$ rpki-client -vvf rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft File: 2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft (raw, json) Hash identifier: Rcui1bjpkdWLSUsJfvf/bC+KsiZ57eDJs3LFun3wN54= Subject key identifier: F9:F0:3B:02:6A:F6:B6:20:59:D0:E7:1C:E5:52:41:8F:EA:DC:6D:F2 Authority key identifier: 2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E Certificate issuer: /CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E Certificate serial: 5A26DC9BC47715F94D6871FDB517E81299FA902C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft Manifest number: 02F5 Signing time: Sun 02 Nov 2025 20:25:41 +0000 Manifest this update: Sun 02 Nov 2025 20:20:41 +0000 Manifest next update: Mon 03 Nov 2025 21:18:41 +0000 Files and hashes: 1: 3137372e3135352e38342e302f32322d3234203d3e20323633313239.roa (hash: TM2lu8ojhx/JZZ0fRyy/mmuC8mNGbW3JwdC0RSOzsaA=) 2: 2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl (hash: Mz8aB2Df/2y1pBDlzQVnOLSRCyNougCxdrncHfmE9vQ=) 3: 323830343a313732633a3a2f33322d3438203d3e20323633313239.roa (hash: pT9wLb3SCYVr3rULtnzQP+Z0K6P8cggsIKhPstRPcOU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 21:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:26:dc:9b:c4:77:15:f9:4d:68:71:fd:b5:17:e8:12:99:fa:90:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E Validity Not Before: Nov 2 20:20:41 2025 GMT Not After : Nov 3 21:18:41 2025 GMT Subject: CN=F9F03B026AF6B62059D0E71CE552418FEADC6DF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:a9:72:ef:1c:6b:b1:83:2d:54:6b:ee:5d: 9d:e9:e8:28:b6:df:80:f6:23:46:2c:65:38:cb:01: 4e:d6:8c:0d:ad:9a:28:8f:57:0f:e5:b1:19:09:47: 78:fa:0e:ec:79:79:e6:79:e5:74:c9:16:be:59:af: b6:e9:ec:9d:b5:7d:76:2c:4d:95:f3:58:c6:f5:aa: a7:66:fe:aa:44:6a:83:b5:6f:35:7a:74:45:75:cc: f8:26:10:b7:92:b0:e8:29:5a:dc:72:24:8a:b6:d6: 72:5f:33:46:68:6a:ac:b0:63:72:1b:6f:84:8f:a8: c0:6a:04:cb:fd:5f:4d:f3:e8:42:ab:46:43:a0:6c: 4e:5e:35:84:84:d1:3d:a8:60:c7:30:97:56:ca:95: d5:1d:88:f6:cc:b0:5e:2c:e7:76:7f:17:0a:7c:e6: a6:95:16:5c:4c:f2:9c:01:6c:a4:9c:2a:e6:9d:1f: 5f:d8:16:ab:9f:45:b8:d0:77:f0:be:41:ad:6d:89: 4b:17:6c:61:59:f1:99:9f:ce:c3:42:c0:5f:d0:49: 5d:f5:78:0c:59:4c:2b:51:f2:e5:b9:4f:de:f3:dc: 41:50:a6:a3:cf:96:d6:68:31:c6:9d:c7:e0:78:14: 35:9a:90:28:90:bc:e8:8b:c7:da:0e:15:1b:4a:2f: db:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F0:3B:02:6A:F6:B6:20:59:D0:E7:1C:E5:52:41:8F:EA:DC:6D:F2 X509v3 Authority Key Identifier: keyid:2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ed:a6:77:79:49:36:d3:1b:2e:4f:1e:c2:fe:a1:33:92:4a: de:b8:4f:b6:de:e7:6e:00:06:da:81:21:44:eb:97:13:e7:eb: 81:53:5a:a6:9f:0a:04:74:7a:f7:bd:c9:ed:f2:a2:ba:2e:0d: 0f:b7:21:f5:ae:91:ba:ed:8e:b6:c0:25:94:80:a3:5e:d9:1f: 76:53:85:b8:f3:71:bc:fc:6e:c1:cf:14:74:c8:7f:f3:97:21: 80:67:4d:db:bb:14:cd:95:b8:7f:c5:fd:42:db:e4:a0:c5:57: d7:19:01:d2:c9:ea:c9:40:c4:71:6b:58:4c:e7:a5:81:ef:75: dc:bc:6f:97:d9:f6:4c:13:0a:14:fc:4d:8b:ee:8d:b6:0d:45: 99:e1:ee:7f:03:e5:da:07:a4:ea:2f:35:d1:a4:29:0d:6b:ad: 9f:17:80:34:c1:70:91:e6:22:89:c1:a9:1f:be:37:fd:2a:3c: af:3c:28:d8:67:e6:65:38:52:35:db:c6:ff:56:ce:2f:07:e7: 87:70:4a:43:26:73:a9:8c:55:d3:d3:b8:d0:e0:08:9e:a7:d1: ec:ed:ce:d8:dd:5c:24:58:d5:3c:cf:01:b1:9d:88:eb:46:53: f7:b8:cc:62:1d:10:e8:2a:3d:ff:32:ca:d5:8c:b1:f4:be:61: 0d:a4:02:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWibcm8R3FflNaHH9tRfoEpn6kCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQzQTJGRDREOEQ3QUI5MTU4MTlGRTgzQ0I4NEQzQUM1 MUEzMkM3RTAeFw0yNTExMDIyMDIwNDFaFw0yNTExMDMyMTE4NDFaMDMxMTAvBgNV BAMTKEY5RjAzQjAyNkFGNkI2MjA1OUQwRTcxQ0U1NTI0MThGRUFEQzZERjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtdKly7xxrsYMtVGvuXZ3p6Ci2 34D2I0YsZTjLAU7WjA2tmiiPVw/lsRkJR3j6Dux5eeZ55XTJFr5Zr7bp7J21fXYs TZXzWMb1qqdm/qpEaoO1bzV6dEV1zPgmELeSsOgpWtxyJIq21nJfM0ZoaqywY3Ib b4SPqMBqBMv9X03z6EKrRkOgbE5eNYSE0T2oYMcwl1bKldUdiPbMsF4s53Z/Fwp8 5qaVFlxM8pwBbKScKuadH1/YFqufRbjQd/C+Qa1tiUsXbGFZ8ZmfzsNCwF/QSV31 eAxZTCtR8uW5T97z3EFQpqPPltZoMcadx+B4FDWakCiQvOiLx9oOFRtKL9v7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+fA7Amr2tiBZ0Occ5VJBj+rcbfIwHwYDVR0j BBgwFoAULTov1NjXq5FYGf6Dy4TTrFGjLH4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXlaaG1LVExoR2VZVjlxTnZ1bksxWXdCWmp6cXBCWk52dnFGZUZXczZK bW8vMC8yRDNBMkZENEQ4RDdBQjkxNTgxOUZFODNDQjg0RDNBQzUxQTMyQzdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEM0EyRkQ0RDhEN0FCOTE1 ODE5RkU4M0NCODREM0FDNTFBMzJDN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXlaaG1LVExoR2VZVjlxTnZ1bksxWXdCWmp6cXBCWk52dnFGZUZXczZKbW8vMC8y RDNBMkZENEQ4RDdBQjkxNTgxOUZFODNDQjg0RDNBQzUxQTMyQzdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVO2md3lJNtMbLk8ewv6hM5JK3rhPtt7nbgAG2oEhROuXE+frgVNapp8KBHR6 973J7fKiui4ND7ch9a6Ruu2OtsAllICjXtkfdlOFuPNxvPxuwc8UdMh/85chgGdN 27sUzZW4f8X9QtvkoMVX1xkB0snqyUDEcWtYTOelge913Lxvl9n2TBMKFPxNi+6N tg1FmeHufwPl2gek6i810aQpDWutnxeANMFwkeYiicGpH743/So8rzwo2GfmZThS NdvG/1bOLwfnh3BKQyZzqYxV09O40OAInqfR7O3O2N1cJFjVPM8BsZ2I60ZT97jM Yh0Q6Co9/zLK1Yyx9L5hDaQCYg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:08:47 2025 by rpki-client