$ rpki-client -vvf rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft File: 2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft (raw, json) Hash identifier: G8XWaF/LVJG087wA7pXyJuchxkU8Ym7h7TsTWMG5keg= Subject key identifier: 23:FE:6B:3E:21:02:81:EF:54:2E:2A:FC:1D:F1:6D:8D:47:B9:31:A2 Authority key identifier: 2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25 Certificate issuer: /CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25 Certificate serial: 269C751BE2B9EC6BC3F518C03E791B1C9163868C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer Subject info access: rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft Manifest number: 0308 Signing time: Mon 03 Nov 2025 11:18:10 +0000 Manifest this update: Mon 03 Nov 2025 11:13:10 +0000 Manifest next update: Tue 04 Nov 2025 14:11:10 +0000 Files and hashes: 1: 3137372e3132342e3131322e302f32312d3234203d3e20323632333232.roa (hash: rrNIzMkOetutqSWFRXAvvZbZjyZznAEfNKm17cvcB2g=) 2: 3137372e3132342e3131322e302f32312d3234203d3e20313938393439.roa (hash: C91+mf1p8hxh/d285BQtBAiWKg3jMftQf0sBi2hDcEc=) 3: 2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl (hash: DXHm6d35wypcIAJb7eHm13L3nZ/NMVEFbZVuPpeR6oc=) 4: 323830343a333264633a3a2f33322d3438203d3e20323632333232.roa (hash: 95wtn2PtjN3o486AsXSu7sv3jIID5Q0ukqej/ydy1MY=) 5: 323830343a333264633a3a2f3332203d3e20323632333232.roa (hash: vrmB5Sh0GVnhMtwphxYGPAIHR2ptBuVrk31o33vBN9k=) 6: 3137302e3235342e3131322e302f32322d3234203d3e20313938393439.roa (hash: tm4DhsxHeSlJV5JNGpJrHhKVERq+PG1gxBqe0ATxftw=) 7: 3137302e3235342e3131322e302f32322d3234203d3e20323632333232.roa (hash: oXTwamZBdeJN2EAApic5UDNV2NLZz87vu3DcDlPv/ro=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9c:75:1b:e2:b9:ec:6b:c3:f5:18:c0:3e:79:1b:1c:91:63:86:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25 Validity Not Before: Nov 3 11:13:10 2025 GMT Not After : Nov 4 14:11:10 2025 GMT Subject: CN=23FE6B3E210281EF542E2AFC1DF16D8D47B931A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fb:39:b5:fa:f5:df:dd:b6:60:c4:ac:55:6e: 5b:45:5c:6c:f4:0b:7d:06:89:5d:fd:c5:99:02:d1: 4f:cf:00:bb:46:f4:61:63:da:5e:22:38:46:c8:08: b2:40:0d:10:57:94:e9:08:21:ef:93:2d:dc:e7:d7: 32:fa:09:57:6c:01:bc:63:47:1f:59:3f:e8:23:17: 7a:38:cd:b3:c5:57:b2:c7:db:05:aa:f9:9e:ab:06: 8f:f2:89:da:5b:88:54:66:b3:29:04:7b:00:40:c9: 19:40:9a:b7:5b:9a:d9:6d:32:52:5c:88:ee:9c:81: 96:4c:1f:67:5c:cf:19:85:66:8c:97:c9:98:29:10: 2b:40:8b:49:c9:35:3d:54:95:25:80:39:ec:3e:8e: df:47:d2:96:c9:c1:6e:37:ee:7d:00:44:cd:d7:be: 37:08:ce:1a:ab:9a:62:fe:cf:13:c0:3f:e6:47:f5: 7d:13:0d:b6:d9:64:89:b7:63:6d:b5:7a:93:f8:4c: d2:60:2b:8c:8a:46:fb:c6:e7:bf:3c:b0:39:12:1b: 04:ef:a8:40:38:d2:e4:4c:2f:38:5c:a1:dd:fd:dc: e7:66:e1:b7:89:14:7a:62:95:6f:0b:c6:9e:c3:c5: fa:1e:2b:bf:33:f7:3d:5e:b6:95:de:d5:e9:64:44: a0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FE:6B:3E:21:02:81:EF:54:2E:2A:FC:1D:F1:6D:8D:47:B9:31:A2 X509v3 Authority Key Identifier: keyid:2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:db:df:82:1e:68:61:54:18:cc:8a:c3:58:65:e6:8b:86:b3: 70:c4:8e:c1:56:b8:85:61:72:4d:b6:07:5c:60:1d:5f:c3:db: 56:d9:2d:df:eb:dc:02:07:d5:59:62:d3:fb:3a:4a:ab:7a:3a: 6e:f1:20:9c:cb:54:dd:89:0c:13:67:45:e1:8d:93:7f:11:6e: b4:c3:2f:96:25:bc:3f:98:09:e8:57:07:82:b1:47:71:85:00: 5d:8f:b3:23:78:39:2c:f7:26:9c:18:3e:5b:14:84:e2:84:b2: 81:15:ce:02:ba:6f:14:15:1a:e4:ee:78:fd:2e:68:70:59:1f: 57:0a:8b:c5:bb:0b:16:bc:12:36:f2:30:9d:9b:ef:23:42:6d: 6c:ab:13:3d:52:3f:2b:89:91:79:d0:9f:0d:ec:fc:55:ea:88: 3b:f3:e0:99:48:a3:00:18:62:30:e4:f4:52:e3:21:ae:8b:e0: 57:6a:29:47:37:bf:ac:e9:3c:be:0b:b0:8e:86:d0:72:bf:58: dd:e1:8b:4e:51:a8:31:c5:34:de:d7:40:27:4e:7e:ac:84:d0: 8a:8d:c7:35:e3:65:90:0f:7f:64:8c:e4:6b:a6:c4:26:93:72: 1b:0f:88:34:aa:54:bc:55:bc:1a:9e:91:f1:28:f9:27:de:5b: fd:6f:2c:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJpx1G+K57GvD9RjAPnkbHJFjhowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBRjVBRDFEREQxRUFDNjExOEM5Rjg0NzU1MDZBRkIy Q0JDMkQyNTAeFw0yNTExMDMxMTEzMTBaFw0yNTExMDQxNDExMTBaMDMxMTAvBgNV BAMTKDIzRkU2QjNFMjEwMjgxRUY1NDJFMkFGQzFERjE2RDhENDdCOTMxQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp+zm1+vXf3bZgxKxVbltFXGz0 C30GiV39xZkC0U/PALtG9GFj2l4iOEbICLJADRBXlOkIIe+TLdzn1zL6CVdsAbxj Rx9ZP+gjF3o4zbPFV7LH2wWq+Z6rBo/yidpbiFRmsykEewBAyRlAmrdbmtltMlJc iO6cgZZMH2dczxmFZoyXyZgpECtAi0nJNT1UlSWAOew+jt9H0pbJwW437n0ARM3X vjcIzhqrmmL+zxPAP+ZH9X0TDbbZZIm3Y221epP4TNJgK4yKRvvG5788sDkSGwTv qEA40uRMLzhcod393Odm4beJFHpilW8Lxp7DxfoeK78z9z1etpXe1elkRKBpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUI/5rPiECge9ULir8HfFtjUe5MaIwHwYDVR0j BBgwFoAULK9a0d3R6sYRjJ+EdVBq+yy8LSUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN29DY1ZieUhLa0xDZjk1emtSdDNmeWlzYkhZY24zbzlvWllaNTZaVmJq SmsvMS8yQ0FGNUFEMURERDFFQUM2MTE4QzlGODQ3NTUwNkFGQjJDQkMyRDI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQUY1QUQxREREMUVBQzYx MThDOUY4NDc1NTA2QUZCMkNCQzJEMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N29DY1ZieUhLa0xDZjk1emtSdDNmeWlzYkhZY24zbzlvWllaNTZaVmJqSmsvMS8y Q0FGNUFEMURERDFFQUM2MTE4QzlGODQ3NTUwNkFGQjJDQkMyRDI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbtvfgh5oYVQYzIrDWGXmi4azcMSOwVa4hWFyTbYHXGAdX8PbVtkt3+vcAgfV WWLT+zpKq3o6bvEgnMtU3YkME2dF4Y2TfxFutMMvliW8P5gJ6FcHgrFHcYUAXY+z I3g5LPcmnBg+WxSE4oSygRXOArpvFBUa5O54/S5ocFkfVwqLxbsLFrwSNvIwnZvv I0JtbKsTPVI/K4mRedCfDez8VeqIO/PgmUijABhiMOT0UuMhrovgV2opRze/rOk8 vguwjobQcr9Y3eGLTlGoMcU03tdAJ05+rITQio3HNeNlkA9/ZIzka6bEJpNyGw+I NKpUvFW8Gp6R8Sj5J95b/W8sYw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:31:23 2025 by rpki-client