$ rpki-client -vvf rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.mft File: 2EE7830EC8B817A3DBD80AAF93266292D6118661.mft (raw, json) Hash identifier: 7lAR/05ZFCYXp9DxyaKTN79agVnyv7jBdY1ulmlvaaM= Subject key identifier: 91:36:8C:D5:22:F6:46:FE:86:FD:9B:82:20:74:6F:33:E3:C1:98:21 Authority key identifier: 2E:E7:83:0E:C8:B8:17:A3:DB:D8:0A:AF:93:26:62:92:D6:11:86:61 Certificate issuer: /CN=2EE7830EC8B817A3DBD80AAF93266292D6118661 Certificate serial: 3A78BC1B6B21677B1ED062BA796EB2A77A92AE32 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer Subject info access: rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.mft Manifest number: 02C5 Signing time: Mon 03 Nov 2025 01:09:45 +0000 Manifest this update: Mon 03 Nov 2025 01:04:45 +0000 Manifest next update: Tue 04 Nov 2025 02:35:45 +0000 Files and hashes: 1: 3133382e302e32302e302f32322d3332203d3e20323634353238.roa (hash: iJH2yqZGqU9DH9vmSVPx5xqeOYEUHugqaQgZHF8fe3k=) 2: 2EE7830EC8B817A3DBD80AAF93266292D6118661.crl (hash: eVCTSJtbypMcbEZIcsdoL8PQUh4D75PM8XBMotcUdmc=) 3: 323830343a323130383a3a2f33322d313238203d3e20323634353238.roa (hash: +OAJWEFOIqiJtr4wj3xWoUGpWUwlD2PgPPxTjNExz8c=) 4: 3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa (hash: 6f/JrCsIS/911PrWzhju+B3rEV/TxqS+LO1DubtMYMQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.crl rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 02:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:78:bc:1b:6b:21:67:7b:1e:d0:62:ba:79:6e:b2:a7:7a:92:ae:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EE7830EC8B817A3DBD80AAF93266292D6118661 Validity Not Before: Nov 3 01:04:45 2025 GMT Not After : Nov 4 02:35:45 2025 GMT Subject: CN=91368CD522F646FE86FD9B8220746F33E3C19821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4a:b8:8b:da:e0:f5:44:5a:a4:38:05:d8:33: 18:a1:1c:cd:aa:87:c2:e8:0e:5b:91:1d:70:d6:98: 94:67:2f:39:78:22:d4:b3:25:4f:aa:81:ef:51:bc: 90:5d:b9:0c:e0:0a:16:0e:96:40:11:a5:1a:c7:d8: 5f:82:f4:97:ae:b0:a7:d1:d1:35:d6:23:0e:e5:7f: 12:88:76:6f:e9:3d:12:35:d5:d1:cb:b4:42:13:39: 92:30:a8:fe:b6:a2:be:14:2f:d6:3e:11:6a:01:ee: 0e:e0:08:d7:3b:bf:08:19:fb:88:02:fb:6d:93:a2: 77:be:91:05:ad:71:9c:f2:2c:fa:63:23:5b:2b:14: 86:47:2a:0c:2b:31:b2:63:7d:c8:85:96:9c:4d:62: 61:34:23:8f:f6:7d:6a:98:6c:f5:dd:a5:ce:ec:92: ed:60:dc:92:82:07:de:fb:ad:94:2c:63:b7:6a:0e: 87:0e:f8:fe:85:2d:5b:aa:f5:14:4a:0c:65:5e:a8: 0f:e2:dc:57:e5:30:57:d6:20:f9:13:8a:d7:cb:59: 89:5c:7a:e3:c2:35:e2:65:ce:e9:2f:8a:e7:64:8b: 0c:a1:f8:a8:ec:0d:4b:aa:a3:bd:96:c2:9e:fd:dc: 96:34:7e:50:bb:46:dc:38:88:bc:60:f2:41:22:4d: aa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:36:8C:D5:22:F6:46:FE:86:FD:9B:82:20:74:6F:33:E3:C1:98:21 X509v3 Authority Key Identifier: keyid:2E:E7:83:0E:C8:B8:17:A3:DB:D8:0A:AF:93:26:62:92:D6:11:86:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:53:94:e0:17:d0:92:c2:fd:d6:0b:76:64:8a:f6:2f:b4:d2: 62:64:57:01:27:03:57:86:dc:ff:bf:34:8c:e7:26:03:78:91: b9:6b:29:63:83:a1:33:2c:2c:1c:37:89:3d:07:ae:6b:62:f7: 0f:f8:cb:69:11:2e:e6:2f:36:30:d8:ab:d8:80:a3:43:65:2c: 99:e4:cc:d9:5c:a0:ba:7e:07:f2:18:72:84:65:78:a0:29:2f: ad:46:7a:94:78:62:61:86:2a:f7:3e:c3:31:37:c0:2d:79:ee: 6d:ca:78:bc:2a:bc:19:ff:02:e4:f1:c8:10:ef:9a:51:4d:2c: 95:86:ea:d4:91:8a:86:e0:75:6b:31:d9:db:ab:38:df:05:98: 86:70:b6:f2:0b:49:89:fa:3c:bc:d5:23:ca:5b:84:18:0f:b8: ff:df:dc:23:82:a4:df:53:ca:51:2c:f7:28:5b:f3:1d:71:3a: ff:97:35:65:6d:4f:49:44:a4:0f:3a:9b:a2:a8:59:71:99:8a: 02:b1:f6:fb:ab:89:ed:69:4c:64:b9:2e:cc:a3:cb:46:b6:4b: 5f:1d:27:b5:7b:86:fd:6a:79:e4:01:1a:58:b4:92:1d:2a:c5: 66:37:23:4f:c8:04:85:01:ff:3d:e9:fd:75:6a:3d:2b:63:1b: 65:02:c8:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOni8G2shZ3se0GK6eW6yp3qSrjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFNzgzMEVDOEI4MTdBM0RCRDgwQUFGOTMyNjYyOTJE NjExODY2MTAeFw0yNTExMDMwMTA0NDVaFw0yNTExMDQwMjM1NDVaMDMxMTAvBgNV BAMTKDkxMzY4Q0Q1MjJGNjQ2RkU4NkZEOUI4MjIwNzQ2RjMzRTNDMTk4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDSriL2uD1RFqkOAXYMxihHM2q h8LoDluRHXDWmJRnLzl4ItSzJU+qge9RvJBduQzgChYOlkARpRrH2F+C9JeusKfR 0TXWIw7lfxKIdm/pPRI11dHLtEITOZIwqP62or4UL9Y+EWoB7g7gCNc7vwgZ+4gC +22Tone+kQWtcZzyLPpjI1srFIZHKgwrMbJjfciFlpxNYmE0I4/2fWqYbPXdpc7s ku1g3JKCB977rZQsY7dqDocO+P6FLVuq9RRKDGVeqA/i3FflMFfWIPkTitfLWYlc euPCNeJlzukviudkiwyh+KjsDUuqo72Wwp793JY0flC7Rtw4iLxg8kEiTao7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkTaM1SL2Rv6G/ZuCIHRvM+PBmCEwHwYDVR0j BBgwFoAULueDDsi4F6Pb2AqvkyZiktYRhmEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkdTZVBybk1YanZwTWlQQUdyZmVzSG16bzRMMTgxMzNWREtlQVBRVUpK bzgvMS8yRUU3ODMwRUM4QjgxN0EzREJEODBBQUY5MzI2NjI5MkQ2MTE4NjYxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFRTc4MzBFQzhCODE3QTNE QkQ4MEFBRjkzMjY2MjkyRDYxMTg2NjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkdTZVBybk1YanZwTWlQQUdyZmVzSG16bzRMMTgxMzNWREtlQVBRVUpKbzgvMS8y RUU3ODMwRUM4QjgxN0EzREJEODBBQUY5MzI2NjI5MkQ2MTE4NjYxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwFOU4BfQksL91gt2ZIr2L7TSYmRXAScDV4bc/780jOcmA3iRuWspY4OhMyws HDeJPQeua2L3D/jLaREu5i82MNir2ICjQ2UsmeTM2Vygun4H8hhyhGV4oCkvrUZ6 lHhiYYYq9z7DMTfALXnubcp4vCq8Gf8C5PHIEO+aUU0slYbq1JGKhuB1azHZ26s4 3wWYhnC28gtJifo8vNUjyluEGA+4/9/cI4Kk31PKUSz3KFvzHXE6/5c1ZW1PSUSk DzqboqhZcZmKArH2+6uJ7WlMZLkuzKPLRrZLXx0ntXuG/Wp55AEaWLSSHSrFZjcj T8gEhQH/Pen9dWo9K2MbZQLIvA== -----END CERTIFICATE-----Generated at Mon Nov 3 05:44:10 2025 by rpki-client