$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft File: 2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft (raw, json) Hash identifier: mS0yKeK/F34d2nKRMvM0PSxUBavwKE4ZkpkGCVCxGrE= Subject key identifier: 50:D0:E2:96:AA:27:E7:FA:D3:4C:DC:EB:62:45:D0:10:56:A6:64:E2 Authority key identifier: 2B:A0:F1:A2:59:4E:57:38:C3:12:26:58:FD:A5:BF:DA:F6:6D:4E:20 Certificate issuer: /CN=2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20 Certificate serial: 0AF60E23DC610FBA3C8394A9DADF01B3F84E1010 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer Subject info access: rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft Manifest number: 84 Signing time: Mon 03 Nov 2025 04:24:01 +0000 Manifest this update: Mon 03 Nov 2025 04:19:01 +0000 Manifest next update: Tue 04 Nov 2025 07:37:01 +0000 Files and hashes: 1: 323830343a343464383a3a2f33332d3333203d3e20323637363537.roa (hash: fofo5LEclRsN25dyqv5FM8Psn+rvWBQBv16VnCSHHKo=) 2: 34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa (hash: u4vxwdC/Vm4BxLFrw347cV1aKyGF5wyQSZiJYKVZ51g=) 3: 323830343a343464383a383030303a3a2f33332d3333203d3e20323637363537.roa (hash: 9A3cX7k7kk2IJpB44lk3hlv1TswpdFdx1DMVnvG/hKw=) 4: 323830343a343464383a3a2f33322d3332203d3e20323637363537.roa (hash: cuPNuR6f/unuifUQxVS0d26Own5a7oHMvIJYpooXwQ0=) 5: 2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl (hash: NYcOHyOYKFIfS2OX1krHx4Jk2jttWyCKjXpmmer2GAM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f6:0e:23:dc:61:0f:ba:3c:83:94:a9:da:df:01:b3:f8:4e:10:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20 Validity Not Before: Nov 3 04:19:01 2025 GMT Not After : Nov 4 07:37:01 2025 GMT Subject: CN=50D0E296AA27E7FAD34CDCEB6245D01056A664E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c5:1a:64:12:26:f7:a7:14:de:d0:54:e8:03: 77:f3:54:ea:f3:eb:73:42:4a:e3:dd:76:d0:50:ea: 55:bb:be:77:c4:2c:fa:8c:fc:e4:0b:21:43:be:ae: d0:91:a9:72:c7:72:6b:2a:ed:cf:b4:62:c9:3c:0c: 41:0f:e1:c0:35:fe:46:58:e4:d4:ac:01:4a:76:28: 41:cf:84:f2:df:8b:a9:91:73:ce:ef:e5:9a:15:76: a8:52:46:94:98:6e:b8:66:d8:75:d8:47:62:14:1d: 23:a1:a6:84:79:5f:ef:ba:09:80:98:5f:b5:ed:74: dc:9a:4b:78:43:1d:4e:00:d7:18:e1:db:df:4a:b1: c3:4f:fe:21:9b:0e:e7:1f:4d:67:6d:f8:6b:ba:0d: d4:f0:7e:d7:83:c4:73:2b:93:12:2a:dd:c8:1a:4d: 3c:c7:10:5c:81:a7:97:db:62:4b:ab:4a:92:71:be: c9:0f:48:90:ac:04:1f:0e:40:c7:4c:08:3b:b8:55: fd:d8:97:63:b9:6b:5b:df:1a:54:80:c5:b6:c1:9a: 5e:6c:a6:d4:42:ac:db:17:20:7b:56:10:f9:a7:fc: d5:d5:cc:16:7a:5d:34:c0:10:b5:b5:e2:25:5d:15: b9:df:a5:9c:3f:49:76:61:52:d3:34:21:87:0a:c5: 2d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D0:E2:96:AA:27:E7:FA:D3:4C:DC:EB:62:45:D0:10:56:A6:64:E2 X509v3 Authority Key Identifier: keyid:2B:A0:F1:A2:59:4E:57:38:C3:12:26:58:FD:A5:BF:DA:F6:6D:4E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/0/2BA0F1A2594E5738C3122658FDA5BFDAF66D4E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f9:93:1d:ec:ce:88:73:6f:94:f1:38:18:38:b0:d5:cc:d7: 8f:82:2f:04:21:d5:c6:8a:f8:c7:79:51:92:3e:f1:19:05:c3: 82:dd:4a:48:2e:ee:71:d4:a1:5e:4f:14:87:69:b7:99:8e:df: 01:c1:c4:86:b5:24:be:e9:6c:2f:b0:1b:2c:5e:ed:62:bf:bd: 70:ca:e4:55:03:8a:d0:3e:9b:6b:bb:70:53:34:c6:04:4c:f9: 92:41:df:4c:08:39:39:ff:29:59:92:c6:22:7e:1f:b9:5c:16: d8:49:79:f5:bd:a3:e2:da:ef:bf:6c:05:97:b9:8f:7d:c7:f1: fe:24:e4:c4:58:54:0e:56:c2:24:4d:e2:31:3f:c0:b3:54:34: 50:90:d5:3f:2f:00:5d:73:1d:ce:bc:7f:7f:97:7b:57:d2:55: bb:66:1c:43:f1:06:20:67:40:69:8f:9a:61:ad:04:45:b3:10: 58:b5:8b:9b:9e:df:bc:5d:0e:29:59:66:ca:7b:33:1d:90:20: f3:ea:96:cc:60:e6:8f:83:40:8d:3a:ad:40:5f:44:8b:5e:0e: b1:2a:33:cd:9a:4f:d4:48:35:48:d0:d5:7a:e7:b9:5d:e8:a3: 49:e2:e8:3b:35:54:05:7e:c4:0b:77:a0:46:f8:e7:7b:54:5f: 46:fb:83:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCvYOI9xhD7o8g5Sp2t8Bs/hOEBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJBMEYxQTI1OTRFNTczOEMzMTIyNjU4RkRBNUJGREFG NjZENEUyMDAeFw0yNTExMDMwNDE5MDFaFw0yNTExMDQwNzM3MDFaMDMxMTAvBgNV BAMTKDUwRDBFMjk2QUEyN0U3RkFEMzRDRENFQjYyNDVEMDEwNTZBNjY0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxRpkEib3pxTe0FToA3fzVOrz 63NCSuPddtBQ6lW7vnfELPqM/OQLIUO+rtCRqXLHcmsq7c+0Ysk8DEEP4cA1/kZY 5NSsAUp2KEHPhPLfi6mRc87v5ZoVdqhSRpSYbrhm2HXYR2IUHSOhpoR5X++6CYCY X7XtdNyaS3hDHU4A1xjh299KscNP/iGbDucfTWdt+Gu6DdTwfteDxHMrkxIq3cga TTzHEFyBp5fbYkurSpJxvskPSJCsBB8OQMdMCDu4Vf3Yl2O5a1vfGlSAxbbBml5s ptRCrNsXIHtWEPmn/NXVzBZ6XTTAELW14iVdFbnfpZw/SXZhUtM0IYcKxS0lAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUNDilqon5/rTTNzrYkXQEFamZOIwHwYDVR0j BBgwFoAUK6DxollOVzjDEiZY/aW/2vZtTiAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRlhrd0t3WTV1eUFTdzhSYnpxNU14YzFqY1RpYnQxY3Jza2R1UlZLNU41 UzMvMC8yQkEwRjFBMjU5NEU1NzM4QzMxMjI2NThGREE1QkZEQUY2NkQ0RTIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQTBGMUEyNTk0RTU3MzhD MzEyMjY1OEZEQTVCRkRBRjY2RDRFMjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rlhrd0t3WTV1eUFTdzhSYnpxNU14YzFqY1RpYnQxY3Jza2R1UlZLNU41UzMvMC8y QkEwRjFBMjU5NEU1NzM4QzMxMjI2NThGREE1QkZEQUY2NkQ0RTIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAfmTHezOiHNvlPE4GDiw1czXj4IvBCHVxor4x3lRkj7xGQXDgt1KSC7ucdSh Xk8Uh2m3mY7fAcHEhrUkvulsL7AbLF7tYr+9cMrkVQOK0D6ba7twUzTGBEz5kkHf TAg5Of8pWZLGIn4fuVwW2El59b2j4trvv2wFl7mPfcfx/iTkxFhUDlbCJE3iMT/A s1Q0UJDVPy8AXXMdzrx/f5d7V9JVu2YcQ/EGIGdAaY+aYa0ERbMQWLWLm57fvF0O KVlmynszHZAg8+qWzGDmj4NAjTqtQF9Ei14OsSozzZpP1Eg1SNDVeue5XeijSeLo OzVUBX7EC3egRvjne1RfRvuD8Q== -----END CERTIFICATE-----Generated at Mon Nov 3 05:44:10 2025 by rpki-client