$ rpki-client -vvf rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft File: BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft (raw, json) Hash identifier: KnboSqhhMfHPga2UaRy37VMiKxkIzkHF6npTOFaVZ1s= Subject key identifier: 40:AA:F9:38:E6:45:91:78:ED:2B:6D:04:C2:63:7B:5E:66:15:65:9C Authority key identifier: BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25 Certificate issuer: /CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25 Certificate serial: 4AAB4B0E00225CEB994256A07A4C95354456131D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer Subject info access: rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft Manifest number: 0305 Signing time: Tue 04 Nov 2025 08:54:53 +0000 Manifest this update: Tue 04 Nov 2025 08:49:53 +0000 Manifest next update: Wed 05 Nov 2025 12:27:53 +0000 Files and hashes: 1: 323830343a353530303a3a2f33342d313238203d3e20323638363833.roa (hash: CY1cgckh5LfihHbyiE5qbTbYicOGwA3cdqSQfEjeJok=) 2: 34352e3136352e3136362e302f32332d3332203d3e20323638363833.roa (hash: 5bSUPkODUWs9/kJhkVx3i4fO1qFGfYEB0H4MohPcXH8=) 3: BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl (hash: gzP20f+sf94dBVi98hhnlbmCOQfPKVzTtA1lMb3MfdI=) 4: 34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa (hash: SFgnoC9b6XsOBWOxtYvSuXC8DcOSjBAvZ5UdN6KIgQ0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 12:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ab:4b:0e:00:22:5c:eb:99:42:56:a0:7a:4c:95:35:44:56:13:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25 Validity Not Before: Nov 4 08:49:53 2025 GMT Not After : Nov 5 12:27:53 2025 GMT Subject: CN=40AAF938E6459178ED2B6D04C2637B5E6615659C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:55:c5:dc:db:06:c7:e0:68:4b:f5:e0:3a:19: 56:9b:a7:f2:6d:12:48:85:7d:a8:f1:c8:23:89:f9: ac:2d:7b:bc:f2:97:51:43:98:65:9c:17:e2:fb:b4: 9f:a5:0a:89:61:04:92:ef:1d:8c:d3:18:cc:55:16: 41:2b:ca:25:7c:3a:30:e1:43:f9:29:63:a5:51:cf: b1:46:5f:56:7a:aa:69:57:fc:6c:dc:e4:c0:bb:dd: 87:e8:83:83:b4:cf:e9:94:7c:4d:05:77:a7:86:09: 74:fc:44:ca:bf:a3:de:77:f8:03:d5:68:6a:86:7c: 69:22:ec:5a:85:ef:cb:1c:9f:8d:eb:ce:20:63:7c: b7:ac:d3:0b:83:59:0b:89:b1:58:5b:69:64:a9:8d: a0:7d:55:94:cb:b4:5a:5f:11:6a:42:44:47:eb:11: 6a:d1:44:ef:99:11:17:f4:9d:c0:d1:49:1a:d0:04: 75:11:39:4c:c6:80:45:2e:a2:a0:da:2d:ba:99:68: a9:b5:76:08:26:04:35:9a:7f:2d:a2:88:f6:f5:48: 40:4f:f6:d5:7e:33:05:ae:bf:dc:b7:07:50:8a:93: 25:f3:f5:ff:c9:ab:69:47:74:1d:c9:4f:6e:46:a7: be:4e:61:75:6f:4d:d8:41:e5:aa:db:22:e6:df:85: 4e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AA:F9:38:E6:45:91:78:ED:2B:6D:04:C2:63:7B:5E:66:15:65:9C X509v3 Authority Key Identifier: keyid:BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:31:4b:e0:6b:59:74:7c:df:50:8e:b4:0c:b5:b9:47:77:f1: e5:1f:20:3d:5c:0d:ec:a5:3c:90:a1:a2:5e:61:3b:d6:a3:35: c2:27:e4:6d:70:42:96:41:01:b6:e5:c6:e7:65:93:3d:8d:d0: 74:2c:10:b1:72:46:0b:c4:fd:60:d9:4d:5c:35:23:36:4a:00: 3d:dc:5e:ef:ae:ba:83:e1:d3:ee:22:ee:ac:79:26:96:34:98: f2:d1:d7:5f:69:b0:51:13:44:1e:9b:e7:1e:38:93:0e:73:d2: 26:a7:2b:2d:97:e5:cf:52:64:8b:97:dc:d7:26:63:5c:bb:9f: e9:9e:86:17:7b:9a:34:f3:c6:2b:6e:3a:3c:3c:58:4c:11:67: 1f:4b:ca:6b:ec:7c:59:fd:c7:ed:a1:65:00:1a:20:21:b9:55: e6:25:5c:53:29:34:cb:fb:c9:df:e0:f6:23:2c:42:c8:13:d1: 29:9e:e5:4f:ac:1b:88:7b:fd:8e:2a:32:2c:73:99:08:2d:2d: 14:08:69:17:7d:44:a1:02:82:9d:a2:02:85:83:1a:78:8e:58: 0a:08:9f:e3:dd:9f:89:f4:61:be:7c:11:13:17:1e:b4:8f:20: 38:77:05:a4:15:d1:64:5e:69:05:31:8b:cd:ef:f0:0a:34:84: 99:ce:86:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSqtLDgAiXOuZQlagekyVNURWEx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU5MTkxRjIyMkQzNkZGN0VEOTQwQTJCNUU0OTFFMkE4 MDIxREEyNTAeFw0yNTExMDQwODQ5NTNaFw0yNTExMDUxMjI3NTNaMDMxMTAvBgNV BAMTKDQwQUFGOTM4RTY0NTkxNzhFRDJCNkQwNEMyNjM3QjVFNjYxNTY1OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1VcXc2wbH4GhL9eA6GVabp/Jt EkiFfajxyCOJ+awte7zyl1FDmGWcF+L7tJ+lColhBJLvHYzTGMxVFkEryiV8OjDh Q/kpY6VRz7FGX1Z6qmlX/Gzc5MC73Yfog4O0z+mUfE0Fd6eGCXT8RMq/o953+APV aGqGfGki7FqF78scn43rziBjfLes0wuDWQuJsVhbaWSpjaB9VZTLtFpfEWpCREfr EWrRRO+ZERf0ncDRSRrQBHUROUzGgEUuoqDaLbqZaKm1dggmBDWafy2iiPb1SEBP 9tV+MwWuv9y3B1CKkyXz9f/Jq2lHdB3JT25Gp75OYXVvTdhB5arbIubfhU4bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQKr5OOZFkXjtK20EwmN7XmYVZZwwHwYDVR0j BBgwFoAUvpGR8iLTb/ftlAorXkkeKoAh2iUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1lMRXd3c0Q4UXF3ZkxUaXN3UXFlZHZ2TVJTeWVyVlpyY0JkS1dCd0t2 eGsvMS9CRTkxOTFGMjIyRDM2RkY3RUQ5NDBBMkI1RTQ5MUUyQTgwMjFEQTI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFOTE5MUYyMjJEMzZGRjdF RDk0MEEyQjVFNDkxRTJBODAyMURBMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1lMRXd3c0Q4UXF3ZkxUaXN3UXFlZHZ2TVJTeWVyVlpyY0JkS1dCd0t2eGsvMS9C RTkxOTFGMjIyRDM2RkY3RUQ5NDBBMkI1RTQ5MUUyQTgwMjFEQTI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYjFL4GtZdHzfUI60DLW5R3fx5R8gPVwN7KU8kKGiXmE71qM1wifkbXBClkEB tuXG52WTPY3QdCwQsXJGC8T9YNlNXDUjNkoAPdxe7666g+HT7iLurHkmljSY8tHX X2mwURNEHpvnHjiTDnPSJqcrLZflz1Jki5fc1yZjXLuf6Z6GF3uaNPPGK246PDxY TBFnH0vKa+x8Wf3H7aFlABogIblV5iVcUyk0y/vJ3+D2IyxCyBPRKZ7lT6wbiHv9 jioyLHOZCC0tFAhpF31EoQKCnaIChYMaeI5YCgif492fifRhvnwRExcetI8gOHcF pBXRZF5pBTGLze/wCjSEmc6GJw== -----END CERTIFICATE-----Generated at Wed Nov 5 03:14:04 2025 by rpki-client