$ rpki-client -vvf rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.mft File: 2F06CE8D6B240792E0670AB75AB370A8A63C8F59.mft (raw, json) Hash identifier: WouEojzmZatjz65eToDvNn/SkDddQyDHYWYNr0N5E+A= Subject key identifier: 1F:D2:8A:30:B3:35:58:06:FD:77:58:CF:B7:6A:1B:54:EC:F2:FE:41 Authority key identifier: 2F:06:CE:8D:6B:24:07:92:E0:67:0A:B7:5A:B3:70:A8:A6:3C:8F:59 Certificate issuer: /CN=2F06CE8D6B240792E0670AB75AB370A8A63C8F59 Certificate serial: 631FDAE73A2805802645113ECBCE6DB21F7299CC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.cer Subject info access: rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.mft Manifest number: 0B Signing time: Mon 03 Nov 2025 17:11:39 +0000 Manifest this update: Mon 03 Nov 2025 17:06:39 +0000 Manifest next update: Tue 04 Nov 2025 21:08:39 +0000 Files and hashes: 1: 323830343a346136383a3a2f33322d3438203d3e20323637323338.roa (hash: v1CTyBvoXPosJjqioRbR47KpuKGX3CWAeaOWBlK/dEc=) 2: 2F06CE8D6B240792E0670AB75AB370A8A63C8F59.crl (hash: tcSV5HpPhDj/tL+1kg2gxHRGYCjuMIXry4+yRvU6Ttw=) 3: 34352e3233322e342e302f32322d3234203d3e20323637323338.roa (hash: 5E6bM5Jm9jKj+pTsI7qgsmglSLc7xM+oQlH0PO9Riy4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.crl rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 18:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1f:da:e7:3a:28:05:80:26:45:11:3e:cb:ce:6d:b2:1f:72:99:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F06CE8D6B240792E0670AB75AB370A8A63C8F59 Validity Not Before: Nov 3 17:06:39 2025 GMT Not After : Nov 4 21:08:39 2025 GMT Subject: CN=1FD28A30B3355806FD7758CFB76A1B54ECF2FE41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:eb:7c:06:3c:56:55:dd:86:e9:b2:04:aa:25: dd:69:19:31:dc:ef:f6:b8:96:49:65:a4:6a:d3:30: e1:09:ed:ad:be:65:9b:db:fa:b7:25:88:f2:d9:56: 3a:e6:cb:62:44:ff:0a:f8:ae:24:dc:f4:e2:69:93: cf:c2:d8:36:1c:88:83:6d:b3:d6:95:21:1b:5e:30: 3f:fe:da:df:52:df:30:17:50:87:ae:bc:a9:7b:59: 94:17:c8:de:69:d8:89:95:9e:35:cf:ba:1b:d8:07: c1:76:65:20:64:4f:14:c8:32:72:6a:82:12:72:f6: 50:c3:b6:b8:66:b7:59:41:0a:a9:bb:a7:af:fa:26: 26:92:c5:1d:93:13:ef:63:9c:e8:8a:b8:22:50:1c: 23:20:c3:40:3e:1b:bf:cc:85:30:25:16:b8:a2:d1: 8f:83:58:9b:ee:0f:ef:98:dd:6c:88:1b:5e:c1:0c: e8:e8:25:96:81:30:97:a5:66:2e:4e:ed:5b:02:91: 72:8e:20:39:5e:83:40:e8:57:b0:bb:f6:14:eb:81: c1:66:55:62:5a:3d:bf:09:ac:a4:b6:1e:62:f1:39: c4:ee:4e:cf:44:bd:91:3b:48:2b:73:b5:de:2e:73: 43:6d:bf:e7:df:e6:61:b3:84:83:f0:67:25:f3:ef: ef:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D2:8A:30:B3:35:58:06:FD:77:58:CF:B7:6A:1B:54:EC:F2:FE:41 X509v3 Authority Key Identifier: keyid:2F:06:CE:8D:6B:24:07:92:E0:67:0A:B7:5A:B3:70:A8:A6:3C:8F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:17:5a:ca:73:0f:23:a3:b0:74:3b:5e:6d:e5:be:f7:eb:e6: 52:d2:aa:23:70:b3:30:80:fb:00:01:b2:0c:0c:ab:4a:27:8a: e7:12:95:82:54:59:9e:aa:ba:1e:41:05:3b:04:fb:eb:dc:4c: 64:bd:30:9c:50:62:bf:60:7e:00:06:e8:d3:0c:62:8b:a7:33: 03:87:dd:39:9c:6c:6b:fc:91:1b:ba:f0:57:c5:70:bf:23:ac: d4:61:d5:ef:1c:2f:ce:83:d5:d1:46:82:f3:08:fb:2e:04:4d: b3:bd:79:36:ee:5e:e8:7a:63:c2:c9:24:04:bd:ba:93:ff:0b: ba:9b:c3:85:89:4f:c1:43:a9:3d:72:3f:44:1d:75:cc:57:1e: fe:7a:03:b1:b3:16:8c:10:e0:3f:fd:93:a8:80:67:bf:8e:ad: d5:35:9a:f6:5a:e7:b3:80:c2:09:a6:7d:76:a8:3f:72:c7:8b: d3:79:29:06:24:36:ed:61:d4:8d:e2:ea:87:64:3e:9e:af:af: fe:22:b6:84:cb:09:b6:5d:3f:26:d3:86:13:45:09:09:c5:60: a4:c7:58:4e:37:1b:2a:e0:cb:d8:ff:14:7f:0c:cd:f8:16:82: 7f:2c:1b:9c:b5:19:15:dc:a0:97:ef:69:75:49:90:a9:42:f6: 76:d4:1d:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYx/a5zooBYAmRRE+y85tsh9ymcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYwNkNFOEQ2QjI0MDc5MkUwNjcwQUI3NUFCMzcwQThB NjNDOEY1OTAeFw0yNTExMDMxNzA2MzlaFw0yNTExMDQyMTA4MzlaMDMxMTAvBgNV BAMTKDFGRDI4QTMwQjMzNTU4MDZGRDc3NThDRkI3NkExQjU0RUNGMkZFNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM63wGPFZV3YbpsgSqJd1pGTHc 7/a4lkllpGrTMOEJ7a2+ZZvb+rcliPLZVjrmy2JE/wr4riTc9OJpk8/C2DYciINt s9aVIRteMD/+2t9S3zAXUIeuvKl7WZQXyN5p2ImVnjXPuhvYB8F2ZSBkTxTIMnJq ghJy9lDDtrhmt1lBCqm7p6/6JiaSxR2TE+9jnOiKuCJQHCMgw0A+G7/MhTAlFrii 0Y+DWJvuD++Y3WyIG17BDOjoJZaBMJelZi5O7VsCkXKOIDleg0DoV7C79hTrgcFm VWJaPb8JrKS2HmLxOcTuTs9EvZE7SCtztd4uc0Ntv+ff5mGzhIPwZyXz7+9nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUH9KKMLM1WAb9d1jPt2obVOzy/kEwHwYDVR0j BBgwFoAULwbOjWskB5LgZwq3WrNwqKY8j1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkV0OHhFWHVucHRTSHd1NFpXcGVncVBTUnlVbzF5TXg0b0F6d29RZFRW bTMvMC8yRjA2Q0U4RDZCMjQwNzkyRTA2NzBBQjc1QUIzNzBBOEE2M0M4RjU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMDZDRThENkIyNDA3OTJF MDY3MEFCNzVBQjM3MEE4QTYzQzhGNTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkV0OHhFWHVucHRTSHd1NFpXcGVncVBTUnlVbzF5TXg0b0F6d29RZFRWbTMvMC8y RjA2Q0U4RDZCMjQwNzkyRTA2NzBBQjc1QUIzNzBBOEE2M0M4RjU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXhdaynMPI6OwdDtebeW+9+vmUtKqI3CzMID7AAGyDAyrSieK5xKVglRZnqq6 HkEFOwT769xMZL0wnFBiv2B+AAbo0wxii6czA4fdOZxsa/yRG7rwV8VwvyOs1GHV 7xwvzoPV0UaC8wj7LgRNs715Nu5e6HpjwskkBL26k/8LupvDhYlPwUOpPXI/RB11 zFce/noDsbMWjBDgP/2TqIBnv46t1TWa9lrns4DCCaZ9dqg/cseL03kpBiQ27WHU jeLqh2Q+nq+v/iK2hMsJtl0/JtOGE0UJCcVgpMdYTjcbKuDL2P8UfwzN+BaCfywb nLUZFdygl+9pdUmQqUL2dtQd+w== -----END CERTIFICATE-----Generated at Mon Nov 3 19:01:18 2025 by rpki-client