$ rpki-client -vvf rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft File: BCF333E032A5E62EC142237F97628D0F131FE30A.mft (raw, json) Hash identifier: 9bbZZYzhsLFT4fFetRvA+0Z9S+Qamw8BPdVN0ivtzWU= Subject key identifier: 96:71:D1:F2:9F:E5:60:8D:5E:DF:08:42:1A:53:5A:70:0A:89:D3:D0 Authority key identifier: BC:F3:33:E0:32:A5:E6:2E:C1:42:23:7F:97:62:8D:0F:13:1F:E3:0A Certificate issuer: /CN=BCF333E032A5E62EC142237F97628D0F131FE30A Certificate serial: 6D36D80B0622C8AC99853210AD8367EB4B1E0332 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF333E032A5E62EC142237F97628D0F131FE30A.cer Subject info access: rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft Manifest number: 1C Signing time: Mon 20 Oct 2025 04:20:58 +0000 Manifest this update: Mon 20 Oct 2025 04:15:58 +0000 Manifest next update: Tue 21 Oct 2025 06:34:58 +0000 Files and hashes: 1: BCF333E032A5E62EC142237F97628D0F131FE30A.crl (hash: PklwdFwcdiqoX+R7xIrK+DB9MghJ8LewNrfRMUxbvNk=) 2: 3137302e3233332e38382e302f32322d3332203d3e20323635323437.roa (hash: tD8bzSd/td4gAgsNMdvjp1tJllIejadsCZsau+IIXHE=) 3: 3136372e3234392e3132342e302f32322d3332203d3e20323635323437.roa (hash: TxYNN5FtYlFE2BefvjhjkJb082YvcmFiVZKFHbUR/qY=) 4: 323830343a326364383a3a2f33322d313238203d3e20323635323437.roa (hash: 2rb73WMTlVULrRQzvfpNjeHdm4DJYAvni4A0ZCBlOH8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.crl rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF333E032A5E62EC142237F97628D0F131FE30A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:36:d8:0b:06:22:c8:ac:99:85:32:10:ad:83:67:eb:4b:1e:03:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCF333E032A5E62EC142237F97628D0F131FE30A Validity Not Before: Oct 20 04:15:58 2025 GMT Not After : Oct 21 06:34:58 2025 GMT Subject: CN=9671D1F29FE5608D5EDF08421A535A700A89D3D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d8:99:e3:50:46:f4:db:35:69:c1:29:10:90: f7:05:f5:35:90:7b:81:26:27:79:fc:a8:0a:0a:57: 2e:43:3d:2d:d7:3f:c1:86:b0:e5:ea:be:8f:93:33: 32:a4:39:fa:a1:94:4a:d3:3d:b1:a2:3b:71:1a:2c: f0:c4:01:90:cc:d1:4e:47:0b:18:26:a8:bb:9e:44: bf:2a:d6:33:50:3d:7f:95:e3:70:2e:f2:76:8c:16: 46:73:e1:50:aa:3b:45:54:12:47:13:cc:26:c0:f2: 26:1b:e4:ac:d8:41:d8:bd:f8:8f:be:cf:a8:d4:0d: 7b:02:34:7c:a9:29:1e:0b:3d:27:cb:21:73:21:d5: d9:7a:8e:62:78:51:92:c7:a7:d5:19:bd:1e:27:a8: 2d:7f:5c:7a:99:1e:4c:9b:82:00:f8:31:40:f4:bb: 50:2a:53:8c:32:49:02:bf:ea:19:d1:f4:17:03:be: 78:a6:6c:ea:d6:43:44:56:b5:83:b6:60:61:e3:aa: a0:51:d0:77:a8:70:dd:9e:b8:8c:c9:ef:55:e5:e4: 5b:66:d9:74:ee:1a:9d:28:e1:8b:0c:fe:79:4d:5e: db:76:35:f0:16:ae:72:7e:cc:4a:73:a4:45:90:31: 5d:99:9e:19:5b:46:e2:28:c2:a7:af:e9:a5:12:27: 31:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:71:D1:F2:9F:E5:60:8D:5E:DF:08:42:1A:53:5A:70:0A:89:D3:D0 X509v3 Authority Key Identifier: keyid:BC:F3:33:E0:32:A5:E6:2E:C1:42:23:7F:97:62:8D:0F:13:1F:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF333E032A5E62EC142237F97628D0F131FE30A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:4b:c0:c9:a5:8a:a6:eb:4f:3e:fc:c0:d5:fd:d6:be:c7:76: f8:54:7b:3e:ba:2d:62:4d:2b:0e:4a:33:1d:77:64:9f:00:b9: f0:10:8c:03:60:43:5f:5a:df:ba:ee:e4:9f:59:07:f2:0b:94: 05:e9:33:b1:7f:91:2d:0b:ee:d6:f6:c6:a1:8e:80:a7:f3:ac: 8c:e6:4b:b8:49:7f:77:27:9f:b5:6e:6b:f3:73:47:b2:ef:d6: 29:0f:26:b5:ee:dc:c6:ab:9e:41:93:e4:9b:c2:d6:d6:34:8b: 02:a4:39:0b:f7:e1:3e:89:5c:57:8f:07:62:7b:90:c9:1a:3a: f3:dd:f4:be:1d:cc:63:0d:70:65:25:be:66:b4:de:1c:22:63: 39:68:15:54:e1:31:ba:8c:13:76:b5:d7:4d:4e:70:f4:c2:b5: a9:95:1a:b0:49:01:8e:e5:3a:29:7d:d8:c8:31:11:dc:c4:7a: 91:c8:b8:96:2b:4f:2a:3b:ef:94:94:0c:21:d6:fc:82:d0:9a: c0:c4:5b:c4:8b:8a:6b:de:fc:02:a5:b9:25:3e:aa:3b:6a:72: 39:7c:89:98:3f:f2:f8:81:a6:43:0b:70:48:93:d7:4b:53:a6: 67:68:86:a2:52:81:21:d2:01:7e:40:b6:be:a1:4a:23:cf:f5: 93:63:41:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbTbYCwYiyKyZhTIQrYNn60seAzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNGMzMzRTAzMkE1RTYyRUMxNDIyMzdGOTc2MjhEMEYx MzFGRTMwQTAeFw0yNTEwMjAwNDE1NThaFw0yNTEwMjEwNjM0NThaMDMxMTAvBgNV BAMTKDk2NzFEMUYyOUZFNTYwOEQ1RURGMDg0MjFBNTM1QTcwMEE4OUQzRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp2JnjUEb02zVpwSkQkPcF9TWQ e4EmJ3n8qAoKVy5DPS3XP8GGsOXqvo+TMzKkOfqhlErTPbGiO3EaLPDEAZDM0U5H CxgmqLueRL8q1jNQPX+V43Au8naMFkZz4VCqO0VUEkcTzCbA8iYb5KzYQdi9+I++ z6jUDXsCNHypKR4LPSfLIXMh1dl6jmJ4UZLHp9UZvR4nqC1/XHqZHkybggD4MUD0 u1AqU4wySQK/6hnR9BcDvnimbOrWQ0RWtYO2YGHjqqBR0HeocN2euIzJ71Xl5Ftm 2XTuGp0o4YsM/nlNXtt2NfAWrnJ+zEpzpEWQMV2ZnhlbRuIowqev6aUSJzH9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlnHR8p/lYI1e3whCGlNacAqJ09AwHwYDVR0j BBgwFoAUvPMz4DKl5i7BQiN/l2KNDxMf4wowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1VoRzNZbU4yVlBMWjgzakVFaGE5MnVOY1ZEZkNpV214aDFDVUVmTXdK b3YvMC9CQ0YzMzNFMDMyQTVFNjJFQzE0MjIzN0Y5NzYyOEQwRjEzMUZFMzBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDRjMzM0UwMzJBNUU2MkVD MTQyMjM3Rjk3NjI4RDBGMTMxRkUzMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1VoRzNZbU4yVlBMWjgzakVFaGE5MnVOY1ZEZkNpV214aDFDVUVmTXdKb3YvMC9C Q0YzMzNFMDMyQTVFNjJFQzE0MjIzN0Y5NzYyOEQwRjEzMUZFMzBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhkvAyaWKputPPvzA1f3Wvsd2+FR7ProtYk0rDkozHXdknwC58BCMA2BDX1rf uu7kn1kH8guUBekzsX+RLQvu1vbGoY6Ap/OsjOZLuEl/dyeftW5r83NHsu/WKQ8m te7cxqueQZPkm8LW1jSLAqQ5C/fhPolcV48HYnuQyRo68930vh3MYw1wZSW+ZrTe HCJjOWgVVOExuowTdrXXTU5w9MK1qZUasEkBjuU6KX3YyDER3MR6kci4litPKjvv lJQMIdb8gtCawMRbxIuKa978AqW5JT6qO2pyOXyJmD/y+IGmQwtwSJPXS1OmZ2iG olKBIdIBfkC2vqFKI8/1k2NBkA== -----END CERTIFICATE-----Generated at Mon Oct 20 15:35:53 2025 by rpki-client