$ rpki-client -vvf rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft File: 2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft (raw, json) Hash identifier: V2SjyHsLHSVcW6yDT6wGzYCcvLN636RneU821n+nxm0= Subject key identifier: BE:69:7E:BC:36:17:8F:51:13:CD:32:4D:E0:44:C4:20:14:D8:32:8D Authority key identifier: 2D:9C:53:D6:4D:9C:12:AB:17:AC:A8:6E:DB:3E:8D:34:8B:07:27:50 Certificate issuer: /CN=2D9C53D64D9C12AB17ACA86EDB3E8D348B072750 Certificate serial: 2964FF25B7534051EE5864DE448F8FBD15F21195 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer Subject info access: rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft Manifest number: FD Signing time: Mon 03 Nov 2025 05:16:45 +0000 Manifest this update: Mon 03 Nov 2025 05:11:45 +0000 Manifest next update: Tue 04 Nov 2025 07:34:45 +0000 Files and hashes: 1: 2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl (hash: LVtdl8vXysegNCMz7UQZF+hs1OthW+ZfNENOKCp5kPg=) 2: 3137392e34322e3132302e302f32322d3232203d3e20323731313930.roa (hash: TfAMHSXwbY24vrtPxRXAwD74fc6KDbIbnLsDTfBZHJM=) 3: 323830343a373761343a3a2f33322d3332203d3e20323731313930.roa (hash: qsRafcjJj+s2kDsDgJnWZ0Q5nBOrLVcx6L+RmAUGULI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 07:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:64:ff:25:b7:53:40:51:ee:58:64:de:44:8f:8f:bd:15:f2:11:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9C53D64D9C12AB17ACA86EDB3E8D348B072750 Validity Not Before: Nov 3 05:11:45 2025 GMT Not After : Nov 4 07:34:45 2025 GMT Subject: CN=BE697EBC36178F5113CD324DE044C42014D8328D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:ae:b5:d1:0e:3a:25:53:aa:53:57:ff:39: a2:9c:e3:3d:37:af:bc:26:a5:70:f7:df:94:05:f9: 44:ee:a9:cc:c0:e0:5a:96:c5:02:39:ab:a4:b2:57: 3c:aa:a9:e0:3a:ee:57:b2:df:2d:b6:3d:29:6d:a3: 99:b0:be:ac:48:81:d4:cf:3c:4f:3e:89:18:b3:62: fc:b8:70:38:c0:9a:d9:4c:e2:53:0e:1c:34:b1:ac: 0d:1a:35:3b:c8:fc:8d:f4:83:ff:77:49:a2:92:21: 38:48:c3:06:24:c9:18:ce:de:eb:dc:02:f2:f7:da: 97:70:15:ac:df:d8:22:84:c3:79:ed:55:82:d2:72: 56:bd:b9:db:47:f3:a4:49:10:5c:34:55:7a:02:66: ce:90:6f:24:d9:e6:22:b1:69:d3:da:42:ec:2b:9c: 21:00:e8:f6:06:e8:b3:1a:9f:b8:e2:a9:ab:f6:48: 50:4a:db:07:b9:d4:2c:c4:97:c1:7c:c5:8c:20:74: 2b:ed:53:00:e5:9b:5f:80:14:03:9b:c5:8b:36:7b: 1b:11:db:38:06:87:2d:5a:bb:14:ea:da:45:b1:29: a3:bb:3c:14:bd:5e:e1:f0:46:1b:e6:87:9d:9c:63: 0a:ba:24:1a:9b:53:e5:4e:ed:fc:92:29:1d:e8:71: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:69:7E:BC:36:17:8F:51:13:CD:32:4D:E0:44:C4:20:14:D8:32:8D X509v3 Authority Key Identifier: keyid:2D:9C:53:D6:4D:9C:12:AB:17:AC:A8:6E:DB:3E:8D:34:8B:07:27:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:6f:32:a1:c1:0d:f9:63:9d:2e:fe:4d:77:d1:fa:d1:9d:93: 19:d3:6f:f5:40:5c:25:90:7a:39:95:8f:c5:3f:c1:a2:f4:0e: a4:8e:28:c0:32:96:ad:d2:ee:fd:d8:9d:75:33:dd:09:00:24: ed:ed:5a:8c:ef:2d:52:42:3d:7f:63:2e:f2:de:e9:c5:3a:c0: 96:c2:2c:96:e1:00:f1:66:21:22:60:92:0b:6c:55:04:73:c6: 02:83:a6:04:c8:c1:3d:ea:80:d4:d7:d3:a6:db:b4:a8:98:55: 8d:eb:f9:9b:7d:12:f2:64:84:75:e6:b7:fe:30:dc:fd:ff:78: 9e:bb:1e:28:96:2d:67:62:74:46:e9:b6:6b:6e:bd:f1:4a:27: fc:4f:48:8c:49:1a:63:20:eb:55:3e:da:ce:4d:a8:b8:e2:08: cf:f0:34:4d:38:09:51:f7:85:ef:af:c3:c9:17:0b:0f:21:70: 90:49:5f:61:44:38:9a:23:7f:5f:08:24:1a:3a:4e:c0:20:98: 6c:fb:a5:00:f0:e0:a5:e5:00:e0:20:5d:74:18:2d:fa:d7:13: b7:66:7d:9a:1c:39:cc:41:e1:d6:b1:e6:1c:b6:48:cd:05:13: ca:60:65:e9:0c:be:33:c2:dc:53:de:80:35:eb:c2:60:b5:e4: 2a:c5:1b:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKWT/JbdTQFHuWGTeRI+PvRXyEZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5QzUzRDY0RDlDMTJBQjE3QUNBODZFREIzRThEMzQ4 QjA3Mjc1MDAeFw0yNTExMDMwNTExNDVaFw0yNTExMDQwNzM0NDVaMDMxMTAvBgNV BAMTKEJFNjk3RUJDMzYxNzhGNTExM0NEMzI0REUwNDRDNDIwMTREODMyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0rK610Q46JVOqU1f/OaKc4z03 r7wmpXD335QF+UTuqczA4FqWxQI5q6SyVzyqqeA67ley3y22PSlto5mwvqxIgdTP PE8+iRizYvy4cDjAmtlM4lMOHDSxrA0aNTvI/I30g/93SaKSIThIwwYkyRjO3uvc AvL32pdwFazf2CKEw3ntVYLScla9udtH86RJEFw0VXoCZs6QbyTZ5iKxadPaQuwr nCEA6PYG6LMan7jiqav2SFBK2we51CzEl8F8xYwgdCvtUwDlm1+AFAObxYs2exsR 2zgGhy1auxTq2kWxKaO7PBS9XuHwRhvmh52cYwq6JBqbU+VO7fySKR3ocQF9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvml+vDYXj1ETzTJN4ETEIBTYMo0wHwYDVR0j BBgwFoAULZxT1k2cEqsXrKhu2z6NNIsHJ1AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHF6Qjc2UkFHcGNRZnZwTDhKYlRKSlBZc3lBZTZVcHhSbWhTYzRFSlVa bncvMC8yRDlDNTNENjREOUMxMkFCMTdBQ0E4NkVEQjNFOEQzNDhCMDcyNzUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEOUM1M0Q2NEQ5QzEyQUIx N0FDQTg2RURCM0U4RDM0OEIwNzI3NTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHF6Qjc2UkFHcGNRZnZwTDhKYlRKSlBZc3lBZTZVcHhSbWhTYzRFSlVabncvMC8y RDlDNTNENjREOUMxMkFCMTdBQ0E4NkVEQjNFOEQzNDhCMDcyNzUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyW8yocEN+WOdLv5Nd9H60Z2TGdNv9UBcJZB6OZWPxT/BovQOpI4owDKWrdLu /diddTPdCQAk7e1ajO8tUkI9f2Mu8t7pxTrAlsIsluEA8WYhImCSC2xVBHPGAoOm BMjBPeqA1NfTptu0qJhVjev5m30S8mSEdea3/jDc/f94nrseKJYtZ2J0Rum2a269 8Uon/E9IjEkaYyDrVT7azk2ouOIIz/A0TTgJUfeF76/DyRcLDyFwkElfYUQ4miN/ XwgkGjpOwCCYbPulAPDgpeUA4CBddBgt+tcTt2Z9mhw5zEHh1rHmHLZIzQUTymBl 6Qy+M8LcU96ANevCYLXkKsUbXg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:26:11 2025 by rpki-client