$ rpki-client -vvf rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft File: 2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft (raw, json) Hash identifier: CTvqrF+xLEBrYXxnavDhVH+pX+qe21YupLZ1RyVxJI4= Subject key identifier: 27:A9:E1:6C:0E:16:B0:07:A6:F1:53:6E:50:57:9D:FE:95:2B:65:EC Authority key identifier: 2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70 Certificate issuer: /CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370 Certificate serial: 69A2ED21087BE6349341B31270FCC9FB903576BA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer Subject info access: rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft Manifest number: 02E8 Signing time: Mon 20 Oct 2025 03:39:23 +0000 Manifest this update: Mon 20 Oct 2025 03:34:23 +0000 Manifest next update: Tue 21 Oct 2025 06:08:23 +0000 Files and hashes: 1: 323830343a343431383a3a2f33322d3334203d3e20323637363032.roa (hash: SVa3n9CXuCMyjnUcZIuGz915kRDbHwqunvwZpWNFCqE=) 2: 34352e37312e38342e302f32322d3234203d3e20323637363032.roa (hash: 1NxEPZFmMr8y2/dlgVX6k0u/Jfu4X7J3Z/0pEUeqw54=) 3: 2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl (hash: +FcpGzSBGfwzNXn4DenK3DriIm1ijs55E8lxKkZp42M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a2:ed:21:08:7b:e6:34:93:41:b3:12:70:fc:c9:fb:90:35:76:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370 Validity Not Before: Oct 20 03:34:23 2025 GMT Not After : Oct 21 06:08:23 2025 GMT Subject: CN=27A9E16C0E16B007A6F1536E50579DFE952B65EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8a:48:83:33:1d:87:8d:d9:b3:75:cc:37:95: 06:39:4e:46:3d:c5:8a:ad:e0:8c:75:9e:5c:d6:ee: 74:b0:73:6e:9f:9d:19:c2:b9:20:b9:a8:83:b0:2c: 6f:d7:ca:91:fd:c7:54:6f:76:2a:af:6e:4e:ed:b3: 3d:01:aa:d8:b3:23:f4:5f:98:32:bc:d4:51:f1:22: 32:e6:7f:5c:b5:b2:58:0a:d4:53:1c:a3:48:85:e8: b0:fe:d6:f5:c7:64:e5:a6:3b:e6:a7:1a:07:31:44: bf:69:02:15:77:b1:b5:78:69:8a:a2:40:5c:88:2f: b9:84:50:4e:37:9e:23:1a:bf:5b:51:e4:ce:4d:94: ac:9b:f3:94:e2:37:45:21:f3:ec:15:bb:f8:cc:c0: 3c:c4:66:24:98:10:07:1d:e9:94:b9:6f:06:93:ad: a4:05:e6:c3:a6:3f:25:c3:e2:30:b8:ea:dc:59:65: 76:24:b9:fc:61:90:6d:f6:1a:c1:3c:65:40:db:53: 6e:5e:fb:98:7e:18:d2:99:24:8f:c3:6d:89:d2:00: c4:c1:32:5e:9f:fa:e6:62:a2:af:73:81:e1:50:c5: ab:eb:f1:8f:ab:a8:94:1f:11:6f:05:8e:f8:25:21: f0:1d:58:00:89:c2:c9:1d:c1:12:f2:66:b2:3e:92: 82:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A9:E1:6C:0E:16:B0:07:A6:F1:53:6E:50:57:9D:FE:95:2B:65:EC X509v3 Authority Key Identifier: keyid:2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8b:54:8a:8a:59:1d:29:d6:b3:19:61:cf:66:c8:97:f6:0f: 29:f2:0b:21:74:39:7b:82:f3:d0:38:23:52:14:bb:1b:c0:cd: ae:b9:bb:6a:22:af:60:64:46:0c:76:5e:b4:db:db:36:0d:3e: 34:7e:99:5f:80:88:3e:09:84:a5:d2:55:a9:5d:6d:a9:81:27: 82:8f:10:fc:41:d9:41:29:3c:5c:58:ed:a2:b7:66:d6:b0:6f: 6c:6b:25:f6:57:38:10:fa:ac:d4:3b:c2:cd:32:45:47:37:03: eb:eb:91:17:84:e2:27:f1:98:26:80:2e:e0:d7:14:03:c6:f1: 9b:92:74:ac:da:d6:c3:ba:c7:c6:a2:fe:48:5f:c3:ba:51:13: 6f:ad:0f:04:d0:b7:92:54:3a:7c:9d:76:e7:7a:87:8f:f1:04: 59:c2:28:be:50:e3:6a:d2:68:35:e7:c7:bb:25:dd:d4:28:78: dc:c9:7e:cd:a4:2b:5c:61:18:ca:cf:66:cc:c1:70:db:f8:01: c4:aa:19:90:c2:9a:6d:32:2f:c2:2a:e4:9d:c0:52:4b:4e:0c: ba:df:a6:00:b9:ee:af:41:c6:45:50:50:7a:f0:8d:ca:ef:12: 26:7d:c8:0b:99:ad:7a:5d:6c:5d:88:a7:63:a3:97:0f:1b:e2: 2c:3b:c3:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaaLtIQh75jSTQbMScPzJ+5A1drowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBMkU5NzQyQkFGQjAzRkZGOEI0ODA3QUI5MDc1RkZD QzMxMDM3MDAeFw0yNTEwMjAwMzM0MjNaFw0yNTEwMjEwNjA4MjNaMDMxMTAvBgNV BAMTKDI3QTlFMTZDMEUxNkIwMDdBNkYxNTM2RTUwNTc5REZFOTUyQjY1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaikiDMx2Hjdmzdcw3lQY5TkY9 xYqt4Ix1nlzW7nSwc26fnRnCuSC5qIOwLG/XypH9x1Rvdiqvbk7tsz0BqtizI/Rf mDK81FHxIjLmf1y1slgK1FMco0iF6LD+1vXHZOWmO+anGgcxRL9pAhV3sbV4aYqi QFyIL7mEUE43niMav1tR5M5NlKyb85TiN0Uh8+wVu/jMwDzEZiSYEAcd6ZS5bwaT raQF5sOmPyXD4jC46txZZXYkufxhkG32GsE8ZUDbU25e+5h+GNKZJI/DbYnSAMTB Ml6f+uZioq9zgeFQxavr8Y+rqJQfEW8FjvglIfAdWACJwskdwRLyZrI+koJ7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJ6nhbA4WsAem8VNuUFed/pUrZewwHwYDVR0j BBgwFoAULKLpdCuvsD//i0gHq5B1/8wxA3AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDlHUjU0R3dxeXFCZ1ZZajFlSERYZk5YUzFoN3FoYUZMRW5ycW5CUXFD QU0vMS8yQ0EyRTk3NDJCQUZCMDNGRkY4QjQ4MDdBQjkwNzVGRkNDMzEwMzcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQTJFOTc0MkJBRkIwM0ZG RjhCNDgwN0FCOTA3NUZGQ0MzMTAzNzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDlHUjU0R3dxeXFCZ1ZZajFlSERYZk5YUzFoN3FoYUZMRW5ycW5CUXFDQU0vMS8y Q0EyRTk3NDJCQUZCMDNGRkY4QjQ4MDdBQjkwNzVGRkNDMzEwMzcwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADItUiopZHSnWsxlhz2bIl/YPKfILIXQ5e4Lz0DgjUhS7G8DNrrm7aiKvYGRG DHZetNvbNg0+NH6ZX4CIPgmEpdJVqV1tqYEngo8Q/EHZQSk8XFjtordm1rBvbGsl 9lc4EPqs1DvCzTJFRzcD6+uRF4TiJ/GYJoAu4NcUA8bxm5J0rNrWw7rHxqL+SF/D ulETb60PBNC3klQ6fJ1253qHj/EEWcIovlDjatJoNefHuyXd1Ch43Ml+zaQrXGEY ys9mzMFw2/gBxKoZkMKabTIvwirkncBSS04Mut+mALnur0HGRVBQevCNyu8SJn3I C5mtel1sXYinY6OXDxviLDvDiQ== -----END CERTIFICATE-----Generated at Mon Oct 20 16:27:55 2025 by rpki-client