$ rpki-client -vvf rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.mft File: B838C46840DE2B5CF4614820A0D12EFEF2960C8D.mft (raw, json) Hash identifier: KSXY1yAhGQ1Dn2NZVjS4PcNglJbPZS/riXcYeSdNjQE= Subject key identifier: 3B:CE:ED:C6:A7:F5:A2:1C:9F:1B:3E:73:5C:0F:B4:46:7D:10:E7:F7 Authority key identifier: B8:38:C4:68:40:DE:2B:5C:F4:61:48:20:A0:D1:2E:FE:F2:96:0C:8D Certificate issuer: /CN=B838C46840DE2B5CF4614820A0D12EFEF2960C8D Certificate serial: 791C462B8650F2A53C1A9D06B6B2D8B59C0EC66C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.cer Subject info access: rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.mft Manifest number: BE Signing time: Tue 04 Nov 2025 09:46:05 +0000 Manifest this update: Tue 04 Nov 2025 09:41:05 +0000 Manifest next update: Wed 05 Nov 2025 12:30:05 +0000 Files and hashes: 1: 3133312e302e34382e302f32322d3234203d3e203631383832.roa (hash: iC+mP1s4X7tJ5HnSNAK4a84YI8CW5Z/ggvAjPtN6k2Y=) 2: 323830343a316162633a3a2f33322d3438203d3e203631383832.roa (hash: N9ruoGLMhy36IxoZsmaBHKvteHLr0b7Ia/kj800MKVY=) 3: B838C46840DE2B5CF4614820A0D12EFEF2960C8D.crl (hash: Q5oxqsJgVEd5ywHG/I96+2DtDr1xfCxsuhl9LWLP6ok=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.crl rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 12:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1c:46:2b:86:50:f2:a5:3c:1a:9d:06:b6:b2:d8:b5:9c:0e:c6:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B838C46840DE2B5CF4614820A0D12EFEF2960C8D Validity Not Before: Nov 4 09:41:05 2025 GMT Not After : Nov 5 12:30:05 2025 GMT Subject: CN=3BCEEDC6A7F5A21C9F1B3E735C0FB4467D10E7F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2a:76:5b:1e:5d:46:5e:29:c3:4e:6e:29:57: c5:8d:fb:49:01:90:b1:b9:9c:95:a0:e1:35:a1:ff: dc:06:c7:a1:ef:d5:37:31:32:9c:87:18:67:1e:2f: 87:e5:9e:f2:d1:e9:3e:fb:89:4d:84:72:e9:1f:1a: 3a:2c:23:ab:33:bc:d5:56:be:07:21:96:ec:b7:9f: f1:27:41:b4:17:9c:96:52:d9:f7:d6:aa:f4:db:c2: 0d:c2:79:81:42:6d:0a:95:b2:89:da:2a:39:2b:d9: f4:14:ac:96:28:a0:f1:47:78:67:d2:b0:2a:e6:da: fd:d4:12:11:40:3b:5a:97:b4:26:37:3c:68:a6:91: be:6e:f2:b6:2a:40:59:5b:91:1d:79:51:bb:c1:3b: 69:e5:14:4b:ce:f3:cb:42:22:cc:f2:19:b1:5a:35: 8e:10:8a:98:f5:e4:e0:49:15:45:87:5b:80:2e:85: d0:f4:9a:5c:fa:8e:90:9c:3e:f4:cc:87:54:a2:e9: bb:fa:48:be:2b:ab:90:11:ef:dd:63:8e:e6:21:15: e9:92:f2:96:a1:7d:47:38:bf:9f:07:e6:e7:6c:9d: ea:b7:4e:fa:71:9d:a1:e8:5f:67:82:f9:dc:70:f2: 8b:00:93:b0:47:1c:91:92:99:31:44:f0:f6:37:84: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CE:ED:C6:A7:F5:A2:1C:9F:1B:3E:73:5C:0F:B4:46:7D:10:E7:F7 X509v3 Authority Key Identifier: keyid:B8:38:C4:68:40:DE:2B:5C:F4:61:48:20:A0:D1:2E:FE:F2:96:0C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ef:e9:5d:c7:52:20:a8:18:55:0f:12:21:dd:28:01:47:9d: d7:45:0b:4d:26:58:48:df:b5:b2:a6:48:a6:5e:51:ce:51:77: 34:bc:a8:81:1e:9f:c3:71:0f:b5:08:43:00:2b:20:d2:ee:c9: a1:23:20:8e:4c:09:74:aa:53:03:5a:29:10:cd:53:6c:64:cb: 2b:17:b7:15:a3:46:83:91:4f:19:de:dd:91:ae:03:b8:99:ca: 4a:22:a8:bb:b6:02:5b:55:bf:27:13:52:cf:04:ed:c3:42:8d: d5:51:40:68:1b:17:bb:c0:7d:25:08:c9:73:75:02:4e:f1:48: 25:65:26:8d:27:f4:af:be:ca:b0:c2:92:89:01:c2:53:08:96: 03:2f:63:0f:42:26:0a:8c:58:91:12:cf:79:99:18:fe:6c:b1: c8:6f:f9:91:21:35:70:ea:9f:80:6a:84:ac:e0:6c:f0:0d:f1: a4:0b:cc:57:7e:38:e7:f6:0c:0c:cc:d0:6e:9a:77:f1:94:df: 2e:41:48:7c:20:cd:e9:eb:a0:e0:38:ec:4e:76:af:d4:38:2b: ef:31:00:83:0d:51:09:82:6b:80:03:5e:2c:92:4d:7a:30:e8: ad:a5:0e:82:8f:a6:bf:89:ab:77:b8:f0:f0:ea:c1:49:51:06: 7e:b5:4d:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeRxGK4ZQ8qU8Gp0GtrLYtZwOxmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgzOEM0Njg0MERFMkI1Q0Y0NjE0ODIwQTBEMTJFRkVG Mjk2MEM4RDAeFw0yNTExMDQwOTQxMDVaFw0yNTExMDUxMjMwMDVaMDMxMTAvBgNV BAMTKDNCQ0VFREM2QTdGNUEyMUM5RjFCM0U3MzVDMEZCNDQ2N0QxMEU3RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwKnZbHl1GXinDTm4pV8WN+0kB kLG5nJWg4TWh/9wGx6Hv1TcxMpyHGGceL4flnvLR6T77iU2EcukfGjosI6szvNVW vgchluy3n/EnQbQXnJZS2ffWqvTbwg3CeYFCbQqVsonaKjkr2fQUrJYooPFHeGfS sCrm2v3UEhFAO1qXtCY3PGimkb5u8rYqQFlbkR15UbvBO2nlFEvO88tCIszyGbFa NY4Qipj15OBJFUWHW4AuhdD0mlz6jpCcPvTMh1Si6bv6SL4rq5AR791jjuYhFemS 8pahfUc4v58H5udsneq3TvpxnaHoX2eC+dxw8osAk7BHHJGSmTFE8PY3hHv3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUO87txqf1ohyfGz5zXA+0Rn0Q5/cwHwYDVR0j BBgwFoAUuDjEaEDeK1z0YUggoNEu/vKWDI0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnpUSHBFWWE0eVJpMWZSTnFMekNUTG9GQ1RvNDRlUXdYU3JZTVBLQXY0 dUQvMC9CODM4QzQ2ODQwREUyQjVDRjQ2MTQ4MjBBMEQxMkVGRUYyOTYwQzhELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4MzhDNDY4NDBERTJCNUNG NDYxNDgyMEEwRDEyRUZFRjI5NjBDOEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnpUSHBFWWE0eVJpMWZSTnFMekNUTG9GQ1RvNDRlUXdYU3JZTVBLQXY0dUQvMC9C ODM4QzQ2ODQwREUyQjVDRjQ2MTQ4MjBBMEQxMkVGRUYyOTYwQzhELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhu/pXcdSIKgYVQ8SId0oAUed10ULTSZYSN+1sqZIpl5RzlF3NLyogR6fw3EP tQhDACsg0u7JoSMgjkwJdKpTA1opEM1TbGTLKxe3FaNGg5FPGd7dka4DuJnKSiKo u7YCW1W/JxNSzwTtw0KN1VFAaBsXu8B9JQjJc3UCTvFIJWUmjSf0r77KsMKSiQHC UwiWAy9jD0ImCoxYkRLPeZkY/myxyG/5kSE1cOqfgGqErOBs8A3xpAvMV3445/YM DMzQbpp38ZTfLkFIfCDN6eug4DjsTnav1Dgr7zEAgw1RCYJrgANeLJJNejDoraUO go+mv4mrd7jw8OrBSVEGfrVNmQ== -----END CERTIFICATE-----Generated at Wed Nov 5 02:46:58 2025 by rpki-client