$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft File: 2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft (raw, json) Hash identifier: oWv8B8prQh6h3Sg4FEu2ahqAQQ5fN6TOkh7t4KW85EU= Subject key identifier: B2:87:62:11:77:9E:82:4B:C3:1C:50:69:49:98:89:A5:E2:08:18:87 Authority key identifier: 2B:A0:F1:A2:59:4E:57:38:C3:12:26:58:FD:A5:BF:DA:F6:6D:4E:20 Certificate issuer: /CN=2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20 Certificate serial: 0A870044E3E65D1137C5CF45D3E412D48AABD09D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer Subject info access: rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft Manifest number: 1D Signing time: Wed 20 Aug 2025 12:08:53 +0000 Manifest this update: Wed 20 Aug 2025 12:03:53 +0000 Manifest next update: Thu 21 Aug 2025 14:44:53 +0000 Files and hashes: 1: 323830343a343464383a383030303a3a2f33332d3333203d3e20323637363537.roa (hash: 9A3cX7k7kk2IJpB44lk3hlv1TswpdFdx1DMVnvG/hKw=) 2: 2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl (hash: WARvp0+DCoMS2QWgT8T+cQB5mYKnW1MOUDfgTFaUzu8=) 3: 323830343a343464383a3a2f33332d3333203d3e20323637363537.roa (hash: fofo5LEclRsN25dyqv5FM8Psn+rvWBQBv16VnCSHHKo=) 4: 34352e3232342e3131322e302f32342d3234203d3e20323637363537.roa (hash: l5SY9sGJNmeBs8PGx6BZBhqG/psiU6zwcCc09S5QsZ4=) 5: 34352e3232342e3131332e302f32342d3234203d3e20323637363537.roa (hash: 25Whm4c8nsQ2Lh/RUzhXdaaC3YKZ9BNJ/Gf9xton9oQ=) 6: 34352e3232342e3131342e302f32332d3233203d3e20323637363537.roa (hash: KimwajkIBAKKOS0h3qMz7ajSEAY3qEVonpTmcqSqJvo=) 7: 323830343a343464383a3a2f33322d3332203d3e20323637363537.roa (hash: cuPNuR6f/unuifUQxVS0d26Own5a7oHMvIJYpooXwQ0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 14:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:87:00:44:e3:e6:5d:11:37:c5:cf:45:d3:e4:12:d4:8a:ab:d0:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20 Validity Not Before: Aug 20 12:03:53 2025 GMT Not After : Aug 21 14:44:53 2025 GMT Subject: CN=B2876211779E824BC31C5069499889A5E2081887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:8b:7f:42:56:8e:b1:00:1b:cf:cd:d9:7b: 22:66:70:d2:28:5e:ed:58:28:00:e8:16:78:7b:5c: 1d:16:71:51:fe:a6:79:e3:ac:37:72:80:71:60:eb: 60:e6:2c:d3:b1:d0:f9:62:b4:a9:96:59:2b:bc:44: 48:19:aa:ea:ed:e9:c7:1c:86:d7:e7:a3:58:dc:31: dc:7b:4f:82:07:b9:e2:19:12:4d:f5:f0:fb:2f:88: 1b:bc:9f:72:68:bd:53:cb:b6:3b:26:f9:62:18:c8: 10:cb:0c:3f:19:80:a0:ee:bb:ed:d4:3b:16:27:9a: f5:bf:23:09:f6:9a:bb:e7:4f:f7:b8:63:9f:03:61: 61:dd:0c:ca:07:52:da:33:94:56:23:75:d3:c8:18: 9d:6f:84:19:61:9f:7d:c6:ed:b8:17:22:63:ad:56: f1:7c:41:95:66:1a:40:9b:3f:f3:59:33:4a:bf:e3: e6:cf:f0:60:28:0c:bd:52:f0:3e:ab:ac:0e:8f:dc: eb:84:73:01:39:4c:84:a6:60:16:cb:e1:47:09:00: 87:12:c8:c7:99:d5:80:24:29:d6:fc:97:50:f2:6b: 2c:d5:fd:1f:b0:4c:6c:a6:03:5e:01:e1:d4:2c:24: d9:1c:23:fe:81:3a:1d:5b:f5:41:6d:6b:b2:fa:e4: 3f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:87:62:11:77:9E:82:4B:C3:1C:50:69:49:98:89:A5:E2:08:18:87 X509v3 Authority Key Identifier: keyid:2B:A0:F1:A2:59:4E:57:38:C3:12:26:58:FD:A5:BF:DA:F6:6D:4E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a8:a3:0d:74:f1:21:10:74:2d:65:c3:b3:e9:01:5c:55:1c: 24:60:e8:a2:17:a3:6a:d8:d7:70:d1:2c:79:fd:de:96:64:c8: af:7b:88:02:88:26:1d:e2:0b:83:5e:54:9b:7a:24:2f:c3:9e: 89:71:5d:c8:dc:e3:46:76:7b:60:c0:e2:5a:0c:24:6c:75:92: 8f:b3:5d:b6:d3:86:92:e8:bc:12:f5:73:96:c3:94:82:78:29: 47:aa:02:62:3f:72:eb:c6:d0:42:e9:ef:51:4c:16:01:b2:b5: 6c:29:e5:23:c5:5d:95:be:4a:ee:c7:f6:e5:a8:a8:01:a2:68: 9c:7f:20:d2:7b:80:cb:86:dd:08:d8:a0:80:45:44:12:9c:6a: a5:fb:eb:b2:68:3c:a3:44:20:4c:ed:36:86:78:ae:a5:e7:11: 3c:38:1b:2d:40:0e:fc:07:fc:28:8e:22:eb:5b:b6:c9:8b:6d: ce:ce:d2:09:5a:68:77:e6:eb:e4:fb:2a:0a:08:9e:02:54:5f: cf:13:ff:db:ee:cb:95:32:f4:fc:8e:b7:d6:48:96:9a:b1:a3: 39:9f:29:d2:c5:b0:c9:9a:5c:96:64:62:b7:7a:b5:3f:f0:16: 56:07:3b:37:f6:14:6e:84:1d:a5:8c:19:a9:9c:fa:af:f6:c8: 8e:8f:6f:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCocAROPmXRE3xc9F0+QS1Iqr0J0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJBMEYxQTI1OTRFNTczOEMzMTIyNjU4RkRBNUJGREFG NjZENEUyMDAeFw0yNTA4MjAxMjAzNTNaFw0yNTA4MjExNDQ0NTNaMDMxMTAvBgNV BAMTKEIyODc2MjExNzc5RTgyNEJDMzFDNTA2OTQ5OTg4OUE1RTIwODE4ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCUYt/QlaOsQAbz83ZeyJmcNIo Xu1YKADoFnh7XB0WcVH+pnnjrDdygHFg62DmLNOx0PlitKmWWSu8REgZqurt6ccc htfno1jcMdx7T4IHueIZEk318PsviBu8n3JovVPLtjsm+WIYyBDLDD8ZgKDuu+3U OxYnmvW/Iwn2mrvnT/e4Y58DYWHdDMoHUtozlFYjddPIGJ1vhBlhn33G7bgXImOt VvF8QZVmGkCbP/NZM0q/4+bP8GAoDL1S8D6rrA6P3OuEcwE5TISmYBbL4UcJAIcS yMeZ1YAkKdb8l1DyayzV/R+wTGymA14B4dQsJNkcI/6BOh1b9UFta7L65D9TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsodiEXeegkvDHFBpSZiJpeIIGIcwHwYDVR0j BBgwFoAUK6DxollOVzjDEiZY/aW/2vZtTiAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRlhrd0t3WTV1eUFTdzhSYnpxNU14YzFqY1RpYnQxY3Jza2R1UlZLNU41 UzMvMC8yQkEwRjFBMjU5NEU1NzM4QzMxMjI2NThGREE1QkZEQUY2NkQ0RTIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQTBGMUEyNTk0RTU3MzhD MzEyMjY1OEZEQTVCRkRBRjY2RDRFMjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rlhrd0t3WTV1eUFTdzhSYnpxNU14YzFqY1RpYnQxY3Jza2R1UlZLNU41UzMvMC8y QkEwRjFBMjU5NEU1NzM4QzMxMjI2NThGREE1QkZEQUY2NkQ0RTIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVaijDXTxIRB0LWXDs+kBXFUcJGDoohejatjXcNEsef3elmTIr3uIAogmHeIL g15Um3okL8OeiXFdyNzjRnZ7YMDiWgwkbHWSj7NdttOGkui8EvVzlsOUgngpR6oC Yj9y68bQQunvUUwWAbK1bCnlI8Vdlb5K7sf25aioAaJonH8g0nuAy4bdCNiggEVE Epxqpfvrsmg8o0QgTO02hniupecRPDgbLUAO/Af8KI4i61u2yYttzs7SCVpod+br 5PsqCgieAlRfzxP/2+7LlTL0/I631kiWmrGjOZ8p0sWwyZpclmRit3q1P/AWVgc7 N/YUboQdpYwZqZz6r/bIjo9vLw== -----END CERTIFICATE-----Generated at Wed Aug 20 16:17:45 2025 by rpki-client