$ rpki-client -vvf rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft File: 0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft (raw, json) Hash identifier: zpocpaCtjigd4Q+KZgNcJqMOyLatkjM6TiaWHzsKDLo= Subject key identifier: 2B:F0:32:D9:2D:CA:D4:4E:6A:88:AD:57:E3:A3:59:B8:78:4F:AF:7E Authority key identifier: 0A:2B:2F:4D:32:F3:48:A3:E7:5A:31:A4:8F:A6:BC:E1:94:9A:E7:F0 Certificate issuer: /CN=0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0 Certificate serial: 1562727B7643FB31333F0387FF1C344FCF5C8BF1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft Manifest number: 8F Signing time: Wed 05 Nov 2025 06:57:03 +0000 Manifest this update: Wed 05 Nov 2025 06:52:03 +0000 Manifest next update: Thu 06 Nov 2025 07:37:03 +0000 Files and hashes: 1: 34352e3136332e3131362e302f32322d3332203d3e20323638353737.roa (hash: Et77+LynBLMWqk+rHPa5qaEBgzJDRsbZGk2IR87u0z0=) 2: 0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.crl (hash: ZwAd1aCeg8QOayrhnRANI1EiCWFPAjSixdx9MA9QCCk=) 3: 323830343a353335343a3a2f33322d313238203d3e20323638353737.roa (hash: youEd1A6G9ZdagofZd+N94Vs6aXJfkDPw454AC/ppO0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.crl rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:62:72:7b:76:43:fb:31:33:3f:03:87:ff:1c:34:4f:cf:5c:8b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0 Validity Not Before: Nov 5 06:52:03 2025 GMT Not After : Nov 6 07:37:03 2025 GMT Subject: CN=2BF032D92DCAD44E6A88AD57E3A359B8784FAF7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cc:62:a3:3f:ec:11:2b:d8:e4:32:1d:26:18: 02:4a:c4:ad:09:5a:db:3d:60:68:94:a7:be:6d:c7: 9f:8e:de:3e:36:9c:2a:a0:25:81:1f:a2:41:2f:b3: 97:5f:69:0a:43:8b:96:ce:8f:e4:d9:a0:20:27:41: 59:c8:44:7b:c6:d7:3f:84:52:8e:e6:74:fc:5a:f4: b5:ab:d4:6f:90:47:6e:46:e1:41:b4:60:85:d1:0f: 6e:9b:52:c2:c1:cd:77:44:82:0d:54:2a:e8:e3:b0: 25:1c:fe:b4:7d:60:2c:ef:6c:de:91:d2:86:7e:33: 2d:87:10:44:41:8d:25:6c:a0:7a:d7:2f:50:87:de: 77:03:9a:ff:32:fa:8b:27:f9:63:1b:e8:7b:03:b2: da:dd:d9:d2:e1:ca:eb:ac:80:de:39:08:b3:5b:00: 3b:02:ec:0e:87:6a:d8:d1:f1:64:1c:a7:d0:a5:18: 81:74:43:84:19:91:c8:21:86:85:27:c6:89:f2:74: 07:6d:d4:71:1b:e7:82:45:e7:da:bc:28:66:9f:08: f8:3f:8f:f7:25:9f:81:1a:45:d7:25:1f:9a:0a:eb: c1:75:16:fd:9d:c5:0c:20:4f:61:23:5d:5f:9c:8b: 1d:16:ff:b7:b0:51:e5:7b:a8:cb:41:31:6a:0d:80: 4b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F0:32:D9:2D:CA:D4:4E:6A:88:AD:57:E3:A3:59:B8:78:4F:AF:7E X509v3 Authority Key Identifier: keyid:0A:2B:2F:4D:32:F3:48:A3:E7:5A:31:A4:8F:A6:BC:E1:94:9A:E7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYxG87ULMpcGFRN5tuqJnC4pPvLQSCE9JVvf8C59FdJR/0/0A2B2F4D32F348A3E75A31A48FA6BCE1949AE7F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:fc:38:c1:7a:9f:46:38:3f:6a:28:ae:a2:fa:b1:73:f5:d9: 04:aa:75:6a:c1:7b:55:bf:5c:36:a6:fd:ea:9c:51:3d:c3:90: e8:83:c1:0a:65:1e:98:00:4f:4e:6a:4a:c1:e5:b7:05:af:fc: c9:d7:66:3a:c5:24:55:41:e4:7b:11:aa:22:ef:f8:ec:c7:53: 08:21:e7:3a:aa:0b:48:1a:00:74:fb:60:ce:74:b6:1d:5e:7a: 58:64:b3:22:60:77:41:ca:be:dd:e6:05:2b:7b:cb:62:c8:6e: bb:d9:df:27:59:50:0a:8a:e2:8d:da:be:2c:b2:0c:d1:29:de: 4c:b3:cc:0f:02:2e:68:25:bf:f7:71:d8:e7:10:3a:ca:97:6e: 98:9b:bb:f6:85:03:04:54:07:bd:1d:ed:ac:7b:08:ab:53:64: ce:c3:d3:75:2b:66:53:18:d3:46:73:4b:1a:77:15:c2:fe:77: fb:b9:5f:54:5a:d8:30:49:66:5f:03:1a:61:24:ef:60:4e:83: 98:bd:42:99:6f:a7:7c:a8:88:d6:e8:5f:01:39:11:db:05:13: c8:17:6a:16:15:01:b7:19:71:c8:92:66:53:6d:84:a6:ed:15: 07:da:14:4e:c4:99:4e:02:6d:5a:3e:f0:bd:03:88:ac:02:49: 8a:72:57:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFWJye3ZD+zEzPwOH/xw0T89ci/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEEyQjJGNEQzMkYzNDhBM0U3NUEzMUE0OEZBNkJDRTE5 NDlBRTdGMDAeFw0yNTExMDUwNjUyMDNaFw0yNTExMDYwNzM3MDNaMDMxMTAvBgNV BAMTKDJCRjAzMkQ5MkRDQUQ0NEU2QTg4QUQ1N0UzQTM1OUI4Nzg0RkFGN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMzGKjP+wRK9jkMh0mGAJKxK0J Wts9YGiUp75tx5+O3j42nCqgJYEfokEvs5dfaQpDi5bOj+TZoCAnQVnIRHvG1z+E Uo7mdPxa9LWr1G+QR25G4UG0YIXRD26bUsLBzXdEgg1UKujjsCUc/rR9YCzvbN6R 0oZ+My2HEERBjSVsoHrXL1CH3ncDmv8y+osn+WMb6HsDstrd2dLhyuusgN45CLNb ADsC7A6HatjR8WQcp9ClGIF0Q4QZkcghhoUnxonydAdt1HEb54JF59q8KGafCPg/ j/cln4EaRdclH5oK68F1Fv2dxQwgT2EjXV+cix0W/7ewUeV7qMtBMWoNgEsrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUK/Ay2S3K1E5qiK1X46NZuHhPr34wHwYDVR0j BBgwFoAUCisvTTLzSKPnWjGkj6a84ZSa5/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRVl4Rzg3VUxNcGNHRlJONXR1cUpuQzRwUHZMUVNDRTlKVnZmOEM1OUZk SlIvMC8wQTJCMkY0RDMyRjM0OEEzRTc1QTMxQTQ4RkE2QkNFMTk0OUFFN0YwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBMkIyRjREMzJGMzQ4QTNF NzVBMzFBNDhGQTZCQ0UxOTQ5QUU3RjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RVl4Rzg3VUxNcGNHRlJONXR1cUpuQzRwUHZMUVNDRTlKVnZmOEM1OUZkSlIvMC8w QTJCMkY0RDMyRjM0OEEzRTc1QTMxQTQ4RkE2QkNFMTk0OUFFN0YwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASvw4wXqfRjg/aiiuovqxc/XZBKp1asF7Vb9cNqb96pxRPcOQ6IPBCmUemABP TmpKweW3Ba/8yddmOsUkVUHkexGqIu/47MdTCCHnOqoLSBoAdPtgznS2HV56WGSz ImB3Qcq+3eYFK3vLYshuu9nfJ1lQCorijdq+LLIM0SneTLPMDwIuaCW/93HY5xA6 ypdumJu79oUDBFQHvR3trHsIq1NkzsPTdStmUxjTRnNLGncVwv53+7lfVFrYMElm XwMaYSTvYE6DmL1CmW+nfKiI1uhfATkR2wUTyBdqFhUBtxlxyJJmU22Epu0VB9oU TsSZTgJtWj7wvQOIrAJJinJXAA== -----END CERTIFICATE-----Generated at Wed Nov 5 12:20:02 2025 by rpki-client