$ rpki-client -vvf rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft File: 2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft (raw, json) Hash identifier: VsE9M/klgGGerAQBVETBheNeTx1lDaWcgdyRYwKNRg4= Subject key identifier: 65:C8:A2:BD:F7:A2:96:2C:C5:F4:FC:18:49:62:E5:7A:40:A2:0F:17 Authority key identifier: 2F:C7:BA:5E:AF:88:32:D3:E4:27:36:C6:41:F0:60:7E:50:EC:6D:2D Certificate issuer: /CN=2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D Certificate serial: 29F69BE0F83E7359B39BEE4935BCFE9776D8A70E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.cer Subject info access: rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft Manifest number: 0149 Signing time: Mon 20 Oct 2025 00:05:38 +0000 Manifest this update: Mon 20 Oct 2025 00:00:38 +0000 Manifest next update: Tue 21 Oct 2025 00:33:38 +0000 Files and hashes: 1: 323830343a356165343a3a2f33322d3332203d3e20323638383033.roa (hash: gwpcB+w0ZBxp+kKwLgU4PO+nW8DKWb+2iDR7WUvcftk=) 2: 34352e3137332e39342e302f32342d3234203d3e20323638383033.roa (hash: 3bWz/eEJlvmqx3wkB8crv6X2xvnGqnCQBN4BFxfoyD4=) 3: 34352e3137332e39332e302f32342d3234203d3e20323638383033.roa (hash: Ucipg8u275L2oTt7ZEPcWM3hyujm9bZLyOjcqnO+O3I=) 4: 34352e3137332e39352e302f32342d3234203d3e20323638383033.roa (hash: Wtxj+dBrpGbeliu4iSQnbfSUpsLYVWH6nHGUjxF6F2A=) 5: 34352e3137332e39322e302f32342d3234203d3e20323638383033.roa (hash: ATPMqQPnNqfBh9qRn1z+4Ztfz/ao39FZWB07nABi2WY=) 6: 34352e3137332e39342e302f32332d3233203d3e20323638383033.roa (hash: aWlncSeKPy04EbQVT6azw0S1sJ7Zrd1OAZ+t/p9szQQ=) 7: 2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.crl (hash: EdCKZGPAtwm9hytckP2ZSCl/Jxoqryi/2mj3LzOhKu4=) 8: 323830343a356165343a666630303a3a2f34342d3434203d3e20323638383033.roa (hash: uzLU+5x44XjnLxwSJWWzxHrR6LovbDPTAOrXEpBMohE=) 9: 323830343a356165343a666631303a3a2f34342d3434203d3e20323638383033.roa (hash: hfiphG3F+FKme9b7YKF856PRaojw+FK44VpaNeeUD3Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.crl rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 00:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f6:9b:e0:f8:3e:73:59:b3:9b:ee:49:35:bc:fe:97:76:d8:a7:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D Validity Not Before: Oct 20 00:00:38 2025 GMT Not After : Oct 21 00:33:38 2025 GMT Subject: CN=65C8A2BDF7A2962CC5F4FC184962E57A40A20F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:47:14:4b:4f:f3:92:5c:99:8e:68:69:30:1f: 12:f3:e0:24:ab:4f:e2:d8:ab:38:ae:f7:a6:a6:4b: 68:d7:ec:ed:e1:01:bd:61:ef:12:70:af:20:b1:32: f9:36:ec:8a:2b:9d:3e:36:62:35:57:85:08:90:b2: 3e:04:bc:5f:2f:4f:04:df:1b:a6:d8:ca:c3:16:00: c1:c4:db:a2:36:f2:39:50:2e:2a:93:90:d1:fc:8b: 7b:d2:f4:18:2f:2e:92:e3:94:1f:d2:42:b7:50:c4: 21:c1:fa:f1:80:d9:50:92:75:9c:39:6f:f5:ab:ef: 94:76:29:f2:3b:b2:34:80:40:4c:99:f7:ae:73:8a: 83:b0:d7:be:8d:b9:97:4e:25:91:50:d2:d4:41:42: c8:b1:c8:53:9c:9e:ec:04:b5:f2:a0:89:0f:cd:e7: 26:67:bf:49:00:53:70:87:f6:4e:a3:5a:1d:b3:86: d2:85:b7:bb:5a:3b:0e:a5:57:57:21:75:94:10:2f: 92:c4:bc:3b:b1:f3:62:e8:bd:13:a0:ec:0f:d7:7c: a2:be:06:18:52:dd:79:7f:de:f5:91:d4:48:75:b5: ff:98:7c:b2:04:30:5b:f7:d6:0e:da:3a:8c:b9:77: 03:90:d5:a0:2f:48:6f:83:fb:c0:61:f7:ff:78:d8: e4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C8:A2:BD:F7:A2:96:2C:C5:F4:FC:18:49:62:E5:7A:40:A2:0F:17 X509v3 Authority Key Identifier: keyid:2F:C7:BA:5E:AF:88:32:D3:E4:27:36:C6:41:F0:60:7E:50:EC:6D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xMA26XVpRpguUSQWiUwam12enNn5A4nMALVAfj2PBBy/0/2FC7BA5EAF8832D3E42736C641F0607E50EC6D2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c8:c3:66:f5:e7:53:58:11:e3:95:2f:88:fe:82:35:bf:fe: e5:00:ee:c3:3d:b6:2c:df:d1:e7:bb:59:f0:97:89:2b:30:a6: 5a:12:9b:94:6b:ca:14:27:61:df:c4:26:cc:bd:6e:c8:d7:23: e5:53:f5:7b:57:d4:05:6a:30:3e:8d:77:7e:49:af:06:88:44: 25:35:37:b2:a8:47:8a:d7:39:ac:63:bb:b5:ca:ad:23:de:5f: 67:20:a9:e9:da:fd:fb:f4:ba:88:89:07:29:7c:16:8a:ac:25: b5:2e:dc:b8:05:a7:0e:0e:06:77:d1:85:b4:e5:ba:f9:29:74: 96:a2:0d:21:61:b2:ab:13:08:84:51:17:a9:9f:8e:22:d8:fa: 05:fa:0f:7d:8e:78:9c:de:78:8a:02:a6:f3:9f:0e:c6:f5:f1: 77:2a:67:5c:eb:6d:7d:65:43:14:ab:ca:40:86:eb:7f:5b:81: b1:0d:78:e6:ba:7f:8b:d2:55:b9:f6:fc:1a:cb:c7:80:58:3f: 6b:e8:42:d5:06:b3:b5:75:0e:3a:ad:61:1a:23:a8:5e:7d:2f: a3:a8:53:11:6e:28:bd:d3:b7:c6:7a:b7:1f:3f:d0:d8:c0:6a: 92:aa:97:30:e4:26:38:58:11:a6:f3:49:e2:d0:a7:c9:a1:28: 32:40:1a:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKfab4Pg+c1mzm+5JNbz+l3bYpw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZDN0JBNUVBRjg4MzJEM0U0MjczNkM2NDFGMDYwN0U1 MEVDNkQyRDAeFw0yNTEwMjAwMDAwMzhaFw0yNTEwMjEwMDMzMzhaMDMxMTAvBgNV BAMTKDY1QzhBMkJERjdBMjk2MkNDNUY0RkMxODQ5NjJFNTdBNDBBMjBGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpRxRLT/OSXJmOaGkwHxLz4CSr T+LYqziu96amS2jX7O3hAb1h7xJwryCxMvk27IornT42YjVXhQiQsj4EvF8vTwTf G6bYysMWAMHE26I28jlQLiqTkNH8i3vS9BgvLpLjlB/SQrdQxCHB+vGA2VCSdZw5 b/Wr75R2KfI7sjSAQEyZ965zioOw176NuZdOJZFQ0tRBQsixyFOcnuwEtfKgiQ/N 5yZnv0kAU3CH9k6jWh2zhtKFt7taOw6lV1chdZQQL5LEvDux82LovROg7A/XfKK+ BhhS3Xl/3vWR1Eh1tf+YfLIEMFv31g7aOoy5dwOQ1aAvSG+D+8Bh9/942ORpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZciivfeilizF9PwYSWLlekCiDxcwHwYDVR0j BBgwFoAUL8e6Xq+IMtPkJzbGQfBgflDsbS0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHhNQTI2WFZwUnBndVVTUVdpVXdhbTEyZW5ObjVBNG5NQUxWQWZqMlBC QnkvMC8yRkM3QkE1RUFGODgzMkQzRTQyNzM2QzY0MUYwNjA3RTUwRUM2RDJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGQzdCQTVFQUY4ODMyRDNF NDI3MzZDNjQxRjA2MDdFNTBFQzZEMkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHhNQTI2WFZwUnBndVVTUVdpVXdhbTEyZW5ObjVBNG5NQUxWQWZqMlBCQnkvMC8y RkM3QkE1RUFGODgzMkQzRTQyNzM2QzY0MUYwNjA3RTUwRUM2RDJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfcjDZvXnU1gR45UviP6CNb/+5QDuwz22LN/R57tZ8JeJKzCmWhKblGvKFCdh 38QmzL1uyNcj5VP1e1fUBWowPo13fkmvBohEJTU3sqhHitc5rGO7tcqtI95fZyCp 6dr9+/S6iIkHKXwWiqwltS7cuAWnDg4Gd9GFtOW6+Sl0lqINIWGyqxMIhFEXqZ+O Itj6BfoPfY54nN54igKm858OxvXxdypnXOttfWVDFKvKQIbrf1uBsQ145rp/i9JV ufb8GsvHgFg/a+hC1QaztXUOOq1hGiOoXn0vo6hTEW4ovdO3xnq3Hz/Q2MBqkqqX MOQmOFgRpvNJ4tCnyaEoMkAa9A== -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:21 2025 by rpki-client