$ rpki-client -vvf rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.mft File: BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.mft (raw, json) Hash identifier: ZSa9oei4P+Ul7fq+NUl7+18+uGYcaVeZv1/xFvVBWfc= Subject key identifier: BE:68:A2:32:E0:4A:32:B0:0D:4C:6F:DC:5E:30:F7:4D:08:D4:32:52 Authority key identifier: BE:A2:81:A7:EB:EE:36:19:E9:2A:DE:BD:79:54:99:4E:D1:4E:DA:A7 Certificate issuer: /CN=BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7 Certificate serial: 49F4CE7158B261B9654897FA543E2E9461392476 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.cer Subject info access: rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.mft Manifest number: A2 Signing time: Mon 20 Oct 2025 15:58:46 +0000 Manifest this update: Mon 20 Oct 2025 15:53:46 +0000 Manifest next update: Tue 21 Oct 2025 16:41:46 +0000 Files and hashes: 1: 3139322e3134302e36342e302f32322d3332203d3e20323636353530.roa (hash: 0rJsVszqd6qJt2rd9U1tQfgux1bkgBfLlwLSdd0rwkI=) 2: BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.crl (hash: WCBkvXsF3p0iMIHBnFv5WbXb5IZKSor6Wi54siRjn00=) 3: 323830343a336462633a3a2f33322d313238203d3e20323636353530.roa (hash: 4+r/CpNpGhUCGT+Jy5+kk15xLYy51n+dBTfZ5QP5rT4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.crl rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 16:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f4:ce:71:58:b2:61:b9:65:48:97:fa:54:3e:2e:94:61:39:24:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7 Validity Not Before: Oct 20 15:53:46 2025 GMT Not After : Oct 21 16:41:46 2025 GMT Subject: CN=BE68A232E04A32B00D4C6FDC5E30F74D08D43252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:28:b0:77:c6:b9:64:9e:2a:56:d6:75:9b:22: 50:5f:8f:42:61:5c:a0:67:e5:73:61:73:ee:8c:9f: e2:85:45:b2:75:93:43:bf:66:99:05:ca:1f:c9:a7: 07:30:7b:f9:48:f9:93:3f:56:e7:25:5b:4e:f3:1d: 80:16:0b:50:25:1a:54:76:37:12:e2:89:4d:e2:7f: e8:bb:fb:c5:6d:14:59:38:37:bf:ea:04:50:4e:0d: 64:bd:85:7e:b2:1e:6d:41:e0:60:16:ca:d5:64:38: a7:05:94:1c:d6:ef:ba:01:72:5d:2e:cc:11:eb:2a: 43:1e:a2:c4:3e:8a:ec:6c:c2:17:a4:ff:14:f2:3f: 73:50:39:b8:65:69:a7:c3:37:60:63:fa:a5:f3:90: 62:17:d1:3e:79:3b:a6:5c:45:a2:ce:4e:9d:8d:a3: f9:7d:c3:ac:1a:b0:97:bc:38:d0:52:19:13:d4:ed: 22:5d:d7:df:0b:7d:70:18:0b:00:cb:6b:5c:2a:9c: a0:ac:6c:26:2b:fa:0a:8c:2a:e5:19:cb:c5:2a:27: 22:e9:10:24:38:ae:79:0d:2a:45:63:ce:8c:90:9a: a1:8f:34:35:31:47:4b:3f:a5:b7:a0:7d:d0:3f:3d: 08:6c:c8:0f:e9:f3:1e:19:9d:c4:c9:0c:02:74:f4: aa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:68:A2:32:E0:4A:32:B0:0D:4C:6F:DC:5E:30:F7:4D:08:D4:32:52 X509v3 Authority Key Identifier: keyid:BE:A2:81:A7:EB:EE:36:19:E9:2A:DE:BD:79:54:99:4E:D1:4E:DA:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/xnxP1vtgywSzpui5dwkUseHnrch5RciNy2heBAvaSk1/0/BEA281A7EBEE3619E92ADEBD7954994ED14EDAA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ef:6c:81:b9:55:f1:a9:7b:27:fa:f8:fd:09:74:e0:13:b1: dd:f9:50:8d:57:5d:37:99:d8:f5:a7:0d:5a:7f:12:07:f0:ed: 47:a4:2b:f8:7e:8e:92:ff:3f:5e:81:f2:c4:43:48:fe:98:a7: 4f:ec:7b:ea:0f:d7:02:be:1f:04:23:a9:7e:86:26:cf:dc:e4: 63:9a:d9:aa:d1:39:3b:39:63:cd:dd:a0:c5:19:5a:2f:82:bd: 3b:19:f8:26:f7:73:ca:09:f8:cd:42:4c:9d:75:ff:b6:70:0d: 61:08:56:51:2f:79:8a:27:fa:ec:5a:74:b4:58:7d:4f:fc:a0: e1:c0:04:ab:d0:fb:35:71:44:de:54:c0:03:4f:bb:ed:39:05: c8:e8:14:17:2a:4e:6b:9f:d1:53:30:59:19:39:41:ee:84:db: 60:99:e6:09:88:fe:ae:8f:26:59:c8:10:1c:50:f4:6f:2b:c8: 27:08:80:4d:d7:21:d3:d3:3f:a9:c0:6b:da:0e:64:07:12:23: 66:74:5d:76:3d:73:9b:d8:37:90:d8:ea:07:de:77:53:4b:ad: 34:42:95:5e:1c:35:88:d6:6f:3a:ef:86:b4:1c:63:57:e4:29: 83:c0:57:07:1c:87:8e:18:57:83:48:e4:e9:ac:31:a0:39:cb: 90:52:a3:2c -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUSfTOcViyYbllSJf6VD4ulGE5JHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVBMjgxQTdFQkVFMzYxOUU5MkFERUJENzk1NDk5NEVE MTRFREFBNzAeFw0yNTEwMjAxNTUzNDZaFw0yNTEwMjExNjQxNDZaMDMxMTAvBgNV BAMTKEJFNjhBMjMyRTA0QTMyQjAwRDRDNkZEQzVFMzBGNzREMDhENDMyNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmKLB3xrlknipW1nWbIlBfj0Jh XKBn5XNhc+6Mn+KFRbJ1k0O/ZpkFyh/Jpwcwe/lI+ZM/VuclW07zHYAWC1AlGlR2 NxLiiU3if+i7+8VtFFk4N7/qBFBODWS9hX6yHm1B4GAWytVkOKcFlBzW77oBcl0u zBHrKkMeosQ+iuxswhek/xTyP3NQObhlaafDN2Bj+qXzkGIX0T55O6ZcRaLOTp2N o/l9w6wasJe8ONBSGRPU7SJd198LfXAYCwDLa1wqnKCsbCYr+gqMKuUZy8UqJyLp ECQ4rnkNKkVjzoyQmqGPNDUxR0s/pbegfdA/PQhsyA/p8x4ZncTJDAJ09KoRAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUvmiiMuBKMrANTG/cXjD3TQjUMlIwHwYDVR0j BBgwFoAUvqKBp+vuNhnpKt69eVSZTtFO2qcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby94bnhQMXZ0Z3l3U3pwdWk1ZHdrVXNlSG5yY2g1UmNpTnkyaGVCQXZhU2sx LzAvQkVBMjgxQTdFQkVFMzYxOUU5MkFERUJENzk1NDk5NEVEMTRFREFBNy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CRUEyODFBN0VCRUUzNjE5RTky QURFQkQ3OTU0OTk0RUQxNEVEQUE3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3hu eFAxdnRneXdTenB1aTVkd2tVc2VIbnJjaDVSY2lOeTJoZUJBdmFTazEvMC9CRUEy ODFBN0VCRUUzNjE5RTkyQURFQkQ3OTU0OTk0RUQxNEVEQUE3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA GO9sgblV8al7J/r4/Ql04BOx3flQjVddN5nY9acNWn8SB/DtR6Qr+H6Okv8/XoHy xENI/pinT+x76g/XAr4fBCOpfoYmz9zkY5rZqtE5Ozljzd2gxRlaL4K9Oxn4Jvdz ygn4zUJMnXX/tnANYQhWUS95iif67Fp0tFh9T/yg4cAEq9D7NXFE3lTAA0+77TkF yOgUFypOa5/RUzBZGTlB7oTbYJnmCYj+ro8mWcgQHFD0byvIJwiATdch09M/qcBr 2g5kBxIjZnRddj1zm9g3kNjqB953U0utNEKVXhw1iNZvOu+GtBxjV+Qpg8BXBxyH jhhXg0jk6awxoDnLkFKjLA== -----END CERTIFICATE-----Generated at Mon Oct 20 23:10:15 2025 by rpki-client