$ rpki-client -vvf rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft File: 2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft (raw, json) Hash identifier: Td/gsZZ1HX3fDTKf1OpUyOwAGK/oBZHjcI+8JaR+Dcc= Subject key identifier: 0F:85:07:3C:71:C1:C9:CF:29:F3:5E:DE:17:D8:51:EA:E9:27:91:54 Authority key identifier: 2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E Certificate issuer: /CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E Certificate serial: 63B8D89DFA04B75012B99AC7282BCA0652D0A657 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft Manifest number: 02F8 Signing time: Wed 05 Nov 2025 02:31:01 +0000 Manifest this update: Wed 05 Nov 2025 02:26:01 +0000 Manifest next update: Thu 06 Nov 2025 06:08:01 +0000 Files and hashes: 1: 3137372e3135352e38342e302f32322d3234203d3e20323633313239.roa (hash: TM2lu8ojhx/JZZ0fRyy/mmuC8mNGbW3JwdC0RSOzsaA=) 2: 2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl (hash: chG/ISo5cvXf84JAbm1tpdoqDT49EOdCNucEnZLFiPc=) 3: 323830343a313732633a3a2f33322d3438203d3e20323633313239.roa (hash: pT9wLb3SCYVr3rULtnzQP+Z0K6P8cggsIKhPstRPcOU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b8:d8:9d:fa:04:b7:50:12:b9:9a:c7:28:2b:ca:06:52:d0:a6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E Validity Not Before: Nov 5 02:26:01 2025 GMT Not After : Nov 6 06:08:01 2025 GMT Subject: CN=0F85073C71C1C9CF29F35EDE17D851EAE9279154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fd:b0:ad:17:32:c6:ba:35:47:a2:8b:b1:78: ea:b9:09:7b:91:31:04:47:44:7d:b1:cb:6c:14:62: 0f:df:e2:50:ff:66:f6:df:91:d9:ec:e2:b9:fe:03: b8:a5:0c:c6:a3:a7:98:0a:3a:5f:8d:d3:79:de:e7: 6b:7a:f3:72:1f:70:a2:c2:32:51:3c:f7:63:6c:53: 22:03:f5:2e:18:19:14:b4:cb:ee:2c:98:4b:18:a0: de:3e:37:5e:ed:4a:80:af:d9:7e:c5:c5:a3:dc:61: 04:f9:10:a1:c7:ec:72:2b:58:d8:97:3a:d9:49:ae: ca:23:ed:b8:59:de:a8:53:f4:b6:6b:38:5b:2f:2f: 6d:ad:63:80:12:ae:32:fa:fe:bd:a0:4b:78:3e:d4: 33:e9:2a:53:81:23:f8:d7:5d:c2:6e:bd:00:03:40: e2:6d:f5:71:b1:7d:c6:ac:e3:52:32:33:10:c5:38: d7:cb:5e:47:55:da:ea:40:2f:f5:83:27:aa:4e:d9: 96:80:33:8b:f8:77:7b:9e:7f:af:97:d9:c8:0d:f8: 74:8e:56:c9:14:f8:20:ba:91:f9:a0:c3:69:5c:86: a3:84:4f:45:41:12:d1:03:15:c5:eb:3c:35:3f:b6: 5d:fe:31:e2:8a:6d:22:a4:64:17:4e:df:98:47:69: 14:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:85:07:3C:71:C1:C9:CF:29:F3:5E:DE:17:D8:51:EA:E9:27:91:54 X509v3 Authority Key Identifier: keyid:2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:90:f1:fb:27:03:a2:3e:27:42:5f:7f:9c:46:23:f5:38:73: 70:37:75:c2:bc:76:13:99:da:16:23:ce:f9:98:be:69:e0:ad: 47:bd:a6:c2:dc:f5:b5:c8:1f:e3:24:39:d7:43:82:93:8d:3b: 90:a4:0b:37:b9:9e:1a:e1:69:1b:44:13:ca:9d:93:31:52:4c: 7e:94:e5:fa:dd:e1:90:ce:73:72:20:ec:2b:4d:65:ce:ce:b6: 13:67:bd:a6:35:fa:a9:bd:78:60:a6:8b:75:86:e3:de:ed:f0: cf:0c:38:4a:0e:64:02:43:11:e6:12:cb:7a:94:d3:d5:ac:01: a2:b4:8a:ec:1d:2b:79:ee:f7:d6:f4:d5:55:82:d2:2b:13:42: b7:7e:2c:7e:cc:39:ad:25:f9:0e:1b:9b:4d:72:f1:ab:bc:1d: 2e:bf:60:33:df:48:bb:d3:6e:63:ae:47:02:92:0f:97:e0:88: 00:73:72:15:a1:4e:ac:1a:8b:52:35:e4:c8:e4:68:92:bd:41: fd:f5:43:65:28:c0:0f:20:46:6a:60:c5:19:8a:2d:7b:1c:19: 75:5d:73:b5:ae:cf:9f:71:53:22:d6:10:dc:0f:0f:7e:a8:6e: c6:d5:8e:cd:54:3f:94:f6:f7:a6:e4:0d:7e:ec:d7:99:d5:32: d5:56:9c:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY7jYnfoEt1ASuZrHKCvKBlLQplcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQzQTJGRDREOEQ3QUI5MTU4MTlGRTgzQ0I4NEQzQUM1 MUEzMkM3RTAeFw0yNTExMDUwMjI2MDFaFw0yNTExMDYwNjA4MDFaMDMxMTAvBgNV BAMTKDBGODUwNzNDNzFDMUM5Q0YyOUYzNUVERTE3RDg1MUVBRTkyNzkxNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/bCtFzLGujVHoouxeOq5CXuR MQRHRH2xy2wUYg/f4lD/Zvbfkdns4rn+A7ilDMajp5gKOl+N03ne52t683IfcKLC MlE892NsUyID9S4YGRS0y+4smEsYoN4+N17tSoCv2X7FxaPcYQT5EKHH7HIrWNiX OtlJrsoj7bhZ3qhT9LZrOFsvL22tY4ASrjL6/r2gS3g+1DPpKlOBI/jXXcJuvQAD QOJt9XGxfcas41IyMxDFONfLXkdV2upAL/WDJ6pO2ZaAM4v4d3uef6+X2cgN+HSO VskU+CC6kfmgw2lchqOET0VBEtEDFcXrPDU/tl3+MeKKbSKkZBdO35hHaRR9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUD4UHPHHByc8p817eF9hR6uknkVQwHwYDVR0j BBgwFoAULTov1NjXq5FYGf6Dy4TTrFGjLH4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXlaaG1LVExoR2VZVjlxTnZ1bksxWXdCWmp6cXBCWk52dnFGZUZXczZK bW8vMC8yRDNBMkZENEQ4RDdBQjkxNTgxOUZFODNDQjg0RDNBQzUxQTMyQzdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEM0EyRkQ0RDhEN0FCOTE1 ODE5RkU4M0NCODREM0FDNTFBMzJDN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXlaaG1LVExoR2VZVjlxTnZ1bksxWXdCWmp6cXBCWk52dnFGZUZXczZKbW8vMC8y RDNBMkZENEQ4RDdBQjkxNTgxOUZFODNDQjg0RDNBQzUxQTMyQzdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4ZDx+ycDoj4nQl9/nEYj9ThzcDd1wrx2E5naFiPO+Zi+aeCtR72mwtz1tcgf 4yQ510OCk407kKQLN7meGuFpG0QTyp2TMVJMfpTl+t3hkM5zciDsK01lzs62E2e9 pjX6qb14YKaLdYbj3u3wzww4Sg5kAkMR5hLLepTT1awBorSK7B0ree731vTVVYLS KxNCt34sfsw5rSX5DhubTXLxq7wdLr9gM99Iu9NuY65HApIPl+CIAHNyFaFOrBqL UjXkyORokr1B/fVDZSjADyBGamDFGYotexwZdV1zta7Pn3FTItYQ3A8PfqhuxtWO zVQ/lPb3puQNfuzXmdUy1Vaceg== -----END CERTIFICATE-----Generated at Wed Nov 5 08:45:56 2025 by rpki-client