$ rpki-client -vvf rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft File: 2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft (raw, json) Hash identifier: 4Y+ejV4K1KBIoqEY2/DFEfm3T4RgJb2yAFjeORrEUQg= Subject key identifier: EA:59:FA:D5:3F:58:73:46:2D:52:14:40:54:DB:60:07:1B:28:F1:5E Authority key identifier: 2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6 Certificate issuer: /CN=2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6 Certificate serial: 028A684A5A5180816BD3720540657CB1774ACFAD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer Subject info access: rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft Manifest number: 02C0 Signing time: Mon 20 Oct 2025 12:30:30 +0000 Manifest this update: Mon 20 Oct 2025 12:25:30 +0000 Manifest next update: Tue 21 Oct 2025 14:32:30 +0000 Files and hashes: 1: 2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl (hash: 1/gRCwdxOXTkL6Ng+2oNaj43Vkz5vS8+UtbrKuOO9J4=) 2: 323830343a356430303a3a2f33322d3438203d3e20323638393435.roa (hash: /NSh8I/Rslc7iMVh1K0i0LpvmuhofwUNcvRYRGnVjho=) 3: 34352e3137362e3134342e302f32332d3234203d3e20323638393435.roa (hash: 81icqWDhCQ5V80cybeQHXgFbX2Iogys+OdUbZvWvCZw=) 4: 34352e3137362e3134362e302f32332d3234203d3e20323638393435.roa (hash: 7ZVR7VTEAxId3uH0BE8kESLLV++QhSgdU6a0PidruW4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:8a:68:4a:5a:51:80:81:6b:d3:72:05:40:65:7c:b1:77:4a:cf:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6 Validity Not Before: Oct 20 12:25:30 2025 GMT Not After : Oct 21 14:32:30 2025 GMT Subject: CN=EA59FAD53F5873462D52144054DB60071B28F15E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:44:3d:a3:9a:c2:7d:8f:38:c0:64:44:ab:db: b5:4e:70:67:47:4a:fa:fc:a3:c9:fe:6f:2b:01:32: d5:ae:4b:63:e2:fd:9e:64:74:d4:ee:c4:6d:9b:79: f9:be:8a:dc:b8:85:a1:3b:f1:d3:e2:68:ab:ae:74: 4f:32:9b:d1:f1:43:e3:6b:2c:59:7a:5c:28:8c:8d: bc:45:58:8f:10:84:f3:22:47:ba:2d:cd:89:d1:a6: 80:3c:d1:1d:35:e0:52:18:fa:34:74:bb:3a:15:6d: f4:02:c4:36:37:17:ba:78:ff:59:96:b4:bc:15:5b: 17:43:b1:b2:a5:c1:aa:eb:22:78:81:d2:51:6a:ad: cd:ab:92:46:31:ea:8a:df:fd:c3:6e:5c:65:3e:b3: 0e:ca:08:54:fd:aa:94:29:e9:bf:e2:54:d1:14:3d: a3:e7:85:ec:c7:2e:62:ff:f8:e3:8c:7e:92:f1:c7: 88:3f:02:75:73:ff:10:1b:ee:0f:aa:6c:bc:d4:5a: 3a:8c:d7:f0:ad:b8:12:3c:8e:aa:d6:f6:cc:77:e8: 2a:4f:c7:d5:6c:16:9e:64:a2:06:a3:29:40:a5:d8: 2e:84:63:d7:cd:a4:03:6d:cb:44:ab:45:81:10:cf: 5b:c8:a3:df:ef:58:5a:3c:dc:21:2d:89:fa:be:a4: 66:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:59:FA:D5:3F:58:73:46:2D:52:14:40:54:DB:60:07:1B:28:F1:5E X509v3 Authority Key Identifier: keyid:2B:5F:84:F3:9C:A6:A2:84:55:DE:97:4F:2C:F6:14:7A:5E:1D:3C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VyCDiXHsP1jG9hAUKJkJE4jcxyZGJhXuj3svaPV2zue/0/2B5F84F39CA6A28455DE974F2CF6147A5E1D3CE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:04:b8:61:dc:f7:ce:37:0c:f4:f4:40:f2:59:0a:24:71:fa: ab:44:25:3d:da:f0:4d:5a:b0:6b:09:39:b2:a4:2e:69:9b:76: ab:2f:4b:42:05:4f:28:b0:1b:c8:44:6a:60:50:7f:bf:d3:b8: cf:a0:fd:e6:69:cb:1d:19:30:3a:0c:5a:01:da:2a:be:fb:9a: b3:6c:59:37:74:bc:bf:40:e8:dd:6a:52:58:87:3a:64:70:89: 5b:a3:2f:3f:6b:92:48:2d:f2:ea:e2:90:dd:b0:65:36:46:51: 75:08:9a:90:f2:70:7b:ea:7c:88:cb:dd:c0:e6:91:11:17:dd: a4:7e:fa:47:cf:a5:6e:86:85:e8:0c:02:5b:6e:89:fd:f1:8a: 7c:a0:27:f6:6c:e7:4e:64:eb:2c:39:ef:b3:e2:8f:82:25:27: 7b:21:87:09:d4:ab:f4:1f:c0:ba:f7:70:98:0b:1b:55:2e:b4: 3f:a7:f7:d3:ad:d6:91:aa:24:ef:ec:f7:20:7e:fa:a4:d1:e5: 36:91:ff:05:e9:7c:7f:c8:96:3f:2b:38:d4:e8:97:8b:6f:62: de:49:45:b1:26:96:9e:53:4c:aa:71:dd:5b:db:01:6a:dc:ea: a6:00:f6:f8:ad:90:cf:af:3a:38:3f:38:66:b5:d3:12:c3:52: 85:c1:38:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAopoSlpRgIFr03IFQGV8sXdKz60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI1Rjg0RjM5Q0E2QTI4NDU1REU5NzRGMkNGNjE0N0E1 RTFEM0NFNjAeFw0yNTEwMjAxMjI1MzBaFw0yNTEwMjExNDMyMzBaMDMxMTAvBgNV BAMTKEVBNTlGQUQ1M0Y1ODczNDYyRDUyMTQ0MDU0REI2MDA3MUIyOEYxNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCURD2jmsJ9jzjAZESr27VOcGdH Svr8o8n+bysBMtWuS2Pi/Z5kdNTuxG2befm+ity4haE78dPiaKuudE8ym9HxQ+Nr LFl6XCiMjbxFWI8QhPMiR7otzYnRpoA80R014FIY+jR0uzoVbfQCxDY3F7p4/1mW tLwVWxdDsbKlwarrIniB0lFqrc2rkkYx6orf/cNuXGU+sw7KCFT9qpQp6b/iVNEU PaPnhezHLmL/+OOMfpLxx4g/AnVz/xAb7g+qbLzUWjqM1/CtuBI8jqrW9sx36CpP x9VsFp5kogajKUCl2C6EY9fNpANty0SrRYEQz1vIo9/vWFo83CEtifq+pGarAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6ln61T9Yc0YtUhRAVNtgBxso8V4wHwYDVR0j BBgwFoAUK1+E85ymooRV3pdPLPYUel4dPOYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFZ5Q0RpWEhzUDFqRzloQVVLSmtKRTRqY3h5WkdKaFh1ajNzdmFQVjJ6 dWUvMC8yQjVGODRGMzlDQTZBMjg0NTVERTk3NEYyQ0Y2MTQ3QTVFMUQzQ0U2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNUY4NEYzOUNBNkEyODQ1 NURFOTc0RjJDRjYxNDdBNUUxRDNDRTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFZ5Q0RpWEhzUDFqRzloQVVLSmtKRTRqY3h5WkdKaFh1ajNzdmFQVjJ6dWUvMC8y QjVGODRGMzlDQTZBMjg0NTVERTk3NEYyQ0Y2MTQ3QTVFMUQzQ0U2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhQS4Ydz3zjcM9PRA8lkKJHH6q0QlPdrwTVqwawk5sqQuaZt2qy9LQgVPKLAb yERqYFB/v9O4z6D95mnLHRkwOgxaAdoqvvuas2xZN3S8v0Do3WpSWIc6ZHCJW6Mv P2uSSC3y6uKQ3bBlNkZRdQiakPJwe+p8iMvdwOaRERfdpH76R8+lboaF6AwCW26J /fGKfKAn9mznTmTrLDnvs+KPgiUneyGHCdSr9B/AuvdwmAsbVS60P6f3063Wkaok 7+z3IH76pNHlNpH/Bel8f8iWPys41OiXi29i3klFsSaWnlNMqnHdW9sBatzqpgD2 +K2Qz686OD84ZrXTEsNShcE4fQ== -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:48 2025 by rpki-client