$ rpki-client -vvf rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft File: C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft (raw, json) Hash identifier: BX4DNif1Q2OHZdOD2ZzauJViyOMEbNS81Itmxz5p8VA= Subject key identifier: 8B:8C:B6:9D:E4:A2:89:66:86:A7:EC:05:CB:72:F5:DF:4D:DD:8B:3A Authority key identifier: C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB Certificate issuer: /CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB Certificate serial: 0647F3D8B7AFE5C5A0CB0222FD000EBD7D507208 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer Subject info access: rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft Manifest number: 0301 Signing time: Mon 03 Nov 2025 04:09:00 +0000 Manifest this update: Mon 03 Nov 2025 04:04:00 +0000 Manifest next update: Tue 04 Nov 2025 07:24:00 +0000 Files and hashes: 1: C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl (hash: H9/5JS/5ydhARDJfIWPU9oOYQFbCZK3nG/UA407rK+c=) 2: 323830343a386439343a3a2f33322d313238203d3e20323733333636.roa (hash: 1k00bMaA5+dsPTsaZo8EkP3hez6kVata/+EL1B7NLek=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 07:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:47:f3:d8:b7:af:e5:c5:a0:cb:02:22:fd:00:0e:bd:7d:50:72:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB Validity Not Before: Nov 3 04:04:00 2025 GMT Not After : Nov 4 07:24:00 2025 GMT Subject: CN=8B8CB69DE4A2896686A7EC05CB72F5DF4DDD8B3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3e:d4:f9:6f:80:d2:38:f7:94:1d:51:be:94: 2c:36:fe:9a:c7:8d:53:80:88:de:2b:72:e3:d3:b8: 7f:e6:5b:e6:7d:06:ae:6f:08:4e:71:e7:6b:d3:43: 2a:15:1d:61:fa:80:ff:d4:ac:1c:b2:b1:c7:3b:3a: 27:2d:e8:23:e0:77:15:70:48:13:81:69:cf:6a:dd: 00:cb:46:08:c1:84:17:f1:a2:fb:e2:46:68:97:0d: 17:24:62:0d:7c:d8:14:a2:68:32:92:4c:f9:40:b6: be:e4:8d:9f:dd:04:ec:5a:ec:a3:cc:68:a1:f0:a7: 68:7c:cd:a2:dc:8e:95:78:e4:59:7b:0a:71:9d:bb: 7d:48:97:9b:ed:26:81:c3:0d:e4:a6:56:28:da:5c: 38:16:88:2b:5c:63:75:b6:b8:76:00:d8:50:37:e3: 4a:b2:be:88:22:8a:03:ab:ab:49:87:2e:39:be:19: 6c:33:09:71:c3:5a:d0:7b:b7:8c:49:bd:65:83:ad: ef:63:83:eb:a0:45:2d:bb:5a:1d:4b:7a:7f:bf:9c: 13:84:f5:6f:ac:03:ff:e7:5e:7a:db:34:c1:0f:33: 97:66:67:d1:32:e2:fb:bc:a3:7c:59:09:9d:04:7a: 76:a1:d1:4f:c0:2a:80:1b:61:f2:1f:0d:a2:58:45: 7d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8C:B6:9D:E4:A2:89:66:86:A7:EC:05:CB:72:F5:DF:4D:DD:8B:3A X509v3 Authority Key Identifier: keyid:C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:05:d9:d5:dd:6c:c6:ff:85:ee:d3:23:07:e5:a3:78:76:e3: 40:31:5b:55:52:e4:17:25:08:ef:55:df:55:57:26:bf:0d:89: 30:05:7d:81:93:0f:0d:af:c8:11:6e:d3:fe:09:13:ab:dc:61: 96:e2:4f:78:3d:88:5e:07:4a:67:f9:fa:96:eb:32:e1:b2:e8: 81:28:6c:b3:80:ea:c6:20:d9:8f:0f:e7:a0:c3:ba:b2:4a:0f: 9e:3f:04:96:98:6c:38:ba:78:aa:6a:dd:21:7d:34:5e:a4:e6: 31:87:f9:5d:9f:04:8f:0c:a0:67:84:66:6a:c1:dd:78:9f:6c: 48:b3:7a:75:38:9d:e9:d9:e3:d1:63:3a:77:60:88:aa:af:f0: 09:18:96:9c:65:d3:38:d5:e5:45:5c:f4:61:ce:d8:8c:58:2b: e4:97:54:01:33:09:20:c8:6a:43:1e:11:3e:c9:54:4f:a5:d2: cd:f4:31:aa:af:99:ac:04:7b:b7:cb:e5:d9:2a:56:33:9a:ac: 78:26:e7:39:cd:31:a5:61:8a:18:be:2d:fd:64:79:99:c7:ba: c3:fe:10:ed:f1:2e:d4:d4:11:50:50:40:db:1b:a3:d1:4d:ca: 6d:27:c2:25:98:e9:c8:fe:c2:7d:f9:25:08:c3:bc:41:2f:a6: e0:13:dc:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBkfz2Lev5cWgywIi/QAOvX1QcggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGODRCMjkzNEEyNEY2Q0ZEQkVDMzEyNDRCM0ZBMEM3 QTg1MkJGQjAeFw0yNTExMDMwNDA0MDBaFw0yNTExMDQwNzI0MDBaMDMxMTAvBgNV BAMTKDhCOENCNjlERTRBMjg5NjY4NkE3RUMwNUNCNzJGNURGNERERDhCM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPtT5b4DSOPeUHVG+lCw2/prH jVOAiN4rcuPTuH/mW+Z9Bq5vCE5x52vTQyoVHWH6gP/UrByyscc7Oict6CPgdxVw SBOBac9q3QDLRgjBhBfxovviRmiXDRckYg182BSiaDKSTPlAtr7kjZ/dBOxa7KPM aKHwp2h8zaLcjpV45Fl7CnGdu31Il5vtJoHDDeSmVijaXDgWiCtcY3W2uHYA2FA3 40qyvogiigOrq0mHLjm+GWwzCXHDWtB7t4xJvWWDre9jg+ugRS27Wh1Len+/nBOE 9W+sA//nXnrbNMEPM5dmZ9Ey4vu8o3xZCZ0Eenah0U/AKoAbYfIfDaJYRX2jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUi4y2neSiiWaGp+wFy3L1303dizowHwYDVR0j BBgwFoAUwvhLKTSiT2z9vsMSRLP6DHqFK/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXB4UkptOERXR0FjNWlxQ295c2VtV0VwY0RIY0Zjd0h5aTh4NTR2YnhZ QjUvMS9DMkY4NEIyOTM0QTI0RjZDRkRCRUMzMTI0NEIzRkEwQzdBODUyQkZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyRjg0QjI5MzRBMjRGNkNG REJFQzMxMjQ0QjNGQTBDN0E4NTJCRkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXB4UkptOERXR0FjNWlxQ295c2VtV0VwY0RIY0Zjd0h5aTh4NTR2YnhZQjUvMS9D MkY4NEIyOTM0QTI0RjZDRkRCRUMzMTI0NEIzRkEwQzdBODUyQkZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALgXZ1d1sxv+F7tMjB+WjeHbjQDFbVVLkFyUI71XfVVcmvw2JMAV9gZMPDa/I EW7T/gkTq9xhluJPeD2IXgdKZ/n6lusy4bLogShss4DqxiDZjw/noMO6skoPnj8E lphsOLp4qmrdIX00XqTmMYf5XZ8EjwygZ4RmasHdeJ9sSLN6dTid6dnj0WM6d2CI qq/wCRiWnGXTONXlRVz0Yc7YjFgr5JdUATMJIMhqQx4RPslUT6XSzfQxqq+ZrAR7 t8vl2SpWM5qseCbnOc0xpWGKGL4t/WR5mce6w/4Q7fEu1NQRUFBA2xuj0U3KbSfC JZjpyP7CffklCMO8QS+m4BPcLg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:13:20 2025 by rpki-client