$ rpki-client -vvf rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft File: BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft (raw, json) Hash identifier: 6AXHXvQyCYlGE72MJvJFvFk8ZpITr/1rJq8sEJqE7Sw= Subject key identifier: DB:F1:27:12:5B:FC:1F:A2:33:9A:8C:2E:E9:6F:C4:3E:28:CC:87:8C Authority key identifier: BD:C8:2D:F1:BE:60:CE:AF:EF:5E:98:71:1A:CA:A7:1E:9A:0B:6F:66 Certificate issuer: /CN=BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66 Certificate serial: 3913694555C5FECBE60DA7B3833B7C22AC0339E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.cer Subject info access: rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft Manifest number: 02E8 Signing time: Mon 20 Oct 2025 11:11:36 +0000 Manifest this update: Mon 20 Oct 2025 11:06:36 +0000 Manifest next update: Tue 21 Oct 2025 14:10:36 +0000 Files and hashes: 1: BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.crl (hash: NCX5s2l9FHinlB54WbxdozVvPftWghJLxiqfGYEi+/c=) 2: 34352e3137382e3130382e302f32322d3234203d3e20323639303334.roa (hash: EnAeuMQzpgwCR2kLJnXou1nYC+5EVKaOhA2hnQqK9us=) 3: 323830343a356537343a3a2f33322d3438203d3e20323639303334.roa (hash: g5D87ZyR5+oEnw5HGZM3RLvuHcE6x5XcYymV/DN7vo0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.crl rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:13:69:45:55:c5:fe:cb:e6:0d:a7:b3:83:3b:7c:22:ac:03:39:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66 Validity Not Before: Oct 20 11:06:36 2025 GMT Not After : Oct 21 14:10:36 2025 GMT Subject: CN=DBF127125BFC1FA2339A8C2EE96FC43E28CC878C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b7:4e:d4:a3:02:c9:b5:3e:9b:7d:88:c2:0c: 19:a2:d7:88:de:6e:8a:4a:b4:88:9f:79:b6:e7:6b: 9d:ca:a1:c1:a9:cc:db:25:0b:61:bf:52:36:03:d1: a0:64:43:4f:50:b5:6a:8a:a9:10:3a:46:bd:24:e0: 1a:e5:d8:8e:e8:60:a5:c2:e3:ca:77:35:e5:95:ab: 6d:41:98:b0:3e:87:7d:00:93:e0:3f:98:91:a1:ee: 64:fd:a2:27:fb:14:0a:b9:cf:5e:87:80:88:2c:b0: c1:5c:06:84:b9:7f:43:f3:01:5e:8d:7c:7a:cd:9a: 40:f2:6b:dc:e6:c2:bf:e8:11:b0:e3:bb:e2:26:53: 28:0d:d8:d3:1b:eb:22:84:59:be:0d:16:4f:02:a2: bf:ef:0b:e4:6e:03:ee:4e:e3:03:bd:1a:ec:09:a6: d9:7c:cd:43:51:89:cb:c0:22:ab:20:63:83:ad:d1: 6e:78:56:56:dc:58:32:27:e1:ad:bf:61:b8:6f:60: 7c:17:f9:6e:77:31:f3:3e:ed:4a:df:d7:45:75:07: 79:c6:85:8c:87:d4:09:4f:e8:b6:7c:de:2a:6c:0a: 83:04:de:7b:47:4d:41:d0:1d:c7:12:b2:63:76:2b: a0:1b:ee:46:ec:26:01:a5:24:00:bc:40:cc:42:57: 2f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F1:27:12:5B:FC:1F:A2:33:9A:8C:2E:E9:6F:C4:3E:28:CC:87:8C X509v3 Authority Key Identifier: keyid:BD:C8:2D:F1:BE:60:CE:AF:EF:5E:98:71:1A:CA:A7:1E:9A:0B:6F:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wg6znyq2KkGtQAkuUrnSTvSskRGsMfrPrSbpwjHLG3p/1/BDC82DF1BE60CEAFEF5E98711ACAA71E9A0B6F66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f9:a9:23:ee:9c:9b:11:a2:d7:76:60:45:5d:3a:b5:d7:c4: f6:9a:23:e4:45:cf:d1:9b:36:da:91:72:a4:26:7e:35:6f:fc: c2:cc:e0:12:2b:37:fc:aa:03:0f:6b:84:cc:23:6f:7f:e7:57: 82:51:70:a8:c4:f3:c0:a1:4b:d3:c2:f3:84:e6:19:00:1c:42: 46:bb:e6:fb:43:01:26:e1:8d:36:f8:1d:37:5c:58:70:e1:6a: de:f8:40:16:42:7a:b4:77:3c:13:a7:cb:5e:bd:18:a2:9d:e7: 28:3d:02:07:3e:f8:67:69:42:bb:17:02:84:04:d6:71:0e:e4: d5:5f:bb:7b:f7:02:b9:4b:02:12:10:c3:90:9a:26:fc:0b:51: be:63:39:4f:59:5b:a3:21:aa:da:1e:9d:36:26:44:74:00:3f: 5f:46:d3:ce:74:9a:a7:b5:bc:62:4a:39:3c:ba:8a:6f:da:cf: ca:c3:c7:30:b0:05:f2:d9:08:e7:d6:3c:6a:84:83:aa:50:3c: cf:12:a8:60:da:11:cc:3f:bd:ed:ef:d8:99:f6:88:22:1e:96: bd:84:99:08:12:ae:59:9b:93:a0:be:aa:a3:41:7d:e0:75:af: 00:53:43:60:e0:f1:4a:4c:7b:b5:aa:09:18:d0:fe:90:29:18: a3:e6:3c:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUORNpRVXF/svmDaezgzt8IqwDOeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDODJERjFCRTYwQ0VBRkVGNUU5ODcxMUFDQUE3MUU5 QTBCNkY2NjAeFw0yNTEwMjAxMTA2MzZaFw0yNTEwMjExNDEwMzZaMDMxMTAvBgNV BAMTKERCRjEyNzEyNUJGQzFGQTIzMzlBOEMyRUU5NkZDNDNFMjhDQzg3OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCat07UowLJtT6bfYjCDBmi14je bopKtIifebbna53KocGpzNslC2G/UjYD0aBkQ09QtWqKqRA6Rr0k4Brl2I7oYKXC 48p3NeWVq21BmLA+h30Ak+A/mJGh7mT9oif7FAq5z16HgIgssMFcBoS5f0PzAV6N fHrNmkDya9zmwr/oEbDju+ImUygN2NMb6yKEWb4NFk8Cor/vC+RuA+5O4wO9GuwJ ptl8zUNRicvAIqsgY4Ot0W54VlbcWDIn4a2/YbhvYHwX+W53MfM+7Urf10V1B3nG hYyH1AlP6LZ83ipsCoME3ntHTUHQHccSsmN2K6Ab7kbsJgGlJAC8QMxCVy+VAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2/EnElv8H6Izmowu6W/EPijMh4wwHwYDVR0j BBgwFoAUvcgt8b5gzq/vXphxGsqnHpoLb2YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHdnNnpueXEyS2tHdFFBa3VVcm5TVHZTc2tSR3NNZnJQclNicHdqSExH M3AvMS9CREM4MkRGMUJFNjBDRUFGRUY1RTk4NzExQUNBQTcxRTlBMEI2RjY2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEQzgyREYxQkU2MENFQUZF RjVFOTg3MTFBQ0FBNzFFOUEwQjZGNjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHdnNnpueXEyS2tHdFFBa3VVcm5TVHZTc2tSR3NNZnJQclNicHdqSExHM3AvMS9C REM4MkRGMUJFNjBDRUFGRUY1RTk4NzExQUNBQTcxRTlBMEI2RjY2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHfmpI+6cmxGi13ZgRV06tdfE9poj5EXP0Zs22pFypCZ+NW/8wszgEis3/KoD D2uEzCNvf+dXglFwqMTzwKFL08LzhOYZABxCRrvm+0MBJuGNNvgdN1xYcOFq3vhA FkJ6tHc8E6fLXr0Yop3nKD0CBz74Z2lCuxcChATWcQ7k1V+7e/cCuUsCEhDDkJom /AtRvmM5T1lboyGq2h6dNiZEdAA/X0bTznSap7W8Yko5PLqKb9rPysPHMLAF8tkI 59Y8aoSDqlA8zxKoYNoRzD+97e/YmfaIIh6WvYSZCBKuWZuToL6qo0F94HWvAFND YODxSkx7taoJGND+kCkYo+Y8Ng== -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:48 2025 by rpki-client