$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.mft File: BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.mft (raw, json) Hash identifier: mIHc6YiHkntI96YGT2reZVruP5xMy6Gd8hkaKsq3mSQ= Subject key identifier: 72:FA:70:C2:53:B7:0D:ED:CF:CE:F0:0D:0D:30:BB:8B:32:41:5E:32 Authority key identifier: BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60 Certificate issuer: /CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60 Certificate serial: 4878237F2D393AC6562EAFA16F38C4C1311B8855 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer Subject info access: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.mft Manifest number: 26 Signing time: Tue 04 Nov 2025 14:43:19 +0000 Manifest this update: Tue 04 Nov 2025 14:38:19 +0000 Manifest next update: Wed 05 Nov 2025 16:50:19 +0000 Files and hashes: 1: 323830343a323739343a3a2f33322d3332203d3e20323633393131.roa (hash: bK0gtO0JmiAg0I608Iz5A+xFCE8tZKl4orwDjiL6AJU=) 2: 3133382e3230342e3137322e302f32342d3234203d3e20323633393131.roa (hash: JTzaz8ld9WJmDqi6uMzYs05e1Om4PnGPjqIIu4WqRYI=) 3: 3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa (hash: tQ9BE7myZWTRJBmbkn0TzJRLKgNbGTDntpPgIeG1AmI=) 4: 3133382e3230342e3137332e302f32342d3234203d3e20323633393131.roa (hash: qesjynq5DFW/wIqN2yce/NCuwDwwi/kRJriZVT1PbTM=) 5: 3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa (hash: oPlAFKdBOzvHicH7jSWtdL3T35vlcWGOJfLQ2OzOQRo=) 6: BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl (hash: iyiJZ+ZfC64RUDPYTwwKvVdljRN1vNOQkYlHpDDYHCk=) 7: 3133382e3230342e3137322e302f32322d3232203d3e20323633393131.roa (hash: TKxrWI/UtQO06f0V4oMpRtshZID0kbklXgTB/FM6dPM=) 8: 3133382e3230342e3137322e302f32332d3233203d3e20323633393131.roa (hash: 5vvwC6MQU7dBy4VA97gpDUDkn4tFUMFLR4X0/id2YOc=) 9: 3133382e3230342e3137352e302f32342d3234203d3e20323633393131.roa (hash: RTYl1Ot9rrwAfupFDcxrycxLUcl2itpl6m6iWBlKQLE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 16:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:78:23:7f:2d:39:3a:c6:56:2e:af:a1:6f:38:c4:c1:31:1b:88:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60 Validity Not Before: Nov 4 14:38:19 2025 GMT Not After : Nov 5 16:50:19 2025 GMT Subject: CN=72FA70C253B70DEDCFCEF00D0D30BB8B32415E32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:85:22:44:40:94:53:a0:90:c3:6d:01:97: 45:ce:0b:a9:db:bd:b1:9b:d5:17:54:74:86:75:cc: 63:11:06:f9:f4:68:0d:b8:83:55:72:18:8e:a5:37: 8a:88:71:fa:8b:1a:a3:4b:fe:dc:4c:86:ac:05:1d: e9:30:03:c3:0c:96:40:44:c3:a2:41:ad:80:07:21: 59:4e:22:eb:fa:31:07:9c:a2:8f:fa:0c:7f:19:1f: 92:77:c8:e8:6b:92:17:b2:88:d4:42:3a:6f:81:ec: 13:1d:01:23:a5:a0:22:44:bb:0a:e4:f8:58:39:78: e2:02:4c:51:ed:9b:79:e3:57:ec:af:8b:5f:30:b9: 3b:b1:af:39:f5:c9:e6:fa:1d:92:b0:e8:ad:00:58: b3:11:88:69:80:bf:d8:54:f5:0b:1d:90:07:76:d6: 13:5f:6f:c8:fc:ba:c8:99:94:a0:7c:ae:ec:ae:66: a1:dd:f6:4c:4c:51:eb:69:26:7a:b5:c0:06:82:0d: ee:f8:6f:af:af:fa:0c:f4:29:8b:db:ad:ba:5b:3b: 77:14:23:db:d1:72:12:96:88:3a:c2:ac:1f:33:be: 64:f3:6b:a5:09:d3:d2:8a:d0:8d:7d:d9:89:5d:78: a0:4d:7e:81:cb:0b:fa:68:24:1f:9e:c5:76:b6:97: 94:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FA:70:C2:53:B7:0D:ED:CF:CE:F0:0D:0D:30:BB:8B:32:41:5E:32 X509v3 Authority Key Identifier: keyid:BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:fe:f2:70:ad:77:0c:f8:06:60:65:24:df:67:c5:d4:f5:c0: 28:3f:a2:24:15:38:5d:eb:be:1e:87:6f:43:08:05:bd:8d:d4: ff:7f:af:63:80:c7:1c:a6:3b:62:e9:f0:b3:c7:01:ab:d9:39: ed:7b:5b:49:52:b5:f1:21:7e:ad:28:af:42:fc:28:5d:d3:2a: f0:24:af:cc:e6:b0:7e:7f:db:4f:99:c3:33:cf:5c:56:c1:3a: ab:b8:fa:44:18:d1:da:41:29:44:0b:80:ea:47:d4:4c:a0:3f: b9:9b:dc:e5:3c:82:85:ac:0c:27:80:a5:37:ac:72:67:33:1f: e9:d3:9e:2d:00:7c:bc:7a:78:08:09:cd:f1:63:00:cb:9a:53: 20:2e:d9:55:08:28:76:86:99:68:aa:51:9a:cd:15:e4:e3:2f: 7f:f8:94:9a:27:4d:f7:0e:6c:87:c8:1f:a1:f7:58:3e:89:00: d0:64:ad:d2:09:26:59:65:95:92:34:dd:49:13:04:ab:c2:f7: 77:bc:3f:f1:db:ad:06:b3:b1:df:0c:a3:9d:bd:71:9b:d4:10: 3a:91:5f:a4:8d:66:f7:03:f7:e7:da:2b:e7:eb:c3:72:27:4b: 54:18:52:b4:76:45:40:43:2d:c4:42:84:23:e0:e4:38:49:00: 15:12:06:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSHgjfy05OsZWLq+hbzjEwTEbiFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM3RkUwRDkwMTI1NUQ3MTIxMzI3RUZGQ0EwMUYwQjRE MUUwQUM2MDAeFw0yNTExMDQxNDM4MTlaFw0yNTExMDUxNjUwMTlaMDMxMTAvBgNV BAMTKDcyRkE3MEMyNTNCNzBERURDRkNFRjAwRDBEMzBCQjhCMzI0MTVFMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC634UiRECUU6CQw20Bl0XOC6nb vbGb1RdUdIZ1zGMRBvn0aA24g1VyGI6lN4qIcfqLGqNL/txMhqwFHekwA8MMlkBE w6JBrYAHIVlOIuv6MQecoo/6DH8ZH5J3yOhrkheyiNRCOm+B7BMdASOloCJEuwrk +Fg5eOICTFHtm3njV+yvi18wuTuxrzn1yeb6HZKw6K0AWLMRiGmAv9hU9QsdkAd2 1hNfb8j8usiZlKB8ruyuZqHd9kxMUetpJnq1wAaCDe74b6+v+gz0KYvbrbpbO3cU I9vRchKWiDrCrB8zvmTza6UJ09KK0I192YldeKBNfoHLC/poJB+exXa2l5T9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcvpwwlO3De3PzvANDTC7izJBXjIwHwYDVR0j BBgwFoAUvH/g2QElXXEhMn7/ygHwtNHgrGAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNT clgvMC9CQzdGRTBEOTAxMjU1RDcxMjEzMjdFRkZDQTAxRjBCNEQxRTBBQzYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDN0ZFMEQ5MDEyNTVENzEy MTMyN0VGRkNBMDFGMEI0RDFFMEFDNjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNTclgvMC9C QzdGRTBEOTAxMjU1RDcxMjEzMjdFRkZDQTAxRjBCNEQxRTBBQzYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArv7ycK13DPgGYGUk32fF1PXAKD+iJBU4Xeu+HodvQwgFvY3U/3+vY4DHHKY7 Yunws8cBq9k57XtbSVK18SF+rSivQvwoXdMq8CSvzOawfn/bT5nDM89cVsE6q7j6 RBjR2kEpRAuA6kfUTKA/uZvc5TyChawMJ4ClN6xyZzMf6dOeLQB8vHp4CAnN8WMA y5pTIC7ZVQgodoaZaKpRms0V5OMvf/iUmidN9w5sh8gfofdYPokA0GSt0gkmWWWV kjTdSRMEq8L3d7w/8dutBrOx3wyjnb1xm9QQOpFfpI1m9wP359or5+vDcidLVBhS tHZFQEMtxEKEI+DkOEkAFRIG1w== -----END CERTIFICATE-----Generated at Wed Nov 5 09:39:38 2025 by rpki-client