$ rpki-client -vvf rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft File: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft (raw, json) Hash identifier: eou7JnsOmvklKlkXbiy0q/57VqWY0AFqHfW+IpQY7Io= Subject key identifier: C0:C3:83:F8:3B:D6:88:AF:CB:7D:E8:94:13:17:4E:05:25:89:45:12 Authority key identifier: BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F Certificate issuer: /CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F Certificate serial: 7BA6ECA64905677AA7BD4DD72A2238C7CA048C19 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft Manifest number: 02E9 Signing time: Mon 20 Oct 2025 13:16:39 +0000 Manifest this update: Mon 20 Oct 2025 13:11:39 +0000 Manifest next update: Tue 21 Oct 2025 16:08:39 +0000 Files and hashes: 1: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl (hash: Hya2DSVDwfpP/XIp0yFQPZ7kfJ2g1O4kAmEYR1DDuOs=) 2: 323830343a333931383a3a2f33322d3438203d3e20323636353234.roa (hash: 6DURpCCZNXr4RssgY5+U5SCdw8QuLPJEOyNu8nBAHHM=) 3: 3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa (hash: ZkBeX0WWJCwewIHrZef0h3RxLAXUNroMdptDFjYWcME=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 16:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a6:ec:a6:49:05:67:7a:a7:bd:4d:d7:2a:22:38:c7:ca:04:8c:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F Validity Not Before: Oct 20 13:11:39 2025 GMT Not After : Oct 21 16:08:39 2025 GMT Subject: CN=C0C383F83BD688AFCB7DE89413174E0525894512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:64:b9:c9:31:53:6c:f0:01:84:e4:35:e9: 92:4e:5e:dc:94:8d:50:c5:70:40:72:5b:28:45:de: f5:d8:53:22:cb:c5:6c:e4:10:21:db:9a:5a:d8:11: ca:3d:b0:46:2f:4d:b5:0b:f9:76:ed:90:c5:05:67: 18:dd:e7:3f:a1:9e:6f:bf:20:31:ee:32:a4:81:73: 88:75:32:a9:93:7c:05:ae:98:08:3d:d8:1f:62:0e: 84:d6:e7:48:e5:fe:88:84:66:d4:94:48:16:c1:4d: ad:cb:b6:ee:a6:ed:4f:6e:36:b0:fd:2a:47:7f:1b: 55:6c:5f:f9:e2:58:73:8d:30:2b:12:92:76:45:52: 2e:ef:2a:93:45:e4:ce:b2:7d:cc:e5:9c:5c:29:0b: 9f:cc:a1:b3:06:dd:4b:d4:83:ad:fa:ce:43:ae:86: 42:9a:db:a8:e0:1b:7a:4b:0a:9d:88:91:93:79:ba: d1:36:4a:3e:66:2e:7d:a7:55:d3:46:3d:91:dc:45: 62:78:a9:42:0b:7b:7d:74:07:45:af:c2:91:2c:76: 7d:f2:fb:2f:c2:63:ad:1c:51:af:9d:fa:52:31:1f: bb:e0:86:fb:0a:90:48:17:31:ae:e0:74:05:be:2b: b2:59:b7:36:0c:f2:44:ad:f6:5e:a0:e3:c2:92:eb: 27:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C3:83:F8:3B:D6:88:AF:CB:7D:E8:94:13:17:4E:05:25:89:45:12 X509v3 Authority Key Identifier: keyid:BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:e4:70:a1:7f:6c:e3:8d:91:8d:49:bf:3a:43:b8:cf:08:cf: 05:b1:fa:9c:7e:f7:84:01:ab:a5:70:32:69:6b:fb:55:3d:f5: 5b:9f:e8:7d:fc:cf:34:ba:e8:80:28:42:e8:9f:27:c0:97:15: 83:c3:15:f7:ea:37:c3:95:91:05:29:0a:db:56:f0:21:23:3e: d6:e1:50:f8:5e:61:5b:40:bc:5c:3c:4f:64:01:3d:16:5b:d8: 25:cb:3a:37:63:1c:b6:b3:38:61:fd:d6:79:74:a5:02:6c:85: 35:bd:7f:81:ff:32:89:7b:83:11:a5:c9:60:72:b3:9b:cf:2b: 14:8f:52:5d:44:a3:08:3c:13:14:90:bd:90:04:5c:20:f1:b6: 4a:7b:d5:a2:b5:74:72:59:72:3d:e1:91:7b:38:4f:b9:20:c4: 55:10:ba:e1:f4:1d:0c:a3:f9:e7:dd:22:df:b4:5e:bc:c1:aa: ee:35:49:00:55:18:8b:41:54:7b:90:d2:59:b4:04:45:c6:46: 64:b1:f4:e5:52:09:cd:62:26:46:04:f1:46:43:99:e0:1a:2c: 61:06:4f:e1:11:89:07:4b:86:f3:53:17:bf:89:0a:c0:67:2f: 00:5e:f8:ea:96:95:7a:ae:7f:62:9d:e2:e1:1b:bf:ff:60:9f: 22:86:78:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe6bspkkFZ3qnvU3XKiI4x8oEjBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDBCRDc1Q0FEM0EzMDNFQzcyRjFBRDBCMjM2NUVF OTVEMzkwRjAeFw0yNTEwMjAxMzExMzlaFw0yNTEwMjExNjA4MzlaMDMxMTAvBgNV BAMTKEMwQzM4M0Y4M0JENjg4QUZDQjdERTg5NDEzMTc0RTA1MjU4OTQ1MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAUmS5yTFTbPABhOQ16ZJOXtyU jVDFcEByWyhF3vXYUyLLxWzkECHbmlrYEco9sEYvTbUL+XbtkMUFZxjd5z+hnm+/ IDHuMqSBc4h1MqmTfAWumAg92B9iDoTW50jl/oiEZtSUSBbBTa3Ltu6m7U9uNrD9 Kkd/G1VsX/niWHONMCsSknZFUi7vKpNF5M6yfczlnFwpC5/MobMG3UvUg636zkOu hkKa26jgG3pLCp2IkZN5utE2Sj5mLn2nVdNGPZHcRWJ4qUILe310B0WvwpEsdn3y +y/CY60cUa+d+lIxH7vghvsKkEgXMa7gdAW+K7JZtzYM8kSt9l6g48KS6yfPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwMOD+DvWiK/LfeiUExdOBSWJRRIwHwYDVR0j BBgwFoAUu+0L11ytOjA+xy8a0LI2XuldOQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3pKYTRjYXN2aGNqRDJobkhtNWpBYXdjdFJrTmFnR25MQjY1M3VxOEhE Y04vMS9CQkVEMEJENzVDQUQzQTMwM0VDNzJGMUFEMEIyMzY1RUU5NUQzOTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCRUQwQkQ3NUNBRDNBMzAz RUM3MkYxQUQwQjIzNjVFRTk1RDM5MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3pKYTRjYXN2aGNqRDJobkhtNWpBYXdjdFJrTmFnR25MQjY1M3VxOEhEY04vMS9C QkVEMEJENzVDQUQzQTMwM0VDNzJGMUFEMEIyMzY1RUU5NUQzOTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFORwoX9s442RjUm/OkO4zwjPBbH6nH73hAGrpXAyaWv7VT31W5/offzPNLro gChC6J8nwJcVg8MV9+o3w5WRBSkK21bwISM+1uFQ+F5hW0C8XDxPZAE9FlvYJcs6 N2MctrM4Yf3WeXSlAmyFNb1/gf8yiXuDEaXJYHKzm88rFI9SXUSjCDwTFJC9kARc IPG2SnvVorV0cllyPeGRezhPuSDEVRC64fQdDKP5590i37RevMGq7jVJAFUYi0FU e5DSWbQERcZGZLH05VIJzWImRgTxRkOZ4BosYQZP4RGJB0uG81MXv4kKwGcvAF74 6paVeq5/Yp3i4Ru//2CfIoZ4PA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:29:18 2025 by rpki-client