$ rpki-client -vvf rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft File: BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft (raw, json) Hash identifier: 5P/SrI8rbyeHFHKpSAYrz6kgpRwRwoBtox1gfyPtceI= Subject key identifier: CE:45:CD:24:8F:B5:C1:9D:33:A0:36:FB:3B:36:DB:99:5B:59:D7:97 Authority key identifier: BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25 Certificate issuer: /CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25 Certificate serial: 1AE34EF3FF049AFC582AC4BEF0DC06806F259574 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer Subject info access: rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft Manifest number: 02F0 Signing time: Sun 19 Oct 2025 18:29:46 +0000 Manifest this update: Sun 19 Oct 2025 18:24:46 +0000 Manifest next update: Mon 20 Oct 2025 20:53:46 +0000 Files and hashes: 1: 34352e3136352e3136362e302f32332d3332203d3e20323638363833.roa (hash: 5bSUPkODUWs9/kJhkVx3i4fO1qFGfYEB0H4MohPcXH8=) 2: 34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa (hash: SFgnoC9b6XsOBWOxtYvSuXC8DcOSjBAvZ5UdN6KIgQ0=) 3: BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl (hash: f87AGCpDoaumqllobXKzaIGy8sMp2G9PY2Z1/HYkXc4=) 4: 323830343a353530303a3a2f33342d313238203d3e20323638363833.roa (hash: CY1cgckh5LfihHbyiE5qbTbYicOGwA3cdqSQfEjeJok=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 20:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e3:4e:f3:ff:04:9a:fc:58:2a:c4:be:f0:dc:06:80:6f:25:95:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25 Validity Not Before: Oct 19 18:24:46 2025 GMT Not After : Oct 20 20:53:46 2025 GMT Subject: CN=CE45CD248FB5C19D33A036FB3B36DB995B59D797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c8:79:12:74:86:b4:e8:df:f5:94:c9:90:02: f0:0c:c4:f5:e1:4c:7a:75:a3:a8:df:4b:25:6c:8e: e0:0e:ee:69:3f:21:80:c0:95:bc:e1:d3:41:d8:dd: cc:73:c3:9f:e6:f9:fd:30:e8:17:6f:1b:51:06:7b: e2:f0:80:28:2f:6a:84:bc:7c:41:7b:40:f4:b4:4f: a1:4e:78:de:a9:ae:ed:a4:bc:d9:e5:c4:4f:83:32: f3:65:ff:90:14:ef:37:0d:38:20:ca:8d:fb:74:17: c3:11:f5:be:d8:7d:85:77:77:6f:7c:99:12:cd:5c: 08:32:30:4e:42:f4:4e:f9:af:44:31:87:bc:77:45: a9:47:78:cc:e4:8c:59:98:86:0b:be:01:c5:56:e5: f0:53:d2:9b:a8:9c:b9:25:da:1f:8b:c9:5e:f6:c9: 29:4c:fc:d6:eb:72:dc:a2:19:7e:20:3c:4b:42:a0: 8c:a9:07:17:bb:8f:6f:6c:09:83:66:de:b7:36:94: 1f:3a:68:c1:ef:97:e8:17:64:e4:bf:70:1d:81:87: 05:5c:ca:5c:1f:5a:8c:bd:b2:4a:e7:03:ff:8c:ff: 47:dd:c9:5d:7c:d7:3b:f7:3c:15:85:80:d1:13:91: 96:b7:b1:68:02:5b:92:8c:85:e4:a6:af:ad:df:bd: 02:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:45:CD:24:8F:B5:C1:9D:33:A0:36:FB:3B:36:DB:99:5B:59:D7:97 X509v3 Authority Key Identifier: keyid:BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:af:7d:78:1c:0e:90:00:74:aa:fe:db:f7:d3:0d:02:16:55: 30:9b:5c:a5:9b:82:41:25:f8:9e:fd:36:0a:b8:64:36:85:f9: aa:4b:72:a7:40:85:b1:e4:f6:ad:0a:bb:15:f2:41:41:8f:d6: e6:4f:c7:af:b1:a3:21:86:12:58:df:13:22:9b:65:6c:85:be: ea:19:cc:65:2e:bf:ef:49:2a:38:91:d9:7c:da:5b:56:89:5a: 0b:7d:51:96:0a:17:3e:0f:d2:b0:f4:45:c0:21:6a:6f:e8:d4: a5:ae:ea:30:a1:de:38:1f:79:dd:7d:a2:31:9b:8b:8b:7d:7b: 07:96:08:e2:79:4e:61:2b:15:4a:e3:9b:39:49:63:f5:bb:76: ba:0a:f5:36:18:30:7c:f4:8d:9e:d6:de:7f:26:5b:fb:7d:58: f6:00:7e:67:70:94:1a:79:01:54:95:90:b3:26:37:56:bb:45: e2:ed:cd:46:51:07:9b:fc:8a:c6:02:de:72:45:4d:a3:b5:80: 63:84:60:57:3f:70:86:9b:91:4e:5d:92:9c:a5:1c:b3:75:6c: f2:9c:cf:a1:63:ae:d8:23:5a:07:b2:04:45:4b:13:65:52:17: b1:5d:3f:f7:13:9c:88:fe:73:7b:dc:60:60:00:e1:af:48:61: 74:a4:42:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGuNO8/8EmvxYKsS+8NwGgG8llXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU5MTkxRjIyMkQzNkZGN0VEOTQwQTJCNUU0OTFFMkE4 MDIxREEyNTAeFw0yNTEwMTkxODI0NDZaFw0yNTEwMjAyMDUzNDZaMDMxMTAvBgNV BAMTKENFNDVDRDI0OEZCNUMxOUQzM0EwMzZGQjNCMzZEQjk5NUI1OUQ3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyyHkSdIa06N/1lMmQAvAMxPXh THp1o6jfSyVsjuAO7mk/IYDAlbzh00HY3cxzw5/m+f0w6BdvG1EGe+LwgCgvaoS8 fEF7QPS0T6FOeN6pru2kvNnlxE+DMvNl/5AU7zcNOCDKjft0F8MR9b7YfYV3d298 mRLNXAgyME5C9E75r0Qxh7x3RalHeMzkjFmYhgu+AcVW5fBT0puonLkl2h+LyV72 ySlM/NbrctyiGX4gPEtCoIypBxe7j29sCYNm3rc2lB86aMHvl+gXZOS/cB2BhwVc ylwfWoy9skrnA/+M/0fdyV181zv3PBWFgNETkZa3sWgCW5KMheSmr63fvQLRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzkXNJI+1wZ0zoDb7OzbbmVtZ15cwHwYDVR0j BBgwFoAUvpGR8iLTb/ftlAorXkkeKoAh2iUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1lMRXd3c0Q4UXF3ZkxUaXN3UXFlZHZ2TVJTeWVyVlpyY0JkS1dCd0t2 eGsvMS9CRTkxOTFGMjIyRDM2RkY3RUQ5NDBBMkI1RTQ5MUUyQTgwMjFEQTI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFOTE5MUYyMjJEMzZGRjdF RDk0MEEyQjVFNDkxRTJBODAyMURBMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1lMRXd3c0Q4UXF3ZkxUaXN3UXFlZHZ2TVJTeWVyVlpyY0JkS1dCd0t2eGsvMS9C RTkxOTFGMjIyRDM2RkY3RUQ5NDBBMkI1RTQ5MUUyQTgwMjFEQTI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAK99eBwOkAB0qv7b99MNAhZVMJtcpZuCQSX4nv02CrhkNoX5qktyp0CFseT2 rQq7FfJBQY/W5k/Hr7GjIYYSWN8TIptlbIW+6hnMZS6/70kqOJHZfNpbVolaC31R lgoXPg/SsPRFwCFqb+jUpa7qMKHeOB953X2iMZuLi317B5YI4nlOYSsVSuObOUlj 9bt2ugr1NhgwfPSNntbefyZb+31Y9gB+Z3CUGnkBVJWQsyY3VrtF4u3NRlEHm/yK xgLeckVNo7WAY4RgVz9whpuRTl2SnKUcs3Vs8pzPoWOu2CNaB7IERUsTZVIXsV0/ 9xOciP5ze9xgYADhr0hhdKRCnw== -----END CERTIFICATE-----Generated at Mon Oct 20 09:42:50 2025 by rpki-client