$ rpki-client -vvf rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.mft File: 2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.mft (raw, json) Hash identifier: lzqS9A6XDG3s0q9DFVfAYiaDFSzp2AVhTHNAYYLOpok= Subject key identifier: 19:27:FB:3E:21:2B:EE:4D:5C:71:90:02:BB:30:6A:FF:C6:6D:3E:A6 Authority key identifier: 2B:E9:E1:3D:9A:7C:5A:A3:F1:7D:C9:9A:74:E8:D5:C7:D8:4B:D4:D8 Certificate issuer: /CN=2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8 Certificate serial: 1428626A2E8C5547592C52C6628A4AC7C8483766 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.mft Manifest number: 6A Signing time: Mon 20 Oct 2025 01:58:28 +0000 Manifest this update: Mon 20 Oct 2025 01:53:28 +0000 Manifest next update: Tue 21 Oct 2025 03:00:28 +0000 Files and hashes: 1: 34352e3137322e3138302e302f32322d3234203d3e20323635343735.roa (hash: iUrPPNnxc5GaUiN1Dq3cxhV0gEpO+PhiJQP1qMpDyAE=) 2: 3137372e37332e34322e302f32332d3234203d3e20323635343735.roa (hash: 3POfxo24R8wIDYJx9wMK6V1VAltXPldj6Y6kfY9O6sI=) 3: 3136382e3139372e32342e302f32322d3234203d3e20323635343735.roa (hash: DvmYlOm8OmuaRVXtvUloK3/qsa5opULT8IXI38cQ6dg=) 4: 323830343a333462383a3a2f33322d3438203d3e20323635343735.roa (hash: 7IoalipyU9bCWrcvBhgDRcJlcy9X1NBtovpjl/NZOjk=) 5: 2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.crl (hash: ecjxv0/k1tAab6bs1LWqPy+21mwLhsYH2UHfgsGKCTM=) 6: 3230302e3130362e3139322e302f32322d3234203d3e20323635343735.roa (hash: BdI8udBx2K3aAdKmpdNnH4EbR16ZpLBs2fHxLiSj25M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.crl rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:28:62:6a:2e:8c:55:47:59:2c:52:c6:62:8a:4a:c7:c8:48:37:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8 Validity Not Before: Oct 20 01:53:28 2025 GMT Not After : Oct 21 03:00:28 2025 GMT Subject: CN=1927FB3E212BEE4D5C719002BB306AFFC66D3EA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:48:58:3c:55:25:a4:e9:b5:e4:7c:4d:99:7a: 7a:6b:91:e8:0d:4f:ea:ff:2f:91:69:cd:9a:42:16: fd:5e:d8:86:84:b6:ac:fe:fd:d7:c5:eb:9d:13:60: 5f:63:68:61:d3:a6:3c:97:e3:18:e6:92:c1:b8:0f: 2b:32:73:a8:fc:85:18:b5:73:5e:9a:62:95:31:73: 0f:ca:44:af:08:fd:3c:d1:e3:da:86:94:40:a9:7e: da:df:d1:d1:6d:84:89:05:c4:61:06:43:cf:28:bd: 87:c1:3c:e7:c1:6f:62:16:69:4e:fb:2f:28:cf:d8: 88:80:8d:8e:8e:4b:8f:d0:fb:2c:59:e3:09:f8:62: b2:d7:58:38:90:c5:89:83:6b:d4:8d:2c:7c:48:78: ba:a7:e9:7f:a5:88:50:3f:89:cc:b4:d5:06:da:b9: a5:d1:47:1f:46:c1:29:b3:db:bb:c5:d0:88:9d:84: ea:8a:40:00:32:27:15:a3:9f:52:89:64:57:31:08: 8e:bc:6d:c9:87:2d:9d:00:f6:e9:b1:df:25:36:77: 97:e5:b2:89:f7:fe:1c:89:f0:41:86:33:fc:6d:8a: 41:2f:0a:dd:d9:95:c0:85:9e:1e:c1:0a:60:57:ba: 68:19:83:13:9e:b8:44:44:91:ac:f8:7b:2d:18:43: 4e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:27:FB:3E:21:2B:EE:4D:5C:71:90:02:BB:30:6A:FF:C6:6D:3E:A6 X509v3 Authority Key Identifier: keyid:2B:E9:E1:3D:9A:7C:5A:A3:F1:7D:C9:9A:74:E8:D5:C7:D8:4B:D4:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:eb:34:25:74:1f:b1:31:ad:a3:d9:bd:2d:91:4e:59:59:92: d6:8b:cb:e2:ba:50:5e:c3:2a:d2:1d:b8:c4:16:5b:c3:32:b6: 0d:ce:22:46:ae:06:b0:14:e2:c6:9a:72:f8:5a:35:dd:ce:f7: 33:6b:24:a1:c5:5d:f4:75:a9:35:82:97:46:9b:3b:02:80:3d: c9:4a:f9:2b:54:aa:0d:20:bb:d8:c9:14:49:54:a9:be:1a:84: 97:03:f6:67:01:43:c9:ba:f4:13:ac:13:11:2f:9f:60:0a:c3: 41:de:8b:40:13:2b:73:96:2f:84:c6:8d:2d:47:f4:d8:cf:cc: 9d:29:86:14:1f:f7:7d:6f:c1:3e:91:be:4a:71:e7:5a:13:8c: f1:88:57:b6:35:6f:f3:92:06:3d:7e:29:56:34:f1:0f:88:aa: 2c:0c:7f:30:4e:3f:f3:23:ce:ad:af:60:26:bb:27:2a:99:75: 41:b8:6b:40:c4:e3:f2:62:6c:a3:a9:ce:fb:8a:3e:9d:ad:80: e5:ea:20:48:b5:b2:5b:53:bb:d9:e8:3b:b4:89:af:ca:4d:e9: f4:96:74:12:28:6e:12:10:f7:e7:8c:89:5e:f2:bf:96:21:66: 17:d3:fe:63:5b:39:6e:62:3f:43:02:90:c6:80:78:0c:95:fc: c6:40:ae:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFChiai6MVUdZLFLGYopKx8hIN2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJFOUUxM0Q5QTdDNUFBM0YxN0RDOTlBNzRFOEQ1QzdE ODRCRDREODAeFw0yNTEwMjAwMTUzMjhaFw0yNTEwMjEwMzAwMjhaMDMxMTAvBgNV BAMTKDE5MjdGQjNFMjEyQkVFNEQ1QzcxOTAwMkJCMzA2QUZGQzY2RDNFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySFg8VSWk6bXkfE2ZenprkegN T+r/L5FpzZpCFv1e2IaEtqz+/dfF650TYF9jaGHTpjyX4xjmksG4Dysyc6j8hRi1 c16aYpUxcw/KRK8I/TzR49qGlECpftrf0dFthIkFxGEGQ88ovYfBPOfBb2IWaU77 LyjP2IiAjY6OS4/Q+yxZ4wn4YrLXWDiQxYmDa9SNLHxIeLqn6X+liFA/icy01Qba uaXRRx9GwSmz27vF0IidhOqKQAAyJxWjn1KJZFcxCI68bcmHLZ0A9umx3yU2d5fl son3/hyJ8EGGM/xtikEvCt3ZlcCFnh7BCmBXumgZgxOeuEREkaz4ey0YQ04FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGSf7PiEr7k1ccZACuzBq/8ZtPqYwHwYDVR0j BBgwFoAUK+nhPZp8WqPxfcmadOjVx9hL1NgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGRIdE15bk4zMnZLMkZFQzVqbVdRN0F5aEQ0NDc3dm1oTlAzUVRVQ0Zr cW4vMC8yQkU5RTEzRDlBN0M1QUEzRjE3REM5OUE3NEU4RDVDN0Q4NEJENEQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRTlFMTNEOUE3QzVBQTNG MTdEQzk5QTc0RThENUM3RDg0QkQ0RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGRIdE15bk4zMnZLMkZFQzVqbVdRN0F5aEQ0NDc3dm1oTlAzUVRVQ0ZrcW4vMC8y QkU5RTEzRDlBN0M1QUEzRjE3REM5OUE3NEU4RDVDN0Q4NEJENEQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYes0JXQfsTGto9m9LZFOWVmS1ovL4rpQXsMq0h24xBZbwzK2Dc4iRq4GsBTi xppy+Fo13c73M2skocVd9HWpNYKXRps7AoA9yUr5K1SqDSC72MkUSVSpvhqElwP2 ZwFDybr0E6wTES+fYArDQd6LQBMrc5YvhMaNLUf02M/MnSmGFB/3fW/BPpG+SnHn WhOM8YhXtjVv85IGPX4pVjTxD4iqLAx/ME4/8yPOra9gJrsnKpl1QbhrQMTj8mJs o6nO+4o+na2A5eogSLWyW1O72eg7tImvyk3p9JZ0EihuEhD354yJXvK/liFmF9P+ Y1s5bmI/QwKQxoB4DJX8xkCuHg== -----END CERTIFICATE-----Generated at Mon Oct 20 13:24:02 2025 by rpki-client