$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft File: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json) Hash identifier: Q2bBc/eCxaJgcW8GLoW6vkeNX6XXakW1IPwRqdsOoKo= Subject key identifier: AF:6B:1F:BC:C4:80:8E:06:11:C2:C6:FC:5A:DE:68:1D:25:C1:83:E4 Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Certificate serial: 43ECF0F4B18CD58A4DCE0C399151719D5249ED5D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft Manifest number: 030A Signing time: Wed 05 Nov 2025 10:12:24 +0000 Manifest this update: Wed 05 Nov 2025 10:07:24 +0000 Manifest next update: Thu 06 Nov 2025 11:16:24 +0000 Files and hashes: 1: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: 7KaEu9sw42ksNhOklCsT9hgtSIgophy55hML3k/smrA=) 2: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: UJ4KTEyYUhxaPcXNv7YlkTrmYMIsKOwQ96B7lUo1zSY=) 3: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: Qo7jd7bqgZ8RaIGB3HsVpFHOePniB9jZXdO3Roenvho=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ec:f0:f4:b1:8c:d5:8a:4d:ce:0c:39:91:51:71:9d:52:49:ed:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Validity Not Before: Nov 5 10:07:24 2025 GMT Not After : Nov 6 11:16:24 2025 GMT Subject: CN=AF6B1FBCC4808E0611C2C6FC5ADE681D25C183E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:10:62:66:e4:60:a3:2a:3a:3f:68:cf:47:6e: 2c:c7:d1:7a:1c:a5:40:04:bb:41:1f:c4:3b:22:97: a8:2d:a6:7b:22:95:33:0b:27:59:58:e3:80:29:02: c5:96:2f:2c:e0:50:1e:6d:ec:cf:63:33:28:1f:51: 56:49:69:37:5a:70:75:44:ac:18:59:49:9e:27:54: f7:1f:d1:c3:c6:06:39:b4:f2:4b:22:f3:44:30:a7: 1d:8a:ca:e3:c9:4f:23:2c:fa:45:f4:72:6c:e4:20: e5:10:b0:ac:fc:4b:f9:d4:9e:c5:52:4c:2e:c5:b7: 94:42:91:6b:b0:27:0d:fc:71:71:9f:f0:17:da:bf: e8:a3:83:96:61:68:15:74:15:0a:9c:19:fa:f4:97: a5:af:bc:80:84:74:57:a0:eb:25:d4:39:ad:f1:2d: 53:42:ad:b9:99:58:5f:1b:a8:13:62:f7:a7:4e:08: 41:0f:0b:c5:b4:e4:5f:e4:ec:93:c7:5b:1f:a5:77: 9f:02:e3:aa:eb:c0:6f:18:77:a9:de:a0:47:0d:36: fe:c6:04:3c:2e:9d:4b:66:97:8a:ba:b1:c3:1a:97: 0c:0f:e9:8a:6f:ea:cc:e2:7c:8f:8d:8f:f0:2f:78: f4:57:e1:e6:3d:f7:56:cb:a8:e0:96:30:b7:97:50: 45:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6B:1F:BC:C4:80:8E:06:11:C2:C6:FC:5A:DE:68:1D:25:C1:83:E4 X509v3 Authority Key Identifier: keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ab:34:e6:b8:94:98:b8:6d:fe:ca:8d:32:69:34:07:8c:35: 76:fb:16:66:06:11:53:73:2e:e5:c4:4b:26:14:4d:9c:b0:79: 61:00:64:80:7f:b3:e6:50:76:49:4b:53:22:5a:76:ae:71:dd: c0:4b:b6:10:40:0c:33:a8:84:79:e4:42:8a:43:a8:aa:ce:7b: 83:26:bb:45:57:f8:2a:61:72:52:f2:aa:91:1b:4f:81:0c:fb: e6:7a:73:e0:05:aa:5f:4f:6f:80:a8:6c:87:3a:64:77:20:0e: 80:59:61:96:e5:c0:62:07:10:d6:2b:3a:73:4c:eb:a7:a0:f4: 1a:82:74:33:cd:72:08:19:22:8f:66:67:ac:c9:ff:a0:9b:62: 35:f8:38:9e:4f:32:35:c8:92:a0:63:f9:e5:8b:5b:42:43:08: 03:5d:c6:57:f0:53:15:b8:66:6b:20:01:33:10:6a:95:0e:47: 2c:73:74:0c:39:94:45:b8:1f:23:aa:93:c5:11:75:50:3d:df: 81:e3:f2:9c:6b:29:c0:4f:64:75:a6:d3:b6:14:73:d8:41:c2: 82:93:90:78:51:64:88:fd:90:0b:7c:6d:3b:d6:a7:b1:c7:92: 1d:01:e2:32:f1:9a:e8:07:86:bd:64:c3:ae:ea:6d:33:4e:7d: 18:80:f5:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ+zw9LGM1YpNzgw5kVFxnVJJ7V0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0 ODdBMkVDOTAeFw0yNTExMDUxMDA3MjRaFw0yNTExMDYxMTE2MjRaMDMxMTAvBgNV BAMTKEFGNkIxRkJDQzQ4MDhFMDYxMUMyQzZGQzVBREU2ODFEMjVDMTgzRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYEGJm5GCjKjo/aM9HbizH0Xoc pUAEu0EfxDsil6gtpnsilTMLJ1lY44ApAsWWLyzgUB5t7M9jMygfUVZJaTdacHVE rBhZSZ4nVPcf0cPGBjm08ksi80Qwpx2KyuPJTyMs+kX0cmzkIOUQsKz8S/nUnsVS TC7Ft5RCkWuwJw38cXGf8Bfav+ijg5ZhaBV0FQqcGfr0l6WvvICEdFeg6yXUOa3x LVNCrbmZWF8bqBNi96dOCEEPC8W05F/k7JPHWx+ld58C46rrwG8Yd6neoEcNNv7G BDwunUtml4q6scMalwwP6Ypv6szifI+Nj/AvePRX4eY991bLqOCWMLeXUEVzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUr2sfvMSAjgYRwsb8Wt5oHSXBg+QwHwYDVR0j BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5 QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRoU1gvMS9D RDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGqs05riUmLht/sqNMmk0B4w1dvsWZgYRU3Mu5cRLJhRNnLB5YQBkgH+z5lB2 SUtTIlp2rnHdwEu2EEAMM6iEeeRCikOoqs57gya7RVf4KmFyUvKqkRtPgQz75npz 4AWqX09vgKhshzpkdyAOgFlhluXAYgcQ1is6c0zrp6D0GoJ0M81yCBkij2ZnrMn/ oJtiNfg4nk8yNciSoGP55YtbQkMIA13GV/BTFbhmayABMxBqlQ5HLHN0DDmURbgf I6qTxRF1UD3fgePynGspwE9kdabTthRz2EHCgpOQeFFkiP2QC3xtO9ansceSHQHi MvGa6AeGvWTDruptM059GID1/Q== -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:31 2025 by rpki-client