$ rpki-client -vvf rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/2B4531BBC3BC4314E0D0975641CBA82766982CB6.mft File: 2B4531BBC3BC4314E0D0975641CBA82766982CB6.mft (raw, json) Hash identifier: oWF2U7b4eegyMSngxCbwTO8SpTI0m6sP8nEXtCe5sJ4= Subject key identifier: 14:6B:80:1D:86:BF:D3:22:FD:AD:07:A9:75:1F:78:E1:54:54:DE:8B Authority key identifier: 2B:45:31:BB:C3:BC:43:14:E0:D0:97:56:41:CB:A8:27:66:98:2C:B6 Certificate issuer: /CN=2B4531BBC3BC4314E0D0975641CBA82766982CB6 Certificate serial: 02AAF0F8DB8F37C24EB972BDFC84370E4D6C30BB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4531BBC3BC4314E0D0975641CBA82766982CB6.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/2B4531BBC3BC4314E0D0975641CBA82766982CB6.mft Manifest number: 24 Signing time: Sun 02 Nov 2025 16:40:12 +0000 Manifest this update: Sun 02 Nov 2025 16:35:12 +0000 Manifest next update: Mon 03 Nov 2025 19:11:12 +0000 Files and hashes: 1: 2B4531BBC3BC4314E0D0975641CBA82766982CB6.crl (hash: vGqgfZQCobbM547HwRyYYmpgsrtLFjBlfPvIRnro1X0=) 2: 323830343a356335383a3a2f33322d313238203d3e20323638393033.roa (hash: a61UG+Dm6cTv5yv3xWNWyF+OaY97n29igx53dP6F4xg=) 3: 34352e3137352e3138302e302f32322d3332203d3e20323638393033.roa (hash: YibpOJkqxwMtZPaNXBYGs7EUxz9MloB4YODU3r5svfA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/2B4531BBC3BC4314E0D0975641CBA82766982CB6.crl rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/2B4531BBC3BC4314E0D0975641CBA82766982CB6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4531BBC3BC4314E0D0975641CBA82766982CB6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 19:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:aa:f0:f8:db:8f:37:c2:4e:b9:72:bd:fc:84:37:0e:4d:6c:30:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B4531BBC3BC4314E0D0975641CBA82766982CB6 Validity Not Before: Nov 2 16:35:12 2025 GMT Not After : Nov 3 19:11:12 2025 GMT Subject: CN=146B801D86BFD322FDAD07A9751F78E15454DE8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2d:b3:bd:78:dc:e0:f4:04:91:06:f9:85:ae: 86:9f:ca:23:c5:3c:6b:03:03:4f:96:98:c8:70:4b: 3f:a6:e3:d4:37:3e:75:0a:9c:7f:a1:27:c2:61:cf: 07:3e:df:c6:34:09:37:e3:fa:1e:89:a5:b3:65:92: 28:ea:fa:60:be:90:2a:4c:dc:e3:17:58:93:4b:65: 75:b1:0b:4e:f8:38:ad:74:10:45:af:45:df:b1:be: 73:b1:c7:a8:12:c5:7b:92:3f:44:03:d8:a3:63:85: e6:42:a7:a8:6a:10:7a:39:64:88:21:f5:ec:7d:c7: 8c:47:05:21:7c:91:62:5e:36:33:cb:ef:66:04:f5: 2e:a2:9e:18:6c:4d:da:35:84:1a:bb:d4:44:f3:95: 58:f9:85:e3:79:c1:45:f4:fb:f8:76:bf:f2:fb:1a: d7:e5:64:f9:5f:fa:87:ab:a9:97:4d:b1:dc:07:99: 38:dc:4d:1d:47:b4:e0:c3:b4:29:2f:c1:24:b8:2f: f9:ea:c2:f1:57:2e:c7:2a:04:92:56:3d:29:57:b0: e9:69:98:e8:92:b0:63:81:54:6b:63:16:4d:bf:9a: 1a:b4:56:cd:06:0a:76:9b:9b:94:ca:90:24:58:b7: 27:31:e3:18:e1:5c:43:fe:c1:ed:08:4e:bf:32:ac: c0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6B:80:1D:86:BF:D3:22:FD:AD:07:A9:75:1F:78:E1:54:54:DE:8B X509v3 Authority Key Identifier: keyid:2B:45:31:BB:C3:BC:43:14:E0:D0:97:56:41:CB:A8:27:66:98:2C:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/2B4531BBC3BC4314E0D0975641CBA82766982CB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4531BBC3BC4314E0D0975641CBA82766982CB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/2B4531BBC3BC4314E0D0975641CBA82766982CB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:13:ff:8f:9b:66:80:5f:b5:e2:0d:35:25:9b:bc:f5:37:ba: aa:ad:93:17:7d:a1:95:43:fc:2f:a9:c5:1f:01:33:75:36:f6: 19:79:23:d0:9e:6d:ac:bb:3d:b7:24:92:3d:93:79:ae:1d:a5: 5a:fb:24:ef:18:26:18:44:01:04:48:de:fa:b5:25:e0:dd:65: cc:4a:84:3b:c1:2d:56:a7:2c:1e:e1:bb:97:5e:e3:9f:8d:a8: a4:a7:44:2f:ee:25:51:83:ea:91:48:72:35:ec:bc:5e:79:88: 0f:87:8a:34:ed:b2:ee:8a:77:ae:3c:ff:d9:c1:93:f4:3e:c3: c6:81:be:f9:55:8a:ca:83:4d:44:6e:4d:54:93:bb:89:48:d7: 51:02:7a:fe:2e:8a:70:3a:80:b9:4e:a9:00:01:d3:14:6f:b0: 58:d9:7c:0d:df:c8:9a:14:6d:3e:82:a5:61:07:7a:40:1b:7b: 7e:3c:62:76:bf:ea:5c:42:fa:d1:6e:42:ce:a1:b6:d4:ca:75: c4:04:60:01:85:02:1b:ad:eb:4a:9e:71:cf:83:9b:a0:1a:58: c3:6c:63:45:b4:e7:29:02:ba:ca:ed:3c:4a:c4:94:ba:18:86: 8c:57:f4:8c:17:18:26:55:01:fe:ee:29:7b:2b:72:e7:83:d0: 36:8a:e4:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAqrw+NuPN8JOuXK9/IQ3Dk1sMLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI0NTMxQkJDM0JDNDMxNEUwRDA5NzU2NDFDQkE4Mjc2 Njk4MkNCNjAeFw0yNTExMDIxNjM1MTJaFw0yNTExMDMxOTExMTJaMDMxMTAvBgNV BAMTKDE0NkI4MDFEODZCRkQzMjJGREFEMDdBOTc1MUY3OEUxNTQ1NERFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfLbO9eNzg9ASRBvmFroafyiPF PGsDA0+WmMhwSz+m49Q3PnUKnH+hJ8Jhzwc+38Y0CTfj+h6JpbNlkijq+mC+kCpM 3OMXWJNLZXWxC074OK10EEWvRd+xvnOxx6gSxXuSP0QD2KNjheZCp6hqEHo5ZIgh 9ex9x4xHBSF8kWJeNjPL72YE9S6inhhsTdo1hBq71ETzlVj5heN5wUX0+/h2v/L7 GtflZPlf+oerqZdNsdwHmTjcTR1HtODDtCkvwSS4L/nqwvFXLscqBJJWPSlXsOlp mOiSsGOBVGtjFk2/mhq0Vs0GCnabm5TKkCRYtycx4xjhXEP+we0ITr8yrMAXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFGuAHYa/0yL9rQepdR944VRU3oswHwYDVR0j BBgwFoAUK0Uxu8O8QxTg0JdWQcuoJ2aYLLYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmFkM25LNGkzanZQbU5GYlYzSnM1bkN0VGdiQUdyQkcxdXBpVG5WYVI5 NnkvMC8yQjQ1MzFCQkMzQkM0MzE0RTBEMDk3NTY0MUNCQTgyNzY2OTgyQ0I2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNDUzMUJCQzNCQzQzMTRF MEQwOTc1NjQxQ0JBODI3NjY5ODJDQjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmFkM25LNGkzanZQbU5GYlYzSnM1bkN0VGdiQUdyQkcxdXBpVG5WYVI5NnkvMC8y QjQ1MzFCQkMzQkM0MzE0RTBEMDk3NTY0MUNCQTgyNzY2OTgyQ0I2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxxP/j5tmgF+14g01JZu89Te6qq2TF32hlUP8L6nFHwEzdTb2GXkj0J5trLs9 tySSPZN5rh2lWvsk7xgmGEQBBEje+rUl4N1lzEqEO8EtVqcsHuG7l17jn42opKdE L+4lUYPqkUhyNey8XnmID4eKNO2y7op3rjz/2cGT9D7DxoG++VWKyoNNRG5NVJO7 iUjXUQJ6/i6KcDqAuU6pAAHTFG+wWNl8Dd/ImhRtPoKlYQd6QBt7fjxidr/qXEL6 0W5CzqG21Mp1xARgAYUCG63rSp5xz4OboBpYw2xjRbTnKQK6yu08SsSUuhiGjFf0 jBcYJlUB/u4peyty54PQNorkbQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:16:43 2025 by rpki-client