$ rpki-client -vvf rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft File: 2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft (raw, json) Hash identifier: wCr8Gk23N01llLPnJLvNnK7XQnXM9563DDmlE3ueIc4= Subject key identifier: E8:91:FA:6A:36:31:8E:BC:E0:09:0E:7A:68:F5:3C:9C:EA:13:66:2C Authority key identifier: 2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80 Certificate issuer: /CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480 Certificate serial: 6667C63B19C837A6742EB47C360077A292E49622 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer Subject info access: rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft Manifest number: 0170 Signing time: Mon 03 Nov 2025 12:38:51 +0000 Manifest this update: Mon 03 Nov 2025 12:33:51 +0000 Manifest next update: Tue 04 Nov 2025 15:45:51 +0000 Files and hashes: 1: 323830343a376363633a383030303a3a2f33332d3333203d3e20323731353139.roa (hash: EdKMBlP0Au8ZjgIXG1FjA5SUAqzGG5ZKMMxvqwuANTE=) 2: 323830343a376363633a383030303a3a2f33342d3334203d3e20323731353139.roa (hash: OsLsjPl9/bUrfXIWMY/5NjMFPO2hGhnB9fx5PhBjWtQ=) 3: 323830343a376363633a343030303a3a2f33342d3334203d3e20323731353139.roa (hash: tW66RttNQQDZ0lTOuByjPWgYDa3rUCRkaSqPBwrFgxU=) 4: 2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl (hash: xYxuNrkh3gP0uFupS99Z61wmDrAzMCMlkSCiHS9teWU=) 5: 323830343a376363633a3a2f33332d3333203d3e20323731353139.roa (hash: dX9f/ny2OVOTbqieDv7GDbRMqgAF+krSR2i7o8azGsk=) 6: 323830343a376363633a3a2f33342d3334203d3e20323731353139.roa (hash: LJg0qIswYi2VO/edZihG1bpazFMYcqSZVFlGIuj3Nqo=) 7: 323830343a376363633a633030303a3a2f33342d3334203d3e20323731353139.roa (hash: zlZIZjynokp4eeLrHU0nFnutkTExOf333NyHcj/s5YQ=) 8: 3138312e3138392e31332e302f32342d3234203d3e20323731353139.roa (hash: rx/LIZMSojJ5LN/3rv2+SAGAB+w17MquMMul8Kg+wNE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 15:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:67:c6:3b:19:c8:37:a6:74:2e:b4:7c:36:00:77:a2:92:e4:96:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480 Validity Not Before: Nov 3 12:33:51 2025 GMT Not After : Nov 4 15:45:51 2025 GMT Subject: CN=E891FA6A36318EBCE0090E7A68F53C9CEA13662C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:99:b7:ce:22:74:1d:9b:b9:80:97:a2:3d: fa:ea:8b:11:f0:3b:54:b5:61:d2:ba:66:0a:53:86: 93:da:ff:4c:8d:d8:99:d4:f5:db:39:d0:35:d7:2b: 75:b7:c0:c9:64:a1:af:5e:03:4d:54:1f:74:2b:23: 6a:ec:04:8d:71:58:88:63:a7:de:e1:c8:6b:06:65: 1b:6c:d3:81:c8:02:9d:56:b5:4c:15:5b:a7:dc:c9: af:74:77:c5:03:84:b6:52:06:98:6c:1f:a2:b1:37: 69:53:8e:3c:f4:02:ef:73:d5:fe:98:d1:1a:fb:10: 74:de:25:7b:04:6b:30:f5:62:cd:cb:65:e4:ce:79: 45:9d:8d:a0:7e:c2:00:9e:4a:ba:2b:b5:73:2e:f0: 62:8f:01:07:a1:32:57:5d:b5:64:8c:a9:ca:1a:4d: ae:c2:17:bd:f8:27:bd:71:2c:bc:73:b5:3e:00:49: c6:e5:dc:eb:b6:45:89:f2:df:1e:99:1e:e6:15:22: 2b:9c:a3:97:08:df:da:4d:a1:c1:52:f6:04:af:85: 6b:88:24:69:eb:5b:0b:b2:e3:25:56:9c:b4:10:86: cb:f0:51:34:5f:68:5b:fa:be:e4:d5:e0:8a:62:87: 0b:8e:45:a2:e6:f0:6d:23:41:98:26:dc:21:ab:ad: fa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:91:FA:6A:36:31:8E:BC:E0:09:0E:7A:68:F5:3C:9C:EA:13:66:2C X509v3 Authority Key Identifier: keyid:2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:5b:5d:31:4d:8e:7e:da:ae:77:90:ed:64:58:47:0b:a3:7e: 33:2a:5b:f2:33:a5:74:de:b0:51:3a:3f:d6:ef:63:4a:fa:50: f7:b8:b3:dd:3d:01:d6:49:ea:4e:c5:9e:87:a1:0b:80:9e:af: 87:c0:14:1c:96:80:72:7b:e3:89:4c:e7:84:90:97:b1:1e:01: 18:ca:2a:87:4d:81:ac:a1:c1:82:4a:85:18:f2:7c:aa:01:dd: 74:01:91:72:56:c0:33:7d:41:3f:e0:4f:90:d0:de:3b:7e:28: c2:62:8a:d0:e0:ff:d5:f5:5c:7e:db:14:7b:ab:6f:08:26:ed: a6:22:52:d2:13:e6:08:47:18:d0:8f:7e:0e:37:77:64:9b:0b: 31:01:c2:45:45:f1:98:32:bf:7c:49:f4:f1:a4:80:61:f4:df: 47:e7:09:96:80:9b:de:a8:11:38:ce:c9:1f:39:1b:d2:00:ca: 84:7d:42:ab:3d:3c:32:e1:d3:96:57:78:7b:34:22:68:75:99: c7:cb:47:d4:fb:38:6b:26:07:4b:56:6f:a8:26:db:2b:de:f4: 80:02:41:eb:a0:f8:c8:e5:0b:5e:bd:be:2e:d5:91:cb:af:a9: ef:f9:e7:e2:98:c5:bb:eb:35:97:a2:b0:aa:4a:26:66:7d:0c: 52:59:a4:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZmfGOxnIN6Z0LrR8NgB3opLkliIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVGODg3RjgyMzVCNUY3QTEzREVDQUNBRUM4Qzk0MEE3 NDBCRjQ4MDAeFw0yNTExMDMxMjMzNTFaFw0yNTExMDQxNTQ1NTFaMDMxMTAvBgNV BAMTKEU4OTFGQTZBMzYzMThFQkNFMDA5MEU3QTY4RjUzQzlDRUExMzY2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHTJm3ziJ0HZu5gJeiPfrqixHw O1S1YdK6ZgpThpPa/0yN2JnU9ds50DXXK3W3wMlkoa9eA01UH3QrI2rsBI1xWIhj p97hyGsGZRts04HIAp1WtUwVW6fcya90d8UDhLZSBphsH6KxN2lTjjz0Au9z1f6Y 0Rr7EHTeJXsEazD1Ys3LZeTOeUWdjaB+wgCeSrortXMu8GKPAQehMlddtWSMqcoa Ta7CF734J71xLLxztT4AScbl3Ou2RYny3x6ZHuYVIiuco5cI39pNocFS9gSvhWuI JGnrWwuy4yVWnLQQhsvwUTRfaFv6vuTV4IpihwuORaLm8G0jQZgm3CGrrfp7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6JH6ajYxjrzgCQ56aPU8nOoTZiwwHwYDVR0j BBgwFoAULviH+CNbX3oT3srK7IyUCnQL9IAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVBHTmdleDJ4b1llVVlkQ0JiRGhNakRNYVI3RUNMTVFxaFg5aHNLcHpB S2MvMC8yRUY4ODdGODIzNUI1RjdBMTNERUNBQ0FFQzhDOTQwQTc0MEJGNDgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFRjg4N0Y4MjM1QjVGN0Ex M0RFQ0FDQUVDOEM5NDBBNzQwQkY0ODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVBHTmdleDJ4b1llVVlkQ0JiRGhNakRNYVI3RUNMTVFxaFg5aHNLcHpBS2MvMC8y RUY4ODdGODIzNUI1RjdBMTNERUNBQ0FFQzhDOTQwQTc0MEJGNDgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATVtdMU2Oftqud5DtZFhHC6N+Mypb8jOldN6wUTo/1u9jSvpQ97iz3T0B1knq TsWeh6ELgJ6vh8AUHJaAcnvjiUznhJCXsR4BGMoqh02BrKHBgkqFGPJ8qgHddAGR clbAM31BP+BPkNDeO34owmKK0OD/1fVcftsUe6tvCCbtpiJS0hPmCEcY0I9+Djd3 ZJsLMQHCRUXxmDK/fEn08aSAYfTfR+cJloCb3qgROM7JHzkb0gDKhH1Cqz08MuHT lld4ezQiaHWZx8tH1Ps4ayYHS1ZvqCbbK970gAJB66D4yOULXr2+LtWRy6+p7/nn 4pjFu+s1l6KwqkomZn0MUlmkCw== -----END CERTIFICATE-----Generated at Tue Nov 4 00:28:29 2025 by rpki-client