$ rpki-client -vvf rpki-repo.registro.br/repo/8SHMmdWSmKcuybksu3ErYWNvQbbq5KJpqsa9iAADH7La/0/2B02C5E01B8D20D8650057563E069CD85110D041.mft File: 2B02C5E01B8D20D8650057563E069CD85110D041.mft (raw, json) Hash identifier: PTINvnV7PUZ+ohvrRNUQ8EusbLUbm3su+cVupvNjCl4= Subject key identifier: D9:B5:59:EC:06:E6:EC:E2:68:E9:06:1A:C2:B0:1E:D7:8C:9C:08:D0 Authority key identifier: 2B:02:C5:E0:1B:8D:20:D8:65:00:57:56:3E:06:9C:D8:51:10:D0:41 Certificate issuer: /CN=2B02C5E01B8D20D8650057563E069CD85110D041 Certificate serial: 154F4D493CBC9C1BD89321BA5531DA4F65A7E60B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B02C5E01B8D20D8650057563E069CD85110D041.cer Subject info access: rsync://rpki-repo.registro.br/repo/8SHMmdWSmKcuybksu3ErYWNvQbbq5KJpqsa9iAADH7La/0/2B02C5E01B8D20D8650057563E069CD85110D041.mft Manifest number: 0C Signing time: Mon 03 Nov 2025 17:30:14 +0000 Manifest this update: Mon 03 Nov 2025 17:25:14 +0000 Manifest next update: Tue 04 Nov 2025 19:39:14 +0000 Files and hashes: 1: 323830343a353632343a3a2f33322d3438203d3e20323637393739.roa (hash: 3QSSsL3h2FJmT3j6hfZUbGTpNw7k1+ZIHGtVmi9iktc=) 2: 2B02C5E01B8D20D8650057563E069CD85110D041.crl (hash: dtuiu/LIE2dFpdHjaMIEZz5fqp7bFRIn5zAvkzEN87s=) 3: 34352e3136362e3136382e302f32322d3234203d3e20323637393739.roa (hash: VbZeA/atrv0XdhD7+Y+NHFGYtHH5PUG06VUySPlGLkQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8SHMmdWSmKcuybksu3ErYWNvQbbq5KJpqsa9iAADH7La/0/2B02C5E01B8D20D8650057563E069CD85110D041.crl rsync://rpki-repo.registro.br/repo/8SHMmdWSmKcuybksu3ErYWNvQbbq5KJpqsa9iAADH7La/0/2B02C5E01B8D20D8650057563E069CD85110D041.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B02C5E01B8D20D8650057563E069CD85110D041.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 19:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:4f:4d:49:3c:bc:9c:1b:d8:93:21:ba:55:31:da:4f:65:a7:e6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B02C5E01B8D20D8650057563E069CD85110D041 Validity Not Before: Nov 3 17:25:14 2025 GMT Not After : Nov 4 19:39:14 2025 GMT Subject: CN=D9B559EC06E6ECE268E9061AC2B01ED78C9C08D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:9e:0e:0c:71:e5:6a:e1:87:9e:5e:52:57: 83:70:7d:5d:89:cd:cf:e4:18:9a:3d:c2:e4:56:b4: d4:7c:89:b6:a9:0c:e4:c9:2f:3b:f9:d9:54:6e:ac: 8b:3f:d2:18:39:9a:bc:40:a3:e0:cf:f4:dc:69:96: 17:40:2a:3a:14:95:0c:87:f6:fc:a1:8f:16:79:51: 77:5a:47:1d:55:4e:d3:32:a0:32:bb:26:e6:a2:2c: 5d:0b:2c:e8:0b:e6:50:fc:0d:c4:2a:26:b0:6a:47: a7:fc:a7:fd:bb:25:c0:c6:9d:7e:b8:80:6d:ec:a0: 23:96:e8:12:02:04:8c:a3:84:15:60:f2:a0:9c:41: dc:f3:d1:c1:e8:47:1e:21:b4:11:19:a9:80:85:f4: 5a:9c:a6:d2:44:4e:6a:22:84:b2:1d:7e:18:f2:42: 85:98:71:20:2e:55:46:84:8b:67:a6:06:73:8b:d1: 7e:84:ac:c2:76:b9:0a:06:e9:da:76:b9:9e:f1:4d: 39:16:fa:fe:22:9f:b9:b1:4c:05:9b:30:8e:c0:5d: ab:e4:d5:e6:d5:20:13:c2:f3:8e:35:d6:b5:f7:81: ab:80:de:ab:48:90:71:7f:cc:9e:5e:7f:d2:01:ad: 0e:62:0a:38:ac:07:09:5f:ff:c0:a0:03:c3:e4:0d: fa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B5:59:EC:06:E6:EC:E2:68:E9:06:1A:C2:B0:1E:D7:8C:9C:08:D0 X509v3 Authority Key Identifier: keyid:2B:02:C5:E0:1B:8D:20:D8:65:00:57:56:3E:06:9C:D8:51:10:D0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8SHMmdWSmKcuybksu3ErYWNvQbbq5KJpqsa9iAADH7La/0/2B02C5E01B8D20D8650057563E069CD85110D041.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B02C5E01B8D20D8650057563E069CD85110D041.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SHMmdWSmKcuybksu3ErYWNvQbbq5KJpqsa9iAADH7La/0/2B02C5E01B8D20D8650057563E069CD85110D041.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:17:b2:04:dd:a7:34:01:3f:98:d2:4b:d6:9a:07:03:48:84: 94:a6:c1:e6:c8:a2:61:1c:39:c7:95:fe:94:02:13:46:9d:55: b6:93:97:e3:11:5c:40:f0:93:82:ae:9f:b4:87:46:6f:20:46: 8e:d7:0e:28:6e:0a:07:3b:17:14:92:ba:73:f7:72:19:ac:b3: f7:a8:24:71:bc:06:97:dd:c0:25:f5:fa:4b:f9:c2:b2:a5:84: 90:25:d7:15:3a:7f:4c:8f:47:1e:29:47:a1:6b:38:ed:1e:70: 1e:3a:3b:f5:7b:38:74:9f:4c:26:a6:c1:50:ad:78:a4:e4:61: ff:09:78:24:ea:18:83:a7:36:cf:35:bb:0b:9b:48:4b:51:f6: 27:09:14:0c:c7:18:ca:6e:22:ac:76:1c:a5:18:37:52:4d:5c: 09:a4:58:a7:fa:93:54:8e:73:91:e6:c9:de:0c:b5:49:8e:4c: 3e:1b:2f:dc:31:d7:5e:16:be:d8:db:b3:75:5b:62:ee:f7:14: c6:78:79:c2:d9:4e:39:8f:8c:05:1e:6b:32:5e:cf:46:4a:e1: bc:68:8f:54:d9:23:9b:93:41:95:54:f7:94:14:50:04:47:79: 10:d4:d7:08:ff:e2:3b:53:ba:df:e6:71:0f:19:f2:40:55:43: ae:d6:ad:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFU9NSTy8nBvYkyG6VTHaT2Wn5gswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIwMkM1RTAxQjhEMjBEODY1MDA1NzU2M0UwNjlDRDg1 MTEwRDA0MTAeFw0yNTExMDMxNzI1MTRaFw0yNTExMDQxOTM5MTRaMDMxMTAvBgNV BAMTKEQ5QjU1OUVDMDZFNkVDRTI2OEU5MDYxQUMyQjAxRUQ3OEM5QzA4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiep4ODHHlauGHnl5SV4NwfV2J zc/kGJo9wuRWtNR8ibapDOTJLzv52VRurIs/0hg5mrxAo+DP9NxplhdAKjoUlQyH 9vyhjxZ5UXdaRx1VTtMyoDK7JuaiLF0LLOgL5lD8DcQqJrBqR6f8p/27JcDGnX64 gG3soCOW6BICBIyjhBVg8qCcQdzz0cHoRx4htBEZqYCF9FqcptJETmoihLIdfhjy QoWYcSAuVUaEi2emBnOL0X6ErMJ2uQoG6dp2uZ7xTTkW+v4in7mxTAWbMI7AXavk 1ebVIBPC84411rX3gauA3qtIkHF/zJ5ef9IBrQ5iCjisBwlf/8CgA8PkDfqxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2bVZ7Abm7OJo6QYawrAe14ycCNAwHwYDVR0j BBgwFoAUKwLF4BuNINhlAFdWPgac2FEQ0EEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFNITW1kV1NtS2N1eWJrc3UzRXJZV052UWJicTVLSnBxc2E5aUFBREg3 TGEvMC8yQjAyQzVFMDFCOEQyMEQ4NjUwMDU3NTYzRTA2OUNEODUxMTBEMDQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCMDJDNUUwMUI4RDIwRDg2 NTAwNTc1NjNFMDY5Q0Q4NTExMEQwNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFNITW1kV1NtS2N1eWJrc3UzRXJZV052UWJicTVLSnBxc2E5aUFBREg3TGEvMC8y QjAyQzVFMDFCOEQyMEQ4NjUwMDU3NTYzRTA2OUNEODUxMTBEMDQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHReyBN2nNAE/mNJL1poHA0iElKbB5siiYRw5x5X+lAITRp1VtpOX4xFcQPCT gq6ftIdGbyBGjtcOKG4KBzsXFJK6c/dyGayz96gkcbwGl93AJfX6S/nCsqWEkCXX FTp/TI9HHilHoWs47R5wHjo79Xs4dJ9MJqbBUK14pORh/wl4JOoYg6c2zzW7C5tI S1H2JwkUDMcYym4irHYcpRg3Uk1cCaRYp/qTVI5zkebJ3gy1SY5MPhsv3DHXXha+ 2NuzdVti7vcUxnh5wtlOOY+MBR5rMl7PRkrhvGiPVNkjm5NBlVT3lBRQBEd5ENTX CP/iO1O63+ZxDxnyQFVDrtat+Q== -----END CERTIFICATE-----Generated at Mon Nov 3 18:55:14 2025 by rpki-client