$ rpki-client -vvf rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft File: BCF333E032A5E62EC142237F97628D0F131FE30A.mft (raw, json) Hash identifier: zgeTtZDKRmgy1VClMrXORq0Yo+pj7cJNKhb4Kfoyxjc= Subject key identifier: D8:A0:5A:5C:F1:0E:1E:2F:5C:41:75:65:02:C6:7C:E0:22:71:E6:F1 Authority key identifier: BC:F3:33:E0:32:A5:E6:2E:C1:42:23:7F:97:62:8D:0F:13:1F:E3:0A Certificate issuer: /CN=BCF333E032A5E62EC142237F97628D0F131FE30A Certificate serial: 1591E3EB6151C7ED5B4A852E6148F3E1EE542DF2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF333E032A5E62EC142237F97628D0F131FE30A.cer Subject info access: rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft Manifest number: 32 Signing time: Wed 05 Nov 2025 17:34:43 +0000 Manifest this update: Wed 05 Nov 2025 17:29:43 +0000 Manifest next update: Thu 06 Nov 2025 19:14:43 +0000 Files and hashes: 1: BCF333E032A5E62EC142237F97628D0F131FE30A.crl (hash: dN5UGhrkg/Z9N9d+VLtBQYES50C7/9SWHvAT5oFuTSc=) 2: 3137302e3233332e38382e302f32322d3332203d3e20323635323437.roa (hash: tD8bzSd/td4gAgsNMdvjp1tJllIejadsCZsau+IIXHE=) 3: 323830343a326364383a3a2f33322d313238203d3e20323635323437.roa (hash: 2rb73WMTlVULrRQzvfpNjeHdm4DJYAvni4A0ZCBlOH8=) 4: 3136372e3234392e3132342e302f32322d3332203d3e20323635323437.roa (hash: TxYNN5FtYlFE2BefvjhjkJb082YvcmFiVZKFHbUR/qY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.crl rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF333E032A5E62EC142237F97628D0F131FE30A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 17:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:91:e3:eb:61:51:c7:ed:5b:4a:85:2e:61:48:f3:e1:ee:54:2d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCF333E032A5E62EC142237F97628D0F131FE30A Validity Not Before: Nov 5 17:29:43 2025 GMT Not After : Nov 6 19:14:43 2025 GMT Subject: CN=D8A05A5CF10E1E2F5C41756502C67CE02271E6F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:65:10:9b:5b:db:24:5c:eb:da:99:06:c3:74: f8:83:4e:f7:3f:68:af:81:8a:ce:40:d0:dc:63:4b: 26:85:80:84:47:f8:5d:f0:34:69:dd:d8:06:ad:ac: 7d:80:53:60:ff:a6:5a:8c:3f:54:3b:b6:71:51:20: 5d:06:3e:93:e3:f5:4e:f2:8e:a1:b2:69:d6:b5:3d: 91:d8:63:24:a0:75:11:f1:99:36:88:45:e0:69:a3: 93:35:c3:75:db:c4:95:71:c0:b3:a3:62:26:2a:32: 62:c2:fb:95:af:82:19:5f:c4:b4:eb:c7:8e:a1:3c: 0e:48:61:50:ff:70:49:62:57:3f:14:bb:d8:e9:db: 6e:29:1a:7b:b7:18:43:11:bc:6c:6f:60:a9:39:91: 72:4f:45:79:84:a6:f2:4c:db:e1:d8:44:bd:76:bf: 94:e6:f2:8a:0c:0c:d3:20:da:f7:ba:b2:27:d5:56: 7e:83:95:23:19:a3:f4:04:22:99:ef:a5:ef:39:75: e9:ae:61:c1:1c:7e:a6:3c:ee:91:f5:5d:45:4b:48: 31:9a:af:57:65:c7:bd:5c:2a:13:7c:dd:e6:f8:54: a4:ab:d6:88:72:f2:bd:46:bd:55:8f:75:54:91:80: da:15:d5:7c:4e:ef:66:d0:7c:9c:f4:c0:e1:c5:ba: a0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A0:5A:5C:F1:0E:1E:2F:5C:41:75:65:02:C6:7C:E0:22:71:E6:F1 X509v3 Authority Key Identifier: keyid:BC:F3:33:E0:32:A5:E6:2E:C1:42:23:7F:97:62:8D:0F:13:1F:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF333E032A5E62EC142237F97628D0F131FE30A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:91:ec:97:da:2c:2b:0d:fa:8f:b3:17:37:d1:9d:f0:5f:61: 23:34:d1:66:df:87:4b:77:34:14:2d:2e:08:8c:f1:75:47:01: cd:e1:05:ea:12:6b:72:bc:66:77:fc:a0:bc:ba:3d:30:76:53: f1:3a:56:73:2a:4b:0b:6a:e8:c8:ff:0f:fe:8e:c1:af:3a:f8: f9:77:4f:76:94:b6:a4:ff:82:37:04:05:5d:73:02:09:e6:d3: 7c:4d:00:08:34:5e:af:77:f5:a2:2b:c6:3d:91:85:99:3f:22: 28:68:50:cb:0c:56:3f:c8:06:9d:cb:ac:20:94:9b:53:48:9a: 7d:f3:19:8e:51:4e:f2:63:3f:35:9c:f6:d9:1c:60:e2:e0:4a: ce:c5:6e:42:b4:ff:6b:c4:a5:91:4c:08:4b:4c:8c:36:ba:d1: 05:0e:09:89:50:5d:a7:ea:61:50:db:76:5b:dd:c1:f1:e0:6b: 83:91:76:4d:54:69:e7:b8:f8:5e:a6:b0:44:f4:ce:f9:96:87: 71:24:a3:fd:b2:44:2c:ef:cc:56:6b:b7:d7:f9:17:4a:d5:d8: da:45:bc:54:80:30:ad:4f:41:f8:46:8c:56:ce:0a:c7:16:c7: b9:a3:43:43:f5:94:d3:c7:52:db:a7:46:66:f5:f2:51:1f:38: 26:0e:66:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFZHj62FRx+1bSoUuYUjz4e5ULfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNGMzMzRTAzMkE1RTYyRUMxNDIyMzdGOTc2MjhEMEYx MzFGRTMwQTAeFw0yNTExMDUxNzI5NDNaFw0yNTExMDYxOTE0NDNaMDMxMTAvBgNV BAMTKEQ4QTA1QTVDRjEwRTFFMkY1QzQxNzU2NTAyQzY3Q0UwMjI3MUU2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvZRCbW9skXOvamQbDdPiDTvc/ aK+Bis5A0NxjSyaFgIRH+F3wNGnd2AatrH2AU2D/plqMP1Q7tnFRIF0GPpPj9U7y jqGyada1PZHYYySgdRHxmTaIReBpo5M1w3XbxJVxwLOjYiYqMmLC+5WvghlfxLTr x46hPA5IYVD/cEliVz8Uu9jp224pGnu3GEMRvGxvYKk5kXJPRXmEpvJM2+HYRL12 v5Tm8ooMDNMg2ve6sifVVn6DlSMZo/QEIpnvpe85demuYcEcfqY87pH1XUVLSDGa r1dlx71cKhN83eb4VKSr1ohy8r1GvVWPdVSRgNoV1XxO72bQfJz0wOHFuqCBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2KBaXPEOHi9cQXVlAsZ84CJx5vEwHwYDVR0j BBgwFoAUvPMz4DKl5i7BQiN/l2KNDxMf4wowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1VoRzNZbU4yVlBMWjgzakVFaGE5MnVOY1ZEZkNpV214aDFDVUVmTXdK b3YvMC9CQ0YzMzNFMDMyQTVFNjJFQzE0MjIzN0Y5NzYyOEQwRjEzMUZFMzBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDRjMzM0UwMzJBNUU2MkVD MTQyMjM3Rjk3NjI4RDBGMTMxRkUzMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1VoRzNZbU4yVlBMWjgzakVFaGE5MnVOY1ZEZkNpV214aDFDVUVmTXdKb3YvMC9C Q0YzMzNFMDMyQTVFNjJFQzE0MjIzN0Y5NzYyOEQwRjEzMUZFMzBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOZHsl9osKw36j7MXN9Gd8F9hIzTRZt+HS3c0FC0uCIzxdUcBzeEF6hJrcrxm d/ygvLo9MHZT8TpWcypLC2royP8P/o7Brzr4+XdPdpS2pP+CNwQFXXMCCebTfE0A CDRer3f1oivGPZGFmT8iKGhQywxWP8gGncusIJSbU0iaffMZjlFO8mM/NZz22Rxg 4uBKzsVuQrT/a8SlkUwIS0yMNrrRBQ4JiVBdp+phUNt2W93B8eBrg5F2TVRp57j4 XqawRPTO+ZaHcSSj/bJELO/MVmu31/kXStXY2kW8VIAwrU9B+EaMVs4KxxbHuaND Q/WU08dS26dGZvXyUR84Jg5mBw== -----END CERTIFICATE-----Generated at Wed Nov 5 19:08:00 2025 by rpki-client