$ rpki-client -vvf rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft File: 2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft (raw, json) Hash identifier: Ut5h77aNIFwUWQBArIwvne1lX9HDxSdNGmPDZ7oeWqw= Subject key identifier: 81:60:5D:53:6D:E1:30:9E:20:32:D3:77:7E:63:A7:D8:7C:1F:A6:A7 Authority key identifier: 2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1 Certificate issuer: /CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1 Certificate serial: 2F7B717F04B66D2939A49EAAB85E8F6D165C7A95 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer Subject info access: rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft Manifest number: 0304 Signing time: Sun 02 Nov 2025 22:44:30 +0000 Manifest this update: Sun 02 Nov 2025 22:39:30 +0000 Manifest next update: Tue 04 Nov 2025 02:39:30 +0000 Files and hashes: 1: 3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa (hash: jv5mGEDvNirUNb+ywEWplBQ51qJkA6j3IlJ4XwV4itQ=) 2: 323830343a373439383a3a2f33322d3434203d3e20323730393931.roa (hash: 1nVescDhZB748DPO06KLiKZQV7YLDmgTqov+PIhCxEo=) 3: 2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl (hash: qvI4P3EARQXXYB61t3nTmdynQmZbgZImpVju178Uqjs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 02:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:7b:71:7f:04:b6:6d:29:39:a4:9e:aa:b8:5e:8f:6d:16:5c:7a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1 Validity Not Before: Nov 2 22:39:30 2025 GMT Not After : Nov 4 02:39:30 2025 GMT Subject: CN=81605D536DE1309E2032D3777E63A7D87C1FA6A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c7:28:43:0e:9a:85:aa:cf:f8:e2:88:12:fa: b6:ca:10:76:95:31:f8:4e:57:58:ff:d7:01:c5:78: 64:38:98:84:0a:25:7a:ff:c7:69:19:89:f2:ff:d4: 5f:3f:26:a1:cb:80:e0:4c:81:18:27:69:4e:ff:8e: 8a:2a:da:5f:be:f7:8a:9f:04:99:50:7e:52:45:f9: 6c:c4:97:de:5f:60:f3:a7:c5:1d:96:8f:01:f9:68: 26:8d:33:14:24:4d:ef:d2:ce:ae:a4:25:bc:df:19: ad:0c:12:e3:db:52:05:72:51:db:33:6b:15:58:83: fb:f5:be:fb:d8:9a:3f:99:32:f7:1d:e9:da:1f:7d: 75:1c:1f:f5:e0:fb:d6:f2:b1:54:9b:e8:92:be:f6: 5a:91:6a:26:d6:d4:51:e0:b4:9e:87:83:3a:25:bb: 23:f7:ec:ed:bf:f7:c6:73:52:55:60:99:da:ef:3a: 9d:7a:21:b5:83:47:a9:88:10:c1:80:91:42:0e:3b: 04:5f:dd:4b:3a:67:bb:a7:2c:b1:77:a3:e0:34:cd: 0a:40:bb:f7:64:9e:14:0c:a1:f7:cb:8e:89:92:40: 89:4a:2e:3f:4a:a9:e9:58:9c:b1:7d:7b:26:99:aa: a1:46:c4:0c:3d:a8:7d:21:df:5f:39:1c:86:ae:dd: 70:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:60:5D:53:6D:E1:30:9E:20:32:D3:77:7E:63:A7:D8:7C:1F:A6:A7 X509v3 Authority Key Identifier: keyid:2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:8c:5a:5a:d2:36:4b:63:a7:56:0f:93:8e:5f:f3:b3:51:a1: 03:25:4d:c7:4f:5b:33:99:57:a3:de:54:bf:f0:5e:73:fc:9e: 25:e2:7e:f3:9e:d2:0b:b6:f9:17:ce:23:85:9e:79:44:65:d1: a8:d5:87:98:bf:5d:8d:c4:82:94:62:b3:aa:f4:b9:0d:58:fb: 57:bc:43:a9:29:fc:12:9b:de:5f:9c:30:03:d3:32:6f:40:19: 12:5d:91:d7:b2:24:5f:8d:8f:6b:90:7e:e1:b6:67:db:ad:e3: 84:56:eb:e8:be:86:7a:e1:eb:86:fb:64:03:ec:70:7b:74:fe: 38:8e:74:9a:90:05:57:55:86:e1:5f:09:6f:0b:00:b2:6f:13: 56:bb:a6:c8:8b:4e:2d:50:58:2f:9f:59:c8:54:66:c2:1f:92: 17:d4:bd:b6:25:b0:a5:d0:12:03:2f:30:64:b7:a9:fa:d7:be: fd:fc:91:bc:1a:2b:2d:92:b5:de:32:5c:d0:e7:23:3f:d3:c9: 7c:6a:94:7c:51:60:d9:73:2e:f2:c6:a9:9c:ae:df:1a:cd:73: 61:0f:03:d4:be:99:11:8f:57:af:d9:cd:a3:89:08:4e:f4:ca: 3a:0c:5f:1d:d1:02:91:27:70:ad:8f:4e:d1:37:69:48:c5:95: ec:f9:0a:35 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUL3txfwS2bSk5pJ6quF6PbRZcepUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwMTgzRDMyQjg5MUQ3ODVDREYxQ0M4NkNGRDBBRTk0 NjAyNTBCMTAeFw0yNTExMDIyMjM5MzBaFw0yNTExMDQwMjM5MzBaMDMxMTAvBgNV BAMTKDgxNjA1RDUzNkRFMTMwOUUyMDMyRDM3NzdFNjNBN0Q4N0MxRkE2QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkxyhDDpqFqs/44ogS+rbKEHaV MfhOV1j/1wHFeGQ4mIQKJXr/x2kZifL/1F8/JqHLgOBMgRgnaU7/jooq2l++94qf BJlQflJF+WzEl95fYPOnxR2WjwH5aCaNMxQkTe/Szq6kJbzfGa0MEuPbUgVyUdsz axVYg/v1vvvYmj+ZMvcd6doffXUcH/Xg+9bysVSb6JK+9lqRaibW1FHgtJ6Hgzol uyP37O2/98ZzUlVgmdrvOp16IbWDR6mIEMGAkUIOOwRf3Us6Z7unLLF3o+A0zQpA u/dknhQMoffLjomSQIlKLj9KqelYnLF9eyaZqqFGxAw9qH0h3185HIau3XC5AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUgWBdU23hMJ4gMtN3fmOn2HwfpqcwHwYDVR0j BBgwFoAUKgGD0yuJHXhc3xzIbP0K6UYCULEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9rc0tia2F1WHFOZk5oY0IzTTRpOXNvdFNYWEtGRURna1hrUkxNZzJYdk5S LzEvMkEwMTgzRDMyQjg5MUQ3ODVDREYxQ0M4NkNGRDBBRTk0NjAyNTBCMS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQTAxODNEMzJCODkxRDc4NUNE RjFDQzg2Q0ZEMEFFOTQ2MDI1MEIxLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2tz S2JrYXVYcU5mTmhjQjNNNGk5c290U1hYS0ZFRGdrWGtSTE1nMlh2TlIvMS8yQTAx ODNEMzJCODkxRDc4NUNERjFDQzg2Q0ZEMEFFOTQ2MDI1MEIxLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA V4xaWtI2S2OnVg+Tjl/zs1GhAyVNx09bM5lXo95Uv/Bec/yeJeJ+857SC7b5F84j hZ55RGXRqNWHmL9djcSClGKzqvS5DVj7V7xDqSn8EpveX5wwA9Myb0AZEl2R17Ik X42Pa5B+4bZn263jhFbr6L6GeuHrhvtkA+xwe3T+OI50mpAFV1WG4V8JbwsAsm8T VrumyItOLVBYL59ZyFRmwh+SF9S9tiWwpdASAy8wZLep+te+/fyRvBorLZK13jJc 0OcjP9PJfGqUfFFg2XMu8sapnK7fGs1zYQ8D1L6ZEY9Xr9nNo4kITvTKOgxfHdEC kSdwrY9O0TdpSMWV7PkKNQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:35:11 2025 by rpki-client