$ rpki-client -vvf rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft File: 2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft (raw, json) Hash identifier: ahBtM2B0Ldp3xkRpxQtSn/8ox1s2Y8EXSmEtXv11Bbs= Subject key identifier: AB:A2:41:6B:C9:4B:17:22:D1:30:41:8F:39:71:15:78:58:5C:DF:E2 Authority key identifier: 2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E Certificate issuer: /CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E Certificate serial: 4EB996E6DCAA62DBEA578C9C6A551046BD5DB28E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft Manifest number: 02B8 Signing time: Thu 18 Sep 2025 01:39:11 +0000 Manifest this update: Thu 18 Sep 2025 01:34:11 +0000 Manifest next update: Fri 19 Sep 2025 03:41:11 +0000 Files and hashes: 1: 323830343a313732633a3a2f33322d3438203d3e20323633313239.roa (hash: pT9wLb3SCYVr3rULtnzQP+Z0K6P8cggsIKhPstRPcOU=) 2: 3137372e3135352e38342e302f32322d3234203d3e20323633313239.roa (hash: TM2lu8ojhx/JZZ0fRyy/mmuC8mNGbW3JwdC0RSOzsaA=) 3: 2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl (hash: xXuMXxUwBp+4xFBE2OS49Yzu0ZRGZegEIj7d6gnaZzo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 03:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b9:96:e6:dc:aa:62:db:ea:57:8c:9c:6a:55:10:46:bd:5d:b2:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E Validity Not Before: Sep 18 01:34:11 2025 GMT Not After : Sep 19 03:41:11 2025 GMT Subject: CN=ABA2416BC94B1722D130418F39711578585CDFE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7c:58:29:18:90:35:42:7e:f7:60:73:b0:b1: ab:ae:c3:6b:90:59:f9:4f:de:37:a5:3e:6d:1d:52: 50:c1:8b:b6:a9:5e:0d:62:6a:72:0f:82:f9:c1:4f: b8:ff:18:c8:73:90:83:3b:9a:6f:6e:0f:2b:e9:59: 3e:3b:d8:6d:a2:e5:1e:72:73:0b:1b:bf:1d:4c:f4: 2e:1e:97:a3:92:25:a0:60:c5:80:05:49:3a:31:9a: b4:cf:18:92:76:b0:b7:2b:35:67:ee:bd:6e:fe:f3: b2:cd:18:4e:65:10:7e:8c:d9:80:71:b2:22:2a:3a: 6c:30:e5:e7:4b:0d:94:28:87:9a:ad:de:09:b1:a5: de:91:71:ed:19:59:f5:d6:31:bf:1c:8b:c3:58:5c: 32:2d:a7:1d:94:65:77:56:34:2d:9a:b4:ab:25:61: 36:50:5d:ad:77:37:c2:be:6c:fa:92:1e:1c:d8:d4: ce:c2:dc:0b:6e:e8:f1:45:94:06:4c:04:ac:d5:cb: 4a:35:f6:7a:dd:b7:80:5d:99:c1:e3:98:68:da:7b: 65:4e:ed:09:2c:7e:c0:3b:11:77:be:c7:cd:6f:4c: e5:35:b1:dd:aa:8c:fc:57:80:be:49:8c:42:9e:f3: a6:34:f4:42:6c:00:9b:67:76:86:01:13:80:8d:24: a7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A2:41:6B:C9:4B:17:22:D1:30:41:8F:39:71:15:78:58:5C:DF:E2 X509v3 Authority Key Identifier: keyid:2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ae:00:9a:d7:25:1c:79:9e:ec:7b:4f:b3:2a:d8:34:b2:e3: b6:86:4d:bb:d0:d8:36:0d:9d:9c:8e:f0:2c:e6:88:9e:37:81: 38:78:5d:51:c8:d5:6f:d8:e7:f8:b7:d2:5b:4e:a0:a0:2a:99: 49:2b:40:0b:8e:62:c5:99:c2:bf:17:a8:04:c2:12:58:1e:15: e2:4c:bb:2e:91:28:dc:08:06:69:e7:ec:97:fe:17:39:ec:fa: 95:ec:0d:30:e6:68:10:11:06:35:44:a0:48:a9:d6:b6:9d:e0: 3a:6a:b3:38:29:d5:84:d0:c9:cd:f5:e2:97:6f:b4:93:05:9f: 69:ff:34:4a:33:a3:81:40:ec:99:d3:f8:3f:ad:d8:ee:b5:e8: 6b:8c:a2:f6:83:1a:0b:ff:ba:35:21:15:94:71:e7:a0:3b:a1: 46:40:7e:30:4a:0b:65:2c:85:e1:f3:5d:41:97:7f:50:af:43: 53:1c:b9:f8:0a:6d:10:21:1e:57:6d:83:32:60:a1:84:70:a4: 94:14:ea:d7:5f:e5:00:c8:bb:a3:24:56:af:22:8e:b4:09:30: 5c:d9:39:14:e0:dc:bf:3e:00:6a:ee:b8:24:24:99:37:39:c6: 07:19:fa:b7:2b:3d:d4:00:2f:5b:90:40:b5:b5:3e:73:80:77: b7:bb:fd:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTrmW5tyqYtvqV4ycalUQRr1dso4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQzQTJGRDREOEQ3QUI5MTU4MTlGRTgzQ0I4NEQzQUM1 MUEzMkM3RTAeFw0yNTA5MTgwMTM0MTFaFw0yNTA5MTkwMzQxMTFaMDMxMTAvBgNV BAMTKEFCQTI0MTZCQzk0QjE3MjJEMTMwNDE4RjM5NzExNTc4NTg1Q0RGRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfFgpGJA1Qn73YHOwsauuw2uQ WflP3jelPm0dUlDBi7apXg1ianIPgvnBT7j/GMhzkIM7mm9uDyvpWT472G2i5R5y cwsbvx1M9C4el6OSJaBgxYAFSToxmrTPGJJ2sLcrNWfuvW7+87LNGE5lEH6M2YBx siIqOmww5edLDZQoh5qt3gmxpd6Rce0ZWfXWMb8ci8NYXDItpx2UZXdWNC2atKsl YTZQXa13N8K+bPqSHhzY1M7C3Atu6PFFlAZMBKzVy0o19nrdt4BdmcHjmGjae2VO 7QksfsA7EXe+x81vTOU1sd2qjPxXgL5JjEKe86Y09EJsAJtndoYBE4CNJKdrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUq6JBa8lLFyLRMEGPOXEVeFhc3+IwHwYDVR0j BBgwFoAULTov1NjXq5FYGf6Dy4TTrFGjLH4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXlaaG1LVExoR2VZVjlxTnZ1bksxWXdCWmp6cXBCWk52dnFGZUZXczZK bW8vMC8yRDNBMkZENEQ4RDdBQjkxNTgxOUZFODNDQjg0RDNBQzUxQTMyQzdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEM0EyRkQ0RDhEN0FCOTE1 ODE5RkU4M0NCODREM0FDNTFBMzJDN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXlaaG1LVExoR2VZVjlxTnZ1bksxWXdCWmp6cXBCWk52dnFGZUZXczZKbW8vMC8y RDNBMkZENEQ4RDdBQjkxNTgxOUZFODNDQjg0RDNBQzUxQTMyQzdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjK4AmtclHHme7HtPsyrYNLLjtoZNu9DYNg2dnI7wLOaInjeBOHhdUcjVb9jn +LfSW06goCqZSStAC45ixZnCvxeoBMISWB4V4ky7LpEo3AgGaefsl/4XOez6lewN MOZoEBEGNUSgSKnWtp3gOmqzOCnVhNDJzfXil2+0kwWfaf80SjOjgUDsmdP4P63Y 7rXoa4yi9oMaC/+6NSEVlHHnoDuhRkB+MEoLZSyF4fNdQZd/UK9DUxy5+AptECEe V22DMmChhHCklBTq11/lAMi7oyRWryKOtAkwXNk5FODcvz4Aau64JCSZNznGBxn6 tys91AAvW5BAtbU+c4B3t7v9vA== -----END CERTIFICATE-----Generated at Thu Sep 18 19:42:14 2025 by rpki-client