$ rpki-client -vvf rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft File: 2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft (raw, json) Hash identifier: fHXOTPu7iMa+lNU/XkyBC6OtL3gES3aKztLy91sY7zk= Subject key identifier: 6B:62:10:90:B5:C6:1F:45:50:48:82:09:62:AD:4E:7F:AD:5C:7C:10 Authority key identifier: 2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6 Certificate issuer: /CN=2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6 Certificate serial: 76E4820ADBF2A9DADAF6B6F9377AAF356D2587EC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer Subject info access: rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft Manifest number: 02D5 Signing time: Tue 04 Nov 2025 23:16:37 +0000 Manifest this update: Tue 04 Nov 2025 23:11:37 +0000 Manifest next update: Thu 06 Nov 2025 00:15:37 +0000 Files and hashes: 1: 323830343a356430303a3a2f33322d3438203d3e20323638393435.roa (hash: /NSh8I/Rslc7iMVh1K0i0LpvmuhofwUNcvRYRGnVjho=) 2: 2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl (hash: GoH/cnM6Nc5WarOa2U1P1nLkF83hFZRMMxsbtheaT3M=) 3: 34352e3137362e3134362e302f32332d3234203d3e20323638393435.roa (hash: 7ZVR7VTEAxId3uH0BE8kESLLV++QhSgdU6a0PidruW4=) 4: 34352e3137362e3134342e302f32332d3234203d3e20323638393435.roa (hash: 81icqWDhCQ5V80cybeQHXgFbX2Iogys+OdUbZvWvCZw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e4:82:0a:db:f2:a9:da:da:f6:b6:f9:37:7a:af:35:6d:25:87:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6 Validity Not Before: Nov 4 23:11:37 2025 GMT Not After : Nov 6 00:15:37 2025 GMT Subject: CN=6B621090B5C61F455048820962AD4E7FAD5C7C10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:33:f6:7b:fd:98:5e:34:f8:10:5b:5f:5f:aa: 57:fe:cf:b1:19:d1:0f:a3:fc:c1:ac:dc:12:b6:cc: 46:f2:6d:20:ca:08:0c:01:d3:ad:0c:45:6b:8f:05: 00:1d:29:a4:e0:11:af:02:8e:54:89:6f:10:54:dd: 46:f8:58:86:33:9a:a5:d6:f1:9c:90:2b:3d:48:93: 86:c0:90:b3:63:4e:b5:06:60:55:d1:9a:c8:60:8f: 95:99:c4:96:66:11:12:4d:cd:49:4b:93:e1:45:5f: e2:0e:59:d1:7d:f2:31:a3:fb:1f:29:48:02:68:71: 5c:8c:3f:d7:bd:36:84:80:66:ef:a8:5a:62:fc:eb: e4:48:7b:b0:10:9c:68:76:c3:d9:24:67:7d:57:b4: fb:0a:02:3c:87:03:f9:de:98:eb:61:37:74:66:76: d3:65:fc:27:f1:7c:dd:cb:fb:10:f5:29:75:7c:01: 15:d1:c1:e6:fd:46:e1:66:f6:af:50:28:a9:2e:4f: f5:c6:1b:af:71:52:32:53:e7:25:fd:87:4c:28:6e: ba:1a:b9:f9:68:aa:71:4b:13:3b:39:9a:04:80:cb: 31:c5:94:57:b4:e3:68:38:d3:ec:c9:ff:b8:f8:0d: bb:ec:0a:17:b3:74:ef:7f:30:58:6b:47:d3:dd:4e: 85:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:62:10:90:B5:C6:1F:45:50:48:82:09:62:AD:4E:7F:AD:5C:7C:10 X509v3 Authority Key Identifier: keyid:2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e2:ee:b4:3d:ee:10:10:af:f2:65:11:81:54:c8:9e:f6:96: 4e:48:98:0a:c3:46:79:60:1c:cd:2f:f8:e4:d1:7c:ba:b9:a2: 1a:d5:63:ce:29:41:c2:fe:2a:1f:58:2c:af:9c:3d:d9:8e:8b: ea:ab:9e:4c:ac:47:0b:8f:00:2e:62:ae:b9:64:b1:62:61:f9: c4:12:39:3f:ae:3d:b0:58:d2:a2:dc:1f:04:34:c2:52:c5:e7: 8c:f9:9d:1e:21:f9:18:de:1d:e7:58:26:18:78:6d:74:74:e6: 8c:f1:58:88:1a:ac:97:45:3e:b0:9c:4f:c2:59:a6:61:af:7e: fd:56:c5:2a:0b:c7:7e:4f:e2:a1:fa:a7:1e:8b:87:09:e8:28: 4b:0b:8e:9b:f3:de:3c:5f:ea:33:c7:0e:4f:dd:f3:98:f3:f9: 9a:0d:33:eb:4b:5d:a6:06:61:5c:e7:1b:a2:99:a0:5d:61:97: 30:6a:a4:6f:16:8e:be:f5:68:22:9c:c2:2b:27:b6:bf:cb:9f: c0:59:75:1d:7b:09:6b:c4:04:5d:55:43:2b:64:51:f3:9a:4a: ad:18:61:c6:25:6b:5c:67:bc:3c:6c:bf:9a:52:0c:9f:e4:98: cd:e1:2c:b4:9a:ba:0a:51:15:df:99:70:8d:5c:4a:a9:9e:13: 83:62:15:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUduSCCtvyqdra9rb5N3qvNW0lh+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI1Rjg0RjM5Q0E2QTI4NDU1REU5NzRGMkNGNjE0N0E1 RTFEM0NFNjAeFw0yNTExMDQyMzExMzdaFw0yNTExMDYwMDE1MzdaMDMxMTAvBgNV BAMTKDZCNjIxMDkwQjVDNjFGNDU1MDQ4ODIwOTYyQUQ0RTdGQUQ1QzdDMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVM/Z7/ZheNPgQW19fqlf+z7EZ 0Q+j/MGs3BK2zEbybSDKCAwB060MRWuPBQAdKaTgEa8CjlSJbxBU3Ub4WIYzmqXW 8ZyQKz1Ik4bAkLNjTrUGYFXRmshgj5WZxJZmERJNzUlLk+FFX+IOWdF98jGj+x8p SAJocVyMP9e9NoSAZu+oWmL86+RIe7AQnGh2w9kkZ31XtPsKAjyHA/nemOthN3Rm dtNl/CfxfN3L+xD1KXV8ARXRweb9RuFm9q9QKKkuT/XGG69xUjJT5yX9h0wobroa ufloqnFLEzs5mgSAyzHFlFe042g40+zJ/7j4DbvsChezdO9/MFhrR9PdToWzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUa2IQkLXGH0VQSIIJYq1Of61cfBAwHwYDVR0j BBgwFoAUK1+E85ymooRV3pdPLPYUel4dPOYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFZ5Q0RpWEhzUDFqRzloQVVLSmtKRTRqY3h5WkdKaFh1ajNzdmFQVjJ6 dWUvMC8yQjVGODRGMzlDQTZBMjg0NTVERTk3NEYyQ0Y2MTQ3QTVFMUQzQ0U2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNUY4NEYzOUNBNkEyODQ1 NURFOTc0RjJDRjYxNDdBNUUxRDNDRTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFZ5Q0RpWEhzUDFqRzloQVVLSmtKRTRqY3h5WkdKaFh1ajNzdmFQVjJ6dWUvMC8y QjVGODRGMzlDQTZBMjg0NTVERTk3NEYyQ0Y2MTQ3QTVFMUQzQ0U2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFuLutD3uEBCv8mURgVTInvaWTkiYCsNGeWAczS/45NF8urmiGtVjzilBwv4q H1gsr5w92Y6L6queTKxHC48ALmKuuWSxYmH5xBI5P649sFjSotwfBDTCUsXnjPmd HiH5GN4d51gmGHhtdHTmjPFYiBqsl0U+sJxPwlmmYa9+/VbFKgvHfk/iofqnHouH CegoSwuOm/PePF/qM8cOT93zmPP5mg0z60tdpgZhXOcbopmgXWGXMGqkbxaOvvVo IpzCKye2v8ufwFl1HXsJa8QEXVVDK2RR85pKrRhhxiVrXGe8PGy/mlIMn+SYzeEs tJq6ClEV35lwjVxKqZ4Tg2IVJg== -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:38 2025 by rpki-client