$ rpki-client -vvf rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft File: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft (raw, json) Hash identifier: tbCH93OA3wz4+g+YSqeaZ4NDI+2L2V2Rprgy/oDT6H4= Subject key identifier: B5:12:E3:F6:8A:00:D2:5F:C5:38:9A:A8:C9:16:33:37:9E:AE:26:D8 Authority key identifier: 2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE Certificate issuer: /CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE Certificate serial: 6BA47964E718F71BD47571108F72E98192B93D41 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer Subject info access: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft Manifest number: 0302 Signing time: Mon 03 Nov 2025 04:10:04 +0000 Manifest this update: Mon 03 Nov 2025 04:05:04 +0000 Manifest next update: Tue 04 Nov 2025 07:59:04 +0000 Files and hashes: 1: 34352e3138352e36342e302f32322d3234203d3e20323639343237.roa (hash: KM9thWqBbCezSnN/udktn45yMz+Zf63QSRQur/etjgw=) 2: 323830343a363436633a3a2f33322d3430203d3e20323639343237.roa (hash: edA3Rs6eMjpScHqME9Ghe5dGKocqfYma+Nqo84HmhRQ=) 3: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl (hash: zSW6tfOjT2QXBKa1/fHqQCaz28Jqj6qb6WoMOrS5lFs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 07:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a4:79:64:e7:18:f7:1b:d4:75:71:10:8f:72:e9:81:92:b9:3d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE Validity Not Before: Nov 3 04:05:04 2025 GMT Not After : Nov 4 07:59:04 2025 GMT Subject: CN=B512E3F68A00D25FC5389AA8C91633379EAE26D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:de:fb:3f:a7:8b:72:a7:32:4c:f6:8d:ad:bf: 67:f6:dc:fc:7c:09:7f:cf:af:c2:7b:ab:e1:f3:68: 7d:07:9b:3d:4d:d7:3d:6c:5d:66:be:f7:a6:f2:8a: 73:f8:2b:db:1d:b5:00:c0:fd:6a:7e:f0:aa:2c:92: a9:9d:45:39:88:05:e9:40:ca:5c:84:91:7b:87:c3: 33:80:44:ed:71:ca:28:67:aa:9b:b7:55:67:56:55: 8a:95:0c:07:63:37:89:75:ed:ad:56:8f:89:d9:cd: 81:be:71:ae:12:ab:77:55:8b:3f:d4:51:fd:95:8b: 66:de:54:73:c6:7d:cb:97:72:00:16:41:81:4b:34: 62:13:f3:10:06:47:e0:d1:e7:e2:f1:9e:7d:60:16: f2:03:f7:09:25:6a:9a:f1:6a:6d:af:3d:27:d2:3b: bf:3d:a7:b6:d9:a0:dc:e3:3d:30:85:80:f7:ad:bd: d8:93:c7:4c:6a:92:10:e4:c4:0c:5a:f8:7c:c7:9c: 08:6d:b9:99:21:13:81:c7:93:f5:3c:c4:86:0f:73: 6f:30:6b:a9:fe:22:cb:81:a3:67:4a:35:39:08:78: fd:4d:c1:15:61:18:ee:48:92:77:ef:98:e5:6a:33: 64:01:ef:79:98:92:0e:7b:a8:d2:89:c8:eb:2a:3b: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:12:E3:F6:8A:00:D2:5F:C5:38:9A:A8:C9:16:33:37:9E:AE:26:D8 X509v3 Authority Key Identifier: keyid:2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:76:15:c6:61:ff:15:eb:d6:8d:67:b1:a8:5e:2a:81:99:4c: ff:93:1f:26:dd:a2:39:9a:b3:dc:e4:ca:8b:6c:70:63:b1:50: 7e:cd:99:60:80:16:66:dd:45:a4:fd:47:a3:36:20:9e:8c:29: 2c:44:ec:64:6a:47:0d:3d:9d:ab:b7:1d:db:d8:96:a3:d0:d3: ce:5b:69:cd:ca:86:d5:f6:04:1c:8a:f8:71:56:a3:ea:81:57: 77:1a:b6:cb:0e:d1:48:5d:a3:51:6f:9c:b1:92:1a:96:f3:44: ef:c1:8b:f5:46:52:56:7c:0a:56:aa:ad:ea:99:89:0e:aa:07: b1:81:24:da:8a:b5:f2:19:79:0f:c5:a3:29:ed:0d:87:9e:9b: f0:18:2f:37:a6:12:78:7a:bc:b0:61:bb:16:80:8f:04:e6:b6: eb:24:32:37:6d:ea:84:dd:ae:b1:21:39:5e:83:f4:8e:a7:30: e9:1d:9d:4d:e8:02:e0:f9:25:bd:e4:51:6a:03:55:73:9a:5a: cd:3e:fd:11:a9:aa:4f:e1:63:07:e0:1b:08:e3:e4:2c:77:5f: 65:7b:e9:19:91:7f:ea:86:9a:3c:ca:84:e8:b0:9a:2a:e9:80: bb:aa:95:1c:e9:bd:e7:68:8e:c5:a7:97:b2:49:d8:0f:35:60: 4a:1a:7e:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa6R5ZOcY9xvUdXEQj3LpgZK5PUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCNTk0N0IzRUIyMjUyREMyQzI4QTFGNUY4NTYxMjMy NjAwMzZGRTAeFw0yNTExMDMwNDA1MDRaFw0yNTExMDQwNzU5MDRaMDMxMTAvBgNV BAMTKEI1MTJFM0Y2OEEwMEQyNUZDNTM4OUFBOEM5MTYzMzM3OUVBRTI2RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG3vs/p4typzJM9o2tv2f23Px8 CX/Pr8J7q+HzaH0Hmz1N1z1sXWa+96byinP4K9sdtQDA/Wp+8KoskqmdRTmIBelA ylyEkXuHwzOARO1xyihnqpu3VWdWVYqVDAdjN4l17a1Wj4nZzYG+ca4Sq3dViz/U Uf2Vi2beVHPGfcuXcgAWQYFLNGIT8xAGR+DR5+Lxnn1gFvID9wklaprxam2vPSfS O789p7bZoNzjPTCFgPetvdiTx0xqkhDkxAxa+HzHnAhtuZkhE4HHk/U8xIYPc28w a6n+IsuBo2dKNTkIeP1NwRVhGO5IknfvmOVqM2QB73mYkg57qNKJyOsqO/FJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtRLj9ooA0l/FOJqoyRYzN56uJtgwHwYDVR0j BBgwFoAUK7WUez6yJS3CwoofX4VhIyYANv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNndOdzJpYnhNVms3TUdjTVRobW81Y2Y2YjlMQ2N6YmJGdlp4OTQ5ZlJn MWkvMi8yQkI1OTQ3QjNFQjIyNTJEQzJDMjhBMUY1Rjg1NjEyMzI2MDAzNkZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjU5NDdCM0VCMjI1MkRD MkMyOEExRjVGODU2MTIzMjYwMDM2RkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NndOdzJpYnhNVms3TUdjTVRobW81Y2Y2YjlMQ2N6YmJGdlp4OTQ5ZlJnMWkvMi8y QkI1OTQ3QjNFQjIyNTJEQzJDMjhBMUY1Rjg1NjEyMzI2MDAzNkZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfnYVxmH/FevWjWexqF4qgZlM/5MfJt2iOZqz3OTKi2xwY7FQfs2ZYIAWZt1F pP1HozYgnowpLETsZGpHDT2dq7cd29iWo9DTzltpzcqG1fYEHIr4cVaj6oFXdxq2 yw7RSF2jUW+csZIalvNE78GL9UZSVnwKVqqt6pmJDqoHsYEk2oq18hl5D8WjKe0N h56b8BgvN6YSeHq8sGG7FoCPBOa26yQyN23qhN2usSE5XoP0jqcw6R2dTegC4Pkl veRRagNVc5pazT79EamqT+FjB+AbCOPkLHdfZXvpGZF/6oaaPMqE6LCaKumAu6qV HOm952iOxaeXsknYDzVgShp+qA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:26:34 2025 by rpki-client