$ rpki-client -vvf rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft File: 0B31CCC1E89F4389597737BE4B57373331925A2F.mft (raw, json) Hash identifier: nlDVRC6gcO1j/n5FVtiEeIGz4o1PAmBw4U/tWbQEGtU= Subject key identifier: E2:B4:21:3F:7E:9D:1E:EF:B8:56:C0:9D:26:BD:34:EB:0A:6C:73:99 Authority key identifier: 0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F Certificate issuer: /CN=0B31CCC1E89F4389597737BE4B57373331925A2F Certificate serial: 3BDEC61EA545C0D106C0CD406D74E463733815 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer Subject info access: rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft Manifest number: 02F0 Signing time: Mon 20 Oct 2025 12:05:55 +0000 Manifest this update: Mon 20 Oct 2025 12:00:55 +0000 Manifest next update: Tue 21 Oct 2025 14:16:55 +0000 Files and hashes: 1: 0B31CCC1E89F4389597737BE4B57373331925A2F.crl (hash: y0pvAvMo8uLqMl4FFoTKadxCI9PT9hlZBhc2ONPlYeo=) 2: 323830343a323262383a3a2f3332203d3e20323634313138.roa (hash: QintocWeO7Yqrzqx5pzjb44wffkwsb5rkNFckuALbO8=) 3: 3133382e39372e32342e302f32322d3234203d3e20323634313138.roa (hash: WD7M6wU3eaRd4QLn0BTsaWspALy2joQNSK7F8VMXY7o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:de:c6:1e:a5:45:c0:d1:06:c0:cd:40:6d:74:e4:63:73:38:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B31CCC1E89F4389597737BE4B57373331925A2F Validity Not Before: Oct 20 12:00:55 2025 GMT Not After : Oct 21 14:16:55 2025 GMT Subject: CN=E2B4213F7E9D1EEFB856C09D26BD34EB0A6C7399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:25:9e:b6:01:fa:80:23:e8:9e:37:0b:f9: 03:c7:b1:50:b9:13:3c:05:47:0a:62:c4:5f:e8:5e: eb:4b:64:14:8d:81:58:3b:be:af:e1:33:d5:a5:87: c6:aa:c1:df:50:c1:4d:95:8e:de:ec:d9:64:c6:fd: 7f:43:94:b3:1f:94:80:86:0b:46:ac:1a:6c:da:67: 01:2e:41:72:21:4a:13:ad:06:5e:95:39:d0:54:17: 66:bf:f7:3a:e2:3f:8e:33:21:51:27:cc:9b:af:89: e4:2d:a6:fe:59:fc:4b:8c:e9:66:d0:4f:13:aa:7a: e7:10:5e:59:ac:8b:64:42:5f:ae:51:8c:d6:cd:a5: 5b:28:ac:99:0b:24:36:a3:91:aa:ae:c6:b3:7c:8f: d7:9a:9c:0d:25:9b:74:b1:9f:ae:fb:99:5d:f9:ef: 2d:ab:98:d0:5d:8f:6e:90:16:63:1c:09:0e:55:25: 5f:71:07:83:b3:29:0a:1d:e4:55:1a:24:76:9c:4d: 36:8d:7b:c2:57:92:f5:d3:c3:d6:1e:b1:55:57:65: b8:0a:c9:4a:97:ce:a0:13:44:b1:4f:a3:3f:cb:d6: 9d:02:d6:a5:39:a8:97:5c:92:9c:a5:90:d1:4f:e0: 20:84:66:7e:17:bd:d3:d6:98:2f:ae:e8:18:c0:30: 4c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B4:21:3F:7E:9D:1E:EF:B8:56:C0:9D:26:BD:34:EB:0A:6C:73:99 X509v3 Authority Key Identifier: keyid:0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:69:a7:d4:c8:91:c8:3c:91:ba:43:c5:fb:8d:c8:bc:8d:ba: e6:c8:e1:7b:d6:47:95:f1:3d:e1:2a:fc:b2:f4:a4:5c:e6:dc: 9b:01:ef:bc:4b:3e:12:7a:46:37:d8:5f:d9:9a:08:ce:d9:9e: 3a:1a:5b:be:34:b9:14:53:2f:7c:22:98:59:96:b2:6a:a5:dd: 8d:6c:c7:b6:a6:4a:6a:a9:3e:bf:0c:da:13:e0:a3:3f:0b:a7: 84:e3:0f:1a:37:fa:c4:57:be:62:eb:03:00:5b:58:98:7d:07: 8a:4e:14:3c:75:c6:0a:c4:b8:4f:03:4f:98:5d:83:a6:fd:92: d2:d9:ec:55:96:a7:ff:f1:08:e7:e9:8e:ee:1e:28:07:eb:3c: 47:ec:76:cc:6e:c0:e5:66:7a:02:75:5f:55:a8:60:bb:ca:69: a9:f4:78:75:f6:a7:a4:11:11:f0:2f:5f:0f:d6:a4:ab:e3:8a: 0e:46:a4:d2:13:d2:8d:a8:be:cc:b4:3f:d9:75:e8:9b:99:9c: 7d:5f:38:2b:4a:9f:3e:8c:00:c7:fe:10:56:30:4f:09:dd:ac: 60:f9:a0:82:4e:ec:ad:14:99:e0:c4:e3:e7:3b:14:97:96:5e: d7:95:89:21:af:11:04:b7:34:50:76:be:ce:7f:41:70:ce:74: 69:20:f1:17 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITO97GHqVFwNEGwM1AbXTkY3M4FTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygwQjMxQ0NDMUU4OUY0Mzg5NTk3NzM3QkU0QjU3MzczMzMx OTI1QTJGMB4XDTI1MTAyMDEyMDA1NVoXDTI1MTAyMTE0MTY1NVowMzExMC8GA1UE AxMoRTJCNDIxM0Y3RTlEMUVFRkI4NTZDMDlEMjZCRDM0RUIwQTZDNzM5OTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL58JZ62AfqAI+ieNwv5A8exULkT PAVHCmLEX+he60tkFI2BWDu+r+Ez1aWHxqrB31DBTZWO3uzZZMb9f0OUsx+UgIYL RqwabNpnAS5BciFKE60GXpU50FQXZr/3OuI/jjMhUSfMm6+J5C2m/ln8S4zpZtBP E6p65xBeWayLZEJfrlGM1s2lWyismQskNqORqq7Gs3yP15qcDSWbdLGfrvuZXfnv LauY0F2PbpAWYxwJDlUlX3EHg7MpCh3kVRokdpxNNo17wleS9dPD1h6xVVdluArJ SpfOoBNEsU+jP8vWnQLWpTmol1ySnKWQ0U/gIIRmfhe909aYL67oGMAwTGsCAwEA AaOCAlkwggJVMB0GA1UdDgQWBBTitCE/fp0e77hWwJ0mvTTrCmxzmTAfBgNVHSME GDAWgBQLMczB6J9DiVl3N75LVzczMZJaLzAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9CSEtrR3pZd1dkdFRyN25qejFCNnNGY2NzQUtKdFpaM2tES3B0WE0zQVNx eC8xLzBCMzFDQ0MxRTg5RjQzODk1OTc3MzdCRTRCNTczNzMzMzE5MjVBMkYuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvMEIzMUNDQzFFODlGNDM4OTU5 NzczN0JFNEI1NzM3MzMzMTkyNUEyRi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9C SEtrR3pZd1dkdFRyN25qejFCNnNGY2NzQUtKdFpaM2tES3B0WE0zQVNxeC8xLzBC MzFDQ0MxRTg5RjQzODk1OTc3MzdCRTRCNTczNzMzMzE5MjVBMkYubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCaaafUyJHIPJG6Q8X7jci8jbrmyOF71keV8T3hKvyy9KRc5tybAe+8Sz4SekY3 2F/ZmgjO2Z46Glu+NLkUUy98IphZlrJqpd2NbMe2pkpqqT6/DNoT4KM/C6eE4w8a N/rEV75i6wMAW1iYfQeKThQ8dcYKxLhPA0+YXYOm/ZLS2exVlqf/8Qjn6Y7uHigH 6zxH7HbMbsDlZnoCdV9VqGC7ymmp9Hh19qekERHwL18P1qSr44oORqTSE9KNqL7M tD/ZdeibmZx9XzgrSp8+jADH/hBWME8J3axg+aCCTuytFJngxOPnOxSXll7XlYkh rxEEtzRQdr7Of0FwznRpIPEX -----END CERTIFICATE-----Generated at Mon Oct 20 13:59:00 2025 by rpki-client