$ rpki-client -vvf rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft File: 2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft (raw, json) Hash identifier: Xyc/N6imscnzyndbaDcD66FCbj3bNR1175bt8Mi5EaI= Subject key identifier: B4:FC:C1:80:3E:A1:CD:9D:62:B5:9D:46:C3:2D:A2:6D:8C:E4:22:EB Authority key identifier: 2B:9D:F2:4F:92:F5:79:58:C1:0E:33:57:6E:A0:A0:7B:E1:DC:A8:FB Certificate issuer: /CN=2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB Certificate serial: 327D7925682F0D4086732D94C793B24039AA25B2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft Manifest number: 9F Signing time: Wed 05 Nov 2025 04:21:56 +0000 Manifest this update: Wed 05 Nov 2025 04:16:56 +0000 Manifest next update: Thu 06 Nov 2025 05:51:56 +0000 Files and hashes: 1: 3133312e3136312e3137362e302f32322d3332203d3e20323634333834.roa (hash: mlbCfD0T4gM9tMdfnfarkiKhJLAPHHaOU4fUgTbl9WM=) 2: 2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.crl (hash: rmuEN8im4qWW7Zo4WUg3hONIdaBJePXeph7vpWvQH2M=) 3: 323830343a316461383a3a2f33322d313238203d3e20323634333834.roa (hash: SZNfQnJy+8YoF6N8/31nwyII2wLm84N7RXT1MK3wY88=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.crl rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 05:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:7d:79:25:68:2f:0d:40:86:73:2d:94:c7:93:b2:40:39:aa:25:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB Validity Not Before: Nov 5 04:16:56 2025 GMT Not After : Nov 6 05:51:56 2025 GMT Subject: CN=B4FCC1803EA1CD9D62B59D46C32DA26D8CE422EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:06:e0:3b:a3:fd:d3:9f:53:1b:d7:21:63:e9: 91:77:76:28:be:ac:ef:45:55:66:3b:23:10:95:df: 1b:3a:dd:e4:91:69:7c:51:b2:9b:23:05:ac:0a:17: 25:00:19:fc:57:45:6f:92:10:a4:f8:a4:5c:ba:ea: b0:15:ae:22:85:3b:20:bd:82:91:e4:ba:30:ea:bc: 49:4c:7d:f3:d4:5e:55:52:d8:67:b2:0d:c1:f9:d1: 1d:9e:6c:a7:8e:59:e8:08:a1:7d:55:bb:df:62:ae: 71:e2:43:c2:7f:8a:57:7d:a7:e8:6a:56:36:2e:5a: a2:1d:b8:df:59:83:7e:59:67:29:7c:9f:8a:e5:9e: 60:98:01:3a:e7:e1:cc:a8:3f:cc:11:07:5e:fa:ac: 57:99:be:8d:28:6c:f3:99:02:61:d5:48:e5:d5:1c: bd:33:d9:b7:1d:fb:c0:25:f8:78:3f:96:25:82:e6: a7:e7:59:a6:2f:4e:67:33:6e:e2:7c:81:cb:69:43: 43:b9:e8:26:e7:0a:f8:dc:29:46:05:f9:8e:de:dd: 44:96:55:c3:5a:91:0b:ef:60:e1:10:90:fd:e4:17: ea:bb:1d:73:8a:ee:34:14:6e:37:6b:62:0e:ce:9a: f2:80:3b:52:29:cd:82:9a:f8:1d:fc:ee:56:96:0b: f3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FC:C1:80:3E:A1:CD:9D:62:B5:9D:46:C3:2D:A2:6D:8C:E4:22:EB X509v3 Authority Key Identifier: keyid:2B:9D:F2:4F:92:F5:79:58:C1:0E:33:57:6E:A0:A0:7B:E1:DC:A8:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5b:e1:60:fa:3f:f2:bd:f0:23:e3:f2:15:d0:db:24:d3:65: 98:88:27:0b:aa:a0:94:58:d5:df:b9:4c:32:6e:0f:d0:8f:53: 3b:d9:22:73:09:7d:ad:34:94:c4:34:58:bb:aa:20:98:b3:2b: 80:a8:05:c6:5d:d5:18:33:ad:e7:97:27:f1:8d:6f:52:b7:3a: 02:81:07:66:a7:44:ff:25:fe:d6:5b:29:68:33:16:f5:d2:71: 16:9a:6c:92:a9:01:64:29:ef:fa:ba:a2:67:91:58:14:b2:d7: 91:47:54:9e:0e:a8:e9:c8:75:1a:4e:35:38:2e:a7:8a:b4:70: 7b:58:e9:c6:28:2f:5b:3a:1c:e9:49:f0:13:e3:6b:a2:cd:4b: 12:58:4e:b9:e9:b6:20:15:3d:a0:e7:33:9d:73:a5:50:fb:9e: b3:45:6c:46:f8:85:2e:cb:45:d6:df:b8:1e:56:85:b3:90:6d: 52:e2:a4:7e:58:bb:fc:66:1c:6d:99:b1:a9:14:cc:d8:cd:1a: 7e:61:00:6c:f7:0d:c4:16:ea:01:7c:f0:8e:92:5d:64:b8:2c: 5e:0c:a8:3b:f7:f8:bc:04:a7:12:6c:2b:f8:d0:63:f0:34:7b: 36:ef:3c:86:52:39:73:28:22:28:5a:2a:63:4f:38:bf:1e:9e: 0c:e7:70:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMn15JWgvDUCGcy2Ux5OyQDmqJbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI5REYyNEY5MkY1Nzk1OEMxMEUzMzU3NkVBMEEwN0JF MURDQThGQjAeFw0yNTExMDUwNDE2NTZaFw0yNTExMDYwNTUxNTZaMDMxMTAvBgNV BAMTKEI0RkNDMTgwM0VBMUNEOUQ2MkI1OUQ0NkMzMkRBMjZEOENFNDIyRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4BuA7o/3Tn1Mb1yFj6ZF3dii+ rO9FVWY7IxCV3xs63eSRaXxRspsjBawKFyUAGfxXRW+SEKT4pFy66rAVriKFOyC9 gpHkujDqvElMffPUXlVS2GeyDcH50R2ebKeOWegIoX1Vu99irnHiQ8J/ild9p+hq VjYuWqIduN9Zg35ZZyl8n4rlnmCYATrn4cyoP8wRB176rFeZvo0obPOZAmHVSOXV HL0z2bcd+8Al+Hg/liWC5qfnWaYvTmczbuJ8gctpQ0O56CbnCvjcKUYF+Y7e3USW VcNakQvvYOEQkP3kF+q7HXOK7jQUbjdrYg7OmvKAO1IpzYKa+B387laWC/MJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtPzBgD6hzZ1itZ1Gwy2ibYzkIuswHwYDVR0j BBgwFoAUK53yT5L1eVjBDjNXbqCge+HcqPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjRjdllNNld2dzNDa0JqYzlINTE3ZWV2aDYzemtkWFBUWVRXeVNCTkQ3 dnYvMS8yQjlERjI0RjkyRjU3OTU4QzEwRTMzNTc2RUEwQTA3QkUxRENBOEZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCOURGMjRGOTJGNTc5NThD MTBFMzM1NzZFQTBBMDdCRTFEQ0E4RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SjRjdllNNld2dzNDa0JqYzlINTE3ZWV2aDYzemtkWFBUWVRXeVNCTkQ3dnYvMS8y QjlERjI0RjkyRjU3OTU4QzEwRTMzNTc2RUEwQTA3QkUxRENBOEZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD1vhYPo/8r3wI+PyFdDbJNNlmIgnC6qglFjV37lMMm4P0I9TO9kicwl9rTSU xDRYu6ogmLMrgKgFxl3VGDOt55cn8Y1vUrc6AoEHZqdE/yX+1lspaDMW9dJxFpps kqkBZCnv+rqiZ5FYFLLXkUdUng6o6ch1Gk41OC6nirRwe1jpxigvWzoc6UnwE+Nr os1LElhOuem2IBU9oOcznXOlUPues0VsRviFLstF1t+4HlaFs5BtUuKkfli7/GYc bZmxqRTM2M0afmEAbPcNxBbqAXzwjpJdZLgsXgyoO/f4vASnEmwr+NBj8DR7Nu88 hlI5cygiKFoqY084vx6eDOdwSw== -----END CERTIFICATE-----Generated at Wed Nov 5 08:50:29 2025 by rpki-client