$ rpki-client -vvf rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.mft File: 2F06CE8D6B240792E0670AB75AB370A8A63C8F59.mft (raw, json) Hash identifier: Cj/YJamHCgGuUDRMeMeqGYYjKXWYJMjRewCZiGuec+I= Subject key identifier: AD:9E:C7:FC:F7:43:5A:01:09:F3:86:0B:35:34:F7:18:D5:FC:BE:FB Authority key identifier: 2F:06:CE:8D:6B:24:07:92:E0:67:0A:B7:5A:B3:70:A8:A6:3C:8F:59 Certificate issuer: /CN=2F06CE8D6B240792E0670AB75AB370A8A63C8F59 Certificate serial: 48C42C06FB25AD25651CC90D8C361B4A940EBED5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.cer Subject info access: rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.mft Manifest number: 0D Signing time: Wed 05 Nov 2025 05:46:40 +0000 Manifest this update: Wed 05 Nov 2025 05:41:40 +0000 Manifest next update: Thu 06 Nov 2025 08:58:40 +0000 Files and hashes: 1: 34352e3233322e342e302f32322d3234203d3e20323637323338.roa (hash: 5E6bM5Jm9jKj+pTsI7qgsmglSLc7xM+oQlH0PO9Riy4=) 2: 2F06CE8D6B240792E0670AB75AB370A8A63C8F59.crl (hash: qIvXSdAqRn0GwLvXw/q2yN3eDxL0uOlgeRTY1IxCL6M=) 3: 323830343a346136383a3a2f33322d3438203d3e20323637323338.roa (hash: v1CTyBvoXPosJjqioRbR47KpuKGX3CWAeaOWBlK/dEc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.crl rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 08:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c4:2c:06:fb:25:ad:25:65:1c:c9:0d:8c:36:1b:4a:94:0e:be:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F06CE8D6B240792E0670AB75AB370A8A63C8F59 Validity Not Before: Nov 5 05:41:40 2025 GMT Not After : Nov 6 08:58:40 2025 GMT Subject: CN=AD9EC7FCF7435A0109F3860B3534F718D5FCBEFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:99:3f:a8:d1:d9:dc:d9:61:45:e3:f7:8d:c3: 62:0f:7c:c2:21:cd:0a:59:52:94:e4:f1:54:38:68: 61:86:6c:4f:4d:18:f5:dd:45:ec:04:47:76:18:41: 40:0c:95:30:4f:d0:22:af:44:d4:59:63:03:db:cd: 5e:1a:2b:91:8e:f5:74:d0:5e:82:b9:1f:00:9f:43: 50:73:6c:2a:4c:7c:2e:88:be:ca:6c:c1:83:21:51: e1:d3:02:ce:3c:7e:42:82:50:57:4e:fb:d9:f4:f1: 66:f5:86:49:2b:e1:67:5b:b8:c9:4b:b2:72:31:6f: 6b:8a:6e:c2:b9:f5:d5:1c:e1:fc:c6:68:7a:5e:88: 0b:29:8d:00:2e:2c:0f:f3:63:ab:f7:34:2a:82:46: 91:3c:4e:bf:29:84:3d:ff:8a:30:b6:e3:a9:15:25: d0:fc:b0:55:45:ba:6c:c2:06:9f:e6:96:43:f0:69: 05:81:ea:54:ac:a1:7b:88:50:11:92:ae:71:e2:40: be:08:12:c3:e8:c1:e6:ac:24:4e:4a:5c:3d:3d:e8: 99:a5:58:bc:dd:eb:42:f3:43:a4:91:93:79:a2:e1: 79:7a:23:94:17:9e:9d:e3:5d:7c:11:d5:a5:aa:5b: 3b:ba:d1:00:f5:4b:f0:b0:2c:08:36:55:ea:3f:76: 39:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9E:C7:FC:F7:43:5A:01:09:F3:86:0B:35:34:F7:18:D5:FC:BE:FB X509v3 Authority Key Identifier: keyid:2F:06:CE:8D:6B:24:07:92:E0:67:0A:B7:5A:B3:70:A8:A6:3C:8F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c1:08:3e:8d:5a:f7:22:04:ff:c2:43:18:42:78:66:f6:60: 34:99:23:b9:8c:6b:19:61:42:55:a7:49:53:3b:14:9f:00:e7: 2c:ba:7c:91:15:19:16:d7:bd:93:8c:9f:28:24:39:67:5a:c6: e3:92:bb:e1:47:c1:13:52:64:0e:0c:ba:5d:83:f8:70:f9:af: c9:96:eb:b8:a1:12:42:f3:77:b9:53:0b:02:3d:fe:dd:74:03: c0:de:71:51:47:9a:f9:04:0c:8e:2b:da:ac:17:e5:8a:de:20: e1:56:ba:7c:f0:41:45:22:56:6e:2c:3d:94:89:84:ce:de:3b: 8e:d9:6e:f4:66:98:a3:ab:9b:82:b3:3f:1c:40:83:e0:c9:94: 0c:8f:54:8f:39:45:88:d5:ea:9e:a3:4b:00:0e:22:90:53:91: 83:9a:6c:5c:19:06:6e:5c:82:9b:98:a7:6b:7e:54:20:54:1d: 4b:3a:40:8c:76:12:75:5e:f2:63:31:f7:85:8e:f7:f6:74:37: 38:43:17:8f:f0:2d:e3:5c:5a:40:cb:fb:18:23:9a:39:c0:a6: 6e:3c:8e:89:83:b6:22:cb:75:1b:26:11:c3:2b:68:b1:95:37: ba:8a:29:23:71:1b:f8:39:02:17:9c:06:0c:92:6a:80:c5:8e: 3f:7e:7f:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSMQsBvslrSVlHMkNjDYbSpQOvtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYwNkNFOEQ2QjI0MDc5MkUwNjcwQUI3NUFCMzcwQThB NjNDOEY1OTAeFw0yNTExMDUwNTQxNDBaFw0yNTExMDYwODU4NDBaMDMxMTAvBgNV BAMTKEFEOUVDN0ZDRjc0MzVBMDEwOUYzODYwQjM1MzRGNzE4RDVGQ0JFRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnmT+o0dnc2WFF4/eNw2IPfMIh zQpZUpTk8VQ4aGGGbE9NGPXdRewER3YYQUAMlTBP0CKvRNRZYwPbzV4aK5GO9XTQ XoK5HwCfQ1BzbCpMfC6IvspswYMhUeHTAs48fkKCUFdO+9n08Wb1hkkr4WdbuMlL snIxb2uKbsK59dUc4fzGaHpeiAspjQAuLA/zY6v3NCqCRpE8Tr8phD3/ijC246kV JdD8sFVFumzCBp/mlkPwaQWB6lSsoXuIUBGSrnHiQL4IEsPoweasJE5KXD096Jml WLzd60LzQ6SRk3mi4Xl6I5QXnp3jXXwR1aWqWzu60QD1S/CwLAg2Veo/djm7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrZ7H/PdDWgEJ84YLNTT3GNX8vvswHwYDVR0j BBgwFoAULwbOjWskB5LgZwq3WrNwqKY8j1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkV0OHhFWHVucHRTSHd1NFpXcGVncVBTUnlVbzF5TXg0b0F6d29RZFRW bTMvMC8yRjA2Q0U4RDZCMjQwNzkyRTA2NzBBQjc1QUIzNzBBOEE2M0M4RjU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMDZDRThENkIyNDA3OTJF MDY3MEFCNzVBQjM3MEE4QTYzQzhGNTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkV0OHhFWHVucHRTSHd1NFpXcGVncVBTUnlVbzF5TXg0b0F6d29RZFRWbTMvMC8y RjA2Q0U4RDZCMjQwNzkyRTA2NzBBQjc1QUIzNzBBOEE2M0M4RjU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlMEIPo1a9yIE/8JDGEJ4ZvZgNJkjuYxrGWFCVadJUzsUnwDnLLp8kRUZFte9 k4yfKCQ5Z1rG45K74UfBE1JkDgy6XYP4cPmvyZbruKESQvN3uVMLAj3+3XQDwN5x UUea+QQMjivarBflit4g4Va6fPBBRSJWbiw9lImEzt47jtlu9GaYo6ubgrM/HECD 4MmUDI9UjzlFiNXqnqNLAA4ikFORg5psXBkGblyCm5ina35UIFQdSzpAjHYSdV7y YzH3hY739nQ3OEMXj/At41xaQMv7GCOaOcCmbjyOiYO2Ist1GyYRwytosZU3uoop I3Eb+DkCF5wGDJJqgMWOP35/iw== -----END CERTIFICATE-----Generated at Wed Nov 5 14:20:54 2025 by rpki-client