$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft File: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft (raw, json) Hash identifier: uyOO7oWlkFv95B4uIwrPdUYp/5HAk6u7Re85bsHkLRg= Subject key identifier: 74:29:BB:EE:18:0F:4D:C1:DA:ED:12:B4:51:DA:89:4F:C4:E0:F1:F9 Authority key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED Certificate issuer: /CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Certificate serial: 2934F3994E1AF71E7DDE7C30848C602D416A9CD1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject info access: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft Manifest number: 0300 Signing time: Mon 03 Nov 2025 22:07:22 +0000 Manifest this update: Mon 03 Nov 2025 22:02:22 +0000 Manifest next update: Wed 05 Nov 2025 00:26:22 +0000 Files and hashes: 1: 3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa (hash: BzoyXL30Xsaxt5/GzA+mLV5q6XBxznhdO2qisUbseRg=) 2: 3139312e372e37322e302f32312d3234203d3e203533313330.roa (hash: uXdeuicJG1GO+GJKUORCb4DqvhzxPyQ2Z5ORNJJFr7Q=) 3: 323830343a313431633a3a2f33322d313238203d3e203533313330.roa (hash: cjsfM81trhoZs+Ib78YBfAQ97ux0mFDSEJNG8MM4Pa8=) 4: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl (hash: Z+dYYc6DCKUqEWWxFpru0053dcoZgaB4xOCFzu6TMTg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 00:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:34:f3:99:4e:1a:f7:1e:7d:de:7c:30:84:8c:60:2d:41:6a:9c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Validity Not Before: Nov 3 22:02:22 2025 GMT Not After : Nov 5 00:26:22 2025 GMT Subject: CN=7429BBEE180F4DC1DAED12B451DA894FC4E0F1F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:22:77:c9:d4:59:b9:5e:8c:b9:1f:ef:b9:d3: 2b:d5:5f:d0:92:b2:32:0c:83:09:c7:41:8f:b7:bf: a0:77:94:3d:b3:ac:4e:f2:f2:66:30:f8:a9:ca:8c: b4:aa:43:7e:63:07:90:92:57:8e:45:7b:4d:28:64: 74:2f:32:9d:dc:60:38:5d:a0:07:25:5d:4b:5a:e7: aa:13:f7:ba:24:a3:13:ec:e8:f7:e1:14:18:c2:c2: 49:7c:10:89:39:00:9e:fc:f5:00:d9:1c:84:71:8b: 19:17:f0:0a:00:14:e6:3f:df:14:9e:1a:7b:45:96: c9:f8:59:92:f9:75:10:db:4b:81:f1:38:ae:4c:67: 0e:64:b2:dc:85:6a:b3:d2:49:ad:0d:56:67:33:f0: 1e:e8:bb:be:e8:6e:2f:ef:4a:3a:f4:2d:f5:3d:f6: 73:25:aa:e7:65:d4:02:95:e8:7c:90:f3:4b:da:da: a4:af:e0:5a:85:b2:22:1b:e9:c4:39:0e:c2:89:75: 77:5f:17:d5:62:9e:74:65:7b:64:8f:9f:8f:83:6d: 75:72:18:76:44:65:e1:1a:54:93:ae:c1:a2:8c:fd: 1e:e4:1f:15:76:9f:97:d2:7b:d6:ae:57:ed:9e:03: 6c:8a:cf:cc:b6:2a:1c:cc:4c:8a:67:7d:4c:98:87: 5d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:29:BB:EE:18:0F:4D:C1:DA:ED:12:B4:51:DA:89:4F:C4:E0:F1:F9 X509v3 Authority Key Identifier: keyid:02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e6:e1:fa:d5:e6:50:7e:5f:f2:12:41:c9:79:bb:85:af:ef: e3:65:4d:6c:69:71:e5:f4:b2:51:29:6e:cc:2a:85:50:72:35: 54:92:d2:5b:94:36:27:84:76:67:29:27:37:25:63:98:e5:ca: 24:1b:a5:21:b3:30:72:f9:ec:e4:7a:d1:62:9f:29:05:c3:70: a8:9a:f7:5a:7c:62:e4:24:95:9a:cd:de:f4:f1:ae:81:29:83: de:bc:0c:83:c9:3f:bc:b3:c7:26:b5:ab:b7:94:08:63:dc:3e: 5b:c1:7a:4d:4d:36:f5:e7:15:1d:95:c1:08:4a:26:8c:3f:60: e9:6a:65:36:ee:82:fe:ae:25:76:07:86:7f:59:1f:99:b4:c7: 7b:a7:59:7f:62:c4:f4:47:40:f9:90:b2:9c:48:ee:dc:7b:fe: f5:56:04:66:65:c3:23:44:15:14:74:a2:88:1c:29:93:87:db: 68:94:d8:3a:8c:cb:21:67:eb:54:08:c1:bf:c7:eb:35:85:b9: 9a:e1:e1:eb:ba:77:64:b2:0a:de:9b:e6:8b:4f:cf:41:7b:c7: 6f:a9:70:e4:de:8f:a8:fd:11:2e:21:fc:6a:9f:a9:9f:45:45: 6c:1d:33:f5:c6:1b:55:d4:ec:7d:15:32:0f:b4:f4:ee:70:60: c9:0b:36:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKTTzmU4a9x593nwwhIxgLUFqnNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQjk5M0U5NTg1QTUzRkM2QjQwREE3NjJBNzNFQjI4 MjFCRjZFRDAeFw0yNTExMDMyMjAyMjJaFw0yNTExMDUwMDI2MjJaMDMxMTAvBgNV BAMTKDc0MjlCQkVFMTgwRjREQzFEQUVEMTJCNDUxREE4OTRGQzRFMEYxRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0InfJ1Fm5Xoy5H++50yvVX9CS sjIMgwnHQY+3v6B3lD2zrE7y8mYw+KnKjLSqQ35jB5CSV45Fe00oZHQvMp3cYDhd oAclXUta56oT97okoxPs6PfhFBjCwkl8EIk5AJ789QDZHIRxixkX8AoAFOY/3xSe GntFlsn4WZL5dRDbS4HxOK5MZw5kstyFarPSSa0NVmcz8B7ou77obi/vSjr0LfU9 9nMlqudl1AKV6HyQ80va2qSv4FqFsiIb6cQ5DsKJdXdfF9VinnRle2SPn4+DbXVy GHZEZeEaVJOuwaKM/R7kHxV2n5fSe9auV+2eA2yKz8y2KhzMTIpnfUyYh10PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdCm77hgPTcHa7RK0UdqJT8Tg8fkwHwYDVR0j BBgwFoAUAsuZPpWFpT/GtA2nYqc+soIb9u0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtM NlovMS8wMkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQ0I5OTNFOTU4NUE1M0ZD NkI0MERBNzYyQTczRUIyODIxQkY2RUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtMNlovMS8w MkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr+bh+tXmUH5f8hJByXm7ha/v42VNbGlx5fSyUSluzCqFUHI1VJLSW5Q2J4R2 ZyknNyVjmOXKJBulIbMwcvns5HrRYp8pBcNwqJr3Wnxi5CSVms3e9PGugSmD3rwM g8k/vLPHJrWrt5QIY9w+W8F6TU029ecVHZXBCEomjD9g6WplNu6C/q4ldgeGf1kf mbTHe6dZf2LE9EdA+ZCynEju3Hv+9VYEZmXDI0QVFHSiiBwpk4fbaJTYOozLIWfr VAjBv8frNYW5muHh67p3ZLIK3pvmi0/PQXvHb6lw5N6PqP0RLiH8ap+pn0VFbB0z 9cYbVdTsfRUyD7T07nBgyQs2+g== -----END CERTIFICATE-----Generated at Tue Nov 4 06:47:49 2025 by rpki-client