$ rpki-client -vvf rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft File: 2B70CD0507DEB57B92FF796531C932DEF83009A2.mft (raw, json) Hash identifier: 2CRhlYdHTw1eZ8cV5d1ROf/D1KrbD4HYq4pn8vvmjx4= Subject key identifier: 27:D8:CE:77:99:C8:50:87:1F:4E:37:E8:0E:6C:99:F8:4F:21:64:D2 Authority key identifier: 2B:70:CD:05:07:DE:B5:7B:92:FF:79:65:31:C9:32:DE:F8:30:09:A2 Certificate issuer: /CN=2B70CD0507DEB57B92FF796531C932DEF83009A2 Certificate serial: 6F90BAC341326B0BA3E2C09D62C1C4ABA59DF845 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft Manifest number: 0239 Signing time: Mon 20 Oct 2025 00:55:35 +0000 Manifest this update: Mon 20 Oct 2025 00:50:35 +0000 Manifest next update: Tue 21 Oct 2025 01:00:35 +0000 Files and hashes: 1: 323830343a366132383a3a2f33322d3438203d3e20323730333136.roa (hash: uM7t3CdpbFI7OeW+ScOEPFx4SBbDqHNlaGrAPMxg5UE=) 2: 3138392e3132362e31322e302f32322d3234203d3e20323730333136.roa (hash: usN4Sn/tOM9yn1kyODhJ/9CSDKsJBo6S6EP+tHpD0AQ=) 3: 2B70CD0507DEB57B92FF796531C932DEF83009A2.crl (hash: HJB4dUacYtmOmTEDe76XOwi+Idhc2AeKk1CenfeErdg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.crl rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:90:ba:c3:41:32:6b:0b:a3:e2:c0:9d:62:c1:c4:ab:a5:9d:f8:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B70CD0507DEB57B92FF796531C932DEF83009A2 Validity Not Before: Oct 20 00:50:35 2025 GMT Not After : Oct 21 01:00:35 2025 GMT Subject: CN=27D8CE7799C850871F4E37E80E6C99F84F2164D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:96:56:bc:f8:84:63:6d:3a:9b:03:67:33: 00:38:8c:3b:34:6b:f8:2d:84:a1:a0:cf:d7:41:23: 61:ca:c1:7b:d2:bd:21:1d:d7:c6:32:85:6f:06:ac: 64:ee:ed:ff:ee:51:87:58:ce:f2:9f:41:01:bb:5f: 9b:a4:ce:28:db:2f:ce:43:34:f4:4a:36:d8:01:a4: 97:2c:4e:3a:9b:48:e4:ef:45:99:a0:5f:3b:7f:d7: 56:21:0b:2c:9c:67:11:3b:2e:de:d1:af:13:ae:3e: 67:1d:14:a0:e7:03:b7:46:c7:fc:10:35:71:b5:4f: ac:83:4c:69:e3:9c:a7:b7:eb:b2:fe:77:95:cc:a0: d9:3d:23:30:dc:f5:56:ad:5a:07:bc:f6:20:e4:44: 92:74:5d:6d:99:1c:b6:70:b5:94:79:c9:ea:3e:9d: eb:8a:d1:78:6d:44:5d:db:c2:c0:08:62:b9:6a:de: bf:be:41:14:4d:66:d4:75:11:5e:db:9a:5b:50:8e: a0:86:d4:15:62:4f:45:01:c5:13:e8:4f:19:b9:bb: ef:e7:fb:53:71:d7:db:b7:45:16:9f:ab:bd:59:e8: cb:df:73:be:b7:65:9c:c3:be:8a:90:21:9c:14:c7: 52:8f:82:b7:21:c2:f9:be:6f:e0:9a:fe:a9:85:7c: 8d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D8:CE:77:99:C8:50:87:1F:4E:37:E8:0E:6C:99:F8:4F:21:64:D2 X509v3 Authority Key Identifier: keyid:2B:70:CD:05:07:DE:B5:7B:92:FF:79:65:31:C9:32:DE:F8:30:09:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:62:da:b2:63:e3:dc:44:b9:d9:35:8d:6c:c2:03:1c:29:5a: a7:42:77:0e:1a:dd:dc:c1:47:55:6a:d0:fa:39:ca:f8:51:b2: fa:47:3f:2f:2e:51:56:6a:5c:8f:91:b2:4f:c2:08:8b:3f:85: ae:d1:85:4a:40:f6:6b:23:02:54:8c:c2:78:4b:96:7f:21:e3: 35:ca:f8:c3:7d:48:e6:c4:d0:f4:1a:e4:b7:ea:50:90:ea:cd: 03:c4:41:cd:f3:eb:16:d1:cd:bf:94:96:82:13:2d:eb:2d:e1: 9b:70:3b:e5:7f:10:4c:53:7c:dd:6b:66:82:4d:a3:5a:5a:3b: 51:be:e0:5c:61:90:8c:74:d8:e2:cc:e7:5d:48:47:72:8a:b9: 17:95:c9:60:3a:4f:84:d4:dc:ed:b2:9a:ef:17:e0:3a:a1:50: 59:7a:67:cb:31:f4:9e:10:4f:a7:89:a3:0d:a0:ff:de:c2:2f: a8:29:20:29:ee:8c:65:81:4d:96:01:85:76:06:95:5f:b7:41: 27:23:0e:22:a5:3f:a3:ef:c0:b6:24:75:77:d0:cf:e2:ad:c6: 4a:33:36:c9:b6:34:71:67:fe:6f:ad:68:2f:9a:c2:7e:d0:fc: 98:b9:3b:1e:9d:31:7d:79:60:d5:ee:bd:e2:d6:ce:ee:3b:6c: 5f:d8:17:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUb5C6w0Eyawuj4sCdYsHEq6Wd+EUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI3MENEMDUwN0RFQjU3QjkyRkY3OTY1MzFDOTMyREVG ODMwMDlBMjAeFw0yNTEwMjAwMDUwMzVaFw0yNTEwMjEwMTAwMzVaMDMxMTAvBgNV BAMTKDI3RDhDRTc3OTlDODUwODcxRjRFMzdFODBFNkM5OUY4NEYyMTY0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DpZWvPiEY206mwNnMwA4jDs0 a/gthKGgz9dBI2HKwXvSvSEd18YyhW8GrGTu7f/uUYdYzvKfQQG7X5ukzijbL85D NPRKNtgBpJcsTjqbSOTvRZmgXzt/11YhCyycZxE7Lt7RrxOuPmcdFKDnA7dGx/wQ NXG1T6yDTGnjnKe367L+d5XMoNk9IzDc9VatWge89iDkRJJ0XW2ZHLZwtZR5yeo+ neuK0XhtRF3bwsAIYrlq3r++QRRNZtR1EV7bmltQjqCG1BViT0UBxRPoTxm5u+/n +1Nx19u3RRafq71Z6Mvfc763ZZzDvoqQIZwUx1KPgrchwvm+b+Ca/qmFfI1BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJ9jOd5nIUIcfTjfoDmyZ+E8hZNIwHwYDVR0j BBgwFoAUK3DNBQfetXuS/3llMcky3vgwCaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWVIZ2lKSzJxN0RxQlpCWWNiWmJQOFA5OGFjdVllTDE1M3Raa2hxbTFk SmQvMC8yQjcwQ0QwNTA3REVCNTdCOTJGRjc5NjUzMUM5MzJERUY4MzAwOUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNzBDRDA1MDdERUI1N0I5 MkZGNzk2NTMxQzkzMkRFRjgzMDA5QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWVIZ2lKSzJxN0RxQlpCWWNiWmJQOFA5OGFjdVllTDE1M3Raa2hxbTFkSmQvMC8y QjcwQ0QwNTA3REVCNTdCOTJGRjc5NjUzMUM5MzJERUY4MzAwOUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUmLasmPj3ES52TWNbMIDHClap0J3Dhrd3MFHVWrQ+jnK+FGy+kc/Ly5RVmpc j5GyT8IIiz+FrtGFSkD2ayMCVIzCeEuWfyHjNcr4w31I5sTQ9Brkt+pQkOrNA8RB zfPrFtHNv5SWghMt6y3hm3A75X8QTFN83Wtmgk2jWlo7Ub7gXGGQjHTY4sznXUhH coq5F5XJYDpPhNTc7bKa7xfgOqFQWXpnyzH0nhBPp4mjDaD/3sIvqCkgKe6MZYFN lgGFdgaVX7dBJyMOIqU/o+/AtiR1d9DP4q3GSjM2ybY0cWf+b61oL5rCftD8mLk7 Hp0xfXlg1e694tbO7jtsX9gXog== -----END CERTIFICATE-----Generated at Mon Oct 20 09:35:22 2025 by rpki-client