$ rpki-client -vvf rpki-repo.registro.br/repo/APxG496FnVATgtxYFUSoQDtEBjspQA2zeGce9BSfLZZJ/0/BD019EDD3678DD4938C060892C8EE0BCB585EB7B.mft File: BD019EDD3678DD4938C060892C8EE0BCB585EB7B.mft (raw, json) Hash identifier: RACC3ySAbfE0SvZxM+s/wLhpG31VHRL6+sPFOCDjjC0= Subject key identifier: 77:FE:6C:D4:28:9A:D1:4A:35:6F:25:50:4E:45:F4:91:83:8E:22:8C Authority key identifier: BD:01:9E:DD:36:78:DD:49:38:C0:60:89:2C:8E:E0:BC:B5:85:EB:7B Certificate issuer: /CN=BD019EDD3678DD4938C060892C8EE0BCB585EB7B Certificate serial: 67C3695A142913D574F93EDC320BBFDB71B36E63 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD019EDD3678DD4938C060892C8EE0BCB585EB7B.cer Subject info access: rsync://rpki-repo.registro.br/repo/APxG496FnVATgtxYFUSoQDtEBjspQA2zeGce9BSfLZZJ/0/BD019EDD3678DD4938C060892C8EE0BCB585EB7B.mft Manifest number: 72 Signing time: Wed 05 Nov 2025 05:10:50 +0000 Manifest this update: Wed 05 Nov 2025 05:05:50 +0000 Manifest next update: Thu 06 Nov 2025 06:41:50 +0000 Files and hashes: 1: 323830343a386438633a3a2f33322d313238203d3e20323733333634.roa (hash: zXlGU+5uX0Itcl+rBTpwt1KKwdPsc9NNGcUT41LN79E=) 2: BD019EDD3678DD4938C060892C8EE0BCB585EB7B.crl (hash: W97aYOfWo3Lqb3ALdLQy1u6RkqKGdp8/sDQ3NzYwOC4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/APxG496FnVATgtxYFUSoQDtEBjspQA2zeGce9BSfLZZJ/0/BD019EDD3678DD4938C060892C8EE0BCB585EB7B.crl rsync://rpki-repo.registro.br/repo/APxG496FnVATgtxYFUSoQDtEBjspQA2zeGce9BSfLZZJ/0/BD019EDD3678DD4938C060892C8EE0BCB585EB7B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD019EDD3678DD4938C060892C8EE0BCB585EB7B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c3:69:5a:14:29:13:d5:74:f9:3e:dc:32:0b:bf:db:71:b3:6e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD019EDD3678DD4938C060892C8EE0BCB585EB7B Validity Not Before: Nov 5 05:05:50 2025 GMT Not After : Nov 6 06:41:50 2025 GMT Subject: CN=77FE6CD4289AD14A356F25504E45F491838E228C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:03:fa:07:4c:45:e4:27:9f:1e:00:89:62:78: 7d:55:fb:f0:f1:ef:aa:a6:03:2c:6b:13:ef:51:69: 26:a7:bf:56:43:f4:eb:6c:49:60:72:69:0d:b8:ec: b1:1b:f1:c1:de:68:b6:26:78:9a:df:4c:4f:83:e3: 6a:ea:34:22:ee:6e:eb:42:b8:1c:e0:2d:d7:68:6c: 47:2d:a5:b6:9c:2b:aa:ee:0f:90:55:db:8b:7e:8c: 56:53:84:80:84:ab:9b:ea:6f:ff:90:dd:11:0a:f1: fb:7a:38:fd:92:82:71:75:49:28:d1:14:a5:10:c1: 00:18:0c:24:56:d4:cd:fd:8d:5d:43:3d:fc:c1:ee: 19:da:f6:e1:48:98:ad:1b:69:70:58:65:2a:e3:9c: c5:aa:9a:15:ef:c5:d3:18:68:41:97:10:9f:d7:b8: 0e:ec:a2:10:e8:23:5d:25:bc:88:3c:69:21:0c:b1: f6:cb:17:5d:21:e9:41:35:ae:9f:31:d2:ca:95:e6: 53:b3:43:04:21:7d:15:2d:54:66:a8:72:d4:6e:5b: d9:89:52:10:69:f4:4e:d1:5b:d0:8d:a3:05:0e:6b: 00:8d:39:38:1f:a8:b0:f0:a2:b2:0a:73:f2:b1:6f: 68:56:6b:9f:5f:01:a7:dc:6f:66:0d:7f:50:8d:58: 10:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FE:6C:D4:28:9A:D1:4A:35:6F:25:50:4E:45:F4:91:83:8E:22:8C X509v3 Authority Key Identifier: keyid:BD:01:9E:DD:36:78:DD:49:38:C0:60:89:2C:8E:E0:BC:B5:85:EB:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/APxG496FnVATgtxYFUSoQDtEBjspQA2zeGce9BSfLZZJ/0/BD019EDD3678DD4938C060892C8EE0BCB585EB7B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD019EDD3678DD4938C060892C8EE0BCB585EB7B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/APxG496FnVATgtxYFUSoQDtEBjspQA2zeGce9BSfLZZJ/0/BD019EDD3678DD4938C060892C8EE0BCB585EB7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ce:10:90:a2:d5:2c:67:56:08:f7:34:6f:ab:29:14:b9:2d: 78:41:47:26:e2:bd:3c:e7:ac:25:da:74:20:84:ae:84:27:5f: 7b:a3:67:9b:8e:94:21:ba:05:22:5d:4b:72:d2:d1:71:65:50: d9:67:20:a1:90:34:96:26:0b:11:15:38:c7:a2:67:f5:c2:34: a6:f2:00:19:d6:6c:32:5f:9c:60:dc:42:20:08:2c:cf:db:32: af:b9:63:d0:46:a1:18:dc:a3:46:41:d3:6f:0d:51:69:9e:09: 6e:e6:90:ae:ae:ba:82:b0:7f:4d:02:6a:a0:9f:76:93:50:63: 13:ed:b2:0d:f9:a3:a0:0b:8b:38:4e:74:2f:4d:83:1d:44:9b: eb:89:b9:ea:21:74:51:83:c7:0a:1b:b5:27:a7:64:ae:ba:da: d2:d4:57:a2:b5:27:2b:43:4a:99:ed:0a:b8:d9:00:8a:cb:98: 63:19:73:ec:95:f8:13:50:76:9e:48:9e:55:a8:38:6a:cf:50: 1e:ba:44:52:38:15:8c:a7:3d:55:9d:fb:37:6d:49:3a:e8:e3: 98:8e:f8:0e:d3:0e:4a:b6:21:16:6e:2c:48:4a:af:83:bb:40: e6:a3:3a:24:11:21:c8:dd:af:de:98:5a:f2:43:3a:66:aa:18: 4d:69:81:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ8NpWhQpE9V0+T7cMgu/23GzbmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQwMTlFREQzNjc4REQ0OTM4QzA2MDg5MkM4RUUwQkNC NTg1RUI3QjAeFw0yNTExMDUwNTA1NTBaFw0yNTExMDYwNjQxNTBaMDMxMTAvBgNV BAMTKDc3RkU2Q0Q0Mjg5QUQxNEEzNTZGMjU1MDRFNDVGNDkxODM4RTIyOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkA/oHTEXkJ58eAIlieH1V+/Dx 76qmAyxrE+9RaSanv1ZD9OtsSWByaQ247LEb8cHeaLYmeJrfTE+D42rqNCLubutC uBzgLddobEctpbacK6ruD5BV24t+jFZThICEq5vqb/+Q3REK8ft6OP2SgnF1SSjR FKUQwQAYDCRW1M39jV1DPfzB7hna9uFImK0baXBYZSrjnMWqmhXvxdMYaEGXEJ/X uA7sohDoI10lvIg8aSEMsfbLF10h6UE1rp8x0sqV5lOzQwQhfRUtVGaoctRuW9mJ UhBp9E7RW9CNowUOawCNOTgfqLDworIKc/Kxb2hWa59fAafcb2YNf1CNWBDDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUd/5s1Cia0Uo1byVQTkX0kYOOIowwHwYDVR0j BBgwFoAUvQGe3TZ43Uk4wGCJLI7gvLWF63swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVB4RzQ5NkZuVkFUZ3R4WUZVU29RRHRFQmpzcFFBMnplR2NlOUJTZkxa WkovMC9CRDAxOUVERDM2NzhERDQ5MzhDMDYwODkyQzhFRTBCQ0I1ODVFQjdCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEMDE5RUREMzY3OERENDkz OEMwNjA4OTJDOEVFMEJDQjU4NUVCN0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVB4RzQ5NkZuVkFUZ3R4WUZVU29RRHRFQmpzcFFBMnplR2NlOUJTZkxaWkovMC9C RDAxOUVERDM2NzhERDQ5MzhDMDYwODkyQzhFRTBCQ0I1ODVFQjdCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcs4QkKLVLGdWCPc0b6spFLkteEFHJuK9POesJdp0IISuhCdfe6Nnm46UIboF Il1LctLRcWVQ2WcgoZA0liYLERU4x6Jn9cI0pvIAGdZsMl+cYNxCIAgsz9syr7lj 0EahGNyjRkHTbw1RaZ4JbuaQrq66grB/TQJqoJ92k1BjE+2yDfmjoAuLOE50L02D HUSb64m56iF0UYPHChu1J6dkrrra0tRXorUnK0NKme0KuNkAisuYYxlz7JX4E1B2 nkieVag4as9QHrpEUjgVjKc9VZ37N21JOujjmI74DtMOSrYhFm4sSEqvg7tA5qM6 JBEhyN2v3pha8kM6ZqoYTWmBhg== -----END CERTIFICATE-----Generated at Wed Nov 5 10:11:48 2025 by rpki-client