$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft File: 2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft (raw, json) Hash identifier: 6uc8FGZLwjLmJERHLizS226xCjMKvrxKbKMS8hISKg4= Subject key identifier: 24:EA:6B:D3:59:97:02:A4:74:33:F7:08:F1:A4:B1:6F:42:12:A2:33 Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47 Certificate issuer: /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647 Certificate serial: 03EAA9EDB36CAD4B6FF9BF6E52EA454E7E8F4780 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer Subject info access: rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft Manifest number: 02B3 Signing time: Sun 02 Nov 2025 18:39:34 +0000 Manifest this update: Sun 02 Nov 2025 18:34:34 +0000 Manifest next update: Mon 03 Nov 2025 21:25:34 +0000 Files and hashes: 1: 2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl (hash: nHSUf70Ka4w+FjvX4fhprm6N1sx1ydNCfyCJscDM+pc=) 2: 3230302e33392e35312e302f32342d3234203d3e20323731353234.roa (hash: 1IV3WY/QEAW1n1IWjg0tOjW5dO+ggc66oTNHEIV7TWI=) 3: 3230302e33392e35302e302f32342d3234203d3e20323731353234.roa (hash: z6AxAeBvuZkF2Hv3TgcmR5cniDfzlrMjmqRXv6n3fBs=) 4: 3230302e33392e34382e302f32342d3234203d3e20323731353234.roa (hash: 3Ffp5JJCiBJxBl96vfAKZjO3HJm6sYK5tARVTWZSBow=) 5: 3230302e33392e34392e302f32342d3234203d3e20323731353234.roa (hash: KleVsHAqtvWr8k2742HawWCdXqH/hhdJzyliz+AilX4=) 6: 3230302e33392e34382e302f32322d3232203d3e20323731353234.roa (hash: Vp+ej4dQx+65lyUdgAHuPgBaf+ucorRNSBDiDndfVME=) 7: 323830343a376365303a3a2f33322d3333203d3e20323731353234.roa (hash: cexwvQVo5HooQieHGBIwzXZEIQLA1g0ov7qJ1ITQWNQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 21:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ea:a9:ed:b3:6c:ad:4b:6f:f9:bf:6e:52:ea:45:4e:7e:8f:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647 Validity Not Before: Nov 2 18:34:34 2025 GMT Not After : Nov 3 21:25:34 2025 GMT Subject: CN=24EA6BD3599702A47433F708F1A4B16F4212A233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1c:22:89:57:7a:2f:47:59:8c:8e:67:63:e3: 5d:60:db:b1:09:29:b4:58:e8:1f:40:ea:15:1f:64: 4a:d3:1d:21:ef:ef:56:56:1d:92:c8:45:b6:45:5b: d6:37:c4:a3:56:d4:a9:a0:fb:fb:08:c6:6c:ef:8d: 28:c6:6d:c2:2e:8e:f7:7a:6a:5f:ff:83:1b:91:3e: 5c:8d:0c:d8:54:6d:b3:2a:5d:2b:44:d7:08:d1:cb: 86:2a:ab:36:55:9d:f5:72:32:f9:06:d3:b4:3f:15: fb:03:43:46:fc:a4:54:33:0a:39:1f:19:c7:53:71: e3:4f:ac:12:dc:dc:4c:4e:74:1f:a2:de:9e:33:b7: 2c:69:0e:74:45:f5:3a:ad:08:ab:9e:3b:ec:0e:3a: b3:82:ce:6c:9a:e4:74:74:97:17:45:19:9e:5d:73: d6:dd:5e:54:af:37:60:d2:01:d7:c8:56:06:f5:83: b5:83:dd:7b:22:73:7a:93:ac:d4:ae:c7:d6:ec:8e: 05:40:02:d8:6c:a4:4a:e5:d4:d5:97:a2:ab:51:d4: 5a:58:4a:d6:6b:52:fb:a8:47:e7:3a:32:fc:0d:32: e9:64:6f:3b:de:a4:0b:93:30:f8:5c:be:22:a5:59: aa:d0:4b:21:3b:67:2d:87:03:34:9d:31:4a:94:ba: e3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EA:6B:D3:59:97:02:A4:74:33:F7:08:F1:A4:B1:6F:42:12:A2:33 X509v3 Authority Key Identifier: keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:de:9b:7c:39:a0:a0:45:37:18:72:bb:02:e9:de:2c:2b:aa: f9:2c:78:7b:50:66:d3:c0:ff:9a:d7:21:ae:b7:e4:f2:6f:80: 09:a2:4c:90:21:fa:ce:d6:4b:bd:8e:e5:24:e1:a8:33:ad:85: b2:15:4e:51:92:2c:b3:d0:ef:d5:9f:c9:d7:52:3b:72:ed:3b: 11:2b:a2:99:dd:c2:9b:06:54:17:90:7d:a1:a9:dd:a7:cd:ff: bc:a2:6c:11:46:33:d5:a2:24:1e:e6:c4:86:2f:16:7a:ce:41: 6f:25:75:93:46:01:73:b6:b5:83:6d:e5:50:fc:38:c7:7b:35: 0a:28:9c:2a:73:8b:7d:e8:d1:3a:3b:0e:71:b6:4b:0a:75:1c: 23:f5:cd:d7:be:f2:7d:91:9a:50:f0:a6:2c:35:4c:62:fe:fd: e3:70:20:f3:c0:d1:b4:a5:f8:27:48:28:07:40:5f:ca:33:9b: 41:9c:35:e6:69:f0:71:ea:26:dc:e6:9a:c7:d4:b8:92:c4:40: 89:6a:57:42:2c:d1:4a:9f:41:b8:96:8e:4f:d2:67:c6:47:b9: 79:69:9f:aa:a7:92:f3:1e:1b:f8:2d:1b:6c:be:cd:ae:a3:43: 8b:85:4e:9b:f3:49:40:2b:84:f7:82:59:85:05:c4:75:95:df: b2:ea:13:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA+qp7bNsrUtv+b9uUupFTn6PR4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREOTdGNUU4NUQ1QTk1NzhFNzg5NDBDRkQ1QkFFREZC ODJFMDY0NzAeFw0yNTExMDIxODM0MzRaFw0yNTExMDMyMTI1MzRaMDMxMTAvBgNV BAMTKDI0RUE2QkQzNTk5NzAyQTQ3NDMzRjcwOEYxQTRCMTZGNDIxMkEyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlHCKJV3ovR1mMjmdj411g27EJ KbRY6B9A6hUfZErTHSHv71ZWHZLIRbZFW9Y3xKNW1Kmg+/sIxmzvjSjGbcIujvd6 al//gxuRPlyNDNhUbbMqXStE1wjRy4YqqzZVnfVyMvkG07Q/FfsDQ0b8pFQzCjkf GcdTceNPrBLc3ExOdB+i3p4ztyxpDnRF9TqtCKueO+wOOrOCzmya5HR0lxdFGZ5d c9bdXlSvN2DSAdfIVgb1g7WD3Xsic3qTrNSux9bsjgVAAthspErl1NWXoqtR1FpY StZrUvuoR+c6MvwNMulkbzvepAuTMPhcviKlWarQSyE7Zy2HAzSdMUqUuuP/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJOpr01mXAqR0M/cI8aSxb0ISojMwHwYDVR0j BBgwFoAULdl/XoXVqVeOeJQM/Vuu37guBkcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2ZVVEdxUTI0YmNMcUNjQjkyOE15ZldBYkNrZFVreVV0WFB5RFhlQW0x b0IvMC8yREQ5N0Y1RTg1RDVBOTU3OEU3ODk0MENGRDVCQUVERkI4MkUwNjQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDk3RjVFODVENUE5NTc4 RTc4OTQwQ0ZENUJBRURGQjgyRTA2NDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2ZVVEdxUTI0YmNMcUNjQjkyOE15ZldBYkNrZFVreVV0WFB5RFhlQW0xb0IvMC8y REQ5N0Y1RTg1RDVBOTU3OEU3ODk0MENGRDVCQUVERkI4MkUwNjQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHN6bfDmgoEU3GHK7AuneLCuq+Sx4e1Bm08D/mtchrrfk8m+ACaJMkCH6ztZL vY7lJOGoM62FshVOUZIss9Dv1Z/J11I7cu07ESuimd3CmwZUF5B9oandp83/vKJs EUYz1aIkHubEhi8Wes5BbyV1k0YBc7a1g23lUPw4x3s1CiicKnOLfejROjsOcbZL CnUcI/XN177yfZGaUPCmLDVMYv7943Ag88DRtKX4J0goB0BfyjObQZw15mnwceom 3Oaax9S4ksRAiWpXQizRSp9BuJaOT9Jnxke5eWmfqqeS8x4b+C0bbL7NrqNDi4VO m/NJQCuE94JZhQXEdZXfsuoT1Q== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:42 2025 by rpki-client