$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.mft File: 2E32AC81A60DECBD55792A2594C40A5D7742559E.mft (raw, json) Hash identifier: kigZrxFDxszE132g2ob/QxfRNOD0/l7qDYrn+upvgrM= Subject key identifier: 5A:9F:61:B6:72:CB:A9:4A:F9:D4:6A:50:1D:B5:81:9C:D2:DF:68:DF Authority key identifier: 2E:32:AC:81:A6:0D:EC:BD:55:79:2A:25:94:C4:0A:5D:77:42:55:9E Certificate issuer: /CN=2E32AC81A60DECBD55792A2594C40A5D7742559E Certificate serial: 2DBE74052CE9BEDFA864D68283FB47CAE091B652 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer Subject info access: rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.mft Manifest number: 027A Signing time: Mon 03 Nov 2025 17:19:10 +0000 Manifest this update: Mon 03 Nov 2025 17:14:10 +0000 Manifest next update: Tue 04 Nov 2025 19:53:10 +0000 Files and hashes: 1: 323830343a3534343a3a2f33322d3438203d3e20323632353035.roa (hash: 3F9grsuFThw37CawGIAIqTj469VfJBShGwREgs0m5CE=) 2: 3137372e35352e3134342e302f32302d3234203d3e20323632353035.roa (hash: NSqflAza/vFcpd9DQCLUhlT5m+9PAroZmk4snUNDqUE=) 3: 2E32AC81A60DECBD55792A2594C40A5D7742559E.crl (hash: AaXmH+EOpSKqsnmcN87+xW3E1b6Sg6tdjwgu4WbBWDk=) 4: 3137372e36362e3232342e302f32302d3234203d3e20323632353035.roa (hash: ZfflK9mVa55VVJo4hZ4pHt+l614ed/7TljqBpueAHAQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.crl rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 19:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:be:74:05:2c:e9:be:df:a8:64:d6:82:83:fb:47:ca:e0:91:b6:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E32AC81A60DECBD55792A2594C40A5D7742559E Validity Not Before: Nov 3 17:14:10 2025 GMT Not After : Nov 4 19:53:10 2025 GMT Subject: CN=5A9F61B672CBA94AF9D46A501DB5819CD2DF68DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9c:c6:38:db:32:bb:76:93:08:f8:bd:b0:bb: 23:6a:62:32:07:e6:b6:fd:9a:ab:4a:37:a7:4f:92: a1:9b:1f:28:71:5f:79:8f:1b:b3:d7:4c:1d:53:1d: b3:5d:c9:a8:81:c5:c7:5f:f2:48:0a:e6:6b:ab:9f: 55:d9:71:a3:e7:9a:43:4b:51:8a:d7:87:1e:9f:23: 28:93:a6:8a:f0:45:de:a0:b0:9c:59:2a:ac:33:37: b6:ca:65:2f:02:2d:d5:e2:34:a3:5a:0b:bc:d0:a2: 64:12:56:a1:78:ee:91:cc:45:9b:22:a8:8b:bd:22: 95:b3:b2:53:7c:63:f2:ce:c8:38:38:c6:d3:cf:86: 56:14:ce:18:95:eb:d6:7e:9a:ec:73:c3:27:48:3e: c9:a5:8a:b4:2b:b4:a4:19:57:1a:54:c6:d1:90:5a: 13:54:0b:63:cf:b1:81:1a:6d:29:5d:e9:20:10:01: 9d:1d:98:de:e3:cf:45:68:6c:1a:78:8d:d6:3f:65: 6d:5d:c5:c9:5a:76:70:c6:7d:ba:4c:7d:dd:87:d2: 1d:98:52:fc:65:b7:12:56:8f:80:a7:c5:82:1f:b4: 30:a1:30:0e:73:78:fd:3c:03:6e:97:bc:46:6b:3d: 26:3f:bd:2b:a4:1a:3b:24:f6:e3:0e:57:0b:26:7a: a7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9F:61:B6:72:CB:A9:4A:F9:D4:6A:50:1D:B5:81:9C:D2:DF:68:DF X509v3 Authority Key Identifier: keyid:2E:32:AC:81:A6:0D:EC:BD:55:79:2A:25:94:C4:0A:5D:77:42:55:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E32AC81A60DECBD55792A2594C40A5D7742559E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/0/2E32AC81A60DECBD55792A2594C40A5D7742559E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:95:d3:63:75:26:f4:99:26:93:da:33:89:f9:73:6f:ca:a8: 43:7f:37:0a:5b:ca:0f:df:86:f1:3f:0d:48:3d:de:e5:ba:be: 79:e3:75:d1:e1:38:0e:db:2a:80:cf:ce:da:34:70:96:be:ed: ec:d3:91:7e:74:88:f4:48:a9:2f:8f:2c:ff:5f:ba:c9:3c:f6: a5:f9:f6:80:c7:35:98:a9:4f:65:10:24:d0:9d:a2:ab:75:c9: 18:6b:fd:1d:ae:a3:16:72:aa:5e:7f:17:0f:4d:fa:a3:09:43: b8:76:ce:51:88:0c:78:d8:78:e1:3e:32:11:64:c8:65:49:12: 4b:32:6f:14:81:cb:99:f2:29:71:47:9f:9a:b9:d8:38:92:39: 4a:cd:29:f9:c2:69:3e:4e:88:ad:e9:11:c6:e2:98:e7:68:b3: 9b:2e:29:9c:c9:dc:1b:99:7f:3d:b1:2e:74:8c:4a:7a:d5:9c: 81:5a:48:5c:0a:a8:a7:7c:a4:ef:b8:e5:10:33:6e:2e:72:b6: 1d:8f:94:de:36:71:0f:8e:5b:9c:93:cd:59:fb:29:ee:13:e2: d9:90:33:6e:4c:af:cb:e1:35:94:43:95:7a:f1:ae:fa:9f:f4: 0e:d9:dd:81:e5:c8:1d:25:2f:ec:5b:30:d4:0a:2f:3b:80:fc: 67:5f:43:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULb50BSzpvt+oZNaCg/tHyuCRtlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUzMkFDODFBNjBERUNCRDU1NzkyQTI1OTRDNDBBNUQ3 NzQyNTU5RTAeFw0yNTExMDMxNzE0MTBaFw0yNTExMDQxOTUzMTBaMDMxMTAvBgNV BAMTKDVBOUY2MUI2NzJDQkE5NEFGOUQ0NkE1MDFEQjU4MTlDRDJERjY4REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLnMY42zK7dpMI+L2wuyNqYjIH 5rb9mqtKN6dPkqGbHyhxX3mPG7PXTB1THbNdyaiBxcdf8kgK5murn1XZcaPnmkNL UYrXhx6fIyiTporwRd6gsJxZKqwzN7bKZS8CLdXiNKNaC7zQomQSVqF47pHMRZsi qIu9IpWzslN8Y/LOyDg4xtPPhlYUzhiV69Z+muxzwydIPsmlirQrtKQZVxpUxtGQ WhNUC2PPsYEabSld6SAQAZ0dmN7jz0VobBp4jdY/ZW1dxcladnDGfbpMfd2H0h2Y UvxltxJWj4CnxYIftDChMA5zeP08A26XvEZrPSY/vSukGjsk9uMOVwsmeqe9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWp9htnLLqUr51GpQHbWBnNLfaN8wHwYDVR0j BBgwFoAULjKsgaYN7L1VeSollMQKXXdCVZ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1ZKemdkSkNqNXZHdjZXQXFXTGsyTG9naVRQVFl6ZERkODJmcTZMTTdp NUMvMC8yRTMyQUM4MUE2MERFQ0JENTU3OTJBMjU5NEM0MEE1RDc3NDI1NTlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFMzJBQzgxQTYwREVDQkQ1 NTc5MkEyNTk0QzQwQTVENzc0MjU1OUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1ZKemdkSkNqNXZHdjZXQXFXTGsyTG9naVRQVFl6ZERkODJmcTZMTTdpNUMvMC8y RTMyQUM4MUE2MERFQ0JENTU3OTJBMjU5NEM0MEE1RDc3NDI1NTlFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAipXTY3Um9Jkmk9oziflzb8qoQ383ClvKD9+G8T8NSD3e5bq+eeN10eE4Dtsq gM/O2jRwlr7t7NORfnSI9EipL48s/1+6yTz2pfn2gMc1mKlPZRAk0J2iq3XJGGv9 Ha6jFnKqXn8XD036owlDuHbOUYgMeNh44T4yEWTIZUkSSzJvFIHLmfIpcUefmrnY OJI5Ss0p+cJpPk6IrekRxuKY52izmy4pnMncG5l/PbEudIxKetWcgVpIXAqop3yk 77jlEDNuLnK2HY+U3jZxD45bnJPNWfsp7hPi2ZAzbkyvy+E1lEOVevGu+p/0Dtnd geXIHSUv7Fsw1AovO4D8Z19DKQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:26:39 2025 by rpki-client