$ rpki-client -vvf rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft File: D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft (raw, json) Hash identifier: lCV7SEd0moDSoQ8i/IQqVZBbaBKoHCUaTYx36lKYClk= Subject key identifier: B5:72:FE:6D:DB:78:BF:1B:B0:AF:4F:11:DE:A5:E3:EF:58:6F:F6:A1 Authority key identifier: D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02 Certificate issuer: /CN=D2EAFBBDD27515C2E642A28C64C61A932A14BD02 Certificate serial: 1BE0F76D6B00F11C2B101F082446C4B5060469D1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer Subject info access: rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft Manifest number: 0232 Signing time: Mon 03 Nov 2025 05:00:00 +0000 Manifest this update: Mon 03 Nov 2025 04:55:00 +0000 Manifest next update: Tue 04 Nov 2025 05:00:00 +0000 Files and hashes: 1: D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl (hash: 0wVV/BLb695q3sWG83mL4DqTW4/fezAcgoin/cyE2xg=) 2: 323830343a393134633a3a2f33322d3332203d3e20323734363332.roa (hash: DvD9mUDQGbID1Fj3RmQTkwTUsJ5MXscX3LhKAmPGVSc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e0:f7:6d:6b:00:f1:1c:2b:10:1f:08:24:46:c4:b5:06:04:69:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EAFBBDD27515C2E642A28C64C61A932A14BD02 Validity Not Before: Nov 3 04:55:00 2025 GMT Not After : Nov 10 05:00:00 2025 GMT Subject: CN=3082010A0282010100B38460E5F8F1BADB7D70E28D9443D80BD11BB619D91CBAE93D33E4983A57DB2D81C6F29F6EF5142E2D84E1D6CED165DAEFE2E34338B2FB81D7627C9EC3F0560AD3734D7BEB59CEABE7DD7DF112EC1A2B60FB24A45F760EBD1CBB1509D6E9A244E459F5E43E2A02C3BCD29D7F7E74804F2C33216F2A680B7FDEA05EF0F2AD4AD82F3061C6A1E94D72818C1BEB44DD66297DADD891348D6FBD36EA746D6E9C5898F47AF7A33D5D9FAEE2F25D655BED983A6C4520CA324461E7B3E18E207A0DD58D67B79F4467613DEF2484D55F2B71965552480276820F9B836C9BE00C6BBE0FE9CF5FF4BD7A850A039180FBB1E738D9B64C9C2ADDCE8AFA59BE9BD06A40CA226D0203010001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:60:e5:f8:f1:ba:db:7d:70:e2:8d:94:43: d8:0b:d1:1b:b6:19:d9:1c:ba:e9:3d:33:e4:98:3a: 57:db:2d:81:c6:f2:9f:6e:f5:14:2e:2d:84:e1:d6: ce:d1:65:da:ef:e2:e3:43:38:b2:fb:81:d7:62:7c: 9e:c3:f0:56:0a:d3:73:4d:7b:eb:59:ce:ab:e7:dd: 7d:f1:12:ec:1a:2b:60:fb:24:a4:5f:76:0e:bd:1c: bb:15:09:d6:e9:a2:44:e4:59:f5:e4:3e:2a:02:c3: bc:d2:9d:7f:7e:74:80:4f:2c:33:21:6f:2a:68:0b: 7f:de:a0:5e:f0:f2:ad:4a:d8:2f:30:61:c6:a1:e9: 4d:72:81:8c:1b:eb:44:dd:66:29:7d:ad:d8:91:34: 8d:6f:bd:36:ea:74:6d:6e:9c:58:98:f4:7a:f7:a3: 3d:5d:9f:ae:e2:f2:5d:65:5b:ed:98:3a:6c:45:20: ca:32:44:61:e7:b3:e1:8e:20:7a:0d:d5:8d:67:b7: 9f:44:67:61:3d:ef:24:84:d5:5f:2b:71:96:55:52: 48:02:76:82:0f:9b:83:6c:9b:e0:0c:6b:be:0f:e9: cf:5f:f4:bd:7a:85:0a:03:91:80:fb:b1:e7:38:d9: b6:4c:9c:2a:dd:ce:8a:fa:59:be:9b:d0:6a:40:ca: 22:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:72:FE:6D:DB:78:BF:1B:B0:AF:4F:11:DE:A5:E3:EF:58:6F:F6:A1 X509v3 Authority Key Identifier: keyid:D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:0a:db:bc:95:f1:24:69:79:0a:5c:30:11:ec:bd:21:fc:63: 2a:8d:61:3c:95:73:48:54:a7:1c:c8:38:9c:49:6f:32:54:3b: fb:4d:68:85:23:aa:20:0a:41:23:64:fe:e4:eb:d6:e7:95:6c: 84:92:06:34:7b:05:59:1f:31:ea:f5:28:38:02:8e:0d:17:69: 57:33:10:08:b4:c5:ad:5e:1b:df:3c:72:68:95:5f:67:f6:70: 41:59:c5:7d:6c:43:74:73:53:48:67:d5:22:91:e1:e6:78:25: 37:b6:aa:2f:8c:43:fc:17:89:1d:f5:7b:4b:65:d5:43:a4:0a: f0:78:01:93:d8:b5:0c:19:5c:3c:bf:62:c8:6a:e8:71:ba:75: 53:b7:82:f8:df:b0:7b:d9:cd:98:b4:f0:4d:fd:a2:d6:f2:70: d7:3c:29:ae:68:23:2b:b2:4a:58:d5:2d:62:92:81:88:01:e2: f5:bd:34:63:71:df:2d:8a:45:83:9b:2f:e9:1d:ed:93:dc:20: 8c:fc:66:d6:eb:6a:6c:b3:6c:91:60:21:4d:f4:a0:a7:87:83: c1:cf:85:82:13:3a:18:67:0f:f3:1f:73:be:8b:b1:84:cf:67: 32:03:cd:c2:22:05:a4:a5:86:d6:fd:d9:d1:76:7e:66:e4:fd: 1b:71:da:11 -----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgIUG+D3bWsA8RwrEB8IJEbEtQYEadEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFQUZCQkREMjc1MTVDMkU2NDJBMjhDNjRDNjFBOTMy QTE0QkQwMjAeFw0yNTExMDMwNDU1MDBaFw0yNTExMTAwNTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjM4NDYwRTVGOEYxQkFEQjdE NzBFMjhEOTQ0M0Q4MEJEMTFCQjYxOUQ5MUNCQUU5M0QzM0U0OTgzQTU3REIyRDgx QzZGMjlGNkVGNTE0MkUyRDg0RTFENkNFRDE2NURBRUZFMkUzNDMzOEIyRkI4MUQ3 NjI3QzlFQzNGMDU2MEFEMzczNEQ3QkVCNTlDRUFCRTdERDdERjExMkVDMUEyQjYw RkIyNEE0NUY3NjBFQkQxQ0JCMTUwOUQ2RTlBMjQ0RTQ1OUY1RTQzRTJBMDJDM0JD RDI5RDdGN0U3NDgwNEYyQzMzMjE2RjJBNjgwQjdGREVBMDVFRjBGMkFENEFEODJG MzA2MUM2QTFFOTRENzI4MThDMUJFQjQ0REQ2NjI5N0RBREQ4OTEzNDhENkZCRDM2 RUE3NDZENkU5QzU4OThGNDdBRjdBMzNENUQ5RkFFRTJGMjVENjU1QkVEOTgzQTZD NDUyMENBMzI0NDYxRTdCM0UxOEUyMDdBMERENThENjdCNzlGNDQ2NzYxM0RFRjI0 ODRENTVGMkI3MTk2NTU1MjQ4MDI3NjgyMEY5QjgzNkM5QkUwMEM2QkJFMEZFOUNG NUZGNEJEN0E4NTBBMDM5MTgwRkJCMUU3MzhEOUI2NEM5QzJBRERDRThBRkE1OUJF OUJEMDZBNDBDQTIyNkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAs4Rg5fjxutt9cOKNlEPYC9EbthnZHLrpPTPkmDpX2y2BxvKfbvUU Li2E4dbO0WXa7+LjQziy+4HXYnyew/BWCtNzTXvrWc6r59198RLsGitg+ySkX3YO vRy7FQnW6aJE5Fn15D4qAsO80p1/fnSATywzIW8qaAt/3qBe8PKtStgvMGHGoelN coGMG+tE3WYpfa3YkTSNb7026nRtbpxYmPR696M9XZ+u4vJdZVvtmDpsRSDKMkRh 57PhjiB6DdWNZ7efRGdhPe8khNVfK3GWVVJIAnaCD5uDbJvgDGu+D+nPX/S9eoUK A5GA+7HnONm2TJwq3c6K+lm+m9BqQMoibQIDAQABo4ICVjCCAlIwHQYDVR0OBBYE FLVy/m3beL8bsK9PEd6l4+9Yb/ahMB8GA1UdIwQYMBaAFNLq+73SdRXC5kKijGTG GpMqFL0CMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVJZSDlweEZOZTNuRGRT alpqenA3NEptdERWZHgzb2lmV0VraEd6TkJGZi8wL0QyRUFGQkJERDI3NTE1QzJF NjQyQTI4QzY0QzYxQTkzMkExNEJEMDIuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi cl9yZXBvLzEvRDJFQUZCQkREMjc1MTVDMkU2NDJBMjhDNjRDNjFBOTMyQTE0QkQw Mi5jZXIwgZwGCCsGAQUFBwELBIGPMIGMMIGJBggrBgEFBQcwC4Z9cnN5bmM6Ly9y cGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85UllIOXB4Rk5lM25EZFNqWmp6cDc0 Sm10RFZkeDNvaWZXRWtoR3pOQkZmLzAvRDJFQUZCQkREMjc1MTVDMkU2NDJBMjhD NjRDNjFBOTMyQTE0QkQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGMK27yV8SRpeQpcMBHsvSH8YyqN YTyVc0hUpxzIOJxJbzJUO/tNaIUjqiAKQSNk/uTr1ueVbISSBjR7BVkfMer1KDgC jg0XaVczEAi0xa1eG988cmiVX2f2cEFZxX1sQ3RzU0hn1SKR4eZ4JTe2qi+MQ/wX iR31e0tl1UOkCvB4AZPYtQwZXDy/Yshq6HG6dVO3gvjfsHvZzZi08E39otbycNc8 Ka5oIyuySljVLWKSgYgB4vW9NGNx3y2KRYObL+kd7ZPcIIz8ZtbramyzbJFgIU30 oKeHg8HPhYITOhhnD/Mfc76LsYTPZzIDzcIiBaSlhtb92dF2fmbk/Rtx2hE= -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:51 2025 by rpki-client