$ rpki-client -vvf rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.mft File: 2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.mft (raw, json) Hash identifier: CIm9d8DXAKpIQBsUm+6DgApNdFO6LflC2DJPgz2a86U= Subject key identifier: F5:31:02:4D:9E:E7:B8:85:9B:2C:6B:88:55:AC:D9:7B:BC:2F:24:E2 Authority key identifier: 2F:FA:D1:83:60:1C:6C:AE:4C:D1:E5:BA:12:B0:19:00:5F:FC:2E:E4 Certificate issuer: /CN=2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4 Certificate serial: 055C27E84520DB9935063FA7E64E4F0AB6D6F57B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.cer Subject info access: rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.mft Manifest number: 02F1 Signing time: Mon 20 Oct 2025 02:13:58 +0000 Manifest this update: Mon 20 Oct 2025 02:08:58 +0000 Manifest next update: Tue 21 Oct 2025 05:15:58 +0000 Files and hashes: 1: 3230302e37372e3138302e302f32322d3234203d3e203631373637.roa (hash: 4N2dLHrZJX+AcwbZTofUNv6qcpQoRQonxwICYIRz+Pk=) 2: 2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.crl (hash: UwaWRMCxUMXpy12EMv+MyxXa2sQvzElAO7jr7y0rudw=) 3: 323830343a313866633a3a2f33322d3332203d3e203631373637.roa (hash: 19VjNwa483ifmnR5YbDtgacDzPA98p6eCG29OYYsi/g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.crl rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5c:27:e8:45:20:db:99:35:06:3f:a7:e6:4e:4f:0a:b6:d6:f5:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4 Validity Not Before: Oct 20 02:08:58 2025 GMT Not After : Oct 21 05:15:58 2025 GMT Subject: CN=F531024D9EE7B8859B2C6B8855ACD97BBC2F24E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:33:5a:b1:6c:b8:8a:f8:98:e2:e6:c5:13: 34:5e:7b:ec:e0:51:ba:be:c9:78:99:81:6f:a8:f2: bb:0e:b2:4e:8c:c6:26:88:b0:4d:a9:a3:88:f2:f7: 20:28:a4:99:8c:c5:da:09:6f:ff:43:64:0d:b1:10: 32:62:3c:76:77:8a:f8:10:32:3b:9d:b3:5b:e9:05: 81:8e:10:f2:51:ea:86:dd:9f:81:b8:fa:0f:f6:ab: 93:15:2e:bb:bd:bc:8b:bc:cf:a9:54:2c:95:16:74: c9:76:fd:19:61:07:16:8c:f3:e4:bb:1e:a1:51:e9: 6f:b0:9e:af:55:f3:31:1e:65:99:3f:c6:7e:f4:c6: a5:c7:ad:23:dc:42:a6:87:a9:3b:19:52:ac:25:3f: 8e:78:6c:59:db:be:8c:52:2f:c9:8e:91:7f:63:18: 3d:12:e1:c9:73:1f:f9:63:40:9e:b8:7d:ac:aa:6e: 16:e7:4d:f7:9b:50:3b:bf:5e:8f:ce:68:7a:2d:96: 8c:48:93:80:a3:9e:57:ae:e0:c1:06:15:e5:4a:9e: 93:a5:6e:e4:18:c9:01:47:07:13:86:d6:84:48:f7: a9:ff:54:50:3b:d0:2f:d3:7d:91:4a:c3:0e:5d:ab: ce:a8:8c:fd:8c:92:77:35:94:0d:4c:1d:2d:59:06: 7f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:31:02:4D:9E:E7:B8:85:9B:2C:6B:88:55:AC:D9:7B:BC:2F:24:E2 X509v3 Authority Key Identifier: keyid:2F:FA:D1:83:60:1C:6C:AE:4C:D1:E5:BA:12:B0:19:00:5F:FC:2E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:1e:fb:96:16:b6:12:35:25:c5:f7:28:b0:78:1a:2c:c0:80: 02:05:14:2c:11:69:93:79:f5:db:81:26:b3:fb:4f:26:65:4a: 8c:04:d6:0f:cf:bd:0e:97:80:f2:12:31:ec:d7:52:a6:5a:83: 83:12:c0:a8:09:71:25:09:fe:13:ab:c5:b4:70:2a:b9:4f:58: db:aa:dd:25:14:d1:37:c7:63:a1:e0:f8:c7:8f:0d:7f:28:0a: 0e:f9:f0:8b:1c:bb:0e:dc:e4:5b:15:ac:bd:24:6d:6e:7f:4e: 20:47:69:4c:7a:58:6d:66:ad:df:83:ab:88:46:87:6e:d3:f3: 84:55:4f:c8:9b:04:0e:23:be:41:c4:5e:a8:84:08:d8:e0:e4: 30:56:35:83:ee:33:57:30:f1:49:4a:85:1d:98:52:e6:e4:c2: 51:da:f0:78:ae:9e:f7:fa:8a:4b:d1:c4:01:3e:ae:30:e8:e2: 54:3d:08:7e:ea:6d:16:0a:e6:0d:e4:de:35:b0:de:03:eb:5e: f4:1d:73:0c:0d:5b:a2:e5:8d:c5:62:4a:ff:48:59:c5:32:88: ce:9d:f8:4c:ed:3a:72:88:7e:90:c6:87:84:96:ec:c8:b9:f1: 05:f5:a8:7f:67:20:32:bb:ed:ee:a1:49:09:b1:3c:82:35:7d: 1f:17:24:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBVwn6EUg25k1Bj+n5k5PCrbW9XswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZGQUQxODM2MDFDNkNBRTRDRDFFNUJBMTJCMDE5MDA1 RkZDMkVFNDAeFw0yNTEwMjAwMjA4NThaFw0yNTEwMjEwNTE1NThaMDMxMTAvBgNV BAMTKEY1MzEwMjREOUVFN0I4ODU5QjJDNkI4ODU1QUNEOTdCQkMyRjI0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4pDNasWy4iviY4ubFEzRee+zg Ubq+yXiZgW+o8rsOsk6MxiaIsE2po4jy9yAopJmMxdoJb/9DZA2xEDJiPHZ3ivgQ Mjuds1vpBYGOEPJR6obdn4G4+g/2q5MVLru9vIu8z6lULJUWdMl2/RlhBxaM8+S7 HqFR6W+wnq9V8zEeZZk/xn70xqXHrSPcQqaHqTsZUqwlP454bFnbvoxSL8mOkX9j GD0S4clzH/ljQJ64fayqbhbnTfebUDu/Xo/OaHotloxIk4Cjnleu4MEGFeVKnpOl buQYyQFHBxOG1oRI96n/VFA70C/TfZFKww5dq86ojP2Mknc1lA1MHS1ZBn/nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9TECTZ7nuIWbLGuIVazZe7wvJOIwHwYDVR0j BBgwFoAUL/rRg2AcbK5M0eW6ErAZAF/8LuQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGo3ZFdTcTFWQUJWUmo1UFBQWXEzekZTd1RKRDNBZ3FpQWpRcGprZjlI eHIvMS8yRkZBRDE4MzYwMUM2Q0FFNENEMUU1QkExMkIwMTkwMDVGRkMyRUU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGRkFEMTgzNjAxQzZDQUU0 Q0QxRTVCQTEyQjAxOTAwNUZGQzJFRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGo3ZFdTcTFWQUJWUmo1UFBQWXEzekZTd1RKRDNBZ3FpQWpRcGprZjlIeHIvMS8y RkZBRDE4MzYwMUM2Q0FFNENEMUU1QkExMkIwMTkwMDVGRkMyRUU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmB77lha2EjUlxfcosHgaLMCAAgUULBFpk3n124Ems/tPJmVKjATWD8+9DpeA 8hIx7NdSplqDgxLAqAlxJQn+E6vFtHAquU9Y26rdJRTRN8djoeD4x48NfygKDvnw ixy7DtzkWxWsvSRtbn9OIEdpTHpYbWat34OriEaHbtPzhFVPyJsEDiO+QcReqIQI 2ODkMFY1g+4zVzDxSUqFHZhS5uTCUdrweK6e9/qKS9HEAT6uMOjiVD0IfuptFgrm DeTeNbDeA+te9B1zDA1bouWNxWJK/0hZxTKIzp34TO06coh+kMaHhJbsyLnxBfWo f2cgMrvt7qFJCbE8gjV9Hxckrw== -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:12 2025 by rpki-client