$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft File: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json) Hash identifier: bWuL3iTYNLI6B1eRGzEMvsZt9oovZH5proLOLxnGr+U= Subject key identifier: A7:EF:B9:BA:B8:B9:B8:3F:B1:2F:54:90:53:30:F7:98:DA:D1:B9:04 Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB Certificate issuer: /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Certificate serial: 160C37A2F9D2771E80DBAA129BFE8C974753F89E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft Manifest number: 0305 Signing time: Wed 05 Nov 2025 03:41:38 +0000 Manifest this update: Wed 05 Nov 2025 03:36:38 +0000 Manifest next update: Thu 06 Nov 2025 06:06:38 +0000 Files and hashes: 1: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: MFaOGmG3uk10MnFBlQJ/Pj6U7TcWeAadSbIdDIDPMAE=) 2: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: hHMhRh5DdSaR5fzUNnHJawbPKzBIyAZaoDmsUo8IWgk=) 3: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: fg6jnUz6U+6Qyo4c0bjSUjQP2nUn0wb4WtT9TyZvQwE=) 4: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: maW2GNrI3AoqX8WFxWiMg/YOqECnU1fsdQA4kdJdduU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:0c:37:a2:f9:d2:77:1e:80:db:aa:12:9b:fe:8c:97:47:53:f8:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Validity Not Before: Nov 5 03:36:38 2025 GMT Not After : Nov 6 06:06:38 2025 GMT Subject: CN=A7EFB9BAB8B9B83FB12F54905330F798DAD1B904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:da:57:31:8b:0a:d8:57:1f:d3:a2:af:7d:dd: 77:4a:74:c0:26:a1:70:76:49:06:f8:d6:19:49:ab: 99:92:4c:85:2e:7c:d6:a2:82:e1:15:81:04:44:ef: ce:c6:8e:27:4e:0c:36:42:bd:c4:a1:f5:4f:6a:14: 6e:f4:1b:aa:cb:54:c2:cb:5f:da:d1:38:25:84:bc: fe:89:36:c0:20:5b:69:27:b0:d7:8e:53:13:4b:b6: ec:60:51:76:8c:c0:e3:2d:f9:ac:a0:f5:fb:ff:45: b8:3b:d5:75:e5:e5:2b:90:5c:f2:77:3e:10:c8:3b: 50:8f:ca:7a:aa:59:eb:82:56:5d:4f:84:cf:11:31: 38:93:ae:bc:22:97:99:25:74:93:28:22:a7:ee:8c: 27:ba:b0:14:16:c2:70:6d:7a:03:b5:d0:96:76:6c: 2b:73:a7:b6:e3:a7:dd:43:3b:d2:5f:ca:2e:af:0f: d0:99:39:0f:c8:58:be:87:6e:77:b7:3a:c5:7c:c1: fc:c2:66:a2:39:22:78:82:a0:d1:e3:f2:7f:1e:4d: 4c:e4:be:44:05:94:54:bb:5b:56:44:6b:0a:2c:71: 2d:b2:da:38:46:eb:8c:35:d8:b3:5d:ef:e9:49:13: e6:1e:e9:44:1a:c7:55:65:15:7a:c3:2c:d9:ee:83: 9d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EF:B9:BA:B8:B9:B8:3F:B1:2F:54:90:53:30:F7:98:DA:D1:B9:04 X509v3 Authority Key Identifier: keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a6:32:35:23:4e:1d:43:66:3a:e5:dd:d9:76:e9:db:c1:de: a9:5b:ac:46:ac:90:f7:af:18:27:4f:b1:b3:56:ae:76:41:71: f6:3f:fc:0d:e1:0f:aa:77:5d:92:fa:72:8c:75:2c:aa:d6:e2: 99:a4:09:0e:22:f5:41:3b:86:86:f0:d1:c4:a9:53:ed:46:87: b7:12:69:8a:f3:3b:d4:7f:b7:f7:51:70:d0:eb:f9:75:66:6e: 4a:ac:f2:36:41:cd:58:5a:ce:13:33:6e:9d:cc:3b:70:34:36: f3:52:67:41:cf:ad:ad:1f:c3:21:11:b3:83:fd:f2:95:ab:69: 85:b0:50:b4:66:60:03:8b:6e:ea:2f:97:8e:4c:b5:28:2d:8d: dc:43:03:19:e7:cf:06:ac:91:6d:c3:f7:27:74:ff:32:fc:53: fb:84:79:9b:55:2d:83:2e:b2:0a:f2:e8:96:8e:27:e7:75:d0: 5b:d8:26:e5:a4:bd:5b:42:14:01:8f:71:9a:79:09:57:ee:6c: 0e:09:73:3d:31:75:59:8d:95:ed:df:b2:9e:4d:1e:39:be:56: 37:6e:ec:1d:2e:94:0a:9e:52:11:3e:0c:73:7f:98:24:1c:3f: 6f:75:22:13:5c:d4:7b:34:58:c0:1c:b5:5e:62:08:df:f2:b9: 66:8a:70:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFgw3ovnSdx6A26oSm/6Ml0dT+J4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzU5NEU5MzZFMUUyOEFENUFENzNBNkJGMjhBRTM4 QzAwMjhGQjAeFw0yNTExMDUwMzM2MzhaFw0yNTExMDYwNjA2MzhaMDMxMTAvBgNV BAMTKEE3RUZCOUJBQjhCOUI4M0ZCMTJGNTQ5MDUzMzBGNzk4REFEMUI5MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq2lcxiwrYVx/Toq993XdKdMAm oXB2SQb41hlJq5mSTIUufNaiguEVgQRE787GjidODDZCvcSh9U9qFG70G6rLVMLL X9rROCWEvP6JNsAgW2knsNeOUxNLtuxgUXaMwOMt+ayg9fv/Rbg71XXl5SuQXPJ3 PhDIO1CPynqqWeuCVl1PhM8RMTiTrrwil5kldJMoIqfujCe6sBQWwnBtegO10JZ2 bCtzp7bjp91DO9Jfyi6vD9CZOQ/IWL6Hbne3OsV8wfzCZqI5IniCoNHj8n8eTUzk vkQFlFS7W1ZEawoscS2y2jhG64w12LNd7+lJE+Ye6UQax1VlFXrDLNnug50ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUp++5uri5uD+xL1SQUzD3mNrRuQQwHwYDVR0j BBgwFoAULJxZTpNuHiitWtc6a/KK44wAKPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpy aEEvMS8yQzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDOUM1OTRFOTM2RTFFMjhB RDVBRDczQTZCRjI4QUUzOEMwMDI4RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpyaEEvMS8y QzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIqYyNSNOHUNmOuXd2Xbp28HeqVusRqyQ968YJ0+xs1audkFx9j/8DeEPqndd kvpyjHUsqtbimaQJDiL1QTuGhvDRxKlT7UaHtxJpivM71H+391Fw0Ov5dWZuSqzy NkHNWFrOEzNuncw7cDQ281JnQc+trR/DIRGzg/3ylatphbBQtGZgA4tu6i+Xjky1 KC2N3EMDGefPBqyRbcP3J3T/MvxT+4R5m1Utgy6yCvLolo4n53XQW9gm5aS9W0IU AY9xmnkJV+5sDglzPTF1WY2V7d+ynk0eOb5WN27sHS6UCp5SET4Mc3+YJBw/b3Ui E1zUezRYwBy1XmII3/K5Zopw8g== -----END CERTIFICATE-----Generated at Wed Nov 5 11:47:55 2025 by rpki-client