$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft File: 2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json) Hash identifier: iRlw0uV4Wkgi7fqAKlVJPtlw8WaNa4l0k+ORpYhRHYg= Subject key identifier: 3F:CC:77:CF:94:CE:7C:12:7E:66:DD:E9:1B:A8:3D:05:34:65:C0:B2 Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A Certificate issuer: /CN=2AADFACED9C75E320914697A02E254A3D463839A Certificate serial: 5B5E564D77CE3C202C77866D52E97F17003D6B45 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft Manifest number: 0302 Signing time: Wed 05 Nov 2025 12:22:00 +0000 Manifest this update: Wed 05 Nov 2025 12:17:00 +0000 Manifest next update: Thu 06 Nov 2025 13:32:00 +0000 Files and hashes: 1: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: fN+YmOS73ROt+Xzgfq+DUVe8U/iX3snRUYvyYkKh2MQ=) 2: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: olPEUYzQeXbpm2M5qdX3HUxqCDHC3YBr2Etr9x7gT/w=) 3: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: DuI4Mug1p6teJxzujuasFd0ujWIU2EvbfZhNpCjPypI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 13:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5e:56:4d:77:ce:3c:20:2c:77:86:6d:52:e9:7f:17:00:3d:6b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A Validity Not Before: Nov 5 12:17:00 2025 GMT Not After : Nov 6 13:32:00 2025 GMT Subject: CN=3FCC77CF94CE7C127E66DDE91BA83D053465C0B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:82:7a:a4:62:e6:2c:f9:a2:21:6f:f9:59: db:c6:d5:58:86:b0:ec:12:7b:6a:4e:a9:3a:33:8b: 27:48:93:ee:3a:ff:ab:b1:68:9a:79:f9:b8:ce:47: e8:d6:ed:4e:34:f8:ec:ea:22:43:82:5c:c6:fa:2c: ce:80:e1:b0:58:1f:7f:35:2e:8c:88:61:83:d2:e2: cd:32:52:94:49:5d:b5:e7:c3:8e:d2:9a:9d:f9:ed: 82:5a:58:df:3e:20:49:0d:3a:a2:1d:b1:86:02:1c: f4:1e:0c:1e:ee:80:ad:25:66:eb:b0:d3:62:35:21: 1a:ca:e2:6c:04:0f:14:84:af:ff:79:91:49:ac:19: 7c:5e:63:b5:d6:90:c8:6c:fe:83:68:e3:01:29:42: f8:ed:11:81:fd:37:08:03:10:a9:c0:95:33:ba:dc: 5a:9c:94:1a:66:6a:72:83:94:5a:21:0a:b7:31:5b: d0:74:8a:50:37:d8:fa:1d:e6:d4:bd:d8:45:df:07: 02:a3:8c:51:d4:71:2c:90:96:24:0c:ef:06:22:cc: b9:9d:d9:3d:6a:26:a0:f9:dd:e5:11:f2:23:41:8c: ce:ba:f8:e2:22:eb:66:40:0b:d3:36:e8:1b:bc:e6: d3:35:73:84:70:07:fa:a8:37:0a:8a:e5:b3:85:e5: 7c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CC:77:CF:94:CE:7C:12:7E:66:DD:E9:1B:A8:3D:05:34:65:C0:B2 X509v3 Authority Key Identifier: keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:6b:b1:51:51:4b:f7:42:9f:5c:1e:34:3e:c4:12:3e:94:c3: dd:e8:35:15:97:de:91:fc:5a:7e:40:68:91:51:5d:9f:1e:df: 92:3b:c4:84:ea:6c:ba:2e:ea:f8:25:d3:00:9d:83:1c:ae:5c: 98:a9:d1:ca:b8:f1:76:6d:17:a0:e1:9d:91:4c:8b:c3:de:d3: 6c:21:0c:f3:69:66:6e:c6:32:60:73:7c:7a:cb:4b:5c:ad:95: 31:e4:39:e7:8a:65:fb:80:e9:24:63:4a:5a:11:39:4a:63:16: 11:3e:5a:36:13:24:e1:14:55:04:88:4c:4f:72:71:a9:c9:83: f4:31:7f:21:8b:b4:f0:b0:a7:33:ab:9b:24:79:a0:89:f7:d9: 0e:75:b8:0a:a6:1e:2b:77:51:c9:12:68:6d:44:c4:cb:6b:26: c4:15:c2:dd:99:40:54:c5:2a:cb:21:eb:22:b0:02:e5:43:73: a3:87:bb:52:18:5e:6a:48:f2:ba:59:23:34:e9:7b:32:2d:9c: 31:c1:d0:f1:d0:46:fb:9c:cd:29:e5:e7:87:0b:e5:53:d3:4b: 47:e7:49:59:79:f1:a5:e7:c3:b8:b0:27:db:24:67:2e:f5:44: 6e:e5:26:d7:e8:e5:99:d9:5b:e2:1a:54:21:88:c8:c3:fa:67: 88:82:a3:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUW15WTXfOPCAsd4ZtUul/FwA9a0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBREZBQ0VEOUM3NUUzMjA5MTQ2OTdBMDJFMjU0QTNE NDYzODM5QTAeFw0yNTExMDUxMjE3MDBaFw0yNTExMDYxMzMyMDBaMDMxMTAvBgNV BAMTKDNGQ0M3N0NGOTRDRTdDMTI3RTY2RERFOTFCQTgzRDA1MzQ2NUMwQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EoJ6pGLmLPmiIW/5WdvG1ViG sOwSe2pOqToziydIk+46/6uxaJp5+bjOR+jW7U40+OzqIkOCXMb6LM6A4bBYH381 LoyIYYPS4s0yUpRJXbXnw47Smp357YJaWN8+IEkNOqIdsYYCHPQeDB7ugK0lZuuw 02I1IRrK4mwEDxSEr/95kUmsGXxeY7XWkMhs/oNo4wEpQvjtEYH9NwgDEKnAlTO6 3FqclBpmanKDlFohCrcxW9B0ilA32Pod5tS92EXfBwKjjFHUcSyQliQM7wYizLmd 2T1qJqD53eUR8iNBjM66+OIi62ZAC9M26Bu85tM1c4RwB/qoNwqK5bOF5XylAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUP8x3z5TOfBJ+Zt3pG6g9BTRlwLIwHwYDVR0j BBgwFoAUKq36ztnHXjIJFGl6AuJUo9Rjg5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0Ru eW8vMS8yQUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQURGQUNFRDlDNzVFMzIw OTE0Njk3QTAyRTI1NEEzRDQ2MzgzOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0RueW8vMS8y QUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL2uxUVFL90KfXB40PsQSPpTD3eg1FZfekfxafkBokVFdnx7fkjvEhOpsui7q +CXTAJ2DHK5cmKnRyrjxdm0XoOGdkUyLw97TbCEM82lmbsYyYHN8estLXK2VMeQ5 54pl+4DpJGNKWhE5SmMWET5aNhMk4RRVBIhMT3JxqcmD9DF/IYu08LCnM6ubJHmg iffZDnW4CqYeK3dRyRJobUTEy2smxBXC3ZlAVMUqyyHrIrAC5UNzo4e7Uhheakjy ulkjNOl7Mi2cMcHQ8dBG+5zNKeXnhwvlU9NLR+dJWXnxpefDuLAn2yRnLvVEbuUm 1+jlmdlb4hpUIYjIw/pniIKjEg== -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:23 2025 by rpki-client