$ rpki-client -vvf rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.mft File: 2FF3BD981631E49037509A952007559286688690.mft (raw, json) Hash identifier: 19w38EsJcSCB1D9Z/Ph35bUke4lLZ+tGL+UlWLkRng0= Subject key identifier: E0:29:4E:C8:B9:00:C5:56:AD:DE:CB:B7:A8:97:F0:C1:76:FD:0F:5F Authority key identifier: 2F:F3:BD:98:16:31:E4:90:37:50:9A:95:20:07:55:92:86:68:86:90 Certificate issuer: /CN=2FF3BD981631E49037509A952007559286688690 Certificate serial: 305B601F78088DBAF1B778639DDBEC108B89A64D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer Subject info access: rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.mft Manifest number: DC Signing time: Wed 05 Nov 2025 03:29:16 +0000 Manifest this update: Wed 05 Nov 2025 03:24:16 +0000 Manifest next update: Thu 06 Nov 2025 07:12:16 +0000 Files and hashes: 1: 34352e3136342e3232302e302f32322d3332203d3e20323638363638.roa (hash: Fe3slJe0kAz3P+lnt9VNZRIbJY9aNCulq95Hm/heJSI=) 2: 323830343a353463303a3a2f33322d313238203d3e20323638363638.roa (hash: FfHFO6q7SrPv5YkaZCJ5uZmzMi3udScNHZXDi2iReDA=) 3: 2FF3BD981631E49037509A952007559286688690.crl (hash: pFT5doCN32WopTHNrdlp/DIZppFT6i3be3jpl/jk+9M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.crl rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:5b:60:1f:78:08:8d:ba:f1:b7:78:63:9d:db:ec:10:8b:89:a6:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FF3BD981631E49037509A952007559286688690 Validity Not Before: Nov 5 03:24:16 2025 GMT Not After : Nov 6 07:12:16 2025 GMT Subject: CN=E0294EC8B900C556ADDECBB7A897F0C176FD0F5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d3:96:1e:f6:28:41:58:91:3c:5a:05:c5:72: 30:05:44:0e:31:cd:32:0a:25:94:41:ed:84:bb:f6: cd:f7:f8:7a:5a:e9:19:5f:b6:99:6d:69:97:85:7e: a9:cc:1b:f6:7d:ec:cd:6b:2b:48:31:27:57:fb:a3: b9:aa:b6:60:5d:5d:4c:5e:c5:98:1e:57:df:07:5a: 38:9d:1b:c9:82:a3:57:66:fe:a0:03:f3:d3:ad:62: 8b:f4:0b:69:91:f7:bc:08:6a:93:00:f8:84:73:a8: e1:cc:9e:5e:3a:5e:e5:85:62:f5:05:a1:c6:a4:68: e1:80:5d:10:ef:d1:97:4d:64:5a:78:1d:c6:52:f6: 22:1d:1d:96:2e:bd:d6:dd:17:ee:33:bc:e6:24:81: 0f:3c:93:73:4f:26:fe:08:1f:45:82:c1:64:e5:23: 82:c8:3a:43:7d:7c:ef:5e:cf:4e:f9:41:e4:0e:de: d1:23:7d:fa:ac:ad:b1:ea:3a:c8:5b:e5:bb:d3:b4: fb:51:3e:f4:dd:d8:ce:93:1d:c4:60:7c:34:20:7d: af:1e:24:f5:b4:f5:06:69:51:d5:87:b0:44:bb:a4: d0:03:6e:50:d6:af:c2:a5:9a:a8:c4:90:68:78:9e: 60:f3:33:7c:7e:c4:86:8c:30:dc:1d:7a:67:b5:29: 61:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:29:4E:C8:B9:00:C5:56:AD:DE:CB:B7:A8:97:F0:C1:76:FD:0F:5F X509v3 Authority Key Identifier: keyid:2F:F3:BD:98:16:31:E4:90:37:50:9A:95:20:07:55:92:86:68:86:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:31:2f:b4:8c:38:ab:3b:15:3b:eb:c7:79:90:1f:8f:4f:df: e2:ba:62:18:be:b1:80:4a:ed:fc:aa:e7:57:b0:b8:ba:10:57: 86:8a:db:b9:1f:07:c8:12:dd:b7:aa:33:a4:d2:17:da:36:66: a2:cb:4c:b7:4b:fe:a1:91:dd:fa:e7:af:5e:87:17:ec:dc:75: fa:a8:cd:08:10:3c:8e:b7:f2:0a:30:31:f3:f2:ee:b1:7c:b0: ba:21:af:0c:32:93:6e:a3:f9:01:07:fa:33:fb:8d:b1:df:3f: 76:75:97:5a:2b:31:07:02:29:e7:4c:9e:b7:79:35:61:c8:86: f1:d1:2c:e7:d3:36:75:77:ea:1f:90:95:a3:d3:23:62:9a:2f: 08:64:25:2b:ba:56:23:ed:6f:d6:d9:e7:94:03:22:69:cb:4d: 63:32:54:74:41:d8:a1:c5:dd:fe:f4:a8:88:d5:68:1d:b6:0f: d5:5e:29:fd:2c:ac:ec:5d:57:fd:0c:30:c6:4d:59:f6:a9:79: d6:64:7a:67:dd:3a:cb:da:5b:d9:8a:8d:b6:cd:dd:42:c9:3d: 1d:93:43:48:c0:24:aa:3d:d7:39:f3:c3:de:91:a7:81:8c:30: 2a:0f:1e:c2:8a:d1:b9:52:56:85:f9:ba:99:0b:52:02:cb:84: 6d:5c:77:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMFtgH3gIjbrxt3hjndvsEIuJpk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGM0JEOTgxNjMxRTQ5MDM3NTA5QTk1MjAwNzU1OTI4 NjY4ODY5MDAeFw0yNTExMDUwMzI0MTZaFw0yNTExMDYwNzEyMTZaMDMxMTAvBgNV BAMTKEUwMjk0RUM4QjkwMEM1NTZBRERFQ0JCN0E4OTdGMEMxNzZGRDBGNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF05Ye9ihBWJE8WgXFcjAFRA4x zTIKJZRB7YS79s33+Hpa6RlftpltaZeFfqnMG/Z97M1rK0gxJ1f7o7mqtmBdXUxe xZgeV98HWjidG8mCo1dm/qAD89OtYov0C2mR97wIapMA+IRzqOHMnl46XuWFYvUF ocakaOGAXRDv0ZdNZFp4HcZS9iIdHZYuvdbdF+4zvOYkgQ88k3NPJv4IH0WCwWTl I4LIOkN9fO9ez075QeQO3tEjffqsrbHqOshb5bvTtPtRPvTd2M6THcRgfDQgfa8e JPW09QZpUdWHsES7pNADblDWr8KlmqjEkGh4nmDzM3x+xIaMMNwdeme1KWEVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4ClOyLkAxVat3su3qJfwwXb9D18wHwYDVR0j BBgwFoAUL/O9mBYx5JA3UJqVIAdVkoZohpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXJqQmZjY2ZITXI1VE5zcTVRQ2Y1Q3dHYkVWa0tmc0o3cGRGcW1na0xt Q1kvMC8yRkYzQkQ5ODE2MzFFNDkwMzc1MDlBOTUyMDA3NTU5Mjg2Njg4NjkwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGRjNCRDk4MTYzMUU0OTAz NzUwOUE5NTIwMDc1NTkyODY2ODg2OTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXJqQmZjY2ZITXI1VE5zcTVRQ2Y1Q3dHYkVWa0tmc0o3cGRGcW1na0xtQ1kvMC8y RkYzQkQ5ODE2MzFFNDkwMzc1MDlBOTUyMDA3NTU5Mjg2Njg4NjkwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQTEvtIw4qzsVO+vHeZAfj0/f4rpiGL6xgErt/KrnV7C4uhBXhorbuR8HyBLd t6ozpNIX2jZmostMt0v+oZHd+uevXocX7Nx1+qjNCBA8jrfyCjAx8/LusXywuiGv DDKTbqP5AQf6M/uNsd8/dnWXWisxBwIp50yet3k1YciG8dEs59M2dXfqH5CVo9Mj YpovCGQlK7pWI+1v1tnnlAMiactNYzJUdEHYocXd/vSoiNVoHbYP1V4p/Sys7F1X /Qwwxk1Z9ql51mR6Z906y9pb2YqNts3dQsk9HZNDSMAkqj3XOfPD3pGngYwwKg8e worRuVJWhfm6mQtSAsuEbVx3Vw== -----END CERTIFICATE-----Generated at Wed Nov 5 11:35:59 2025 by rpki-client