$ rpki-client -vvf rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft File: 2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft (raw, json) Hash identifier: nKkhCGoGQZPosp+ebUWNfDEbN0g6LV2CT3tdkgBAvOg= Subject key identifier: FA:E2:0F:52:61:CA:D9:AE:C4:5B:D7:3B:6D:DD:4F:B3:0C:EE:9C:DC Authority key identifier: 2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E Certificate issuer: /CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E Certificate serial: 50E4F86D5E983699054BC7BF0C5FCB199268CC6B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft Manifest number: 02E3 Signing time: Mon 20 Oct 2025 07:20:20 +0000 Manifest this update: Mon 20 Oct 2025 07:15:20 +0000 Manifest next update: Tue 21 Oct 2025 07:29:20 +0000 Files and hashes: 1: 3137372e3135352e38342e302f32322d3234203d3e20323633313239.roa (hash: TM2lu8ojhx/JZZ0fRyy/mmuC8mNGbW3JwdC0RSOzsaA=) 2: 323830343a313732633a3a2f33322d3438203d3e20323633313239.roa (hash: pT9wLb3SCYVr3rULtnzQP+Z0K6P8cggsIKhPstRPcOU=) 3: 2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl (hash: FTERxn4jd5gs1wYlUM5/GtYuMjqVA/cm+GnxJo3qT8k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e4:f8:6d:5e:98:36:99:05:4b:c7:bf:0c:5f:cb:19:92:68:cc:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E Validity Not Before: Oct 20 07:15:20 2025 GMT Not After : Oct 21 07:29:20 2025 GMT Subject: CN=FAE20F5261CAD9AEC45BD73B6DDD4FB30CEE9CDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:6f:25:cc:2c:88:2e:71:3d:73:1c:de:42: ef:da:33:e5:b7:ae:5b:9c:75:0c:c0:97:ce:9a:4b: 24:ad:bd:5a:12:7a:5f:4d:fd:ef:1e:74:db:7b:fb: b7:d9:4b:f9:94:c5:dc:07:8a:e8:07:53:e3:44:ae: 34:73:23:26:30:8a:6b:ba:a6:e6:fd:0d:fc:1f:fb: 44:23:5b:c7:70:9b:c1:3a:cb:40:a7:85:ec:59:be: e0:40:1e:8e:bb:81:12:78:49:ce:cd:16:db:d4:de: ef:a5:be:71:40:03:af:01:ed:bd:66:8d:28:27:8c: 5e:92:ca:4a:6d:13:df:1b:bf:4d:22:40:c8:26:10: 33:bb:56:7e:91:78:41:85:c2:f1:80:8e:fb:5a:58: f4:16:38:b8:b1:72:a8:e8:75:f0:f2:54:4c:a4:13: c8:26:72:62:7a:a0:0b:7b:5d:b2:ec:ab:b5:ca:00: b6:82:2d:90:b2:c1:ca:ac:ef:ec:03:5e:bb:52:fb: 0a:65:66:e8:42:4c:35:d0:83:e4:72:c9:bf:6d:a3: b2:54:89:31:d7:06:a4:a7:aa:4d:a3:b2:11:d9:87: 4d:0a:f1:ea:a1:fa:43:a5:a7:91:89:13:1d:43:d3: 62:54:62:bd:15:4c:61:ae:c9:14:b6:ad:e8:29:a3: 14:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E2:0F:52:61:CA:D9:AE:C4:5B:D7:3B:6D:DD:4F:B3:0C:EE:9C:DC X509v3 Authority Key Identifier: keyid:2D:3A:2F:D4:D8:D7:AB:91:58:19:FE:83:CB:84:D3:AC:51:A3:2C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/2D3A2FD4D8D7AB915819FE83CB84D3AC51A32C7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e1:1a:4f:54:ba:60:27:07:52:e6:42:06:7b:e1:b2:92:30: d0:e6:43:bf:95:a1:ce:da:ea:a4:b6:6b:c1:29:02:d0:6b:a8: e7:a4:db:ef:25:81:9c:77:39:4e:66:da:fc:47:bc:c8:60:b1: 7c:f3:0a:9b:6c:dc:3a:46:38:f4:ad:99:75:6f:2c:70:f4:3e: 8b:4d:d4:90:93:37:72:7a:c4:1a:0d:be:4f:51:eb:e4:a4:7d: 9f:9a:b3:63:8d:1e:f6:65:65:3a:fa:76:18:a9:4c:5f:94:d7: 37:2b:81:a4:20:93:6b:60:fe:20:3c:dd:4b:23:88:ce:49:74: db:96:01:fb:01:07:3a:4b:e9:f3:65:9c:da:87:f3:83:1d:6a: bf:17:a2:42:37:7b:49:6f:11:78:94:45:5a:06:a7:bb:74:90: be:bd:11:10:f8:bb:e3:f1:29:f6:6d:43:71:c2:65:60:5f:a9: 28:2c:94:7e:68:2e:4d:46:d0:f4:5a:ab:d9:8b:2a:d6:df:e1: fb:86:df:a9:75:3b:49:89:46:06:32:31:26:80:63:06:7f:50: 35:cb:f2:91:20:3d:09:f6:d6:e1:81:29:44:ae:5e:c3:b0:22: c7:d0:8a:19:41:03:a3:27:99:34:30:0a:1f:b8:74:cb:8e:d9: f1:67:e2:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUOT4bV6YNpkFS8e/DF/LGZJozGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQzQTJGRDREOEQ3QUI5MTU4MTlGRTgzQ0I4NEQzQUM1 MUEzMkM3RTAeFw0yNTEwMjAwNzE1MjBaFw0yNTEwMjEwNzI5MjBaMDMxMTAvBgNV BAMTKEZBRTIwRjUyNjFDQUQ5QUVDNDVCRDczQjZEREQ0RkIzMENFRTlDREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQG8lzCyILnE9cxzeQu/aM+W3 rlucdQzAl86aSyStvVoSel9N/e8edNt7+7fZS/mUxdwHiugHU+NErjRzIyYwimu6 pub9Dfwf+0QjW8dwm8E6y0CnhexZvuBAHo67gRJ4Sc7NFtvU3u+lvnFAA68B7b1m jSgnjF6SykptE98bv00iQMgmEDO7Vn6ReEGFwvGAjvtaWPQWOLixcqjodfDyVEyk E8gmcmJ6oAt7XbLsq7XKALaCLZCywcqs7+wDXrtS+wplZuhCTDXQg+Ryyb9to7JU iTHXBqSnqk2jshHZh00K8eqh+kOlp5GJEx1D02JUYr0VTGGuyRS2regpoxSJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+uIPUmHK2a7EW9c7bd1PswzunNwwHwYDVR0j BBgwFoAULTov1NjXq5FYGf6Dy4TTrFGjLH4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXlaaG1LVExoR2VZVjlxTnZ1bksxWXdCWmp6cXBCWk52dnFGZUZXczZK bW8vMC8yRDNBMkZENEQ4RDdBQjkxNTgxOUZFODNDQjg0RDNBQzUxQTMyQzdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEM0EyRkQ0RDhEN0FCOTE1 ODE5RkU4M0NCODREM0FDNTFBMzJDN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXlaaG1LVExoR2VZVjlxTnZ1bksxWXdCWmp6cXBCWk52dnFGZUZXczZKbW8vMC8y RDNBMkZENEQ4RDdBQjkxNTgxOUZFODNDQjg0RDNBQzUxQTMyQzdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKOEaT1S6YCcHUuZCBnvhspIw0OZDv5WhztrqpLZrwSkC0Guo56Tb7yWBnHc5 Tmba/Ee8yGCxfPMKm2zcOkY49K2ZdW8scPQ+i03UkJM3cnrEGg2+T1Hr5KR9n5qz Y40e9mVlOvp2GKlMX5TXNyuBpCCTa2D+IDzdSyOIzkl025YB+wEHOkvp82Wc2ofz gx1qvxeiQjd7SW8ReJRFWganu3SQvr0REPi74/Ep9m1DccJlYF+pKCyUfmguTUbQ 9Fqr2Ysq1t/h+4bfqXU7SYlGBjIxJoBjBn9QNcvykSA9CfbW4YEpRK5ew7Aix9CK GUEDoyeZNDAKH7h0y47Z8WfiNQ== -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:21 2025 by rpki-client