$ rpki-client -vvf rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft File: 2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft (raw, json) Hash identifier: 5VfPHhjl67DiVfORJ4k4c7n8Zpv55xjDKiTUnylp1GE= Subject key identifier: 8F:69:AB:7B:22:AA:C3:F4:E3:4A:A3:90:A4:5C:5C:AF:E8:BD:CA:71 Authority key identifier: 2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68 Certificate issuer: /CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168 Certificate serial: 028EF0F182246CF6E77B3A3827273FEB9B09EE99 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer Subject info access: rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft Manifest number: 02A2 Signing time: Tue 04 Nov 2025 12:16:17 +0000 Manifest this update: Tue 04 Nov 2025 12:11:17 +0000 Manifest next update: Wed 05 Nov 2025 15:11:17 +0000 Files and hashes: 1: 2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl (hash: Cx3mIZSLrFWJDsp585QNGds3gwd1+9hfccEUbsvjk10=) 2: 3137372e37322e38382e302f32312d3332203d3e203532383232.roa (hash: l1bCBW5xTIWmnRtwFALqoufSI4NmF7ZdUExV4DVUkHY=) 3: 323830343a6262633a3a2f33322d313238203d3e203532383232.roa (hash: NiTHJW5Y+34NTE8ZT454pnL1Mlzpd+vYci8H9lwnai8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 15:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:8e:f0:f1:82:24:6c:f6:e7:7b:3a:38:27:27:3f:eb:9b:09:ee:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ECFD6270713C15F56BC52BA66D1A749FFE56168 Validity Not Before: Nov 4 12:11:17 2025 GMT Not After : Nov 5 15:11:17 2025 GMT Subject: CN=8F69AB7B22AAC3F4E34AA390A45C5CAFE8BDCA71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3e:6b:8a:5a:dc:42:11:31:c5:15:58:42:fd: 22:f4:e1:00:76:09:90:75:43:82:ab:8f:9d:a6:11: 72:4d:ab:1a:7b:b8:a6:c0:08:69:a7:7c:03:12:76: db:75:97:bd:12:9f:3f:e9:19:c7:6f:bd:6b:b3:c4: cd:79:20:27:84:b4:00:f1:aa:9f:90:2f:49:52:95: 22:0a:48:bb:49:2b:d5:ff:7e:e1:2e:0f:05:87:66: 0c:41:37:f0:7d:76:20:63:22:88:3a:68:1d:b6:99: d5:d8:11:f0:6c:ab:25:30:6f:9a:4c:38:4a:43:c4: cd:af:d5:a6:60:5c:83:1b:3e:6e:5f:5e:b9:aa:82: 30:c5:65:8b:58:03:ac:ab:ad:bd:08:12:76:f5:c4: 93:b2:c9:c9:f9:a0:ee:65:06:31:00:ab:eb:68:3c: 25:1c:81:31:e7:c6:3e:69:47:d2:85:a8:7b:f7:78: 8b:82:3b:41:67:a4:b4:c3:bf:13:69:0b:d5:3b:55: 26:57:52:fd:79:cf:75:87:47:5f:84:d0:d8:37:8c: 86:dc:c0:f2:f3:fb:7a:8c:17:61:24:56:bb:67:9c: a4:87:18:1b:99:8a:27:ae:b0:06:04:ef:bd:a1:55: 9d:0b:1f:42:5b:dc:6e:2b:d4:8c:92:53:ca:4e:cd: d2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:69:AB:7B:22:AA:C3:F4:E3:4A:A3:90:A4:5C:5C:AF:E8:BD:CA:71 X509v3 Authority Key Identifier: keyid:2E:CF:D6:27:07:13:C1:5F:56:BC:52:BA:66:D1:A7:49:FF:E5:61:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ECFD6270713C15F56BC52BA66D1A749FFE56168.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7VdXwxPCXAZh9fJfMweavf5KGihX4F2ZpcJ4XZ2nE4G/0/2ECFD6270713C15F56BC52BA66D1A749FFE56168.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:97:50:57:11:fe:47:c0:87:a4:7f:40:63:04:cd:41:9f:51: a7:96:c3:a1:db:42:2a:56:2a:5f:a8:8c:c4:de:f4:f7:72:76: 02:64:b5:34:0b:85:ec:21:b3:52:e4:8b:fc:41:d2:96:e5:fd: a3:f4:d3:71:54:cd:c9:3f:a4:25:52:19:73:fe:25:be:ba:04: 28:6c:08:3e:ef:fa:43:f5:97:b7:ec:cc:61:cf:0d:09:76:02: 03:db:a8:15:b8:e8:03:19:5a:91:1b:d8:4d:d0:20:24:16:49: dd:cd:7e:f7:1b:bb:a5:9a:e4:91:64:a5:95:b1:97:f1:9e:85: 79:53:2a:46:00:22:eb:e0:65:a4:f8:20:29:45:e7:be:1a:ce: 80:53:c0:1d:18:65:05:d5:95:14:13:c3:2c:7a:cd:ba:87:bd: c1:07:f5:86:d2:38:76:03:c8:f4:15:02:c3:7a:3b:1c:12:c4: e6:eb:d5:72:e2:4f:62:44:16:ba:d0:2c:a8:6b:f7:d3:d9:22: c1:09:68:a6:1b:eb:47:a7:52:87:52:68:1b:01:4f:83:24:77: 78:ac:d2:62:63:d8:d1:9f:c7:e1:03:dc:b8:b8:ef:0c:b3:2c: 39:65:75:33:9e:7b:b2:41:f0:05:39:db:1a:ce:34:a4:46:65: a6:98:d7:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAo7w8YIkbPbnezo4Jyc/65sJ7pkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDRkQ2MjcwNzEzQzE1RjU2QkM1MkJBNjZEMUE3NDlG RkU1NjE2ODAeFw0yNTExMDQxMjExMTdaFw0yNTExMDUxNTExMTdaMDMxMTAvBgNV BAMTKDhGNjlBQjdCMjJBQUMzRjRFMzRBQTM5MEE0NUM1Q0FGRThCRENBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+PmuKWtxCETHFFVhC/SL04QB2 CZB1Q4Krj52mEXJNqxp7uKbACGmnfAMSdtt1l70Snz/pGcdvvWuzxM15ICeEtADx qp+QL0lSlSIKSLtJK9X/fuEuDwWHZgxBN/B9diBjIog6aB22mdXYEfBsqyUwb5pM OEpDxM2v1aZgXIMbPm5fXrmqgjDFZYtYA6yrrb0IEnb1xJOyycn5oO5lBjEAq+to PCUcgTHnxj5pR9KFqHv3eIuCO0FnpLTDvxNpC9U7VSZXUv15z3WHR1+E0Ng3jIbc wPLz+3qMF2EkVrtnnKSHGBuZiieusAYE772hVZ0LH0Jb3G4r1IySU8pOzdKNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUj2mreyKqw/TjSqOQpFxcr+i9ynEwHwYDVR0j BBgwFoAULs/WJwcTwV9WvFK6ZtGnSf/lYWgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjdWZFh3eFBDWEFaaDlmSmZNd2VhdmY1S0dpaFg0RjJacGNKNFhaMm5F NEcvMC8yRUNGRDYyNzA3MTNDMTVGNTZCQzUyQkE2NkQxQTc0OUZGRTU2MTY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFQ0ZENjI3MDcxM0MxNUY1 NkJDNTJCQTY2RDFBNzQ5RkZFNTYxNjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjdWZFh3eFBDWEFaaDlmSmZNd2VhdmY1S0dpaFg0RjJacGNKNFhaMm5FNEcvMC8y RUNGRDYyNzA3MTNDMTVGNTZCQzUyQkE2NkQxQTc0OUZGRTU2MTY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdpdQVxH+R8CHpH9AYwTNQZ9Rp5bDodtCKlYqX6iMxN7093J2AmS1NAuF7CGz UuSL/EHSluX9o/TTcVTNyT+kJVIZc/4lvroEKGwIPu/6Q/WXt+zMYc8NCXYCA9uo FbjoAxlakRvYTdAgJBZJ3c1+9xu7pZrkkWSllbGX8Z6FeVMqRgAi6+BlpPggKUXn vhrOgFPAHRhlBdWVFBPDLHrNuoe9wQf1htI4dgPI9BUCw3o7HBLE5uvVcuJPYkQW utAsqGv309kiwQlophvrR6dSh1JoGwFPgyR3eKzSYmPY0Z/H4QPcuLjvDLMsOWV1 M557skHwBTnbGs40pEZlppjXnA== -----END CERTIFICATE-----Generated at Wed Nov 5 02:18:58 2025 by rpki-client