$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: 6/vYqFeSwlHT2PsJopNScLPC2/s/WzrivyQlhXtzp84= Subject key identifier: 6E:73:DB:A1:2D:4E:FF:B4:26:63:80:00:71:D4:C7:22:0C:91:82:0E Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 4CFFDCE68A947EE74331DDA980BF42CA14A4684E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: 01C7 Signing time: Sun 19 Oct 2025 22:53:28 +0000 Manifest this update: Sun 19 Oct 2025 22:48:28 +0000 Manifest next update: Mon 20 Oct 2025 23:39:28 +0000 Files and hashes: 1: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: FujT2OYZUxUAQ6LZ7DzxaPC+pClOX6XGcDGWfyVkYzk=) 2: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: C0u1aT3LDMhL5SLNpfi4dKOK4v/xmo0BwWf2GUw/OvQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 23:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ff:dc:e6:8a:94:7e:e7:43:31:dd:a9:80:bf:42:ca:14:a4:68:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: Oct 19 22:48:28 2025 GMT Not After : Oct 20 23:39:28 2025 GMT Subject: CN=6E73DBA12D4EFFB42663800071D4C7220C91820E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:c6:e9:9c:69:6c:1f:df:de:02:df:71:26: 4f:1b:dd:48:48:e7:36:42:bc:d5:a4:c2:94:aa:9d: a7:f5:b9:f0:77:71:62:d6:c3:a8:61:05:06:b1:4c: 64:4a:05:b9:f6:8f:a3:5a:70:a9:0f:e9:a0:aa:d3: 56:e6:6f:eb:ef:53:6f:17:16:3f:3e:89:14:f3:54: 40:bb:10:71:5c:a4:62:d7:7a:ce:09:82:a5:b2:ca: 93:ec:29:d8:91:25:05:d6:0c:60:5e:4b:9a:2e:f5: 52:b9:61:ec:73:20:06:c7:d0:ae:2a:38:43:25:c5: 89:00:c7:25:b8:3d:99:26:ac:e5:2d:ba:c1:7c:43: 93:59:ab:bc:29:af:08:c6:a4:13:36:fe:81:d4:5e: c0:8a:b7:5a:2c:a9:c8:a2:53:a8:13:19:78:33:88: 92:ca:5a:a9:a6:84:b2:d9:09:e5:66:e5:39:71:96: 7a:a2:97:36:2f:a9:10:fe:07:8e:92:7f:69:4d:e7: bd:b5:6e:b6:cd:e9:2d:50:b5:f6:a9:e1:46:0a:0a: a7:e2:b3:6b:c6:cd:39:0c:41:c3:42:72:82:03:80: fb:19:36:a0:71:2a:c1:01:ed:b6:aa:ed:de:1e:ac: ed:8c:19:04:b7:eb:c6:8a:ed:58:60:70:6f:a3:89: 51:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:73:DB:A1:2D:4E:FF:B4:26:63:80:00:71:D4:C7:22:0C:91:82:0E X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:bd:a7:d9:35:87:a5:bb:80:c3:ad:b2:c7:02:14:5f:53:c7: 43:f2:00:14:a1:14:7a:19:05:86:6c:56:ac:14:4d:bf:95:fd: 1d:50:9c:fc:23:67:1d:7b:c3:8d:d8:9a:98:c3:d0:87:ac:10: 7a:67:27:3c:25:03:86:29:59:35:cd:65:b2:4e:bc:81:d6:2d: 60:fc:19:57:d1:64:05:22:7c:09:03:90:df:25:fa:08:1f:c9: 01:c0:14:96:a8:03:c1:10:e6:c1:75:72:b9:04:a4:49:c0:f8: 1b:93:82:2b:c1:a9:9c:40:f7:6c:27:f6:19:cd:0b:08:e8:34: 61:94:d5:79:aa:70:aa:34:ab:99:7d:03:9c:58:df:70:02:7d: 55:94:c8:89:6d:6e:2f:3e:33:71:7d:7a:a6:79:67:5d:93:b8: 89:43:d1:ce:e8:0a:b9:93:e0:e1:b4:65:11:a4:d5:f3:9f:41: 15:b7:a9:c5:c2:f7:3d:af:f6:54:b8:05:d4:b6:f4:eb:c7:4b: fd:d2:fd:f4:18:64:52:63:f8:8a:84:dd:2d:28:9f:bb:df:47: 0c:a9:f6:2e:cc:4a:6e:20:87:c8:68:11:92:ef:fc:ef:c0:1d: ba:4a:4f:fe:e0:ea:1c:bd:f9:e6:fc:36:f3:e8:ea:17:55:b7: 02:e3:7d:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTP/c5oqUfudDMd2pgL9CyhSkaE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNTEwMTkyMjQ4MjhaFw0yNTEwMjAyMzM5MjhaMDMxMTAvBgNV BAMTKDZFNzNEQkExMkQ0RUZGQjQyNjYzODAwMDcxRDRDNzIyMEM5MTgyMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAX8bpnGlsH9/eAt9xJk8b3UhI 5zZCvNWkwpSqnaf1ufB3cWLWw6hhBQaxTGRKBbn2j6NacKkP6aCq01bmb+vvU28X Fj8+iRTzVEC7EHFcpGLXes4JgqWyypPsKdiRJQXWDGBeS5ou9VK5YexzIAbH0K4q OEMlxYkAxyW4PZkmrOUtusF8Q5NZq7wprwjGpBM2/oHUXsCKt1osqciiU6gTGXgz iJLKWqmmhLLZCeVm5TlxlnqilzYvqRD+B46Sf2lN5721brbN6S1Qtfap4UYKCqfi s2vGzTkMQcNCcoIDgPsZNqBxKsEB7baq7d4erO2MGQS368aK7VhgcG+jiVFxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUbnPboS1O/7QmY4AAcdTHIgyRgg4wHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXb2n2TWHpbuAw62yxwIUX1PHQ/IAFKEUehkFhmxWrBRNv5X9HVCc/CNnHXvD jdiamMPQh6wQemcnPCUDhilZNc1lsk68gdYtYPwZV9FkBSJ8CQOQ3yX6CB/JAcAU lqgDwRDmwXVyuQSkScD4G5OCK8GpnED3bCf2Gc0LCOg0YZTVeapwqjSrmX0DnFjf cAJ9VZTIiW1uLz4zcX16pnlnXZO4iUPRzugKuZPg4bRlEaTV859BFbepxcL3Pa/2 VLgF1Lb068dL/dL99BhkUmP4ioTdLSifu99HDKn2LsxKbiCHyGgRku/878AdukpP /uDqHL355vw28+jqF1W3AuN9jg== -----END CERTIFICATE-----Generated at Mon Oct 20 11:27:10 2025 by rpki-client