$ rpki-client -vvf rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft File: 2C9FA99864590E029577FEA8F4939F2B71325AE2.mft (raw, json) Hash identifier: eWYEL+5krnP2Me0tjyFQchD9s3/k8jAxzN1YhE+cJNI= Subject key identifier: A1:CC:4F:98:DC:2B:0C:C0:D8:88:A6:E4:7A:04:40:23:82:0D:78:FD Authority key identifier: 2C:9F:A9:98:64:59:0E:02:95:77:FE:A8:F4:93:9F:2B:71:32:5A:E2 Certificate issuer: /CN=2C9FA99864590E029577FEA8F4939F2B71325AE2 Certificate serial: 57F5997DB5CCB3326EB8BCF66BF1C4828A4BF4AF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9FA99864590E029577FEA8F4939F2B71325AE2.cer Subject info access: rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft Manifest number: 9F Signing time: Mon 03 Nov 2025 13:09:03 +0000 Manifest this update: Mon 03 Nov 2025 13:04:03 +0000 Manifest next update: Tue 04 Nov 2025 14:39:03 +0000 Files and hashes: 1: 323830343a316465303a3a2f33322d313238203d3e20323634343030.roa (hash: oX/RKylP4Nd8+kRf1CuAlqfjhQMDsNU+KfOIwew2RRA=) 2: 2C9FA99864590E029577FEA8F4939F2B71325AE2.crl (hash: L73/8ctZ1RxhFQrEx5pbSHRNPbcrejSU3fwZdjQNRAo=) 3: 3133312e3136312e3230382e302f32322d3332203d3e20323634343030.roa (hash: Z+33HVjqzXyw6GWg6a+7Vv2QcTqWiKp5v0VHm16gQXs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.crl rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9FA99864590E029577FEA8F4939F2B71325AE2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 14:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f5:99:7d:b5:cc:b3:32:6e:b8:bc:f6:6b:f1:c4:82:8a:4b:f4:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9FA99864590E029577FEA8F4939F2B71325AE2 Validity Not Before: Nov 3 13:04:03 2025 GMT Not After : Nov 4 14:39:03 2025 GMT Subject: CN=A1CC4F98DC2B0CC0D888A6E47A044023820D78FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:28:54:fd:52:c1:73:76:4b:8a:62:c0:12:4d: 0c:32:6c:3a:3d:9f:4a:cf:6c:00:07:13:3c:b6:c6: d3:f5:f7:12:24:f2:ea:46:4d:1e:33:9a:66:e9:f7: 06:25:62:bc:ae:98:8c:36:85:77:92:2b:9f:ec:e8: 23:9a:a6:c6:78:9c:8b:0d:36:e0:5d:ac:c5:4c:b6: fc:94:82:b8:63:da:59:71:09:64:4d:41:22:60:33: 59:6a:87:30:ae:e8:75:23:e6:83:1c:9d:c3:9f:f0: c0:b0:4c:24:47:08:8e:55:62:1a:cb:55:b1:b9:f7: d6:9b:53:f7:f7:66:cc:11:49:cc:90:5e:02:89:80: 85:5b:f5:09:80:ab:d6:59:53:e6:b7:bb:5a:f4:28: d2:4c:75:e6:db:68:60:08:19:76:b0:ae:cd:6c:57: 50:f5:e6:cb:6d:e4:87:07:de:a5:fa:65:d7:86:11: 8c:f1:9e:ae:0b:08:54:54:45:97:50:8a:24:03:7b: da:08:33:02:4f:7f:3a:2c:b0:a0:1b:5b:ee:e0:b5: b5:7d:a9:a4:3d:dc:b7:e4:08:05:82:84:b7:69:eb: 54:ab:4d:18:f9:85:ae:9f:73:39:bf:ba:ab:ac:c6: 62:7b:0d:b6:54:48:41:37:e6:02:be:f0:07:7e:65: eb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CC:4F:98:DC:2B:0C:C0:D8:88:A6:E4:7A:04:40:23:82:0D:78:FD X509v3 Authority Key Identifier: keyid:2C:9F:A9:98:64:59:0E:02:95:77:FE:A8:F4:93:9F:2B:71:32:5A:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9FA99864590E029577FEA8F4939F2B71325AE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BvzNfuhg4BaiHr5cuPoqXri5Lrrnpfqemkca1uWUsZo/0/2C9FA99864590E029577FEA8F4939F2B71325AE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:5a:b4:2a:da:48:1b:6f:59:d2:fa:df:68:c6:d2:7f:7c:b8: 7a:08:fd:0e:0d:bb:22:cd:a2:c4:98:5b:14:ed:98:e7:19:e1: 10:3c:9a:b8:2b:70:0f:07:5b:d9:b6:b3:7f:64:af:dc:f7:5d: 4e:68:13:13:38:f7:dc:c0:0b:0b:9f:8f:56:30:99:9e:d5:0f: 71:4c:c6:ca:95:41:bc:d4:23:36:e1:cb:fb:34:bf:b4:64:36: d3:da:0d:9b:96:76:78:d4:67:d7:45:8b:f9:fd:7c:c9:24:b0: 38:55:1c:0b:44:01:53:99:ce:ad:24:1b:94:e2:f2:3c:d0:8b: 9e:14:48:97:25:55:ec:0a:ea:08:87:38:75:92:82:b7:24:20: 41:59:b1:1a:3f:9d:95:66:f1:17:04:f8:c1:6b:bb:d5:3c:26: 82:be:e7:c2:b0:bc:7a:21:07:d1:f0:3a:33:b2:dc:b4:68:82: d8:1c:1f:98:f9:2c:9c:47:7c:ad:7e:ca:21:6f:58:e9:50:24: da:9d:c0:ec:39:20:a7:20:c7:9f:45:60:1a:22:8e:b0:57:63: 1c:f8:1e:19:48:3a:dc:2c:32:3a:dd:6e:0f:9b:00:14:67:f4: 45:9d:76:75:50:f6:33:2a:74:f2:8f:4a:c5:92:75:be:50:02: d4:29:0d:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUV/WZfbXMszJuuLz2a/HEgopL9K8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5RkE5OTg2NDU5MEUwMjk1NzdGRUE4RjQ5MzlGMkI3 MTMyNUFFMjAeFw0yNTExMDMxMzA0MDNaFw0yNTExMDQxNDM5MDNaMDMxMTAvBgNV BAMTKEExQ0M0Rjk4REMyQjBDQzBEODg4QTZFNDdBMDQ0MDIzODIwRDc4RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYKFT9UsFzdkuKYsASTQwybDo9 n0rPbAAHEzy2xtP19xIk8upGTR4zmmbp9wYlYryumIw2hXeSK5/s6COapsZ4nIsN NuBdrMVMtvyUgrhj2llxCWRNQSJgM1lqhzCu6HUj5oMcncOf8MCwTCRHCI5VYhrL VbG599abU/f3ZswRScyQXgKJgIVb9QmAq9ZZU+a3u1r0KNJMdebbaGAIGXawrs1s V1D15stt5IcH3qX6ZdeGEYzxnq4LCFRURZdQiiQDe9oIMwJPfzossKAbW+7gtbV9 qaQ93LfkCAWChLdp61SrTRj5ha6fczm/uqusxmJ7DbZUSEE35gK+8Ad+ZetVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUocxPmNwrDMDYiKbkegRAI4INeP0wHwYDVR0j BBgwFoAULJ+pmGRZDgKVd/6o9JOfK3EyWuIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkJ2ek5mdWhnNEJhaUhyNWN1UG9xWHJpNUxycm5wZnFlbWtjYTF1V1Vz Wm8vMC8yQzlGQTk5ODY0NTkwRTAyOTU3N0ZFQThGNDkzOUYyQjcxMzI1QUUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDOUZBOTk4NjQ1OTBFMDI5 NTc3RkVBOEY0OTM5RjJCNzEzMjVBRTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NkJ2ek5mdWhnNEJhaUhyNWN1UG9xWHJpNUxycm5wZnFlbWtjYTF1V1VzWm8vMC8y QzlGQTk5ODY0NTkwRTAyOTU3N0ZFQThGNDkzOUYyQjcxMzI1QUUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF1q0KtpIG29Z0vrfaMbSf3y4egj9Dg27Is2ixJhbFO2Y5xnhEDyauCtwDwdb 2bazf2Sv3PddTmgTEzj33MALC5+PVjCZntUPcUzGypVBvNQjNuHL+zS/tGQ209oN m5Z2eNRn10WL+f18ySSwOFUcC0QBU5nOrSQblOLyPNCLnhRIlyVV7ArqCIc4dZKC tyQgQVmxGj+dlWbxFwT4wWu71Twmgr7nwrC8eiEH0fA6M7LctGiC2BwfmPksnEd8 rX7KIW9Y6VAk2p3A7DkgpyDHn0VgGiKOsFdjHPgeGUg63CwyOt1uD5sAFGf0RZ12 dVD2Myp08o9KxZJ1vlAC1CkNAQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:37 2025 by rpki-client