$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft File: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json) Hash identifier: 1mLAK/nyOvS7hpHJBhk6Dc4WL/nJlVzdxJEVIHPpfnw= Subject key identifier: 1B:3E:40:DF:AB:84:8C:C2:05:93:34:FB:1B:BA:57:8A:63:25:4D:1E Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Certificate serial: 6BF8D3B9D843AFD57347904155A76402FF199DDA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft Manifest number: 02F4 Signing time: Mon 20 Oct 2025 02:18:42 +0000 Manifest this update: Mon 20 Oct 2025 02:13:42 +0000 Manifest next update: Tue 21 Oct 2025 03:41:42 +0000 Files and hashes: 1: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: imbG88mepQV26jW2lUWPxE3c5mSHRBTK67c5Aar7IPM=) 2: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: 7KaEu9sw42ksNhOklCsT9hgtSIgophy55hML3k/smrA=) 3: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: Qo7jd7bqgZ8RaIGB3HsVpFHOePniB9jZXdO3Roenvho=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f8:d3:b9:d8:43:af:d5:73:47:90:41:55:a7:64:02:ff:19:9d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Validity Not Before: Oct 20 02:13:42 2025 GMT Not After : Oct 21 03:41:42 2025 GMT Subject: CN=1B3E40DFAB848CC2059334FB1BBA578A63254D1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:8c:82:71:b2:43:8b:ee:7a:12:65:dc:4b: a0:d9:7c:a2:06:28:19:eb:7b:95:e2:f9:3c:2c:b7: 99:c0:84:cd:2e:92:38:2f:03:48:07:32:9e:e3:4e: fc:d4:3a:c2:c8:3a:52:05:89:60:c9:aa:6e:ee:cb: 30:25:01:08:18:d6:d6:ef:2d:4f:7a:30:39:73:59: 19:05:dd:a2:1a:f3:d1:fc:83:94:0d:f2:d2:75:5b: 77:f5:03:d9:1d:03:be:cc:67:8b:4f:62:8b:b7:b7: ce:56:4d:f0:c3:2b:77:f7:78:75:79:51:f8:b0:61: 6e:85:16:55:60:6c:85:81:56:4b:ca:61:a1:9d:42: 03:4d:89:fe:c5:72:64:c7:37:97:97:d9:5b:2c:f9: 54:b8:8d:81:77:dd:2c:9b:a7:0e:76:b0:dd:1b:58: af:fb:9b:46:d6:45:07:8b:b4:b7:b7:9c:be:68:0b: 52:96:74:d5:3a:86:d5:48:51:c9:a2:05:89:8b:05: 19:93:b1:0e:fd:96:ed:87:91:20:7b:9d:cd:48:a6: 83:7e:2f:dc:17:80:b4:02:46:3a:4a:89:a8:f2:af: 7a:e2:6e:94:09:0a:31:81:ec:cf:30:f8:d3:8d:6e: ca:a5:de:60:93:b7:72:95:ba:5a:5a:c1:43:45:05: 56:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3E:40:DF:AB:84:8C:C2:05:93:34:FB:1B:BA:57:8A:63:25:4D:1E X509v3 Authority Key Identifier: keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:79:7e:80:93:b0:b1:55:4c:9a:db:2e:24:37:76:6e:d3:ab: 66:44:bf:c8:9a:26:ca:d0:6e:05:aa:45:f3:d9:02:e3:08:a0: 0f:ce:e0:5b:9e:cd:26:28:84:d6:c3:7a:d8:c7:f4:d6:64:5c: ed:0d:e3:4f:41:eb:b4:1a:dd:32:1c:97:ff:11:e2:b2:31:92: 63:75:23:74:d5:a2:62:f4:b4:ef:cb:7b:fb:3c:1d:67:e5:bb: 21:c1:a3:2e:35:f0:94:52:a5:15:72:ee:77:a1:0b:6b:85:ee: 77:81:b0:47:25:08:a7:e1:6f:a4:d4:61:73:2b:12:85:06:62: f8:ad:0b:f1:40:37:15:eb:7f:4f:8d:38:20:16:fc:4e:61:0f: 56:3d:4f:cb:67:ee:17:ca:c4:e3:40:1e:39:02:4c:f3:2d:52: db:2b:fa:e9:43:0a:37:8c:5a:18:4b:fa:a1:3d:b6:c6:c9:c8: 82:98:6d:a9:dd:5f:4c:97:62:a5:52:5b:74:73:38:e1:b9:d7: a7:6a:f0:8d:48:d4:67:99:20:96:d5:c2:19:1c:16:0f:f7:47: b6:01:7d:93:e3:9a:13:ea:0f:1d:0a:8f:b4:6a:6b:34:76:6a: d4:9b:4a:02:48:84:4b:41:23:d0:b8:c3:c7:45:0d:c3:11:a7: 6e:0c:d7:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa/jTudhDr9VzR5BBVadkAv8ZndowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0 ODdBMkVDOTAeFw0yNTEwMjAwMjEzNDJaFw0yNTEwMjEwMzQxNDJaMDMxMTAvBgNV BAMTKDFCM0U0MERGQUI4NDhDQzIwNTkzMzRGQjFCQkE1NzhBNjMyNTREMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Y4yCcbJDi+56EmXcS6DZfKIG KBnre5Xi+Twst5nAhM0ukjgvA0gHMp7jTvzUOsLIOlIFiWDJqm7uyzAlAQgY1tbv LU96MDlzWRkF3aIa89H8g5QN8tJ1W3f1A9kdA77MZ4tPYou3t85WTfDDK3f3eHV5 UfiwYW6FFlVgbIWBVkvKYaGdQgNNif7FcmTHN5eX2Vss+VS4jYF33Sybpw52sN0b WK/7m0bWRQeLtLe3nL5oC1KWdNU6htVIUcmiBYmLBRmTsQ79lu2HkSB7nc1IpoN+ L9wXgLQCRjpKiajyr3ribpQJCjGB7M8w+NONbsql3mCTt3KVulpawUNFBVadAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGz5A36uEjMIFkzT7G7pXimMlTR4wHwYDVR0j BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5 QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRoU1gvMS9D RDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZXl+gJOwsVVMmtsuJDd2btOrZkS/yJomytBuBapF89kC4wigD87gW57NJiiE 1sN62Mf01mRc7Q3jT0HrtBrdMhyX/xHisjGSY3UjdNWiYvS078t7+zwdZ+W7IcGj LjXwlFKlFXLud6ELa4Xud4GwRyUIp+FvpNRhcysShQZi+K0L8UA3Fet/T404IBb8 TmEPVj1Py2fuF8rE40AeOQJM8y1S2yv66UMKN4xaGEv6oT22xsnIgphtqd1fTJdi pVJbdHM44bnXp2rwjUjUZ5kgltXCGRwWD/dHtgF9k+OaE+oPHQqPtGprNHZq1JtK AkiES0Ej0LjDx0UNwxGnbgzXuw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:35:28 2025 by rpki-client