$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft File: CA2ED340034D0368230850867C30E245990118A2.mft (raw, json) Hash identifier: z0dKym+mD7KaQhlfR6D8eIpwfID0eCqT2GvERuH/nfg= Subject key identifier: 1C:B5:30:25:09:AE:AF:A0:B6:CF:A7:EA:F9:6B:E8:F5:70:A9:89:11 Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2 Certificate issuer: /CN=CA2ED340034D0368230850867C30E245990118A2 Certificate serial: 6B6793927C6A3F8D7B721D60A16A2936155184B4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft Manifest number: 0351 Signing time: Sun 19 Oct 2025 19:10:00 +0000 Manifest this update: Sun 19 Oct 2025 19:05:00 +0000 Manifest next update: Mon 20 Oct 2025 19:10:00 +0000 Files and hashes: 1: CA2ED340034D0368230850867C30E245990118A2.crl (hash: RWguYLwC1oLIWbdxMYifGG/Jq1/r8OqFDXRPlaR31JU=) 2: 3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (hash: 5e4gcNEn5VL2vN7iW7nA5Df4Xfu26IOs2pc5B0p4lXc=) 3: 3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (hash: k3rhtpDLwoW36HfhrQiYO+psfP/HD50OXGIZu2C/YjE=) 4: 323830343a336438303a3a2f33322d3438203d3e20323636353335.roa (hash: tpoXD4T4EUi9EwpxT41fxDYxhlTzas0mOmEydCxj8EA=) 5: 3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (hash: lZ9umGE5NlyJckpUrEcRBf2qnDy03PIbFuZNB7UkcM4=) 6: 3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (hash: bJTEqeP16XCpCH5JZabT/MCNKPhW6t9nzCk4I/T1oI0=) 7: 3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (hash: dTVML3Vbzw4YnIZhgLmRkiNFb188p4H6d/auTvRDB4A=) 8: 3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (hash: yjU6PAJwL/lIZeEtQEZbUNPm0Zr33QD1yFw6wjO3p2g=) 9: 3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (hash: rStpDynGRR2uvmjQkNNftRfa83aI9CFXepHd5ccjIOo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 19:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:67:93:92:7c:6a:3f:8d:7b:72:1d:60:a1:6a:29:36:15:51:84:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA2ED340034D0368230850867C30E245990118A2 Validity Not Before: Oct 19 19:05:00 2025 GMT Not After : Oct 20 19:10:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a7:1b:f9:b7:85:a5:08:6e:0d:4e:46:be:85: 35:77:d2:3b:fe:fa:48:b3:16:b6:16:91:26:2d:91: b5:db:71:9f:80:52:a4:d4:27:87:2a:ae:8c:bb:a4: fd:82:cc:0a:cb:e2:aa:6f:4e:17:bf:38:05:92:56: db:5d:72:65:29:d7:f8:bb:f0:25:b7:bc:e6:f3:21: 4e:5a:3c:05:ed:ce:e3:bc:ca:14:a6:a4:54:c7:57: ea:42:03:a6:10:6e:2d:e6:bb:93:45:42:5c:9f:fe: 17:52:3b:49:7a:57:11:0c:77:88:3e:bd:cc:f0:40: 0e:61:7d:77:7e:2f:5c:b9:e0:90:76:c3:24:c7:65: 08:0a:ec:28:a7:0c:cb:37:58:7a:0d:90:01:7e:a3: 98:97:d7:b3:9a:e3:23:32:f3:50:76:ae:8d:c3:ee: 5d:a7:ec:15:19:16:6f:15:83:c9:a2:e7:4f:1a:f6: 1f:d7:bc:15:9e:9d:4b:4b:ae:44:53:28:1c:71:11: af:08:d0:ca:88:ff:b5:aa:33:41:08:c8:81:ad:2a: c8:4f:f9:5c:3f:6c:74:40:1c:aa:60:18:b5:80:83: b4:f7:38:3e:b7:05:a4:fe:9c:13:cf:79:45:71:6b: a7:e0:b8:4c:1b:1c:5c:9f:1d:79:58:9d:48:d4:37: b7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B5:30:25:09:AE:AF:A0:B6:CF:A7:EA:F9:6B:E8:F5:70:A9:89:11 X509v3 Authority Key Identifier: keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:36:1d:4c:9d:f8:97:7b:1e:47:ac:a4:53:b0:31:db:58:61: c8:74:88:44:8f:5b:eb:b5:0b:f6:85:07:0b:5d:0e:4b:22:8c: 74:4b:85:d8:41:25:f8:79:2f:63:95:ca:45:45:ff:0e:65:e4: b4:3f:a8:44:69:70:9a:ff:82:fa:69:0b:f6:4f:22:e7:5d:0e: 79:50:b3:82:c4:73:4c:ab:f4:aa:96:62:71:19:47:41:f1:54: 01:3e:18:09:25:24:1e:b8:55:51:30:1a:9d:e6:af:9e:61:e8: e5:8e:b6:92:31:6a:36:aa:24:5e:a4:40:61:54:95:91:df:45: ec:b5:02:0e:cc:77:e0:12:5c:16:51:97:23:8e:f9:9a:77:89: 94:1d:15:34:3f:f2:32:70:f6:72:54:12:3c:13:37:98:ee:b8: 6c:41:79:70:80:9f:b4:20:31:8a:98:72:55:a2:6e:15:2f:d7: fb:16:f0:28:58:a2:5d:e1:34:17:4d:57:e5:0e:12:f7:10:1f: 7b:93:af:9a:57:b0:df:f9:c3:07:0f:2d:f0:c2:78:c0:97:bb: a6:c9:43:65:8d:72:c4:89:25:73:7f:a8:37:43:d4:1a:44:34: 4c:2a:5c:60:d2:c2:d0:20:1a:4d:fe:9a:37:d4:10:b2:2b:5c: 7f:77:e3:ec -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUa2eTknxqP417ch1goWopNhVRhLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyRUQzNDAwMzREMDM2ODIzMDg1MDg2N0MzMEUyNDU5 OTAxMThBMjAeFw0yNTEwMTkxOTA1MDBaFw0yNTEwMjAxOTEwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTJBNzFCRjlCNzg1QTUwODZF MEQ0RTQ2QkU4NTM1NzdEMjNCRkVGQTQ4QjMxNkI2MTY5MTI2MkQ5MUI1REI3MTlG ODA1MkE0RDQyNzg3MkFBRThDQkJBNEZEODJDQzBBQ0JFMkFBNkY0RTE3QkYzODA1 OTI1NkRCNUQ3MjY1MjlEN0Y4QkJGMDI1QjdCQ0U2RjMyMTRFNUEzQzA1RURDRUUz QkNDQTE0QTZBNDU0Qzc1N0VBNDIwM0E2MTA2RTJERTZCQjkzNDU0MjVDOUZGRTE3 NTIzQjQ5N0E1NzExMEM3Nzg4M0VCRENDRjA0MDBFNjE3RDc3N0UyRjVDQjlFMDkw NzZDMzI0Qzc2NTA4MEFFQzI4QTcwQ0NCMzc1ODdBMEQ5MDAxN0VBMzk4OTdEN0Iz OUFFMzIzMzJGMzUwNzZBRThEQzNFRTVEQTdFQzE1MTkxNjZGMTU4M0M5QTJFNzRG MUFGNjFGRDdCQzE1OUU5RDRCNEJBRTQ0NTMyODFDNzExMUFGMDhEMENBODhGRkI1 QUEzMzQxMDhDODgxQUQyQUM4NEZGOTVDM0Y2Qzc0NDAxQ0FBNjAxOEI1ODA4M0I0 RjczODNFQjcwNUE0RkU5QzEzQ0Y3OTQ1NzE2QkE3RTBCODRDMUIxQzVDOUYxRDc5 NTg5RDQ4RDQzN0I3NEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA4qcb+beFpQhuDU5GvoU1d9I7/vpIsxa2FpEmLZG123GfgFKk1CeH Kq6Mu6T9gswKy+Kqb04XvzgFklbbXXJlKdf4u/Alt7zm8yFOWjwF7c7jvMoUpqRU x1fqQgOmEG4t5ruTRUJcn/4XUjtJelcRDHeIPr3M8EAOYX13fi9cueCQdsMkx2UI CuwopwzLN1h6DZABfqOYl9ezmuMjMvNQdq6Nw+5dp+wVGRZvFYPJoudPGvYf17wV np1LS65EUygccRGvCNDKiP+1qjNBCMiBrSrIT/lcP2x0QByqYBi1gIO09zg+twWk /pwTz3lFcWun4LhMGxxcnx15WJ1I1De3TQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FBy1MCUJrq+gts+n6vlr6PVwqYkRMB8GA1UdIwQYMBaAFMou00ADTQNoIwhQhnww 4kWZARiiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4 RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2 ODIzMDg1MDg2N0MzMEUyNDU5OTAxMThBMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9DQTJFRDM0MDAzNEQwMzY4MjMwODUwODY3QzMwRTI0NTk5MDEx OEEyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4RXZIVEhX aWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2ODIzMDg1 MDg2N0MzMEUyNDU5OTAxMThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAE2HUyd+Jd7HkespFOwMdtY Ych0iESPW+u1C/aFBwtdDksijHRLhdhBJfh5L2OVykVF/w5l5LQ/qERpcJr/gvpp C/ZPIuddDnlQs4LEc0yr9KqWYnEZR0HxVAE+GAklJB64VVEwGp3mr55h6OWOtpIx ajaqJF6kQGFUlZHfRey1Ag7Md+ASXBZRlyOO+Zp3iZQdFTQ/8jJw9nJUEjwTN5ju uGxBeXCAn7QgMYqYclWibhUv1/sW8ChYol3hNBdNV+UOEvcQH3uTr5pXsN/5wwcP LfDCeMCXu6bJQ2WNcsSJJXN/qDdD1BpENEwqXGDSwtAgGk3+mjfUELIrXH934+w= -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:05 2025 by rpki-client