:7d:b2:5c:6c:23:d8:a1:d9: e9:8a:11:9e:57:5d:09:5f:49:8c:41:f4:0b:14:67:8b:45:79: f0:b2:78:4a:e2:dc:4c:51:d7:bf:7d:b1:90:3a:93:90:7e:5b: 41:ea:c7:dc:a1:9d:84:23:4b:42:e4:2c:f7:f4:e2:9c:ed:16: 2c:e3:44:37:1f:e3:bc:55:17:13:79:cd:dc:19:b0:95:a4:cc: a4:89:d7:cc:7e:f5:f6:1b:56:a0:b4:d8:08:bf:2f:01:68:d5: a3:b9:43:54:ac:02:60:13:ab:d2:26:92:a2:20:f0:9c:5a:b4: c4:d8:12:54:c4:33:ef:a2:e2:23:7a:74:ef:5f:13:5e:a4:53: 1d:22:81:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPuNOLRJ5Zm98R9JjDO8ZU5CLy1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI1Rjg0RjM5Q0E2QTI4NDU1REU5NzRGMkNGNjE0N0E1 RTFEM0NFNjAeFw0yNTExMDQwNzA2MzdaFw0yNTExMDUwNzEyMzdaMDMxMTAvBgNV BAMTKEMxMzk5ODJDNDBDNzk1MjI0MEU2RDUzMkYzMTlDNTRFRDQ5QUNGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqFwrQttnxiTCxLWkg+NSq4l3 3EStqv4AJE8nDoK1UsCOPMsZa/SnHv0/NCyWE2vk1KlJid7rgZ1kP87TQLawfCgq SialleqTSEasl7GwtB3Bc4q9qa3tWsQCDxh6Fh8BqjEYdTPjjfMrWnJkp2UHTEIQ JTiQqztoMlhyPsEhkPOuXPf4wYadFXN5bz8d0kw0Ogd97jYjRFlKP0ckpOE6IYUU +EDqjj7SBCsKjyJTHpc1D49pwJbFJdw4iCafoKTBaOX+r6bKzfO2QC6zRzBbdG/v cXCa9uWr/EtfUSi5FqxIEo/fXVmdrNj6JDAdxv1JuyVWCJqQkQovKWvHs61/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwTmYLEDHlSJA5tUy8xnFTtSaz4AwHwYDVR0j BBgwFoAUK1+E85ymooRV3pdPLPYUel4dPOYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFZ5Q0RpWEhzUDFqRzloQVVLSmtKRTRqY3h5WkdKaFh1ajNzdmFQVjJ6 dWUvMC8yQjVGODRGMzlDQTZBMjg0NTVERTk3NEYyQ0Y2MTQ3QTVFMUQzQ0U2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNUY4NEYzOUNBNkEyODQ1 NURFOTc0RjJDRjYxNDdBNUUxRDNDRTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFZ5Q0RpWEhzUDFqRzloQVVLSmtKRTRqY3h5WkdKaFh1ajNzdmFQVjJ6dWUvMC8y QjVGODRGMzlDQTZBMjg0NTVERTk3NEYyQ0Y2MTQ3QTVFMUQzQ0U2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd6N/0Kp8rM7P/GVeOCjRF16Li9E6qBUu+LaoZ6jQOPWyr2TyU0aPYTHC/dKE yz3cYQtNv1Qy8Fbh7hjk8nOpRT0Be47bkjrXJNXjs5mUbxYtc/Ek6cGCe5+ozDDP gm6D1fNkswwBePcbVc0A4ZlAFu0h4Qrq5X2yXGwj2KHZ6YoRnlddCV9JjEH0CxRn i0V58LJ4SuLcTFHXv32xkDqTkH5bQerH3KGdhCNLQuQs9/TinO0WLONENx/jvFUX E3nN3BmwlaTMpInXzH719htWoLTYCL8vAWjVo7lDVKwCYBOr0iaSoiDwnFq0xNgS VMQz76LiI3p0718TXqRTHSKBJQ== -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:40 2025 by rpki-client