$ rpki-client -vvf rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft File: BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft (raw, json) Hash identifier: iqfIbVRvj9xSjCaIq5pfMFfMwh6UjiBxfT/JfjJfqgs= Subject key identifier: 32:B6:13:2A:BD:34:DC:D1:7F:AB:8F:49:3B:34:F3:45:F9:6F:3A:2E Authority key identifier: BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA Certificate issuer: /CN=BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA Certificate serial: 368FE21AB2BE4141B86E73FE4F120E0BE7DEC777 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer Subject info access: rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft Manifest number: 02F0 Signing time: Mon 20 Oct 2025 10:54:35 +0000 Manifest this update: Mon 20 Oct 2025 10:49:35 +0000 Manifest next update: Tue 21 Oct 2025 14:46:35 +0000 Files and hashes: 1: 323830343a313735383a3a2f33322d3438203d3e20323633313339.roa (hash: 925kYNTdkMQU1jDagxfrlmc7XsHPeFb8XeYPOjT/YJs=) 2: 3137372e34342e3232302e302f32322d3234203d3e20323633313339.roa (hash: EVYKNMzZueEXwMh0DNayOzxCcx1T14jUI+HXcRE6y5A=) 3: BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl (hash: CKyVZlxtIrZlxtk4d2zs2ETq8gCRt8LKB1O7ryFk2ig=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:8f:e2:1a:b2:be:41:41:b8:6e:73:fe:4f:12:0e:0b:e7:de:c7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA Validity Not Before: Oct 20 10:49:35 2025 GMT Not After : Oct 21 14:46:35 2025 GMT Subject: CN=32B6132ABD34DCD17FAB8F493B34F345F96F3A2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:25:fa:ee:40:f1:bf:5c:d2:7b:e7:8d:43:ca: 47:e6:cb:35:fe:d3:e5:5c:d4:91:05:26:bc:be:f9: e0:2c:5d:fb:bf:17:38:88:3c:52:e3:da:b7:e7:bb: 9b:f7:18:17:00:05:02:f1:c2:7b:bc:77:f3:a9:fa: 9f:d6:67:c9:7c:4c:32:ea:88:6a:79:cd:ce:90:b5: 9f:fc:5d:d0:8f:75:8b:df:39:46:14:63:1b:c5:1e: 38:b1:d0:6c:ab:32:28:28:4a:59:70:a3:ba:de:b4: 67:15:a5:67:9d:10:e1:a8:9d:02:ab:fa:fa:55:d8: 66:f6:92:db:ab:39:2f:a8:14:9d:7b:0f:08:39:aa: ad:9c:55:ac:9f:4c:8e:42:29:dd:a4:64:7f:55:71: a8:b1:dc:90:0f:a8:11:48:02:09:41:2d:bf:51:c4: 0f:1c:8f:84:6c:27:63:ab:9b:c4:d9:01:ce:c9:3d: 0d:cb:0f:bc:64:8b:19:a7:db:9d:bb:07:c3:d7:e5: 9a:eb:56:6d:2b:7c:64:38:78:07:de:51:e5:16:c0: a7:19:56:fe:e5:f9:ee:ea:07:23:34:03:d7:c5:92: b0:3e:9d:f9:90:74:ac:d3:4f:ba:4f:f0:92:f1:01: f8:49:ab:2b:f3:8a:5b:83:d1:c4:79:17:9d:61:59: 03:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B6:13:2A:BD:34:DC:D1:7F:AB:8F:49:3B:34:F3:45:F9:6F:3A:2E X509v3 Authority Key Identifier: keyid:BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:6c:6e:84:cb:4f:b0:dc:4d:7e:b3:9b:ef:6a:b9:d4:99:10: 29:1d:52:1c:76:08:f5:51:2e:aa:5a:c4:95:99:ed:3b:12:99: d9:8a:7f:dc:21:1b:f8:62:90:1b:22:ef:2b:b2:9f:a8:b7:29: 7f:77:b2:a7:07:78:f6:5f:bb:18:15:82:df:93:dd:3a:55:11: f4:3d:3e:c4:b3:8f:be:40:09:0b:cb:86:2b:90:d9:b0:2f:c3: 39:9d:21:cd:c4:50:8a:51:71:48:6f:60:35:03:77:c9:43:1d: c5:56:c3:23:1f:47:8f:dc:5f:3f:4e:c3:2c:42:14:7d:c4:e8: 87:88:7d:cf:01:66:08:53:d9:c0:4a:40:cc:43:c2:8b:eb:1f: 5d:81:71:83:06:29:f5:ba:1e:a2:4a:f5:af:67:43:25:64:eb: bb:1b:91:c3:c5:99:e0:cf:43:e0:e5:cc:02:43:eb:33:01:a3: 4a:a4:54:a4:94:54:64:00:31:25:d5:e1:dd:96:ea:13:95:05: f0:38:09:26:d9:92:5a:ed:e2:25:c3:87:85:ec:61:55:aa:c2: 41:c2:19:39:6d:79:e8:d9:29:9b:4d:9c:1b:3b:fb:55:02:be: 1d:57:90:32:b4:82:79:51:9b:2c:03:4a:7a:c3:7d:3f:7d:ca: fc:43:a3:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNo/iGrK+QUG4bnP+TxIOC+fex3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRFNkUwQ0RDREQ3QzMzN0Q2NDUxQTZCRTk0QjMyMUMy MkNGMDhFQTAeFw0yNTEwMjAxMDQ5MzVaFw0yNTEwMjExNDQ2MzVaMDMxMTAvBgNV BAMTKDMyQjYxMzJBQkQzNERDRDE3RkFCOEY0OTNCMzRGMzQ1Rjk2RjNBMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9JfruQPG/XNJ7541DykfmyzX+ 0+Vc1JEFJry++eAsXfu/FziIPFLj2rfnu5v3GBcABQLxwnu8d/Op+p/WZ8l8TDLq iGp5zc6QtZ/8XdCPdYvfOUYUYxvFHjix0GyrMigoSllwo7retGcVpWedEOGonQKr +vpV2Gb2kturOS+oFJ17Dwg5qq2cVayfTI5CKd2kZH9Vcaix3JAPqBFIAglBLb9R xA8cj4RsJ2Orm8TZAc7JPQ3LD7xkixmn2527B8PX5ZrrVm0rfGQ4eAfeUeUWwKcZ Vv7l+e7qByM0A9fFkrA+nfmQdKzTT7pP8JLxAfhJqyvziluD0cR5F51hWQMHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMrYTKr003NF/q49JOzTzRflvOi4wHwYDVR0j BBgwFoAUvebgzc3XwzfWRRpr6UsyHCLPCOowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDFKY0VBR3dVdkVCbThEYzRqQXRZZFBjYkdEZXVNWmhHUEh2eGZSbjRU blMvMS9CREU2RTBDRENERDdDMzM3RDY0NTFBNkJFOTRCMzIxQzIyQ0YwOEVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERTZFMENEQ0REN0MzMzdE NjQ1MUE2QkU5NEIzMjFDMjJDRjA4RUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDFKY0VBR3dVdkVCbThEYzRqQXRZZFBjYkdEZXVNWmhHUEh2eGZSbjRUblMvMS9C REU2RTBDRENERDdDMzM3RDY0NTFBNkJFOTRCMzIxQzIyQ0YwOEVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhmxuhMtPsNxNfrOb72q51JkQKR1SHHYI9VEuqlrElZntOxKZ2Yp/3CEb+GKQ GyLvK7KfqLcpf3eypwd49l+7GBWC35PdOlUR9D0+xLOPvkAJC8uGK5DZsC/DOZ0h zcRQilFxSG9gNQN3yUMdxVbDIx9Hj9xfP07DLEIUfcToh4h9zwFmCFPZwEpAzEPC i+sfXYFxgwYp9boeokr1r2dDJWTruxuRw8WZ4M9D4OXMAkPrMwGjSqRUpJRUZAAx JdXh3ZbqE5UF8DgJJtmSWu3iJcOHhexhVarCQcIZOW156Nkpm02cGzv7VQK+HVeQ MrSCeVGbLANKesN9P33K/EOj5g== -----END CERTIFICATE-----Generated at Mon Oct 20 16:47:59 2025 by rpki-client