$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft File: CA2ED340034D0368230850867C30E245990118A2.mft (raw, json) Hash identifier: HWgUYBphlVnZr6Ws+qPfeAtYELX1hNRzaEXzgnBMMG0= Subject key identifier: B6:A4:B8:FD:DD:77:25:3E:DA:8C:D4:66:DD:64:BB:00:62:EF:86:2B Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2 Certificate issuer: /CN=CA2ED340034D0368230850867C30E245990118A2 Certificate serial: 5FD38A2751A3CE5A15EF7EAE790AC2A023DD9994 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft Manifest number: 036A Signing time: Wed 05 Nov 2025 11:10:00 +0000 Manifest this update: Wed 05 Nov 2025 11:05:00 +0000 Manifest next update: Thu 06 Nov 2025 11:10:00 +0000 Files and hashes: 1: 3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (hash: bJTEqeP16XCpCH5JZabT/MCNKPhW6t9nzCk4I/T1oI0=) 2: 3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (hash: yjU6PAJwL/lIZeEtQEZbUNPm0Zr33QD1yFw6wjO3p2g=) 3: 3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (hash: dTVML3Vbzw4YnIZhgLmRkiNFb188p4H6d/auTvRDB4A=) 4: 3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (hash: k3rhtpDLwoW36HfhrQiYO+psfP/HD50OXGIZu2C/YjE=) 5: 3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (hash: rStpDynGRR2uvmjQkNNftRfa83aI9CFXepHd5ccjIOo=) 6: 3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (hash: 5e4gcNEn5VL2vN7iW7nA5Df4Xfu26IOs2pc5B0p4lXc=) 7: CA2ED340034D0368230850867C30E245990118A2.crl (hash: yjeeqa55ilDWQGRAqsZzDzqSoGlnHUYwJa4rT9KId+4=) 8: 323830343a336438303a3a2f33322d3438203d3e20323636353335.roa (hash: tpoXD4T4EUi9EwpxT41fxDYxhlTzas0mOmEydCxj8EA=) 9: 3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (hash: lZ9umGE5NlyJckpUrEcRBf2qnDy03PIbFuZNB7UkcM4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d3:8a:27:51:a3:ce:5a:15:ef:7e:ae:79:0a:c2:a0:23:dd:99:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA2ED340034D0368230850867C30E245990118A2 Validity Not Before: Nov 5 11:05:00 2025 GMT Not After : Nov 6 11:10:00 2025 GMT Subject: CN=3082010A0282010100AE53B1DB4D0E30488385E9F380507DC3C6C05AE6AA69D184FE9D0E2FB77980A9F68A264408393A6BAD258572F8AD454E7B29E62AA156E82819FE01245A1C20EFCB05C8D8FC01DEFE539EA3E89C19BCEF4DCB557EC517CCE890346336C153B31A009485F451B7BC70DE6B149E37073252D4E2E480D37B207090530CE65EF164E28DEAC90165F56728BB8077DD3B3AF33D3518FB55A7DA66D87B398FB1A416B67C3DD5D75C3CDE720DC93CCEFECB9F1EDA19A9D59A0E0E2A78AF4A9458331246164EB45BB60515E8820E2222B9A261EFDFEC7C7EA3DCEEBBC69AB1196C5D08236D3281A91E03251B31DE60448D0ED2DED43547CB00A64593593DFDCE95B5ED88130203010001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:b1:db:4d:0e:30:48:83:85:e9:f3:80:50: 7d:c3:c6:c0:5a:e6:aa:69:d1:84:fe:9d:0e:2f:b7: 79:80:a9:f6:8a:26:44:08:39:3a:6b:ad:25:85:72: f8:ad:45:4e:7b:29:e6:2a:a1:56:e8:28:19:fe:01: 24:5a:1c:20:ef:cb:05:c8:d8:fc:01:de:fe:53:9e: a3:e8:9c:19:bc:ef:4d:cb:55:7e:c5:17:cc:e8:90: 34:63:36:c1:53:b3:1a:00:94:85:f4:51:b7:bc:70: de:6b:14:9e:37:07:32:52:d4:e2:e4:80:d3:7b:20: 70:90:53:0c:e6:5e:f1:64:e2:8d:ea:c9:01:65:f5: 67:28:bb:80:77:dd:3b:3a:f3:3d:35:18:fb:55:a7: da:66:d8:7b:39:8f:b1:a4:16:b6:7c:3d:d5:d7:5c: 3c:de:72:0d:c9:3c:ce:fe:cb:9f:1e:da:19:a9:d5: 9a:0e:0e:2a:78:af:4a:94:58:33:12:46:16:4e:b4: 5b:b6:05:15:e8:82:0e:22:22:b9:a2:61:ef:df:ec: 7c:7e:a3:dc:ee:bb:c6:9a:b1:19:6c:5d:08:23:6d: 32:81:a9:1e:03:25:1b:31:de:60:44:8d:0e:d2:de: d4:35:47:cb:00:a6:45:93:59:3d:fd:ce:95:b5:ed: 88:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A4:B8:FD:DD:77:25:3E:DA:8C:D4:66:DD:64:BB:00:62:EF:86:2B X509v3 Authority Key Identifier: keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:cf:f7:af:86:7b:5e:34:0e:db:7b:94:3b:4d:70:8c:c8:61: a1:a6:6f:c6:64:5f:c5:34:98:9b:07:91:a9:e0:97:aa:cc:fa: 13:98:0d:ae:42:94:76:a0:51:9c:62:b6:4d:26:35:c1:5c:32: de:5b:1e:75:67:c5:35:a3:5c:a8:a7:cf:3a:21:f8:95:c6:ed: 5a:42:f5:d7:33:8e:7d:2a:8c:37:da:8c:d7:56:de:1c:4b:16: 3c:b2:08:ec:ff:9c:0c:d8:e6:24:95:89:ea:39:b8:8d:be:8c: f1:e9:1a:f3:8a:31:63:df:2c:43:a8:03:9f:87:62:d0:27:a5: 03:d3:40:4d:9f:62:55:9e:41:c0:0a:39:d4:7d:11:09:73:4d: 82:60:65:2a:9b:a8:31:31:5c:5a:53:90:7b:d6:40:20:a8:8d: 59:6e:35:d9:81:27:18:ea:75:75:5e:78:97:a3:62:07:3e:3c: 54:16:85:36:bc:cb:0b:d4:62:ae:33:7a:28:35:71:03:ad:b7: 7d:30:21:37:6d:e7:98:0e:4b:9f:49:9d:9d:ce:e1:ff:06:7b: 75:f9:0b:01:28:27:3c:c3:34:26:61:4e:c3:c6:10:c1:8c:02: 08:69:3f:e4:b8:a7:70:0c:0b:2a:73:96:e2:b7:46:f0:26:dd: 6b:24:96:e2 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUX9OKJ1GjzloV736ueQrCoCPdmZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyRUQzNDAwMzREMDM2ODIzMDg1MDg2N0MzMEUyNDU5 OTAxMThBMjAeFw0yNTExMDUxMTA1MDBaFw0yNTExMDYxMTEwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUU1M0IxREI0RDBFMzA0ODgz ODVFOUYzODA1MDdEQzNDNkMwNUFFNkFBNjlEMTg0RkU5RDBFMkZCNzc5ODBBOUY2 OEEyNjQ0MDgzOTNBNkJBRDI1ODU3MkY4QUQ0NTRFN0IyOUU2MkFBMTU2RTgyODE5 RkUwMTI0NUExQzIwRUZDQjA1QzhEOEZDMDFERUZFNTM5RUEzRTg5QzE5QkNFRjRE Q0I1NTdFQzUxN0NDRTg5MDM0NjMzNkMxNTNCMzFBMDA5NDg1RjQ1MUI3QkM3MERF NkIxNDlFMzcwNzMyNTJENEUyRTQ4MEQzN0IyMDcwOTA1MzBDRTY1RUYxNjRFMjhE RUFDOTAxNjVGNTY3MjhCQjgwNzdERDNCM0FGMzNEMzUxOEZCNTVBN0RBNjZEODdC Mzk4RkIxQTQxNkI2N0MzREQ1RDc1QzNDREU3MjBEQzkzQ0NFRkVDQjlGMUVEQTE5 QTlENTlBMEUwRTJBNzhBRjRBOTQ1ODMzMTI0NjE2NEVCNDVCQjYwNTE1RTg4MjBF MjIyMkI5QTI2MUVGREZFQzdDN0VBM0RDRUVCQkM2OUFCMTE5NkM1RDA4MjM2RDMy ODFBOTFFMDMyNTFCMzFERTYwNDQ4RDBFRDJERUQ0MzU0N0NCMDBBNjQ1OTM1OTNE RkRDRTk1QjVFRDg4MTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEArlOx200OMEiDhenzgFB9w8bAWuaqadGE/p0OL7d5gKn2iiZECDk6 a60lhXL4rUVOeynmKqFW6CgZ/gEkWhwg78sFyNj8Ad7+U56j6JwZvO9Ny1V+xRfM 6JA0YzbBU7MaAJSF9FG3vHDeaxSeNwcyUtTi5IDTeyBwkFMM5l7xZOKN6skBZfVn KLuAd907OvM9NRj7VafaZth7OY+xpBa2fD3V11w83nINyTzO/sufHtoZqdWaDg4q eK9KlFgzEkYWTrRbtgUV6IIOIiK5omHv3+x8fqPc7rvGmrEZbF0II20ygakeAyUb Md5gRI0O0t7UNUfLAKZFk1k9/c6Vte2IEwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FLakuP3ddyU+2ozUZt1kuwBi74YrMB8GA1UdIwQYMBaAFMou00ADTQNoIwhQhnww 4kWZARiiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4 RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2 ODIzMDg1MDg2N0MzMEUyNDU5OTAxMThBMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9DQTJFRDM0MDAzNEQwMzY4MjMwODUwODY3QzMwRTI0NTk5MDEx OEEyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4RXZIVEhX aWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2ODIzMDg1 MDg2N0MzMEUyNDU5OTAxMThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACHP96+Ge140Dtt7lDtNcIzI YaGmb8ZkX8U0mJsHkangl6rM+hOYDa5ClHagUZxitk0mNcFcMt5bHnVnxTWjXKin zzoh+JXG7VpC9dczjn0qjDfajNdW3hxLFjyyCOz/nAzY5iSVieo5uI2+jPHpGvOK MWPfLEOoA5+HYtAnpQPTQE2fYlWeQcAKOdR9EQlzTYJgZSqbqDExXFpTkHvWQCCo jVluNdmBJxjqdXVeeJejYgc+PFQWhTa8ywvUYq4zeig1cQOtt30wITdt55gOS59J nZ3O4f8Ge3X5CwEoJzzDNCZhTsPGEMGMAghpP+S4p3AMCypzluK3RvAm3WskluI= -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:21 2025 by rpki-client