$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.mft File: BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.mft (raw, json) Hash identifier: 3piQp/ASWDfT5Uwb+xzNMA6DLDhKQ8360cEvF3IWuhI= Subject key identifier: 71:E4:06:F6:B7:4D:04:B6:03:24:25:E3:03:75:DB:56:23:7C:48:E5 Authority key identifier: BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60 Certificate issuer: /CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60 Certificate serial: 3DD02B4ADB65416F401C0B7E7FE0DD4E22586D2A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer Subject info access: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.mft Manifest number: 11 Signing time: Mon 20 Oct 2025 00:05:35 +0000 Manifest this update: Mon 20 Oct 2025 00:00:35 +0000 Manifest next update: Tue 21 Oct 2025 02:58:35 +0000 Files and hashes: 1: 3133382e3230342e3137352e302f32342d3234203d3e20323633393131.roa (hash: RTYl1Ot9rrwAfupFDcxrycxLUcl2itpl6m6iWBlKQLE=) 2: 323830343a323739343a3a2f33322d3332203d3e20323633393131.roa (hash: bK0gtO0JmiAg0I608Iz5A+xFCE8tZKl4orwDjiL6AJU=) 3: 3133382e3230342e3137322e302f32322d3232203d3e20323633393131.roa (hash: TKxrWI/UtQO06f0V4oMpRtshZID0kbklXgTB/FM6dPM=) 4: BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl (hash: CjJgkukSEgHQteX4S45FgIutz+Z4iDSMzfhpZnOsqwo=) 5: 3133382e3230342e3137322e302f32332d3233203d3e20323633393131.roa (hash: 5vvwC6MQU7dBy4VA97gpDUDkn4tFUMFLR4X0/id2YOc=) 6: 3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa (hash: oPlAFKdBOzvHicH7jSWtdL3T35vlcWGOJfLQ2OzOQRo=) 7: 3133382e3230342e3137332e302f32342d3234203d3e20323633393131.roa (hash: qesjynq5DFW/wIqN2yce/NCuwDwwi/kRJriZVT1PbTM=) 8: 3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa (hash: tQ9BE7myZWTRJBmbkn0TzJRLKgNbGTDntpPgIeG1AmI=) 9: 3133382e3230342e3137322e302f32342d3234203d3e20323633393131.roa (hash: JTzaz8ld9WJmDqi6uMzYs05e1Om4PnGPjqIIu4WqRYI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d0:2b:4a:db:65:41:6f:40:1c:0b:7e:7f:e0:dd:4e:22:58:6d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60 Validity Not Before: Oct 20 00:00:35 2025 GMT Not After : Oct 21 02:58:35 2025 GMT Subject: CN=71E406F6B74D04B6032425E30375DB56237C48E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:e1:65:d2:74:10:6a:82:20:6d:fb:9c:65: 8f:a9:65:2b:ea:7b:a0:cb:dc:ee:a3:96:15:ba:b0: 71:26:25:f4:32:2f:26:b3:cc:eb:e5:c5:c9:19:01: b8:2c:e8:cb:e8:61:94:a3:07:f7:08:7e:f5:ee:73: b9:39:16:93:a1:19:1c:8d:51:6a:8f:08:ef:a4:f2: c6:60:35:6b:82:ba:1e:04:e8:a4:f7:9c:0b:56:97: 5c:3c:35:0d:d0:e5:e6:0c:28:2b:bc:09:fa:58:29: 1f:ae:32:bb:f9:b5:d7:3f:eb:1a:62:62:1b:cb:9b: 4f:b8:7d:b9:2c:4d:44:9c:35:cc:3a:2e:df:68:54: 8a:75:c2:3c:97:72:80:4d:2b:c4:1d:2f:ea:60:ea: 67:12:7e:aa:8b:dd:f1:af:82:c4:77:d4:73:1b:09: b2:82:f3:a3:f2:04:6b:22:4e:ad:2a:35:16:1e:44: 7e:fe:1c:30:62:22:11:ec:2d:4d:d4:b9:59:c0:b2: 2e:9f:1f:24:99:51:89:c7:e3:31:4f:62:b8:dc:6f: 54:4d:2d:fe:1f:69:27:78:8c:9f:45:d6:15:e1:98: f6:e0:61:88:e9:32:08:5d:15:0d:23:d5:80:32:51: fd:1c:59:5d:50:08:31:3d:52:ee:53:21:d8:98:a0: ba:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E4:06:F6:B7:4D:04:B6:03:24:25:E3:03:75:DB:56:23:7C:48:E5 X509v3 Authority Key Identifier: keyid:BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:3d:96:b9:74:63:7f:7c:00:5e:ff:14:46:85:73:c8:3b:8e: d3:67:3a:eb:81:d3:4f:78:4e:af:82:4d:ad:7d:3f:9d:ec:bb: f9:07:60:63:dc:10:07:29:ce:f3:0b:40:bf:15:1a:75:f5:20: 95:0b:d7:77:f6:a8:3b:eb:9c:a6:f0:11:c7:63:7e:88:7a:ea: 14:29:b4:d4:96:a6:d1:3c:10:69:42:61:87:02:49:a1:5c:4f: 2e:ec:a8:3c:0a:b7:d4:3f:9f:19:02:d6:f9:54:2f:a7:4a:6d: f5:2e:43:92:c2:2c:08:e4:ba:1f:42:22:d7:b7:16:8a:4f:e0: 36:c7:de:72:85:57:26:79:99:d4:22:95:72:88:47:2d:cc:36: e0:83:ed:6a:d2:93:cb:78:cd:76:9c:c7:bf:f0:31:4b:9a:03: 49:85:89:a9:b4:ad:d4:bd:62:1f:b7:20:f6:a7:96:9a:66:ba: 85:a5:be:45:94:53:41:b1:19:e7:3e:20:f6:b4:28:ff:55:9c: df:c8:a1:a4:0f:fb:76:63:6d:91:85:16:27:90:95:1a:6e:a1: b4:c1:1b:19:77:0f:f8:ff:f8:05:7d:18:4a:39:a1:13:c2:b0: 97:b9:4a:64:1f:17:d6:2d:80:8a:7b:e5:9b:a1:96:29:13:39: 28:03:ee:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPdArSttlQW9AHAt+f+DdTiJYbSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM3RkUwRDkwMTI1NUQ3MTIxMzI3RUZGQ0EwMUYwQjRE MUUwQUM2MDAeFw0yNTEwMjAwMDAwMzVaFw0yNTEwMjEwMjU4MzVaMDMxMTAvBgNV BAMTKDcxRTQwNkY2Qjc0RDA0QjYwMzI0MjVFMzAzNzVEQjU2MjM3QzQ4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCov+Fl0nQQaoIgbfucZY+pZSvq e6DL3O6jlhW6sHEmJfQyLyazzOvlxckZAbgs6MvoYZSjB/cIfvXuc7k5FpOhGRyN UWqPCO+k8sZgNWuCuh4E6KT3nAtWl1w8NQ3Q5eYMKCu8CfpYKR+uMrv5tdc/6xpi YhvLm0+4fbksTUScNcw6Lt9oVIp1wjyXcoBNK8QdL+pg6mcSfqqL3fGvgsR31HMb CbKC86PyBGsiTq0qNRYeRH7+HDBiIhHsLU3UuVnAsi6fHySZUYnH4zFPYrjcb1RN Lf4faSd4jJ9F1hXhmPbgYYjpMghdFQ0j1YAyUf0cWV1QCDE9Uu5TIdiYoLrjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUceQG9rdNBLYDJCXjA3XbViN8SOUwHwYDVR0j BBgwFoAUvH/g2QElXXEhMn7/ygHwtNHgrGAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNT clgvMC9CQzdGRTBEOTAxMjU1RDcxMjEzMjdFRkZDQTAxRjBCNEQxRTBBQzYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDN0ZFMEQ5MDEyNTVENzEy MTMyN0VGRkNBMDFGMEI0RDFFMEFDNjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNTclgvMC9C QzdGRTBEOTAxMjU1RDcxMjEzMjdFRkZDQTAxRjBCNEQxRTBBQzYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARD2WuXRjf3wAXv8URoVzyDuO02c664HTT3hOr4JNrX0/ney7+QdgY9wQBynO 8wtAvxUadfUglQvXd/aoO+ucpvARx2N+iHrqFCm01Jam0TwQaUJhhwJJoVxPLuyo PAq31D+fGQLW+VQvp0pt9S5DksIsCOS6H0Ii17cWik/gNsfecoVXJnmZ1CKVcohH Lcw24IPtatKTy3jNdpzHv/AxS5oDSYWJqbSt1L1iH7cg9qeWmma6haW+RZRTQbEZ 5z4g9rQo/1Wc38ihpA/7dmNtkYUWJ5CVGm6htMEbGXcP+P/4BX0YSjmhE8Kwl7lK ZB8X1i2Ainvlm6GWKRM5KAPukA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:32:20 2025 by rpki-client