$ rpki-client -vvf rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.mft File: C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.mft (raw, json) Hash identifier: WR1+FkRJ8tXDEpAmas3z4dHiaa8fNReFEWPeEL7i2SU= Subject key identifier: AD:0B:A8:00:DE:82:DE:8A:2E:20:9E:D0:C7:C2:E4:55:17:A9:B9:AA Authority key identifier: C2:89:5E:37:EB:31:DF:15:86:41:21:25:B2:BD:AD:40:BE:FF:4F:BA Certificate issuer: /CN=C2895E37EB31DF1586412125B2BDAD40BEFF4FBA Certificate serial: 7C90BB0A32870852C433660AE9F604963203FF3A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.cer Subject info access: rsync://rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.mft Manifest number: 03 Signing time: Tue 04 Nov 2025 12:06:34 +0000 Manifest this update: Tue 04 Nov 2025 12:01:34 +0000 Manifest next update: Wed 05 Nov 2025 14:38:34 +0000 Files and hashes: 1: 323830343a386263303a3a2f33322d3438203d3e20323733373536.roa (hash: qRt27gpQ1RG4VHZ93R/+bdlUlpPnfo9FjvSMkWf944k=) 2: C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.crl (hash: YaM+wx0+Hp2xIAqnchskEEQ6wAjgjsCrHsIb5KoQ/Ys=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.crl rsync://rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:90:bb:0a:32:87:08:52:c4:33:66:0a:e9:f6:04:96:32:03:ff:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2895E37EB31DF1586412125B2BDAD40BEFF4FBA Validity Not Before: Nov 4 12:01:34 2025 GMT Not After : Nov 5 14:38:34 2025 GMT Subject: CN=AD0BA800DE82DE8A2E209ED0C7C2E45517A9B9AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ce:16:03:03:a9:0c:84:80:6c:ee:1a:c5:d4: 4f:07:86:dc:f3:75:b8:b9:b3:31:9a:e9:4a:d9:1d: 40:ab:02:27:c8:26:57:bb:5a:4e:50:22:50:e2:88: 3c:e0:b4:6f:20:4a:a8:62:27:07:44:73:48:3e:db: fd:76:79:fe:5c:31:f7:cd:65:8e:0f:3b:8e:23:d4: e3:3a:22:30:d1:2a:05:dd:05:6b:e2:f1:ab:f7:9e: 37:f6:e6:17:2d:23:ab:a0:55:ad:ab:6f:83:7e:64: a4:af:8c:2b:4d:24:7e:35:23:12:ac:d6:1f:9c:d5: 0a:92:d0:01:e5:75:f5:c8:7e:dd:30:cf:7a:7f:3e: 92:7e:89:38:dc:e4:b9:94:45:0f:4c:bc:be:56:2a: e6:2f:64:dd:22:dc:0b:13:4a:52:c7:61:df:dd:86: 9b:85:a6:ca:99:c4:83:3d:62:e6:45:83:6b:43:86: da:09:8b:af:09:40:af:82:67:86:c1:30:00:3a:cb: f5:ae:f3:bc:b8:0c:2f:23:ec:48:8c:c3:1f:c0:a2: 3c:bc:bf:28:11:cd:5c:56:7b:18:60:2f:bb:56:d4: 7f:2d:83:84:8d:58:32:ac:10:1a:d2:0d:4a:d0:76: d8:9d:5e:40:6d:10:d3:42:45:93:4c:33:bc:f7:3e: 5b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0B:A8:00:DE:82:DE:8A:2E:20:9E:D0:C7:C2:E4:55:17:A9:B9:AA X509v3 Authority Key Identifier: keyid:C2:89:5E:37:EB:31:DF:15:86:41:21:25:B2:BD:AD:40:BE:FF:4F:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/E92G7efaAGE1ZTViEuJVDXhQ2W4bsfLyevHK7FSeLvBm/0/C2895E37EB31DF1586412125B2BDAD40BEFF4FBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:79:47:d2:8c:0a:92:2e:77:82:f7:01:ef:3a:a1:48:f5:b3: 42:ca:82:95:4a:c4:d4:9e:ea:e9:4c:94:b8:12:ea:25:3a:84: b6:d3:15:11:f6:2d:c8:d0:f9:5c:4a:87:67:13:09:79:90:c7: 0b:ab:8a:10:6e:71:81:47:d8:02:05:dd:16:b6:12:3b:90:de: b7:76:be:31:77:31:82:a8:2b:79:e9:7b:13:6a:7e:65:51:55: ae:9f:da:60:0c:a8:62:a2:91:f0:21:a5:e2:f8:f4:67:98:31: fc:d1:1c:f3:a9:8d:41:55:d5:b2:0a:d2:69:33:1b:56:7f:2c: 1f:f0:28:47:3d:9a:0e:8b:35:b1:29:54:cf:60:c5:cd:a6:29: 98:d3:3f:ec:58:74:72:16:86:16:8d:8b:be:0e:67:a5:a8:78: c3:e6:87:a5:11:6e:c3:95:b4:cc:05:bc:51:f7:6d:06:54:c5: 12:11:1e:f1:fa:ab:6b:fc:8e:42:cc:04:05:7f:f5:fc:c2:0f: 44:38:90:6e:21:08:0c:a8:ea:70:e2:45:12:6f:8f:9c:f3:32: eb:3d:e7:bb:8b:74:67:31:86:d9:30:7c:9a:9d:2b:e6:cf:76: 2a:ea:3c:c7:00:99:05:15:25:08:8e:5d:ad:bb:98:5b:c9:06: fc:2c:08:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfJC7CjKHCFLEM2YK6fYEljID/zowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI4OTVFMzdFQjMxREYxNTg2NDEyMTI1QjJCREFENDBC RUZGNEZCQTAeFw0yNTExMDQxMjAxMzRaFw0yNTExMDUxNDM4MzRaMDMxMTAvBgNV BAMTKEFEMEJBODAwREU4MkRFOEEyRTIwOUVEMEM3QzJFNDU1MTdBOUI5QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zhYDA6kMhIBs7hrF1E8Hhtzz dbi5szGa6UrZHUCrAifIJle7Wk5QIlDiiDzgtG8gSqhiJwdEc0g+2/12ef5cMffN ZY4PO44j1OM6IjDRKgXdBWvi8av3njf25hctI6ugVa2rb4N+ZKSvjCtNJH41IxKs 1h+c1QqS0AHldfXIft0wz3p/PpJ+iTjc5LmURQ9MvL5WKuYvZN0i3AsTSlLHYd/d hpuFpsqZxIM9YuZFg2tDhtoJi68JQK+CZ4bBMAA6y/Wu87y4DC8j7EiMwx/Aojy8 vygRzVxWexhgL7tW1H8tg4SNWDKsEBrSDUrQdtidXkBtENNCRZNMM7z3Plu3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrQuoAN6C3oouIJ7Qx8LkVRepuaowHwYDVR0j BBgwFoAUwoleN+sx3xWGQSElsr2tQL7/T7owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRTkyRzdlZmFBR0UxWlRWaUV1SlZEWGhRMlc0YnNmTHlldkhLN0ZTZUx2 Qm0vMC9DMjg5NUUzN0VCMzFERjE1ODY0MTIxMjVCMkJEQUQ0MEJFRkY0RkJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyODk1RTM3RUIzMURGMTU4 NjQxMjEyNUIyQkRBRDQwQkVGRjRGQkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RTkyRzdlZmFBR0UxWlRWaUV1SlZEWGhRMlc0YnNmTHlldkhLN0ZTZUx2Qm0vMC9D Mjg5NUUzN0VCMzFERjE1ODY0MTIxMjVCMkJEQUQ0MEJFRkY0RkJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlHlH0owKki53gvcB7zqhSPWzQsqClUrE1J7q6UyUuBLqJTqEttMVEfYtyND5 XEqHZxMJeZDHC6uKEG5xgUfYAgXdFrYSO5Det3a+MXcxgqgreel7E2p+ZVFVrp/a YAyoYqKR8CGl4vj0Z5gx/NEc86mNQVXVsgrSaTMbVn8sH/AoRz2aDos1sSlUz2DF zaYpmNM/7Fh0chaGFo2Lvg5npah4w+aHpRFuw5W0zAW8UfdtBlTFEhEe8fqra/yO QswEBX/1/MIPRDiQbiEIDKjqcOJFEm+PnPMy6z3nu4t0ZzGG2TB8mp0r5s92Kuo8 xwCZBRUlCI5drbuYW8kG/CwIkg== -----END CERTIFICATE-----Generated at Wed Nov 5 03:37:23 2025 by rpki-client