$ rpki-client -vvf rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft File: 2B70CD0507DEB57B92FF796531C932DEF83009A2.mft (raw, json) Hash identifier: N09YNIt5aoWi1nS95ZTjI+BbGKctYx10Gup3kC75esQ= Subject key identifier: B9:59:8A:2A:A0:DB:FD:25:B6:14:A4:B5:E6:2A:85:7E:97:14:BE:84 Authority key identifier: 2B:70:CD:05:07:DE:B5:7B:92:FF:79:65:31:C9:32:DE:F8:30:09:A2 Certificate issuer: /CN=2B70CD0507DEB57B92FF796531C932DEF83009A2 Certificate serial: 4E6FB7FAE30A390326BF483FB175BAB35309E18A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft Manifest number: 024E Signing time: Wed 05 Nov 2025 02:15:35 +0000 Manifest this update: Wed 05 Nov 2025 02:10:35 +0000 Manifest next update: Thu 06 Nov 2025 03:30:35 +0000 Files and hashes: 1: 2B70CD0507DEB57B92FF796531C932DEF83009A2.crl (hash: MMBxY6ciMevr9c6UjUjfLx9sBCgAl0ouY0cKG/fKnqE=) 2: 3138392e3132362e31322e302f32322d3234203d3e20323730333136.roa (hash: usN4Sn/tOM9yn1kyODhJ/9CSDKsJBo6S6EP+tHpD0AQ=) 3: 323830343a366132383a3a2f33322d3438203d3e20323730333136.roa (hash: uM7t3CdpbFI7OeW+ScOEPFx4SBbDqHNlaGrAPMxg5UE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.crl rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6f:b7:fa:e3:0a:39:03:26:bf:48:3f:b1:75:ba:b3:53:09:e1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B70CD0507DEB57B92FF796531C932DEF83009A2 Validity Not Before: Nov 5 02:10:35 2025 GMT Not After : Nov 6 03:30:35 2025 GMT Subject: CN=B9598A2AA0DBFD25B614A4B5E62A857E9714BE84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:cc:6c:ab:54:1c:8c:c5:de:90:38:12:bc: 0c:b8:0d:4c:cf:5d:57:e1:64:b2:ac:73:04:da:d4: c0:f8:21:9d:86:f0:11:f2:ae:30:d2:d7:65:99:52: 61:e9:7d:b8:8f:64:71:ce:e1:1e:6b:40:06:21:0f: 2f:45:52:4f:83:99:f8:24:1e:98:46:8c:c7:b7:3e: aa:b9:e7:43:a6:f5:dd:fd:ca:d5:e0:f9:24:50:36: c5:02:e5:74:bc:1b:2a:63:1a:da:55:26:45:ea:04: ce:13:0a:45:98:08:d7:30:bb:11:dd:d6:19:1d:e3: 41:6b:9a:3e:33:2d:54:7b:f6:5d:bc:fc:26:92:5f: cb:0a:c3:69:e6:c4:d3:32:3f:e8:be:0b:06:9d:b7: 49:40:e8:8c:4f:e4:cb:3d:04:74:2b:64:2d:3b:f2: 73:d7:e0:d8:8f:32:d8:3d:82:54:44:6a:7d:15:fa: 6d:31:a6:5e:62:8b:fb:5e:0a:18:30:af:b9:c4:20: c4:3b:e6:73:54:78:88:28:1a:78:3c:01:7b:17:1b: c1:cf:b8:6d:1f:36:93:d0:85:40:b8:7e:fa:e0:e7: 20:3b:31:2a:ad:37:5f:4b:51:c2:21:c9:b0:21:cb: 27:ae:ec:3b:ff:89:e3:8a:85:c7:0a:f1:d8:36:8e: a5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:59:8A:2A:A0:DB:FD:25:B6:14:A4:B5:E6:2A:85:7E:97:14:BE:84 X509v3 Authority Key Identifier: keyid:2B:70:CD:05:07:DE:B5:7B:92:FF:79:65:31:C9:32:DE:F8:30:09:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e6:e0:68:e5:3a:6b:a7:8a:f4:f5:de:b0:3d:91:1a:93:5d: a6:c7:32:ec:bd:13:82:a9:c9:2b:23:14:88:c0:f9:3a:47:6a: 3c:1b:15:01:b4:39:f0:ca:12:59:f5:e1:67:cb:38:06:5d:73: 75:62:a0:f4:e4:d6:7a:27:96:f6:bc:46:3e:6f:6d:29:d6:6e: a9:b5:3c:15:dd:70:af:4c:d3:9e:4a:f9:27:1a:d7:8c:f0:a5: fa:61:c7:44:39:8e:57:cd:56:da:63:ab:52:d1:4f:8c:85:2c: 2c:3c:e1:e7:d5:d9:b6:9d:14:81:54:27:2d:0f:54:c8:1d:8c: 85:e8:4f:38:08:8a:1f:d8:7e:d4:b8:30:15:32:36:de:75:e3: ad:28:12:bb:bb:11:b5:13:e5:b2:75:9b:25:d1:9b:b6:48:29: c9:98:ee:da:29:41:b1:73:de:cb:d5:c1:05:47:5d:3b:e2:5c: 79:7e:f1:32:98:23:54:0d:4c:86:20:9d:c8:c0:13:e4:fe:df: ac:66:af:00:a0:76:04:87:da:30:36:7a:27:65:c7:d4:33:0a: 06:41:24:c8:8e:13:ce:a7:8c:0b:f2:9b:65:e7:aa:ad:8b:23: 45:0d:2a:cd:b7:bd:0c:ac:c2:36:3c:0b:c8:37:12:cb:dc:ae: b6:ca:ed:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTm+3+uMKOQMmv0g/sXW6s1MJ4YowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI3MENEMDUwN0RFQjU3QjkyRkY3OTY1MzFDOTMyREVG ODMwMDlBMjAeFw0yNTExMDUwMjEwMzVaFw0yNTExMDYwMzMwMzVaMDMxMTAvBgNV BAMTKEI5NTk4QTJBQTBEQkZEMjVCNjE0QTRCNUU2MkE4NTdFOTcxNEJFODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4cxsq1QcjMXekDgSvAy4DUzP XVfhZLKscwTa1MD4IZ2G8BHyrjDS12WZUmHpfbiPZHHO4R5rQAYhDy9FUk+Dmfgk HphGjMe3Pqq550Om9d39ytXg+SRQNsUC5XS8GypjGtpVJkXqBM4TCkWYCNcwuxHd 1hkd40Frmj4zLVR79l28/CaSX8sKw2nmxNMyP+i+Cwadt0lA6IxP5Ms9BHQrZC07 8nPX4NiPMtg9glREan0V+m0xpl5ii/teChgwr7nEIMQ75nNUeIgoGng8AXsXG8HP uG0fNpPQhUC4fvrg5yA7MSqtN19LUcIhybAhyyeu7Dv/ieOKhccK8dg2jqVnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuVmKKqDb/SW2FKS15iqFfpcUvoQwHwYDVR0j BBgwFoAUK3DNBQfetXuS/3llMcky3vgwCaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWVIZ2lKSzJxN0RxQlpCWWNiWmJQOFA5OGFjdVllTDE1M3Raa2hxbTFk SmQvMC8yQjcwQ0QwNTA3REVCNTdCOTJGRjc5NjUzMUM5MzJERUY4MzAwOUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNzBDRDA1MDdERUI1N0I5 MkZGNzk2NTMxQzkzMkRFRjgzMDA5QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWVIZ2lKSzJxN0RxQlpCWWNiWmJQOFA5OGFjdVllTDE1M3Raa2hxbTFkSmQvMC8y QjcwQ0QwNTA3REVCNTdCOTJGRjc5NjUzMUM5MzJERUY4MzAwOUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZubgaOU6a6eK9PXesD2RGpNdpscy7L0TgqnJKyMUiMD5OkdqPBsVAbQ58MoS WfXhZ8s4Bl1zdWKg9OTWeieW9rxGPm9tKdZuqbU8Fd1wr0zTnkr5JxrXjPCl+mHH RDmOV81W2mOrUtFPjIUsLDzh59XZtp0UgVQnLQ9UyB2MhehPOAiKH9h+1LgwFTI2 3nXjrSgSu7sRtRPlsnWbJdGbtkgpyZju2ilBsXPey9XBBUddO+JceX7xMpgjVA1M hiCdyMAT5P7frGavAKB2BIfaMDZ6J2XH1DMKBkEkyI4TzqeMC/KbZeeqrYsjRQ0q zbe9DKzCNjwLyDcSy9yutsrtbg== -----END CERTIFICATE-----Generated at Wed Nov 5 16:43:52 2025 by rpki-client