$ rpki-client -vvf rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/2B4531BBC3BC4314E0D0975641CBA82766982CB6.mft File: 2B4531BBC3BC4314E0D0975641CBA82766982CB6.mft (raw, json) Hash identifier: bThaNSyOW15JOUm8MEJtZx/uKP5KMTxkc/v77Ki6x1w= Subject key identifier: 7D:47:50:51:77:2E:45:1A:02:88:A7:F3:B5:57:10:78:15:1F:29:B7 Authority key identifier: 2B:45:31:BB:C3:BC:43:14:E0:D0:97:56:41:CB:A8:27:66:98:2C:B6 Certificate issuer: /CN=2B4531BBC3BC4314E0D0975641CBA82766982CB6 Certificate serial: 1F32E96ACCAADC87F660136E3FA8729E1B947086 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4531BBC3BC4314E0D0975641CBA82766982CB6.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/2B4531BBC3BC4314E0D0975641CBA82766982CB6.mft Manifest number: 11 Signing time: Sun 19 Oct 2025 14:05:04 +0000 Manifest this update: Sun 19 Oct 2025 14:00:04 +0000 Manifest next update: Mon 20 Oct 2025 15:32:04 +0000 Files and hashes: 1: 2B4531BBC3BC4314E0D0975641CBA82766982CB6.crl (hash: 0Zv7quy+EKyKYad2QEL+TmS1T6uMXkHXsb01RBrZiig=) 2: 34352e3137352e3138302e302f32322d3332203d3e20323638393033.roa (hash: YibpOJkqxwMtZPaNXBYGs7EUxz9MloB4YODU3r5svfA=) 3: 323830343a356335383a3a2f33322d313238203d3e20323638393033.roa (hash: a61UG+Dm6cTv5yv3xWNWyF+OaY97n29igx53dP6F4xg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/2B4531BBC3BC4314E0D0975641CBA82766982CB6.crl rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/2B4531BBC3BC4314E0D0975641CBA82766982CB6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4531BBC3BC4314E0D0975641CBA82766982CB6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 15:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:32:e9:6a:cc:aa:dc:87:f6:60:13:6e:3f:a8:72:9e:1b:94:70:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B4531BBC3BC4314E0D0975641CBA82766982CB6 Validity Not Before: Oct 19 14:00:04 2025 GMT Not After : Oct 20 15:32:04 2025 GMT Subject: CN=7D475051772E451A0288A7F3B5571078151F29B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:70:69:21:4a:fd:d0:5c:5b:46:f1:75:d2:81: 06:96:66:fc:2b:a6:54:79:6d:b3:18:a6:13:54:88: 70:92:71:62:6d:d5:81:6e:c0:02:f3:24:bd:80:96: 94:79:a5:85:76:a8:b7:5b:62:12:ca:53:fd:de:7b: 2c:25:ea:82:db:79:03:14:8b:24:d1:b7:70:8b:48: f6:38:07:bb:2a:90:14:e3:c3:6b:bc:60:bf:2a:db: 50:39:63:0d:44:20:30:04:04:60:59:60:6f:4b:5a: ce:ff:c5:8e:04:d7:e7:78:8a:00:72:1b:91:e7:bc: 3d:03:47:31:28:14:79:ce:95:4f:d9:51:59:cc:de: 15:37:ae:86:93:b7:c7:42:93:4e:8f:28:46:a6:4e: 1b:4c:ed:ff:d4:22:bf:75:a1:7a:c6:b3:8f:02:ca: 77:32:14:9b:37:b5:8b:82:a5:32:7b:f2:2d:8f:59: ea:0e:64:67:a0:1d:39:4b:67:a4:e2:1b:d7:c9:be: 2f:71:6e:6e:a0:f4:a9:f9:5a:fd:24:ad:16:a6:93: ba:9e:1d:9b:f7:8c:37:71:9d:e7:a3:46:31:62:19: ee:97:a4:87:f5:a7:ad:52:f7:65:e8:de:cb:3f:ae: 0f:60:15:34:0e:e4:f1:fa:fc:fa:cb:88:89:55:85: 19:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:47:50:51:77:2E:45:1A:02:88:A7:F3:B5:57:10:78:15:1F:29:B7 X509v3 Authority Key Identifier: keyid:2B:45:31:BB:C3:BC:43:14:E0:D0:97:56:41:CB:A8:27:66:98:2C:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/2B4531BBC3BC4314E0D0975641CBA82766982CB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4531BBC3BC4314E0D0975641CBA82766982CB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/2B4531BBC3BC4314E0D0975641CBA82766982CB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c0:fb:c0:3c:d7:21:2e:57:0f:0f:e4:8a:d0:31:9b:38:4a: 3b:9a:58:79:46:dc:26:b0:0f:a1:76:c6:f8:ff:41:e6:e0:ff: 1c:20:5c:93:8c:ba:2e:8d:ba:14:93:fc:e4:9e:69:14:00:30: 94:4c:d7:67:73:bb:e7:d0:e7:25:9c:3a:44:c4:87:c6:f1:39: 7b:7d:cc:9d:40:13:3b:a5:fa:e3:47:cf:ea:fc:d3:cb:5b:5e: 2e:cc:05:7d:1b:8c:5a:33:15:2c:85:1d:13:cc:b7:c2:cf:5c: 66:9c:b4:0c:cc:7f:ce:1f:ba:98:b7:f0:70:c4:6a:c1:6b:9a: b7:0b:eb:d8:a9:36:8b:96:ad:73:05:0e:1e:07:12:fa:0f:50: f4:ed:88:89:ea:95:71:55:49:59:56:79:4e:7d:a8:15:29:25: c8:64:25:52:97:d6:70:72:9d:1e:09:e3:23:a2:ff:04:0a:5d: 34:cd:f9:f7:71:ef:3f:68:48:d9:ed:03:15:cd:ba:39:70:b1: 0c:5e:14:28:90:b9:68:9c:c9:09:ed:ce:b3:d8:2a:b6:39:0c: 98:ff:fb:29:5f:92:1d:7d:96:24:58:42:7e:7c:41:66:b3:ce: 3c:37:9a:da:4b:10:7c:f2:90:17:b0:d2:f5:0e:e6:23:b1:03: 72:4b:5f:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHzLpasyq3If2YBNuP6hynhuUcIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI0NTMxQkJDM0JDNDMxNEUwRDA5NzU2NDFDQkE4Mjc2 Njk4MkNCNjAeFw0yNTEwMTkxNDAwMDRaFw0yNTEwMjAxNTMyMDRaMDMxMTAvBgNV BAMTKDdENDc1MDUxNzcyRTQ1MUEwMjg4QTdGM0I1NTcxMDc4MTUxRjI5QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMcGkhSv3QXFtG8XXSgQaWZvwr plR5bbMYphNUiHCScWJt1YFuwALzJL2AlpR5pYV2qLdbYhLKU/3eeywl6oLbeQMU iyTRt3CLSPY4B7sqkBTjw2u8YL8q21A5Yw1EIDAEBGBZYG9LWs7/xY4E1+d4igBy G5HnvD0DRzEoFHnOlU/ZUVnM3hU3roaTt8dCk06PKEamThtM7f/UIr91oXrGs48C yncyFJs3tYuCpTJ78i2PWeoOZGegHTlLZ6TiG9fJvi9xbm6g9Kn5Wv0krRamk7qe HZv3jDdxneejRjFiGe6XpIf1p61S92Xo3ss/rg9gFTQO5PH6/PrLiIlVhRlTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfUdQUXcuRRoCiKfztVcQeBUfKbcwHwYDVR0j BBgwFoAUK0Uxu8O8QxTg0JdWQcuoJ2aYLLYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmFkM25LNGkzanZQbU5GYlYzSnM1bkN0VGdiQUdyQkcxdXBpVG5WYVI5 NnkvMC8yQjQ1MzFCQkMzQkM0MzE0RTBEMDk3NTY0MUNCQTgyNzY2OTgyQ0I2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNDUzMUJCQzNCQzQzMTRF MEQwOTc1NjQxQ0JBODI3NjY5ODJDQjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmFkM25LNGkzanZQbU5GYlYzSnM1bkN0VGdiQUdyQkcxdXBpVG5WYVI5NnkvMC8y QjQ1MzFCQkMzQkM0MzE0RTBEMDk3NTY0MUNCQTgyNzY2OTgyQ0I2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATsD7wDzXIS5XDw/kitAxmzhKO5pYeUbcJrAPoXbG+P9B5uD/HCBck4y6Lo26 FJP85J5pFAAwlEzXZ3O759DnJZw6RMSHxvE5e33MnUATO6X640fP6vzTy1teLswF fRuMWjMVLIUdE8y3ws9cZpy0DMx/zh+6mLfwcMRqwWuatwvr2Kk2i5atcwUOHgcS +g9Q9O2IieqVcVVJWVZ5Tn2oFSklyGQlUpfWcHKdHgnjI6L/BApdNM3593HvP2hI 2e0DFc26OXCxDF4UKJC5aJzJCe3Os9gqtjkMmP/7KV+SHX2WJFhCfnxBZrPOPDea 2ksQfPKQF7DS9Q7mI7EDcktfPw== -----END CERTIFICATE-----Generated at Mon Oct 20 09:18:01 2025 by rpki-client