$ rpki-client -vvf rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft File: C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft (raw, json) Hash identifier: cOOL9SfCcHUM+I193u+3yrOzDg6LiTAShhbwQ5z80Z4= Subject key identifier: 98:5F:14:C0:0B:84:DB:B5:CA:C9:FF:B4:CD:B2:50:8B:27:0A:A8:71 Authority key identifier: C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB Certificate issuer: /CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB Certificate serial: 29D7DDCCD66B5670F37BD8535E1A1DF2DB00D1F1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer Subject info access: rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft Manifest number: 0303 Signing time: Tue 04 Nov 2025 16:24:18 +0000 Manifest this update: Tue 04 Nov 2025 16:19:18 +0000 Manifest next update: Wed 05 Nov 2025 17:13:18 +0000 Files and hashes: 1: 323830343a386439343a3a2f33322d313238203d3e20323733333636.roa (hash: 1k00bMaA5+dsPTsaZo8EkP3hez6kVata/+EL1B7NLek=) 2: C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl (hash: xRf9rRM2ZoBpSzdyf0KsNmlUkTK8OeHU4Ag4GgOkPvY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 17:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d7:dd:cc:d6:6b:56:70:f3:7b:d8:53:5e:1a:1d:f2:db:00:d1:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB Validity Not Before: Nov 4 16:19:18 2025 GMT Not After : Nov 5 17:13:18 2025 GMT Subject: CN=985F14C00B84DBB5CAC9FFB4CDB2508B270AA871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2f:f4:d4:1d:fe:63:54:de:26:aa:ba:d7:e4: ff:44:15:a2:e7:f9:97:ba:f5:ab:e7:93:90:49:52: d5:5c:28:24:71:d8:cd:33:cc:cb:b8:48:cb:50:23: 72:46:e1:31:b8:01:d6:4c:5b:a7:21:6d:be:b8:97: 31:63:95:a0:5a:bd:77:ad:e9:0c:9a:74:77:d6:ac: d9:90:76:f9:82:9c:6c:07:78:7b:88:7d:8f:db:fb: 0f:72:6b:65:e7:7d:af:1b:49:d1:a2:83:e8:ab:e7: 5e:c6:2f:56:01:bb:95:9f:41:0d:ee:81:ce:db:51: 51:0e:ae:a4:f2:50:3e:e2:20:80:f7:ec:2c:d3:50: 7b:c5:7b:74:90:cb:69:f5:91:85:87:2c:01:80:a4: a6:ad:11:02:e4:ec:ca:c6:5c:af:4d:29:09:f6:4f: 89:69:f5:28:c5:55:a7:31:e0:fa:23:4c:b1:1d:2b: 6c:1a:a7:da:3c:04:79:41:5b:ae:03:2c:4b:60:b0: 3a:74:9d:8c:69:be:3f:ae:ac:29:2f:fc:4a:5c:c1: a5:0e:99:f6:70:04:41:64:e4:52:10:2d:b4:8b:af: 2a:0f:81:7d:e4:cc:5a:6a:6d:2b:8c:db:a4:a0:a2: da:79:50:2b:86:e0:37:84:9f:06:43:19:28:36:ad: a5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5F:14:C0:0B:84:DB:B5:CA:C9:FF:B4:CD:B2:50:8B:27:0A:A8:71 X509v3 Authority Key Identifier: keyid:C2:F8:4B:29:34:A2:4F:6C:FD:BE:C3:12:44:B3:FA:0C:7A:85:2B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pxRJm8DWGAc5iqCoysemWEpcDHcFcwHyi8x54vbxYB5/1/C2F84B2934A24F6CFDBEC31244B3FA0C7A852BFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:4c:71:e9:22:36:fa:c7:a2:00:48:e6:9b:00:de:4c:b2:d0: 1c:c5:a3:7a:8c:fd:0a:4f:db:10:ea:b4:89:d9:55:2d:60:df: 65:c5:1f:bc:37:09:f4:fe:fa:1d:09:fc:e9:70:c1:ae:4c:41: da:ac:46:a0:67:1d:c0:a1:da:0b:f0:22:61:b9:df:ff:c7:2d: 19:5f:d6:04:99:7a:4c:96:9d:6b:59:ad:6e:95:7b:10:1e:b0: 5a:bc:a7:23:27:92:85:33:30:a9:6e:32:5a:58:63:51:d5:d2: b2:1f:3e:cc:fa:22:14:7f:cb:5c:07:f8:15:4c:8f:4c:c8:f6: 90:eb:31:0d:b9:1b:72:c4:1e:8f:90:9f:77:8f:25:6e:20:f6: 60:6b:42:54:d5:ad:bd:c4:ae:b7:ab:a4:8a:55:29:85:85:8c: de:2b:80:27:a2:06:b2:93:0c:af:76:4f:90:65:97:0b:6a:a9: 04:a2:3b:57:3a:af:19:63:c7:18:22:68:1d:87:5b:ae:dd:f8: 3d:30:02:4c:44:82:98:df:fb:77:f0:66:a3:9f:d6:07:b7:26: ba:64:c1:9b:53:10:02:85:b8:d6:a8:e9:76:9a:0e:3f:05:93: fa:6c:cc:00:9c:f2:00:01:97:d8:9a:2c:2e:9a:b2:6c:8a:32: fd:5a:f2:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKdfdzNZrVnDze9hTXhod8tsA0fEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGODRCMjkzNEEyNEY2Q0ZEQkVDMzEyNDRCM0ZBMEM3 QTg1MkJGQjAeFw0yNTExMDQxNjE5MThaFw0yNTExMDUxNzEzMThaMDMxMTAvBgNV BAMTKDk4NUYxNEMwMEI4NERCQjVDQUM5RkZCNENEQjI1MDhCMjcwQUE4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXL/TUHf5jVN4mqrrX5P9EFaLn +Ze69avnk5BJUtVcKCRx2M0zzMu4SMtQI3JG4TG4AdZMW6chbb64lzFjlaBavXet 6QyadHfWrNmQdvmCnGwHeHuIfY/b+w9ya2Xnfa8bSdGig+ir517GL1YBu5WfQQ3u gc7bUVEOrqTyUD7iIID37CzTUHvFe3SQy2n1kYWHLAGApKatEQLk7MrGXK9NKQn2 T4lp9SjFVacx4PojTLEdK2wap9o8BHlBW64DLEtgsDp0nYxpvj+urCkv/EpcwaUO mfZwBEFk5FIQLbSLryoPgX3kzFpqbSuM26Sgotp5UCuG4DeEnwZDGSg2raUXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmF8UwAuE27XKyf+0zbJQiycKqHEwHwYDVR0j BBgwFoAUwvhLKTSiT2z9vsMSRLP6DHqFK/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXB4UkptOERXR0FjNWlxQ295c2VtV0VwY0RIY0Zjd0h5aTh4NTR2YnhZ QjUvMS9DMkY4NEIyOTM0QTI0RjZDRkRCRUMzMTI0NEIzRkEwQzdBODUyQkZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyRjg0QjI5MzRBMjRGNkNG REJFQzMxMjQ0QjNGQTBDN0E4NTJCRkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXB4UkptOERXR0FjNWlxQ295c2VtV0VwY0RIY0Zjd0h5aTh4NTR2YnhZQjUvMS9D MkY4NEIyOTM0QTI0RjZDRkRCRUMzMTI0NEIzRkEwQzdBODUyQkZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvUxx6SI2+seiAEjmmwDeTLLQHMWjeoz9Ck/bEOq0idlVLWDfZcUfvDcJ9P76 HQn86XDBrkxB2qxGoGcdwKHaC/AiYbnf/8ctGV/WBJl6TJada1mtbpV7EB6wWryn IyeShTMwqW4yWlhjUdXSsh8+zPoiFH/LXAf4FUyPTMj2kOsxDbkbcsQej5Cfd48l biD2YGtCVNWtvcSut6ukilUphYWM3iuAJ6IGspMMr3ZPkGWXC2qpBKI7VzqvGWPH GCJoHYdbrt34PTACTESCmN/7d/Bmo5/WB7cmumTBm1MQAoW41qjpdpoOPwWT+mzM AJzyAAGX2JosLpqybIoy/Vry6A== -----END CERTIFICATE-----Generated at Wed Nov 5 02:46:26 2025 by rpki-client