$ rpki-client -vvf rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft File: 2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft (raw, json) Hash identifier: HHfJNJqo13RyuGWydY4fzC0zm9wrDzHObscf9XO9XyQ= Subject key identifier: B1:6A:6B:8B:F4:B1:2B:C3:09:C3:3D:25:64:8E:AF:B6:78:92:48:42 Authority key identifier: 2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B Certificate issuer: /CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B Certificate serial: 07DD58F7786715E4104939CF92211F300C3A754B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft Manifest number: 0306 Signing time: Wed 05 Nov 2025 07:53:28 +0000 Manifest this update: Wed 05 Nov 2025 07:48:28 +0000 Manifest next update: Thu 06 Nov 2025 08:09:28 +0000 Files and hashes: 1: 3137372e38372e34342e302f32322d3234203d3e203532353839.roa (hash: U1bU2vymA1trGo0kqdj5LljKi5zORYlms1D3T/ome8k=) 2: 323830343a316164383a3a2f33322d3438203d3e203532353839.roa (hash: nM9/FgUa0C68sG38T5nV/uNQ86svUq5vsVkQhqR+lIs=) 3: 2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl (hash: lojqsaRayrPmN3BMX961PYUKHHSKFH6r6lAL5i1ck4I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 08:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:dd:58:f7:78:67:15:e4:10:49:39:cf:92:21:1f:30:0c:3a:75:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B Validity Not Before: Nov 5 07:48:28 2025 GMT Not After : Nov 6 08:09:28 2025 GMT Subject: CN=B16A6B8BF4B12BC309C33D25648EAFB678924842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a0:29:fb:84:8d:89:42:22:fb:99:44:5d:8f: ae:73:9a:3c:14:5a:41:c8:c0:51:7e:ed:ab:d6:a5: 4d:8b:9d:62:f1:68:88:86:1e:39:69:a8:89:7d:ff: 51:2d:20:5b:81:a6:18:b6:d4:d7:16:c4:14:9f:0c: 52:f9:f5:5c:27:2c:e0:df:78:66:63:8c:e5:f4:4b: 2e:1e:dd:83:63:ff:ff:07:07:ee:43:e6:04:36:70: 14:6d:30:4a:cb:e5:ea:f7:9f:ee:74:d7:f3:c9:ab: 06:8e:b4:48:9f:ed:7d:d0:b1:9d:7f:44:06:a0:44: a8:0c:f8:37:f4:b3:68:ab:69:1d:5a:e4:be:df:fe: 72:74:c1:e2:d2:ab:ca:86:88:2b:c2:a4:c1:b7:99: fc:fe:29:de:b1:24:ea:91:97:45:16:d9:b0:a7:03: 83:bd:51:f2:60:f3:b9:cf:b6:70:19:95:a0:48:13: 29:47:cb:8a:5e:af:80:ad:7a:89:4b:58:1d:d9:a6: aa:0d:cf:2b:0c:8e:32:e6:6e:61:af:93:89:2c:1b: dd:36:f7:a8:78:b1:28:c1:d6:c5:14:a4:2d:5e:88: 31:5c:6a:6f:cf:a4:19:a4:ce:31:83:2d:63:c6:86: 54:97:18:9b:2e:71:65:78:1a:38:36:8c:14:8a:33: 92:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6A:6B:8B:F4:B1:2B:C3:09:C3:3D:25:64:8E:AF:B6:78:92:48:42 X509v3 Authority Key Identifier: keyid:2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:05:73:96:1f:c8:9c:dd:cd:e0:32:da:1e:4c:4f:fc:ca:0c: 1f:a4:3d:61:0f:e3:72:aa:dc:17:bd:d6:df:88:02:63:08:cc: 69:40:a8:bc:e1:51:36:15:0e:09:4a:19:02:b3:42:fd:99:dd: c4:8e:30:49:ed:2b:36:73:37:61:da:af:14:29:b5:28:a5:8c: 84:13:a2:5a:c2:fb:ca:50:ca:d8:1f:29:02:50:a9:5c:62:46: 4a:39:4e:1e:67:1a:ea:5f:64:7b:60:09:70:79:95:dd:02:1a: 17:d6:44:a1:cd:06:a4:53:9d:ac:e4:c2:f3:b9:fa:d5:2d:25: c9:8d:eb:b6:64:13:01:ad:38:3a:57:fa:f7:07:1c:03:81:f0: a7:75:48:ec:b2:4c:3a:95:c6:b8:30:91:54:b4:0d:ca:0f:47: 5c:42:40:64:31:eb:fb:41:4d:22:e7:37:85:00:22:8e:ba:7e: ba:19:3f:f7:b8:36:3a:04:30:2f:ec:3b:61:e7:e8:4a:bb:86: 13:19:c5:9b:00:ee:db:ff:65:d8:cd:0b:33:fc:86:67:8d:4e: af:a0:01:6a:93:4d:ae:ce:88:9b:46:97:68:ba:fb:a0:c4:12: 6b:58:10:c5:ac:75:e6:ab:3b:c6:04:2f:a8:8b:51:45:df:a8: e9:79:0a:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUB91Y93hnFeQQSTnPkiEfMAw6dUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI0NzBFNUMyMzg4RkQ0RUUyN0ZEMDkzQTE4OERCNTFE NTdDQUQzQjAeFw0yNTExMDUwNzQ4MjhaFw0yNTExMDYwODA5MjhaMDMxMTAvBgNV BAMTKEIxNkE2QjhCRjRCMTJCQzMwOUMzM0QyNTY0OEVBRkI2Nzg5MjQ4NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvoCn7hI2JQiL7mURdj65zmjwU WkHIwFF+7avWpU2LnWLxaIiGHjlpqIl9/1EtIFuBphi21NcWxBSfDFL59VwnLODf eGZjjOX0Sy4e3YNj//8HB+5D5gQ2cBRtMErL5er3n+501/PJqwaOtEif7X3QsZ1/ RAagRKgM+Df0s2iraR1a5L7f/nJ0weLSq8qGiCvCpMG3mfz+Kd6xJOqRl0UW2bCn A4O9UfJg87nPtnAZlaBIEylHy4per4CteolLWB3ZpqoNzysMjjLmbmGvk4ksG902 96h4sSjB1sUUpC1eiDFcam/PpBmkzjGDLWPGhlSXGJsucWV4Gjg2jBSKM5IfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsWpri/SxK8MJwz0lZI6vtniSSEIwHwYDVR0j BBgwFoAUK0cOXCOI/U7if9CToYjbUdV8rTswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3Y5WHhQRWt5ZXY4ZnNtZDdnZ3dMWE1pUHlOdmdWa2pBckg1UnhHRUpk WDEvMS8yQjQ3MEU1QzIzODhGRDRFRTI3RkQwOTNBMTg4REI1MUQ1N0NBRDNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNDcwRTVDMjM4OEZENEVF MjdGRDA5M0ExODhEQjUxRDU3Q0FEM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3Y5WHhQRWt5ZXY4ZnNtZDdnZ3dMWE1pUHlOdmdWa2pBckg1UnhHRUpkWDEvMS8y QjQ3MEU1QzIzODhGRDRFRTI3RkQwOTNBMTg4REI1MUQ1N0NBRDNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlQVzlh/InN3N4DLaHkxP/MoMH6Q9YQ/jcqrcF73W34gCYwjMaUCovOFRNhUO CUoZArNC/ZndxI4wSe0rNnM3YdqvFCm1KKWMhBOiWsL7ylDK2B8pAlCpXGJGSjlO Hmca6l9ke2AJcHmV3QIaF9ZEoc0GpFOdrOTC87n61S0lyY3rtmQTAa04Olf69wcc A4Hwp3VI7LJMOpXGuDCRVLQNyg9HXEJAZDHr+0FNIuc3hQAijrp+uhk/97g2OgQw L+w7YefoSruGExnFmwDu2/9l2M0LM/yGZ41Or6ABapNNrs6Im0aXaLr7oMQSa1gQ xax15qs7xgQvqItRRd+o6XkKTA== -----END CERTIFICATE-----Generated at Wed Nov 5 11:53:11 2025 by rpki-client