$ rpki-client -vvf rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft File: 2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft (raw, json) Hash identifier: IM1ifmQZ/eCMGewcVZVOJN08rfgSnSP3CryUwcXbrfI= Subject key identifier: E3:F1:FA:64:03:B8:21:F5:0F:22:E7:CD:01:07:54:58:6D:9C:7A:AA Authority key identifier: 2B:9D:F2:4F:92:F5:79:58:C1:0E:33:57:6E:A0:A0:7B:E1:DC:A8:FB Certificate issuer: /CN=2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB Certificate serial: 756CF23ABD61E0D16AFE79D6FD7F1B00DCED85BE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft Manifest number: 9D Signing time: Mon 03 Nov 2025 15:41:56 +0000 Manifest this update: Mon 03 Nov 2025 15:36:56 +0000 Manifest next update: Tue 04 Nov 2025 18:44:56 +0000 Files and hashes: 1: 3133312e3136312e3137362e302f32322d3332203d3e20323634333834.roa (hash: mlbCfD0T4gM9tMdfnfarkiKhJLAPHHaOU4fUgTbl9WM=) 2: 323830343a316461383a3a2f33322d313238203d3e20323634333834.roa (hash: SZNfQnJy+8YoF6N8/31nwyII2wLm84N7RXT1MK3wY88=) 3: 2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.crl (hash: Nk1NSuUKH1vQNeHnDNlH0yvcbz/35Wdmq+PrBohQ33U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.crl rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 18:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:6c:f2:3a:bd:61:e0:d1:6a:fe:79:d6:fd:7f:1b:00:dc:ed:85:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB Validity Not Before: Nov 3 15:36:56 2025 GMT Not After : Nov 4 18:44:56 2025 GMT Subject: CN=E3F1FA6403B821F50F22E7CD010754586D9C7AAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:d6:f6:00:e1:9b:da:a6:ba:f6:7b:6e:9c: 35:5a:8e:e1:ae:0d:6e:2f:b5:6b:0a:20:b1:f6:ba: 8a:8d:6f:11:c9:6e:0c:f8:62:fe:29:05:67:17:32: 01:1a:7d:07:af:c5:7f:94:12:86:0f:3c:ac:58:d6: 5c:b3:06:b2:bb:a0:66:89:a2:93:ab:7a:04:3b:07: ef:97:c9:a0:df:92:3b:05:28:f4:02:d4:92:bc:d7: f1:a0:f9:06:74:fc:3c:79:38:dc:d6:f5:5d:45:21: 85:e9:72:92:99:11:dc:f1:49:78:82:e4:68:51:06: f7:5a:ad:05:d7:db:d0:d3:99:88:09:8b:58:5c:f5: f7:40:03:0b:16:f1:ae:da:f5:0a:d3:b8:9c:4e:e7: 11:d8:1a:5e:b0:fc:3f:fc:34:d9:e0:c5:bc:81:2b: 4b:7f:b1:0b:cb:0c:4c:31:b5:fe:42:ca:2f:9d:de: f0:00:fc:e9:64:6f:e3:1c:53:75:9c:5f:51:ae:e3: 3f:0c:f3:de:a6:c9:16:6f:da:d8:0a:64:f9:d7:15: b3:8a:83:4c:d7:44:87:7d:dd:f7:d7:e4:6c:a8:d2: f3:c0:01:fd:71:04:e9:54:6b:73:0a:9e:61:3f:88: 67:c6:ef:a9:fe:84:98:ce:bd:60:bb:c0:20:9f:7c: 30:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F1:FA:64:03:B8:21:F5:0F:22:E7:CD:01:07:54:58:6D:9C:7A:AA X509v3 Authority Key Identifier: keyid:2B:9D:F2:4F:92:F5:79:58:C1:0E:33:57:6E:A0:A0:7B:E1:DC:A8:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:2d:40:ec:5c:1a:9f:dc:0b:17:be:4d:e4:2c:1c:69:85:3e: 04:dc:3e:25:46:50:1b:b1:4b:a7:15:cb:e1:4b:f4:48:ef:67: 01:a9:b1:0b:d7:22:4f:54:5e:12:99:93:24:76:44:bb:75:9e: 20:2f:e0:b2:bb:a1:29:92:1e:38:f1:10:d9:e6:c4:17:dc:bd: cc:a1:5a:91:14:75:ae:23:7d:99:00:3f:94:49:b8:06:1d:7b: 14:22:5f:08:6f:25:39:20:d2:c3:ec:47:02:a8:01:3a:6b:fd: 1d:1b:f3:82:bd:7a:cb:7b:2a:4e:f6:60:7d:1d:9c:b9:32:bc: e7:e7:8f:53:71:ef:af:8d:df:9b:cf:a5:52:51:52:22:a1:80: 49:02:1f:ab:f0:b9:a3:e3:3c:20:61:af:0f:eb:91:89:6d:51: 96:3c:55:5f:e9:49:26:86:58:dc:b4:d9:f2:2e:73:d6:e9:20: 75:86:4f:90:a6:64:64:ae:a7:e1:88:0a:8b:5d:6c:eb:3d:7b: f3:c8:2c:3e:20:cd:7a:96:48:78:58:93:a0:31:d0:d7:5a:3a: 0e:9f:1c:78:ba:28:74:a2:ad:21:a5:e7:12:9d:cc:a9:ce:44: ca:4c:33:53:78:35:c1:e4:38:64:1d:7a:78:8c:0a:e6:f1:27: 41:b0:35:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdWzyOr1h4NFq/nnW/X8bANzthb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI5REYyNEY5MkY1Nzk1OEMxMEUzMzU3NkVBMEEwN0JF MURDQThGQjAeFw0yNTExMDMxNTM2NTZaFw0yNTExMDQxODQ0NTZaMDMxMTAvBgNV BAMTKEUzRjFGQTY0MDNCODIxRjUwRjIyRTdDRDAxMDc1NDU4NkQ5QzdBQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE8tb2AOGb2qa69ntunDVajuGu DW4vtWsKILH2uoqNbxHJbgz4Yv4pBWcXMgEafQevxX+UEoYPPKxY1lyzBrK7oGaJ opOregQ7B++XyaDfkjsFKPQC1JK81/Gg+QZ0/Dx5ONzW9V1FIYXpcpKZEdzxSXiC 5GhRBvdarQXX29DTmYgJi1hc9fdAAwsW8a7a9QrTuJxO5xHYGl6w/D/8NNngxbyB K0t/sQvLDEwxtf5Cyi+d3vAA/Olkb+McU3WcX1Gu4z8M896myRZv2tgKZPnXFbOK g0zXRId93ffX5Gyo0vPAAf1xBOlUa3MKnmE/iGfG76n+hJjOvWC7wCCffDDBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4/H6ZAO4IfUPIufNAQdUWG2ceqowHwYDVR0j BBgwFoAUK53yT5L1eVjBDjNXbqCge+HcqPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjRjdllNNld2dzNDa0JqYzlINTE3ZWV2aDYzemtkWFBUWVRXeVNCTkQ3 dnYvMS8yQjlERjI0RjkyRjU3OTU4QzEwRTMzNTc2RUEwQTA3QkUxRENBOEZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCOURGMjRGOTJGNTc5NThD MTBFMzM1NzZFQTBBMDdCRTFEQ0E4RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SjRjdllNNld2dzNDa0JqYzlINTE3ZWV2aDYzemtkWFBUWVRXeVNCTkQ3dnYvMS8y QjlERjI0RjkyRjU3OTU4QzEwRTMzNTc2RUEwQTA3QkUxRENBOEZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmS1A7Fwan9wLF75N5CwcaYU+BNw+JUZQG7FLpxXL4Uv0SO9nAamxC9ciT1Re EpmTJHZEu3WeIC/gsruhKZIeOPEQ2ebEF9y9zKFakRR1riN9mQA/lEm4Bh17FCJf CG8lOSDSw+xHAqgBOmv9HRvzgr16y3sqTvZgfR2cuTK85+ePU3Hvr43fm8+lUlFS IqGASQIfq/C5o+M8IGGvD+uRiW1RljxVX+lJJoZY3LTZ8i5z1ukgdYZPkKZkZK6n 4YgKi11s6z1788gsPiDNepZIeFiToDHQ11o6Dp8ceLoodKKtIaXnEp3Mqc5Eykwz U3g1weQ4ZB16eIwK5vEnQbA1Wg== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:29 2025 by rpki-client