$ rpki-client -vvf rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft File: 2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft (raw, json) Hash identifier: 3HlP1jLE8hKjsxqgo26ktDz41L6ZT4ZkSsBFwC/L1Xs= Subject key identifier: 57:3E:99:9B:39:88:58:4C:FD:C2:70:5C:39:D1:BC:37:2F:C4:97:FE Authority key identifier: 2B:0D:55:6B:D1:6D:C2:30:4B:92:D8:8D:4D:E8:A7:49:E2:2D:FA:1D Certificate issuer: /CN=2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D Certificate serial: 2D59C6F5EE0523C157BC179A57855858E509BD5A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft Manifest number: A1 Signing time: Wed 05 Nov 2025 09:46:40 +0000 Manifest this update: Wed 05 Nov 2025 09:41:40 +0000 Manifest next update: Thu 06 Nov 2025 10:53:40 +0000 Files and hashes: 1: 323830343a366633633a3a2f33322d3438203d3e20323730363437.roa (hash: Yy9a80hxuGkv47p1WxAV8/8jNtLNtfdf0ZtuB0b65RU=) 2: 3138392e33362e3133362e302f32322d3234203d3e20323730363437.roa (hash: T3KgvBQtkMn3/bW19ncfX5h/srF6Jaox8KLTXT0VPkE=) 3: 2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.crl (hash: 9wvhTwZu1VKzirmpKO8gmIsUm6olQuHuSkKTv1o+WuE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.crl rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 10:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:59:c6:f5:ee:05:23:c1:57:bc:17:9a:57:85:58:58:e5:09:bd:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D Validity Not Before: Nov 5 09:41:40 2025 GMT Not After : Nov 6 10:53:40 2025 GMT Subject: CN=573E999B3988584CFDC2705C39D1BC372FC497FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0c:5f:3e:15:35:92:6b:6f:c5:ce:32:f5:12: a9:1a:5c:5a:a3:e1:77:4e:cc:b5:bb:e6:3d:74:a0: b8:c2:ca:4d:84:fa:70:ce:2b:73:95:12:ee:7c:d3: 23:db:2c:3e:19:cf:9d:39:55:16:67:f1:d6:48:06: 11:69:5c:bc:5e:47:1c:9b:d7:e1:63:89:51:5f:e0: 7d:4f:53:8f:4b:70:8c:11:0e:51:4a:24:f1:22:4a: 63:c6:d3:e9:70:e3:db:38:00:18:b2:a5:93:25:3e: 23:a4:a0:23:68:33:13:62:ae:49:f7:c6:8c:e3:45: 4a:99:74:43:3f:3b:68:c2:88:4c:31:a1:e5:36:61: ec:56:69:94:13:1c:3a:46:46:40:1f:b7:0d:0b:23: 74:26:16:25:85:15:b1:dd:bf:d3:87:43:74:5b:8c: d3:7e:e7:a8:95:af:ca:36:60:32:b3:48:6f:5a:83: f3:22:d7:b5:de:86:e8:9b:7d:c7:99:71:1b:71:18: 05:a8:e1:e4:62:92:05:31:34:a6:b4:a2:a5:78:b1: a8:93:e5:ab:e3:dd:9a:eb:ee:87:a9:55:23:6f:e9: 0d:1f:2b:4f:3b:87:d3:bc:42:21:6b:d4:88:87:0f: da:82:a9:5f:57:cf:9f:10:3e:60:7b:05:c1:2d:c2: 79:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3E:99:9B:39:88:58:4C:FD:C2:70:5C:39:D1:BC:37:2F:C4:97:FE X509v3 Authority Key Identifier: keyid:2B:0D:55:6B:D1:6D:C2:30:4B:92:D8:8D:4D:E8:A7:49:E2:2D:FA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d6:fa:ff:39:88:cd:b1:9b:4e:75:b9:2f:14:9f:a9:79:7a: 3b:49:9b:42:a5:9d:a8:4f:82:ce:ea:15:42:df:0c:c5:8c:de: a3:cf:11:dc:5e:ed:a4:3a:a9:fe:ab:cc:1a:9f:fb:44:68:d5: d1:fa:2b:f0:44:51:e9:e1:63:16:56:32:eb:4d:a7:57:e2:b0: bf:02:d9:11:3f:69:a8:67:93:47:e1:d6:84:39:80:0b:95:a0: 7e:0e:2e:ab:ca:0f:10:65:6a:4c:eb:06:e7:8a:6d:21:1e:20: a7:9c:7d:e8:4b:da:44:5e:67:9f:02:7b:e4:6a:4c:ae:a1:6d: 16:f6:0c:0d:5a:37:a9:55:c6:e7:e8:ac:11:d9:2b:bd:b4:ce: 16:a6:bc:d8:87:39:c4:39:5b:70:db:2f:81:29:6a:47:98:14: b8:f4:95:2c:0f:b0:c6:1a:18:b4:f3:b3:f6:26:84:76:29:f1: ab:ba:92:34:ce:f5:60:00:3d:1a:b8:cf:b5:16:53:2b:43:23: 07:0a:33:38:d0:d9:00:23:60:91:8f:10:21:a4:05:aa:08:2e: 24:2e:2c:74:87:29:09:81:06:9a:fa:e5:1e:55:8a:c0:e3:58: 5c:ef:66:0a:13:ea:e8:c7:1c:da:76:b3:e9:86:94:1b:d1:04: c0:4d:b8:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULVnG9e4FI8FXvBeaV4VYWOUJvVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIwRDU1NkJEMTZEQzIzMDRCOTJEODhENERFOEE3NDlF MjJERkExRDAeFw0yNTExMDUwOTQxNDBaFw0yNTExMDYxMDUzNDBaMDMxMTAvBgNV BAMTKDU3M0U5OTlCMzk4ODU4NENGREMyNzA1QzM5RDFCQzM3MkZDNDk3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsDF8+FTWSa2/FzjL1EqkaXFqj 4XdOzLW75j10oLjCyk2E+nDOK3OVEu580yPbLD4Zz505VRZn8dZIBhFpXLxeRxyb 1+FjiVFf4H1PU49LcIwRDlFKJPEiSmPG0+lw49s4ABiypZMlPiOkoCNoMxNirkn3 xozjRUqZdEM/O2jCiEwxoeU2YexWaZQTHDpGRkAftw0LI3QmFiWFFbHdv9OHQ3Rb jNN+56iVr8o2YDKzSG9ag/Mi17XehuibfceZcRtxGAWo4eRikgUxNKa0oqV4saiT 5avj3Zrr7oepVSNv6Q0fK087h9O8QiFr1IiHD9qCqV9Xz58QPmB7BcEtwnnNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVz6ZmzmIWEz9wnBcOdG8Ny/El/4wHwYDVR0j BBgwFoAUKw1Va9FtwjBLktiNTeinSeIt+h0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWtYUnJzVWpaUzRMZWNpNzRjSzM4aXA0WG5pdnFVS2Nmd1I2Mmp0QUxt TWIvMC8yQjBENTU2QkQxNkRDMjMwNEI5MkQ4OEQ0REU4QTc0OUUyMkRGQTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCMEQ1NTZCRDE2REMyMzA0 QjkyRDg4RDRERThBNzQ5RTIyREZBMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWtYUnJzVWpaUzRMZWNpNzRjSzM4aXA0WG5pdnFVS2Nmd1I2Mmp0QUxtTWIvMC8y QjBENTU2QkQxNkRDMjMwNEI5MkQ4OEQ0REU4QTc0OUUyMkRGQTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ9b6/zmIzbGbTnW5LxSfqXl6O0mbQqWdqE+CzuoVQt8MxYzeo88R3F7tpDqp /qvMGp/7RGjV0for8ERR6eFjFlYy602nV+KwvwLZET9pqGeTR+HWhDmAC5Wgfg4u q8oPEGVqTOsG54ptIR4gp5x96EvaRF5nnwJ75GpMrqFtFvYMDVo3qVXG5+isEdkr vbTOFqa82Ic5xDlbcNsvgSlqR5gUuPSVLA+wxhoYtPOz9iaEdinxq7qSNM71YAA9 GrjPtRZTK0MjBwozONDZACNgkY8QIaQFqgguJC4sdIcpCYEGmvrlHlWKwONYXO9m ChPq6Mcc2naz6YaUG9EEwE24NQ== -----END CERTIFICATE-----Generated at Wed Nov 5 15:33:19 2025 by rpki-client