$ rpki-client -vvf rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft File: 2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft (raw, json) Hash identifier: yKt6Zd+fA03/rrX6WpFBwXTpX11G0rz8Jwd5xpuwHKQ= Subject key identifier: 8A:E3:AA:AC:B0:CA:67:63:0E:61:A4:20:99:4C:47:30:D9:7F:92:D6 Authority key identifier: 2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6 Certificate issuer: /CN=2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6 Certificate serial: 0E0790AA361A67534B25A5B45DCBC0C00CA55878 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer Subject info access: rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft Manifest number: 0295 Signing time: Thu 18 Sep 2025 07:58:04 +0000 Manifest this update: Thu 18 Sep 2025 07:53:04 +0000 Manifest next update: Fri 19 Sep 2025 09:21:04 +0000 Files and hashes: 1: 34352e3137362e3134342e302f32332d3234203d3e20323638393435.roa (hash: 81icqWDhCQ5V80cybeQHXgFbX2Iogys+OdUbZvWvCZw=) 2: 2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl (hash: Df4I0jyd5OLTL50bALZV4cmjpIPV9R3w9cKPZTX7VVA=) 3: 34352e3137362e3134362e302f32332d3234203d3e20323638393435.roa (hash: 7ZVR7VTEAxId3uH0BE8kESLLV++QhSgdU6a0PidruW4=) 4: 323830343a356430303a3a2f33322d3438203d3e20323638393435.roa (hash: /NSh8I/Rslc7iMVh1K0i0LpvmuhofwUNcvRYRGnVjho=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 09:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:07:90:aa:36:1a:67:53:4b:25:a5:b4:5d:cb:c0:c0:0c:a5:58:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6 Validity Not Before: Sep 18 07:53:04 2025 GMT Not After : Sep 19 09:21:04 2025 GMT Subject: CN=8AE3AAACB0CA67630E61A420994C4730D97F92D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:60:a5:6b:9d:2a:c7:09:70:b9:02:80:e6:55: 27:8b:63:30:0e:d5:90:21:cf:dc:df:2b:1e:c8:05: 83:9f:aa:ba:28:ba:c4:e0:0c:d5:61:21:3d:c4:72: 0b:31:42:53:6f:14:2d:42:6d:6f:e5:1e:11:b3:bd: ee:02:af:ae:44:bb:fb:8d:c8:10:e9:5e:90:93:18: 2a:d8:90:d0:e4:43:fe:c7:5e:b5:a5:35:48:5b:1d: 8d:76:16:92:5a:a3:48:0f:8e:bc:af:cb:bf:2c:05: 5b:47:ea:b8:81:02:e9:c7:72:98:cb:06:19:2b:42: c4:27:fc:5b:84:c0:ff:79:d7:e4:fe:a7:16:ac:8f: 16:c9:36:ef:f4:d4:7f:4b:46:79:21:20:ce:cb:23: 4f:51:57:59:9c:a2:5a:75:fc:09:ae:4b:23:5a:84: 26:e3:3b:7a:b9:35:f0:8f:74:4f:bc:d6:3e:33:24: 23:c6:9d:61:05:39:e6:63:6f:a7:de:81:dd:a0:0b: 0a:94:31:86:b0:92:24:d7:ce:ed:7b:ca:c5:31:c9: d6:c7:5e:15:14:2f:a3:ba:44:0e:76:71:1a:71:ea: 56:f3:e4:66:ac:22:6e:02:6a:bd:4e:8c:d4:19:be: 6e:7b:5c:d4:6e:1f:8a:3f:89:c3:46:30:48:2e:df: 2a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E3:AA:AC:B0:CA:67:63:0E:61:A4:20:99:4C:47:30:D9:7F:92:D6 X509v3 Authority Key Identifier: keyid:2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:48:ef:cf:cb:92:2f:91:d6:f8:f9:ac:be:aa:fe:b5:6f:81: 25:48:20:96:f8:65:3b:75:44:45:3e:ba:a9:64:c3:6b:d5:04: 18:b8:05:8d:b8:49:0a:74:f4:5c:1e:3e:eb:4d:a7:fa:4b:e3: b1:3e:8b:32:03:15:62:b6:e6:9f:12:f8:f2:82:47:b4:b6:69: ad:6b:a9:1d:f9:fb:3d:82:60:68:f9:44:84:75:8a:27:35:bc: 2a:80:34:87:4b:ad:9d:8c:3a:3f:e2:44:22:a5:f3:31:c2:b3: 3a:c7:eb:bd:b5:fc:36:54:1c:ed:0c:d8:b3:59:f3:47:e9:d2: e3:b9:2b:03:f1:ec:89:da:8b:54:71:69:01:c3:b6:4f:05:e6: f9:16:d9:9d:7e:c5:48:1c:df:ba:8c:f9:6d:42:e3:1c:b9:ba: 1b:59:3b:a4:20:e2:e8:3d:54:90:6d:fb:2d:8f:67:81:84:7f: 92:81:53:fa:85:5e:03:5d:b8:9a:fe:af:37:ba:22:83:c0:9f: a5:4a:6a:f5:a2:36:89:31:ae:11:d3:7a:90:4b:90:4f:d1:1b: ad:44:b4:76:78:87:d5:d4:63:88:65:f3:36:b1:21:cf:72:82: b2:f8:56:a3:4d:6a:3a:14:24:c7:a2:c4:d5:69:fc:cd:48:47: d5:b0:ae:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDgeQqjYaZ1NLJaW0XcvAwAylWHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI1Rjg0RjM5Q0E2QTI4NDU1REU5NzRGMkNGNjE0N0E1 RTFEM0NFNjAeFw0yNTA5MTgwNzUzMDRaFw0yNTA5MTkwOTIxMDRaMDMxMTAvBgNV BAMTKDhBRTNBQUFDQjBDQTY3NjMwRTYxQTQyMDk5NEM0NzMwRDk3RjkyRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsYKVrnSrHCXC5AoDmVSeLYzAO 1ZAhz9zfKx7IBYOfqroousTgDNVhIT3EcgsxQlNvFC1CbW/lHhGzve4Cr65Eu/uN yBDpXpCTGCrYkNDkQ/7HXrWlNUhbHY12FpJao0gPjryvy78sBVtH6riBAunHcpjL BhkrQsQn/FuEwP951+T+pxasjxbJNu/01H9LRnkhIM7LI09RV1mcolp1/AmuSyNa hCbjO3q5NfCPdE+81j4zJCPGnWEFOeZjb6fegd2gCwqUMYawkiTXzu17ysUxydbH XhUUL6O6RA52cRpx6lbz5GasIm4Car1OjNQZvm57XNRuH4o/icNGMEgu3yo5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiuOqrLDKZ2MOYaQgmUxHMNl/ktYwHwYDVR0j BBgwFoAUK1+E85ymooRV3pdPLPYUel4dPOYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFZ5Q0RpWEhzUDFqRzloQVVLSmtKRTRqY3h5WkdKaFh1ajNzdmFQVjJ6 dWUvMC8yQjVGODRGMzlDQTZBMjg0NTVERTk3NEYyQ0Y2MTQ3QTVFMUQzQ0U2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNUY4NEYzOUNBNkEyODQ1 NURFOTc0RjJDRjYxNDdBNUUxRDNDRTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFZ5Q0RpWEhzUDFqRzloQVVLSmtKRTRqY3h5WkdKaFh1ajNzdmFQVjJ6dWUvMC8y QjVGODRGMzlDQTZBMjg0NTVERTk3NEYyQ0Y2MTQ3QTVFMUQzQ0U2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJkjvz8uSL5HW+Pmsvqr+tW+BJUgglvhlO3VERT66qWTDa9UEGLgFjbhJCnT0 XB4+602n+kvjsT6LMgMVYrbmnxL48oJHtLZprWupHfn7PYJgaPlEhHWKJzW8KoA0 h0utnYw6P+JEIqXzMcKzOsfrvbX8NlQc7QzYs1nzR+nS47krA/HsidqLVHFpAcO2 TwXm+RbZnX7FSBzfuoz5bULjHLm6G1k7pCDi6D1UkG37LY9ngYR/koFT+oVeA124 mv6vN7oig8CfpUpq9aI2iTGuEdN6kEuQT9EbrUS0dniH1dRjiGXzNrEhz3KCsvhW o01qOhQkx6LE1Wn8zUhH1bCuBg== -----END CERTIFICATE-----Generated at Thu Sep 18 10:24:24 2025 by rpki-client