$ rpki-client -vvf rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft File: 2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft (raw, json) Hash identifier: t3N8z5VUxKr/vRiV0nwcbhbKUHQYgcjGqBjT0cmtdTk= Subject key identifier: 38:DE:AC:17:86:92:A6:5D:38:55:33:A0:48:45:E8:15:76:16:E5:8C Authority key identifier: 2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE Certificate issuer: /CN=2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE Certificate serial: 0BE3A0620696A7163EA337C02A81AB874911144E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer Subject info access: rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft Manifest number: 0308 Signing time: Wed 05 Nov 2025 15:38:52 +0000 Manifest this update: Wed 05 Nov 2025 15:33:52 +0000 Manifest next update: Thu 06 Nov 2025 17:53:52 +0000 Files and hashes: 1: 323830343a346532383a3a2f33322d313238203d3e20323638323433.roa (hash: DJ6pO5xL0y0myCGGnaxN29PFLO6qKHeYi6tb6Erlx5c=) 2: 34352e3233362e3230302e302f32322d3332203d3e20323638323433.roa (hash: sKEROWi5SvX7Dw54TZAizgA2/OCs3EGBz5Rt5H3jLx4=) 3: 2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl (hash: P5+mSv3O7Tn+Foo3pQpHHDNGTQB7saJ5IFJjoucPjhA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 17:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e3:a0:62:06:96:a7:16:3e:a3:37:c0:2a:81:ab:87:49:11:14:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE Validity Not Before: Nov 5 15:33:52 2025 GMT Not After : Nov 6 17:53:52 2025 GMT Subject: CN=38DEAC178692A65D385533A04845E8157616E58C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fd:34:2a:5d:26:c5:62:d0:15:68:e3:96:e0: dd:0b:e6:e9:0d:ab:3c:a1:d3:6e:9c:70:e4:7d:ad: c2:20:f2:e1:a2:b5:98:bb:e7:18:21:87:61:12:09: 5f:1f:40:54:4d:63:b4:cf:1e:ea:52:f0:f9:31:9e: 00:f1:ba:6a:ef:ee:7e:da:91:a2:52:a0:d1:65:a4: 87:65:9a:63:44:f1:cb:b8:6a:a9:2a:b7:30:83:d0: b7:f3:3b:2d:92:df:ab:75:6e:e9:d2:b5:4c:e7:fb: 6e:fa:94:24:da:a7:aa:5e:8d:e8:d4:28:bd:55:53: 59:47:ae:8c:29:af:7f:ac:f0:80:9f:25:1a:ad:aa: 8d:f1:7c:b4:d5:2f:da:04:eb:06:14:79:64:25:68: a2:2d:b8:d7:3a:01:17:28:7a:6a:2d:23:eb:8f:71: d2:f0:9c:0a:88:33:de:39:21:48:80:28:d7:24:c5: bc:75:2c:b8:91:a6:b1:4d:59:cd:84:08:ac:fc:b4: 13:16:a8:37:4c:dc:d1:88:c7:a3:59:d1:b3:44:35: 4a:46:bb:d0:61:7d:63:ce:10:f4:9b:c4:5c:f5:68: 94:09:2a:ac:79:08:60:97:ca:fa:a3:e9:54:b3:fc: 9a:80:32:fe:20:1a:e0:5e:2a:ba:39:d2:ea:b0:83: 06:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DE:AC:17:86:92:A6:5D:38:55:33:A0:48:45:E8:15:76:16:E5:8C X509v3 Authority Key Identifier: keyid:2E:0D:8C:A9:FB:9B:93:5A:BD:E6:72:6B:E1:EA:2A:85:70:F4:EF:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/1/2E0D8CA9FB9B935ABDE6726BE1EA2A8570F4EFEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:2c:6e:93:ce:7d:cb:a2:b9:aa:dc:01:e3:30:bf:7d:b3:b6: a1:2d:c4:18:b8:76:a3:72:a8:c9:4f:86:e3:72:fa:5f:32:d9: c6:ae:bc:23:73:e8:6c:3e:42:75:91:34:91:97:bc:f4:4a:24: 82:3b:1b:5e:97:00:2a:7c:21:8e:f2:43:60:37:5f:8f:7e:28: e8:91:50:c4:37:a0:25:f3:5c:a2:19:1a:d8:eb:a1:2a:9c:db: a5:91:5c:0f:ff:be:b9:06:97:bf:ac:0d:66:19:7d:03:1e:54: 99:bf:2d:62:cc:77:62:75:48:04:b1:20:d5:89:b7:ca:3e:65: b3:aa:84:99:d3:ed:e7:23:9e:8d:31:5c:4f:bf:c9:5e:a4:8a: d5:29:13:9b:d7:70:db:c5:3d:9d:22:89:98:36:34:12:a1:bf: bb:10:92:18:e6:3b:38:cc:a9:f7:3d:ac:0d:22:f9:73:04:4a: f2:a4:27:66:90:99:a5:43:52:26:46:38:a1:46:49:d0:57:24: 94:69:ee:bb:52:61:a2:5a:bd:1a:af:eb:21:95:00:b2:59:d5: 24:16:03:a8:98:1b:db:be:f8:d0:08:05:4c:cb:ee:e0:b6:a2: c9:92:35:07:96:26:cc:29:94:38:b0:d5:b7:9e:61:41:03:e0: 4d:cd:3d:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUC+OgYgaWpxY+ozfAKoGrh0kRFE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUwRDhDQTlGQjlCOTM1QUJERTY3MjZCRTFFQTJBODU3 MEY0RUZFRTAeFw0yNTExMDUxNTMzNTJaFw0yNTExMDYxNzUzNTJaMDMxMTAvBgNV BAMTKDM4REVBQzE3ODY5MkE2NUQzODU1MzNBMDQ4NDVFODE1NzYxNkU1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/TQqXSbFYtAVaOOW4N0L5ukN qzyh026ccOR9rcIg8uGitZi75xghh2ESCV8fQFRNY7TPHupS8PkxngDxumrv7n7a kaJSoNFlpIdlmmNE8cu4aqkqtzCD0LfzOy2S36t1bunStUzn+276lCTap6pejejU KL1VU1lHrowpr3+s8ICfJRqtqo3xfLTVL9oE6wYUeWQlaKItuNc6ARcoemotI+uP cdLwnAqIM945IUiAKNckxbx1LLiRprFNWc2ECKz8tBMWqDdM3NGIx6NZ0bNENUpG u9BhfWPOEPSbxFz1aJQJKqx5CGCXyvqj6VSz/JqAMv4gGuBeKro50uqwgwZpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUON6sF4aSpl04VTOgSEXoFXYW5YwwHwYDVR0j BBgwFoAULg2Mqfubk1q95nJr4eoqhXD07+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVBDQms1cUxHNWdVZlhaWHc3WFI2UjRQVXN3dXpQQkZwNkdHMjhWRWJq N1MvMS8yRTBEOENBOUZCOUI5MzVBQkRFNjcyNkJFMUVBMkE4NTcwRjRFRkVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFMEQ4Q0E5RkI5QjkzNUFC REU2NzI2QkUxRUEyQTg1NzBGNEVGRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVBDQms1cUxHNWdVZlhaWHc3WFI2UjRQVXN3dXpQQkZwNkdHMjhWRWJqN1MvMS8y RTBEOENBOUZCOUI5MzVBQkRFNjcyNkJFMUVBMkE4NTcwRjRFRkVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2Cxuk859y6K5qtwB4zC/fbO2oS3EGLh2o3KoyU+G43L6XzLZxq68I3PobD5C dZE0kZe89EokgjsbXpcAKnwhjvJDYDdfj34o6JFQxDegJfNcohka2OuhKpzbpZFc D/++uQaXv6wNZhl9Ax5Umb8tYsx3YnVIBLEg1Ym3yj5ls6qEmdPt5yOejTFcT7/J XqSK1SkTm9dw28U9nSKJmDY0EqG/uxCSGOY7OMyp9z2sDSL5cwRK8qQnZpCZpUNS JkY4oUZJ0FcklGnuu1Jholq9Gq/rIZUAslnVJBYDqJgb27740AgFTMvu4LaiyZI1 B5YmzCmUOLDVt55hQQPgTc09jQ== -----END CERTIFICATE-----Generated at Wed Nov 5 19:48:27 2025 by rpki-client