$ rpki-client -vvf rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft File: 2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft (raw, json) Hash identifier: 8VB4YzOJZ3IIh63m92ROkwW42xenv7ZNqtY7hvJ4Mi8= Subject key identifier: 28:6F:2B:6E:2B:F2:80:2F:C1:49:E5:7F:F9:ED:7C:03:57:29:2A:3A Authority key identifier: 2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C Certificate issuer: /CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C Certificate serial: 5FBA3281625F85C00D57838425234C9E6572DE5A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer Subject info access: rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft Manifest number: 02F0 Signing time: Mon 20 Oct 2025 02:16:42 +0000 Manifest this update: Mon 20 Oct 2025 02:11:42 +0000 Manifest next update: Tue 21 Oct 2025 04:01:42 +0000 Files and hashes: 1: 2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl (hash: P372ZD33MxZ9KTDzA4RRzOfFIwCTb2KDIQQPHFXyYiA=) 2: 3133382e3230342e33362e302f32322d3332203d3e203631373735.roa (hash: i42Zf9JlK4N1mmLBTa9TWccNagKQVyNdUEy5+83Gmck=) 3: 3230302e3232392e38342e302f32322d3332203d3e203631373735.roa (hash: HUgjgoMoXy/HcsuPu+XEO8HJHVpykWC6LHcx5p1rb50=) 4: 323830343a313932383a3a2f33322d313238203d3e203631373735.roa (hash: nuyhgAzX27qSeSVno+9wZ9X/49ZgMdBWxUwbjgZnHk0=) 5: 3133382e3230342e33372e302f32342d3332203d3e203631373735.roa (hash: bHsfgx5bc+iOPbuSRSP7Bx9qmbPdlwgcPx8SooF5nOw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ba:32:81:62:5f:85:c0:0d:57:83:84:25:23:4c:9e:65:72:de:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C Validity Not Before: Oct 20 02:11:42 2025 GMT Not After : Oct 21 04:01:42 2025 GMT Subject: CN=286F2B6E2BF2802FC149E57FF9ED7C0357292A3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4b:13:97:8f:49:f4:f6:40:3c:f5:86:77:2d: 8e:81:7e:5b:c1:ae:a6:48:d6:78:4f:b1:ab:99:e4: 1d:36:92:08:f9:ed:68:a4:63:4a:a2:8a:e1:bd:3f: c3:8e:3b:e1:dd:43:7c:29:62:fe:ed:4d:f4:d3:5d: 90:13:43:d5:a4:dc:5a:19:4a:4d:dd:42:6b:ec:bf: 61:bc:ba:c3:5e:6f:38:67:1c:9e:53:63:0b:34:5b: 10:e0:45:26:e3:bb:9e:9b:91:be:08:f0:2c:06:be: df:6b:f1:dc:04:93:7f:6c:0e:af:07:b7:80:d7:f2: f2:db:b6:26:b7:ef:67:26:68:53:ee:5a:fa:a2:24: 1e:2a:0b:7a:9e:ec:0b:60:e1:4f:11:35:a8:7e:ec: 27:5b:3b:f9:96:f9:d4:1c:37:5f:22:68:dd:58:3b: bd:cc:44:63:e7:40:bf:e3:07:12:65:c2:bc:66:50: 34:e2:04:d3:f7:af:48:b7:7c:de:f8:bb:cd:9e:1f: 84:1c:51:40:73:24:92:cb:cb:bf:86:d8:7c:f0:98: 5d:22:6c:db:a4:7e:3d:10:12:ab:7d:88:77:c2:3c: ab:ad:92:2e:01:1e:b2:da:64:55:13:bd:48:b7:0d: 85:9a:41:3c:81:8b:62:0f:32:51:98:37:21:45:d7: e5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6F:2B:6E:2B:F2:80:2F:C1:49:E5:7F:F9:ED:7C:03:57:29:2A:3A X509v3 Authority Key Identifier: keyid:2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:78:bd:97:8f:ee:45:ee:5d:e7:d8:d6:1b:56:75:81:5a:6f: 54:2b:0b:58:e9:ac:ec:d6:db:ef:55:66:10:b9:8d:98:96:6f: 7c:7b:e7:d1:6d:49:ee:d4:29:b9:0b:77:86:01:f8:b3:d6:58: 9e:51:fc:1b:5d:41:ed:da:a3:27:27:79:ca:c3:b3:97:bb:33: bf:68:ef:7f:70:7e:b7:c3:6d:9a:5c:87:4c:05:0c:78:50:6c: 5c:37:7a:15:c4:ec:02:0c:78:cb:4c:f0:f4:a7:62:20:ad:75: f2:14:17:48:c7:00:b1:65:78:f0:ce:6e:2a:2e:d8:9d:b1:fb: b4:a6:5d:1d:8b:5b:10:1b:8b:7e:f2:a2:e0:8b:fe:bf:79:be: cd:63:c1:e7:4a:88:c1:28:35:64:ad:f4:9c:52:7b:25:f9:30: 68:ba:1d:9f:65:89:ca:74:39:81:ce:7b:84:5e:d5:dd:a3:39: 45:b8:11:27:59:46:f4:21:79:59:00:f8:ab:14:d6:76:64:ad: fb:6d:7e:36:0d:0a:c5:c8:62:b1:08:e7:0b:f5:0f:fd:0d:7e: d8:07:fd:32:8d:59:6d:3f:29:e4:a6:77:df:7c:dc:18:e3:6a: 8e:6f:71:24:60:bd:97:d4:08:09:28:3c:c4:2c:56:85:57:2a: 6e:45:e5:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX7oygWJfhcANV4OEJSNMnmVy3lowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE0REY5MDk3Rjk3NjY0QTAwQTMxOEVGQUUyMkRDMTAz NkU5MUI1QzAeFw0yNTEwMjAwMjExNDJaFw0yNTEwMjEwNDAxNDJaMDMxMTAvBgNV BAMTKDI4NkYyQjZFMkJGMjgwMkZDMTQ5RTU3RkY5RUQ3QzAzNTcyOTJBM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYSxOXj0n09kA89YZ3LY6BflvB rqZI1nhPsauZ5B02kgj57WikY0qiiuG9P8OOO+HdQ3wpYv7tTfTTXZATQ9Wk3FoZ Sk3dQmvsv2G8usNebzhnHJ5TYws0WxDgRSbju56bkb4I8CwGvt9r8dwEk39sDq8H t4DX8vLbtia372cmaFPuWvqiJB4qC3qe7Atg4U8RNah+7CdbO/mW+dQcN18iaN1Y O73MRGPnQL/jBxJlwrxmUDTiBNP3r0i3fN74u82eH4QcUUBzJJLLy7+G2HzwmF0i bNukfj0QEqt9iHfCPKutki4BHrLaZFUTvUi3DYWaQTyBi2IPMlGYNyFF1+UpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKG8rbivygC/BSeV/+e18A1cpKjowHwYDVR0j BBgwFoAUKk35CX+XZkoAoxjvriLcEDbpG1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFZScFF6VTd3aG1LSkh0YUZxd3drSktyN2h6WVgzdkVEemU1MXJ2czZp WDIvMS8yQTRERjkwOTdGOTc2NjRBMDBBMzE4RUZBRTIyREMxMDM2RTkxQjVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNERGOTA5N0Y5NzY2NEEw MEEzMThFRkFFMjJEQzEwMzZFOTFCNUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFZScFF6VTd3aG1LSkh0YUZxd3drSktyN2h6WVgzdkVEemU1MXJ2czZpWDIvMS8y QTRERjkwOTdGOTc2NjRBMDBBMzE4RUZBRTIyREMxMDM2RTkxQjVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaXi9l4/uRe5d59jWG1Z1gVpvVCsLWOms7Nbb71VmELmNmJZvfHvn0W1J7tQp uQt3hgH4s9ZYnlH8G11B7dqjJyd5ysOzl7szv2jvf3B+t8NtmlyHTAUMeFBsXDd6 FcTsAgx4y0zw9KdiIK118hQXSMcAsWV48M5uKi7YnbH7tKZdHYtbEBuLfvKi4Iv+ v3m+zWPB50qIwSg1ZK30nFJ7JfkwaLodn2WJynQ5gc57hF7V3aM5RbgRJ1lG9CF5 WQD4qxTWdmSt+21+Ng0KxchisQjnC/UP/Q1+2Af9Mo1ZbT8p5KZ333zcGONqjm9x JGC9l9QICSg8xCxWhVcqbkXl+A== -----END CERTIFICATE-----Generated at Mon Oct 20 06:26:43 2025 by rpki-client