$ rpki-client -vvf rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft File: 2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft (raw, json) Hash identifier: HkwfzQEeZqggEZylJPrs6HNErdhIk+A8cqclav+ytvc= Subject key identifier: 3B:2A:E6:90:03:3D:9D:65:7B:D6:90:F6:C1:2A:55:FA:88:59:63:F5 Authority key identifier: 2F:F4:EE:9C:1F:AF:19:CB:D4:4C:CB:6C:4F:80:3B:54:DA:93:3E:88 Certificate issuer: /CN=2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88 Certificate serial: 48DE5A695A53D74EDF886F01C6C86FACA59F94EC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer Subject info access: rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft Manifest number: 13 Signing time: Tue 04 Nov 2025 22:18:48 +0000 Manifest this update: Tue 04 Nov 2025 22:13:48 +0000 Manifest next update: Thu 06 Nov 2025 01:35:48 +0000 Files and hashes: 1: 3230302e32332e3131382e302f32342d3234203d3e20323635343439.roa (hash: u0emmR/IrSgxU4xnl7NMDDuW67Pa/pzAKWRg8XfABIw=) 2: 2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl (hash: qit7Of3qQ7eISnb3Ku1bA52f1K2emw+KU9fDr7zdy3A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 01:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:de:5a:69:5a:53:d7:4e:df:88:6f:01:c6:c8:6f:ac:a5:9f:94:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88 Validity Not Before: Nov 4 22:13:48 2025 GMT Not After : Nov 6 01:35:48 2025 GMT Subject: CN=3B2AE690033D9D657BD690F6C12A55FA885963F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:62:1e:04:b4:40:7b:aa:f9:85:e5:98:96: 11:ea:99:29:50:96:a5:d5:32:92:73:c6:e0:a5:b3: d9:49:00:1d:42:a2:3f:c2:0f:3f:f8:a7:ed:4a:fa: cb:45:8a:79:ab:2b:e3:8b:ed:8e:6e:e5:cd:87:bf: 8f:37:60:d7:30:50:a7:87:f2:1f:8b:56:ff:e3:32: d1:09:30:11:66:f7:dd:3c:ed:49:fe:f4:ec:ac:50: ac:32:0e:6f:1a:ca:ed:40:68:88:33:99:bd:27:23: 95:03:86:03:13:aa:4c:f8:73:c6:2a:78:dd:89:8d: 07:0a:bf:53:f6:77:4a:2a:47:11:7a:a6:f8:bc:ac: 70:33:3a:d0:4a:3f:74:a9:51:7c:92:0b:d2:3d:45: 74:5d:af:e8:56:9b:d9:89:39:cf:b4:fc:df:b0:61: 25:b3:eb:42:64:a8:96:f6:87:77:ad:97:65:32:df: 3a:70:9f:6a:e1:e7:b7:ef:cc:19:47:33:93:0d:94: 31:2c:c6:44:9c:51:e0:ae:4f:f9:10:5b:b8:80:05: 7b:e3:b5:02:49:71:ec:00:5f:54:25:56:16:99:f5: 44:86:ad:a0:bd:a5:42:97:67:04:78:bb:6e:ff:4f: 87:85:9d:52:ae:d9:ad:3b:2e:87:20:68:64:db:7c: 67:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2A:E6:90:03:3D:9D:65:7B:D6:90:F6:C1:2A:55:FA:88:59:63:F5 X509v3 Authority Key Identifier: keyid:2F:F4:EE:9C:1F:AF:19:CB:D4:4C:CB:6C:4F:80:3B:54:DA:93:3E:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:60:91:a3:0f:38:94:e1:b8:f0:c2:6a:18:dc:c1:9c:87:1f: b0:c2:18:dd:f4:5c:46:dd:99:4e:98:61:0e:ea:b1:35:81:c7: 4e:31:1d:25:ba:60:75:11:82:a5:57:98:93:f6:ea:21:15:20: ee:6f:4a:71:1c:ce:27:de:aa:8e:61:a7:03:2d:8e:da:58:38: b3:a9:2d:6a:7f:eb:74:89:a1:ea:4c:bc:6a:38:e7:7d:e6:04: d5:9d:21:63:51:f5:85:4c:ba:26:ef:0f:b9:92:e7:dc:e3:b5: e5:ac:7a:98:e0:50:60:c9:16:e2:aa:c5:41:a8:2a:43:65:72: 3c:09:54:de:54:3c:31:9c:3c:5b:89:a2:f2:4c:13:9b:45:88: 72:81:4f:f7:48:6e:00:90:19:a0:6a:14:ac:7b:46:79:d3:89: d3:7f:e8:d7:26:72:fe:2d:91:22:55:6a:d2:14:05:a8:c5:62: 7f:14:67:53:d2:bc:70:85:ad:30:b5:e3:2e:e7:51:9f:73:c2: fd:60:39:c1:a7:8c:95:37:9b:4f:4c:0c:34:43:ce:80:cd:ff: 80:d7:91:99:10:16:3a:8d:bd:98:a3:05:33:6c:30:94:78:6b: c3:1d:87:fc:4e:ca:ec:a7:a8:91:21:68:44:17:33:09:2a:10: c9:d0:db:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSN5aaVpT107fiG8BxshvrKWflOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGNEVFOUMxRkFGMTlDQkQ0NENDQjZDNEY4MDNCNTRE QTkzM0U4ODAeFw0yNTExMDQyMjEzNDhaFw0yNTExMDYwMTM1NDhaMDMxMTAvBgNV BAMTKDNCMkFFNjkwMDMzRDlENjU3QkQ2OTBGNkMxMkE1NUZBODg1OTYzRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCet2IeBLRAe6r5heWYlhHqmSlQ lqXVMpJzxuCls9lJAB1Coj/CDz/4p+1K+stFinmrK+OL7Y5u5c2Hv483YNcwUKeH 8h+LVv/jMtEJMBFm99087Un+9OysUKwyDm8ayu1AaIgzmb0nI5UDhgMTqkz4c8Yq eN2JjQcKv1P2d0oqRxF6pvi8rHAzOtBKP3SpUXySC9I9RXRdr+hWm9mJOc+0/N+w YSWz60JkqJb2h3etl2Uy3zpwn2rh57fvzBlHM5MNlDEsxkScUeCuT/kQW7iABXvj tQJJcewAX1QlVhaZ9USGraC9pUKXZwR4u27/T4eFnVKu2a07LocgaGTbfGfPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOyrmkAM9nWV71pD2wSpV+ohZY/UwHwYDVR0j BBgwFoAUL/TunB+vGcvUTMtsT4A7VNqTPogwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUFXTUNRRnZDcjc3U2RDdHQxREVLOEJMZ2VaVUF2ZW1EV2VxektqR2lo S1AvMC8yRkY0RUU5QzFGQUYxOUNCRDQ0Q0NCNkM0RjgwM0I1NERBOTMzRTg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGRjRFRTlDMUZBRjE5Q0JE NDRDQ0I2QzRGODAzQjU0REE5MzNFODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUFXTUNRRnZDcjc3U2RDdHQxREVLOEJMZ2VaVUF2ZW1EV2VxektqR2loS1AvMC8y RkY0RUU5QzFGQUYxOUNCRDQ0Q0NCNkM0RjgwM0I1NERBOTMzRTg4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABmCRow84lOG48MJqGNzBnIcfsMIY3fRcRt2ZTphhDuqxNYHHTjEdJbpgdRGC pVeYk/bqIRUg7m9KcRzOJ96qjmGnAy2O2lg4s6ktan/rdImh6ky8ajjnfeYE1Z0h Y1H1hUy6Ju8PuZLn3OO15ax6mOBQYMkW4qrFQagqQ2VyPAlU3lQ8MZw8W4mi8kwT m0WIcoFP90huAJAZoGoUrHtGedOJ03/o1yZy/i2RIlVq0hQFqMVifxRnU9K8cIWt MLXjLudRn3PC/WA5waeMlTebT0wMNEPOgM3/gNeRmRAWOo29mKMFM2wwlHhrwx2H /E7K7KeokSFoRBczCSoQydDbbg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:00:04 2025 by rpki-client