$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft File: CA2ED340034D0368230850867C30E245990118A2.mft (raw, json) Hash identifier: n1zJB79BSpWWUfAUN3aGoLDH36j+UOb3joG5gRIRAqc= Subject key identifier: F4:2D:DE:CA:68:09:85:CE:49:A1:76:29:73:AB:84:C6:81:62:20:31 Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2 Certificate issuer: /CN=CA2ED340034D0368230850867C30E245990118A2 Certificate serial: 1BAC4095B093EF47DA585384AADE13321E3F92FB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft Manifest number: 036B Signing time: Thu 06 Nov 2025 03:10:00 +0000 Manifest this update: Thu 06 Nov 2025 03:05:00 +0000 Manifest next update: Fri 07 Nov 2025 03:10:00 +0000 Files and hashes: 1: 3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (hash: bJTEqeP16XCpCH5JZabT/MCNKPhW6t9nzCk4I/T1oI0=) 2: CA2ED340034D0368230850867C30E245990118A2.crl (hash: 08ScVxO5aSEFZO/q1ZYUxURUcSzzKkatFqsUeX6qUKM=) 3: 3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (hash: dTVML3Vbzw4YnIZhgLmRkiNFb188p4H6d/auTvRDB4A=) 4: 3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (hash: 5e4gcNEn5VL2vN7iW7nA5Df4Xfu26IOs2pc5B0p4lXc=) 5: 3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (hash: k3rhtpDLwoW36HfhrQiYO+psfP/HD50OXGIZu2C/YjE=) 6: 3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (hash: rStpDynGRR2uvmjQkNNftRfa83aI9CFXepHd5ccjIOo=) 7: 3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (hash: lZ9umGE5NlyJckpUrEcRBf2qnDy03PIbFuZNB7UkcM4=) 8: 3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (hash: yjU6PAJwL/lIZeEtQEZbUNPm0Zr33QD1yFw6wjO3p2g=) 9: 323830343a336438303a3a2f33322d3438203d3e20323636353335.roa (hash: tpoXD4T4EUi9EwpxT41fxDYxhlTzas0mOmEydCxj8EA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 07 Nov 2025 03:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ac:40:95:b0:93:ef:47:da:58:53:84:aa:de:13:32:1e:3f:92:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA2ED340034D0368230850867C30E245990118A2 Validity Not Before: Nov 6 03:05:00 2025 GMT Not After : Nov 7 03:10:00 2025 GMT Subject: CN=3082010A0282010100BA43D72212AECD4549025CBD31CF287D07CC0AD80779F9E61DA79B3D7D622718BF9F72DC2301D16A1465754AD3AC8408DCF929BEED0290D9CBAA953659B8DD514BC886028B840B35599F2DEB94AD4C1A04103F5AFD0E1F3621CEE279D9A2035379F4BA79BDE554E5906628FB31BA48B407D2C96EE2F6F05B3E16BE066E2CC7EEF2A202D6C51324C911938D136A361C2776A1319A3FD1EB464D81C813450EB1747714203E46C25A6C3AAE9C769CE60C4BC00BD8EB2077C369931621C0CAD90CF2999D91E460DE802ABB45E34486EA34187834544D34204F47430E3E6C6CE5519AB3BB1BB88FFDAE854238DEC600FDE14643C380F1BDC0D9C4F93B83D566ECEBCF0203010001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:43:d7:22:12:ae:cd:45:49:02:5c:bd:31:cf: 28:7d:07:cc:0a:d8:07:79:f9:e6:1d:a7:9b:3d:7d: 62:27:18:bf:9f:72:dc:23:01:d1:6a:14:65:75:4a: d3:ac:84:08:dc:f9:29:be:ed:02:90:d9:cb:aa:95: 36:59:b8:dd:51:4b:c8:86:02:8b:84:0b:35:59:9f: 2d:eb:94:ad:4c:1a:04:10:3f:5a:fd:0e:1f:36:21: ce:e2:79:d9:a2:03:53:79:f4:ba:79:bd:e5:54:e5: 90:66:28:fb:31:ba:48:b4:07:d2:c9:6e:e2:f6:f0: 5b:3e:16:be:06:6e:2c:c7:ee:f2:a2:02:d6:c5:13: 24:c9:11:93:8d:13:6a:36:1c:27:76:a1:31:9a:3f: d1:eb:46:4d:81:c8:13:45:0e:b1:74:77:14:20:3e: 46:c2:5a:6c:3a:ae:9c:76:9c:e6:0c:4b:c0:0b:d8: eb:20:77:c3:69:93:16:21:c0:ca:d9:0c:f2:99:9d: 91:e4:60:de:80:2a:bb:45:e3:44:86:ea:34:18:78: 34:54:4d:34:20:4f:47:43:0e:3e:6c:6c:e5:51:9a: b3:bb:1b:b8:8f:fd:ae:85:42:38:de:c6:00:fd:e1: 46:43:c3:80:f1:bd:c0:d9:c4:f9:3b:83:d5:66:ec: eb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2D:DE:CA:68:09:85:CE:49:A1:76:29:73:AB:84:C6:81:62:20:31 X509v3 Authority Key Identifier: keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:7b:70:21:bb:f6:e2:c9:d5:2d:78:bd:64:1f:7e:12:91:58: 0d:ab:7e:4e:11:e4:e7:90:31:51:76:50:8a:be:96:43:be:ac: dd:50:76:75:ce:2f:2f:ce:51:0e:e4:b4:fd:03:c7:5e:8e:ab: 07:55:8e:7f:1c:f7:48:48:67:72:a9:68:c3:39:c2:74:36:7b: 63:5e:18:68:45:96:2c:ee:fe:e0:50:a6:c5:b8:39:ed:5f:59: 94:29:94:45:68:3b:8a:64:f9:71:86:d6:29:2f:cd:a6:4f:5d: c4:a1:60:14:f1:80:21:ff:2b:b8:80:b3:b9:f2:4a:84:38:9b: 74:db:3c:f2:72:24:62:99:36:a2:37:ed:c9:1c:a5:13:7e:79: cd:9b:0e:06:33:4b:da:ee:4b:17:f2:65:6a:f4:85:8a:5c:d1: 15:64:78:55:6d:a9:fc:aa:ac:e4:ef:ab:c2:83:2f:2e:7d:d7: 27:4b:05:58:e9:a0:ed:d6:8b:85:f8:26:1d:e5:ef:a5:23:b2: cc:ca:64:6b:bf:91:ab:21:b6:1b:42:a8:a9:6b:72:01:e5:5c: 79:6e:b2:4e:0a:8e:69:a4:de:a4:30:69:72:62:00:56:ec:67: c3:51:81:5f:5b:03:f1:cc:a6:35:4d:09:0a:93:6a:39:cb:0a: b4:f0:11:69 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUG6xAlbCT70faWFOEqt4TMh4/kvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyRUQzNDAwMzREMDM2ODIzMDg1MDg2N0MzMEUyNDU5 OTAxMThBMjAeFw0yNTExMDYwMzA1MDBaFw0yNTExMDcwMzEwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkE0M0Q3MjIxMkFFQ0Q0NTQ5 MDI1Q0JEMzFDRjI4N0QwN0NDMEFEODA3NzlGOUU2MURBNzlCM0Q3RDYyMjcxOEJG OUY3MkRDMjMwMUQxNkExNDY1NzU0QUQzQUM4NDA4RENGOTI5QkVFRDAyOTBEOUNC QUE5NTM2NTlCOERENTE0QkM4ODYwMjhCODQwQjM1NTk5RjJERUI5NEFENEMxQTA0 MTAzRjVBRkQwRTFGMzYyMUNFRTI3OUQ5QTIwMzUzNzlGNEJBNzlCREU1NTRFNTkw NjYyOEZCMzFCQTQ4QjQwN0QyQzk2RUUyRjZGMDVCM0UxNkJFMDY2RTJDQzdFRUYy QTIwMkQ2QzUxMzI0QzkxMTkzOEQxMzZBMzYxQzI3NzZBMTMxOUEzRkQxRUI0NjRE ODFDODEzNDUwRUIxNzQ3NzE0MjAzRTQ2QzI1QTZDM0FBRTlDNzY5Q0U2MEM0QkMw MEJEOEVCMjA3N0MzNjk5MzE2MjFDMENBRDkwQ0YyOTk5RDkxRTQ2MERFODAyQUJC NDVFMzQ0ODZFQTM0MTg3ODM0NTQ0RDM0MjA0RjQ3NDMwRTNFNkM2Q0U1NTE5QUIz QkIxQkI4OEZGREFFODU0MjM4REVDNjAwRkRFMTQ2NDNDMzgwRjFCREMwRDlDNEY5 M0I4M0Q1NjZFQ0VCQ0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAukPXIhKuzUVJAly9Mc8ofQfMCtgHefnmHaebPX1iJxi/n3LcIwHR ahRldUrTrIQI3Pkpvu0CkNnLqpU2WbjdUUvIhgKLhAs1WZ8t65StTBoEED9a/Q4f NiHO4nnZogNTefS6eb3lVOWQZij7MbpItAfSyW7i9vBbPha+Bm4sx+7yogLWxRMk yRGTjRNqNhwndqExmj/R60ZNgcgTRQ6xdHcUID5GwlpsOq6cdpzmDEvAC9jrIHfD aZMWIcDK2QzymZ2R5GDegCq7ReNEhuo0GHg0VE00IE9HQw4+bGzlUZqzuxu4j/2u hUI43sYA/eFGQ8OA8b3A2cT5O4PVZuzrzwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FPQt3spoCYXOSaF2KXOrhMaBYiAxMB8GA1UdIwQYMBaAFMou00ADTQNoIwhQhnww 4kWZARiiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4 RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2 ODIzMDg1MDg2N0MzMEUyNDU5OTAxMThBMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9DQTJFRDM0MDAzNEQwMzY4MjMwODUwODY3QzMwRTI0NTk5MDEx OEEyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4RXZIVEhX aWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2ODIzMDg1 MDg2N0MzMEUyNDU5OTAxMThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACN7cCG79uLJ1S14vWQffhKR WA2rfk4R5OeQMVF2UIq+lkO+rN1QdnXOLy/OUQ7ktP0Dx16OqwdVjn8c90hIZ3Kp aMM5wnQ2e2NeGGhFlizu/uBQpsW4Oe1fWZQplEVoO4pk+XGG1ikvzaZPXcShYBTx gCH/K7iAs7nySoQ4m3TbPPJyJGKZNqI37ckcpRN+ec2bDgYzS9ruSxfyZWr0hYpc 0RVkeFVtqfyqrOTvq8KDLy591ydLBVjpoO3Wi4X4Jh3l76UjsszKZGu/kashthtC qKlrcgHlXHlusk4Kjmmk3qQwaXJiAFbsZ8NRgV9bA/HMpjVNCQqTajnLCrTwEWk= -----END CERTIFICATE-----Generated at Thu Nov 6 04:42:46 2025 by rpki-client