$ rpki-client -vvf rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/BB43456C350FB93F6AD33FFB59494CAB9C90FFFD.mft File: BB43456C350FB93F6AD33FFB59494CAB9C90FFFD.mft (raw, json) Hash identifier: pBxuyZ5kFVsqf66l+59ugKKy+7tHifH6UwzDtmH21gE= Subject key identifier: 2C:6B:84:D4:70:D9:F4:24:0E:B3:57:D2:4D:F4:E6:6E:68:1C:E3:AD Authority key identifier: BB:43:45:6C:35:0F:B9:3F:6A:D3:3F:FB:59:49:4C:AB:9C:90:FF:FD Certificate issuer: /CN=BB43456C350FB93F6AD33FFB59494CAB9C90FFFD Certificate serial: 1FE992B55D6577E09D71C1AC370A4098D920207E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB43456C350FB93F6AD33FFB59494CAB9C90FFFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/BB43456C350FB93F6AD33FFB59494CAB9C90FFFD.mft Manifest number: 3B Signing time: Tue 04 Nov 2025 23:16:12 +0000 Manifest this update: Tue 04 Nov 2025 23:11:12 +0000 Manifest next update: Wed 05 Nov 2025 23:43:12 +0000 Files and hashes: 1: BB43456C350FB93F6AD33FFB59494CAB9C90FFFD.crl (hash: nLi8qa9oA7LG539dUFJ+avFWcRVrHiBX1R5qe2XpQ90=) 2: 34352e3233322e3132342e302f32322d3332203d3e20323637323634.roa (hash: POCLtgXqtW4ZQdfnH7mreykrem0PTr2qLO3kr2TT8hI=) 3: 323830343a346163633a3a2f33322d313238203d3e20323637323634.roa (hash: 7GhLPKMu7mU6NneEwl4pGnTt1KkdSiuIFVdBxqB34Xc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/BB43456C350FB93F6AD33FFB59494CAB9C90FFFD.crl rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/BB43456C350FB93F6AD33FFB59494CAB9C90FFFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB43456C350FB93F6AD33FFB59494CAB9C90FFFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 23:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e9:92:b5:5d:65:77:e0:9d:71:c1:ac:37:0a:40:98:d9:20:20:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB43456C350FB93F6AD33FFB59494CAB9C90FFFD Validity Not Before: Nov 4 23:11:12 2025 GMT Not After : Nov 5 23:43:12 2025 GMT Subject: CN=2C6B84D470D9F4240EB357D24DF4E66E681CE3AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:93:b2:d5:6b:c4:79:9b:4f:a8:cf:15:9f: 50:fe:1f:48:d2:4b:c1:96:fb:4a:11:6d:98:e5:74: f2:a0:30:1d:5e:0c:de:71:d3:97:99:24:51:d4:7f: 7d:fb:8f:84:2b:01:e2:ea:39:a4:33:57:5b:cd:8a: 88:0f:09:70:52:95:ea:54:67:a4:19:62:25:d3:46: cd:1a:50:33:00:a6:31:58:d0:f6:4c:37:c3:b1:51: 39:dc:bd:85:60:f6:70:b6:cf:07:42:16:73:1c:f8: 4f:20:b2:06:6c:56:1d:68:5b:10:51:c7:88:c2:2d: f7:e4:ba:20:8f:8d:ed:ce:ce:7a:51:8e:b1:1d:51: 52:1f:e4:31:74:a2:be:30:54:a2:0c:9e:99:dd:ac: 13:51:8d:6d:5a:52:63:04:17:49:82:ec:d9:84:78: 9f:e6:4f:a0:b7:8a:a4:5c:3e:ba:81:2c:15:f8:b3: de:05:30:17:18:66:42:bd:34:c8:d0:0e:14:84:1f: 60:87:d0:7e:74:1d:26:91:87:d7:40:75:a0:02:9d: 17:08:5e:8f:f5:68:34:14:ce:de:2e:aa:4c:97:57: 05:a3:44:27:6f:36:61:0a:97:e6:4e:fd:c4:0a:70: 49:88:9f:ab:dc:02:38:a4:4f:1a:31:a8:f8:e1:50: 59:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6B:84:D4:70:D9:F4:24:0E:B3:57:D2:4D:F4:E6:6E:68:1C:E3:AD X509v3 Authority Key Identifier: keyid:BB:43:45:6C:35:0F:B9:3F:6A:D3:3F:FB:59:49:4C:AB:9C:90:FF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/BB43456C350FB93F6AD33FFB59494CAB9C90FFFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB43456C350FB93F6AD33FFB59494CAB9C90FFFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/38Js22Bs6gt2Xg5qD5m4ZAo7nXXDvSk4hWDom8ScuaEn/0/BB43456C350FB93F6AD33FFB59494CAB9C90FFFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:e2:ac:0d:75:c6:13:7b:70:60:bb:82:03:97:6f:5b:f6:d6: f6:64:84:55:2b:3d:99:a1:60:81:5d:91:d8:6e:14:07:60:a7: f6:37:8d:85:4b:2c:0c:85:a0:34:39:27:48:28:25:7f:9e:96: 07:f6:cc:f2:3c:fa:41:f7:e4:b0:37:f8:87:1e:2f:bb:68:72: a4:b7:33:5f:8a:96:03:c7:0a:c8:51:1d:33:65:30:59:61:80: ae:fa:1f:04:32:ad:49:b0:ec:cf:b6:2e:4f:0f:ec:38:ca:7d: 8e:b3:ff:78:ce:19:f5:bc:c5:ea:2b:6e:e6:b3:16:fa:46:17: d0:04:19:72:be:ca:e8:da:95:ec:8d:8b:4f:2a:fb:45:bb:b8: 9f:66:43:6e:a5:1e:f9:51:15:5d:d2:25:11:f0:06:c2:f3:36: 1e:e6:e4:c1:f0:3e:6a:3e:57:0b:b0:b3:8d:bc:f3:d4:58:d9: ca:ad:ef:03:0d:26:7b:3a:3b:52:57:56:c0:5f:63:5e:78:92: a1:98:9b:2b:88:fa:ac:fb:d5:71:d6:6b:90:55:88:d3:db:4c: 20:ad:d6:44:84:73:02:23:3e:01:b8:4b:36:d6:fe:bc:49:fd: b7:91:a7:65:40:03:4d:ef:3b:99:84:66:58:20:53:78:a2:11: 0b:b8:4f:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUH+mStV1ld+CdccGsNwpAmNkgIH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI0MzQ1NkMzNTBGQjkzRjZBRDMzRkZCNTk0OTRDQUI5 QzkwRkZGRDAeFw0yNTExMDQyMzExMTJaFw0yNTExMDUyMzQzMTJaMDMxMTAvBgNV BAMTKDJDNkI4NEQ0NzBEOUY0MjQwRUIzNTdEMjRERjRFNjZFNjgxQ0UzQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAW5Oy1WvEeZtPqM8Vn1D+H0jS S8GW+0oRbZjldPKgMB1eDN5x05eZJFHUf337j4QrAeLqOaQzV1vNiogPCXBSlepU Z6QZYiXTRs0aUDMApjFY0PZMN8OxUTncvYVg9nC2zwdCFnMc+E8gsgZsVh1oWxBR x4jCLffkuiCPje3OznpRjrEdUVIf5DF0or4wVKIMnpndrBNRjW1aUmMEF0mC7NmE eJ/mT6C3iqRcPrqBLBX4s94FMBcYZkK9NMjQDhSEH2CH0H50HSaRh9dAdaACnRcI Xo/1aDQUzt4uqkyXVwWjRCdvNmEKl+ZO/cQKcEmIn6vcAjikTxoxqPjhUFmfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULGuE1HDZ9CQOs1fSTfTmbmgc460wHwYDVR0j BBgwFoAUu0NFbDUPuT9q0z/7WUlMq5yQ//0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzhKczIyQnM2Z3QyWGc1cUQ1bTRaQW83blhYRHZTazRoV0RvbThTY3Vh RW4vMC9CQjQzNDU2QzM1MEZCOTNGNkFEMzNGRkI1OTQ5NENBQjlDOTBGRkZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCNDM0NTZDMzUwRkI5M0Y2 QUQzM0ZGQjU5NDk0Q0FCOUM5MEZGRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzhKczIyQnM2Z3QyWGc1cUQ1bTRaQW83blhYRHZTazRoV0RvbThTY3VhRW4vMC9C QjQzNDU2QzM1MEZCOTNGNkFEMzNGRkI1OTQ5NENBQjlDOTBGRkZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJuKsDXXGE3twYLuCA5dvW/bW9mSEVSs9maFggV2R2G4UB2Cn9jeNhUssDIWg NDknSCglf56WB/bM8jz6QffksDf4hx4vu2hypLczX4qWA8cKyFEdM2UwWWGArvof BDKtSbDsz7YuTw/sOMp9jrP/eM4Z9bzF6itu5rMW+kYX0AQZcr7K6NqV7I2LTyr7 Rbu4n2ZDbqUe+VEVXdIlEfAGwvM2HubkwfA+aj5XC7Czjbzz1FjZyq3vAw0mezo7 UldWwF9jXniSoZibK4j6rPvVcdZrkFWI09tMIK3WRIRzAiM+AbhLNtb+vEn9t5Gn ZUADTe87mYRmWCBTeKIRC7hPug== -----END CERTIFICATE-----Generated at Wed Nov 5 08:33:14 2025 by rpki-client