$ rpki-client -vvf rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft File: BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft (raw, json) Hash identifier: BokbNCGsXzwfyckxZMP1hCjSiIzffRZAJJTAoSjTEnk= Subject key identifier: 98:6C:B9:81:9B:D6:D8:8A:F2:42:FC:FB:E6:B1:9C:EF:FD:8E:B2:CD Authority key identifier: BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA Certificate issuer: /CN=BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA Certificate serial: 1CBA77AB8855D9BFDAF90514A024F8492C0A9806 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer Subject info access: rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft Manifest number: 0306 Signing time: Wed 05 Nov 2025 17:30:09 +0000 Manifest this update: Wed 05 Nov 2025 17:25:09 +0000 Manifest next update: Thu 06 Nov 2025 21:10:09 +0000 Files and hashes: 1: BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl (hash: RziDzVngsSCkjKpBqfKgaVwbVWfKPL898p6Sy3lKSGA=) 2: 323830343a313735383a3a2f33322d3438203d3e20323633313339.roa (hash: 925kYNTdkMQU1jDagxfrlmc7XsHPeFb8XeYPOjT/YJs=) 3: 3137372e34342e3232302e302f32322d3234203d3e20323633313339.roa (hash: EVYKNMzZueEXwMh0DNayOzxCcx1T14jUI+HXcRE6y5A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 20:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ba:77:ab:88:55:d9:bf:da:f9:05:14:a0:24:f8:49:2c:0a:98:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA Validity Not Before: Nov 5 17:25:09 2025 GMT Not After : Nov 6 21:10:09 2025 GMT Subject: CN=986CB9819BD6D88AF242FCFBE6B19CEFFD8EB2CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:a9:83:45:72:3c:73:8e:7e:f8:aa:19:0b: 53:ee:20:6d:14:4c:10:0e:d8:5f:c5:16:78:79:e6: 57:1f:07:9d:d8:f8:f3:ac:54:36:db:d7:b3:0a:a0: f0:a1:3f:c6:68:f8:10:00:49:c5:6a:53:4b:f6:09: 04:fa:19:d4:ba:02:88:4b:93:89:13:97:35:a1:07: ee:68:6a:1b:0d:82:3c:e8:90:58:68:b4:f9:67:b4: c0:8c:75:1b:e2:22:6c:58:09:3f:bf:34:b8:fc:8d: f2:0a:a4:1f:1a:34:b3:fb:3b:2f:66:7c:94:10:2f: 7b:67:5f:75:d8:1e:9d:df:28:4e:db:a2:9e:42:72: ac:a7:0b:dc:4e:e0:80:cf:b5:6b:c3:7e:88:55:82: 46:42:02:3f:34:82:fc:89:d6:a9:03:d9:c7:8d:8f: 61:4c:70:f9:bd:9a:0d:1c:1d:e2:00:41:a0:ee:82: 02:7e:d7:9d:13:9f:c6:a2:b0:e4:fe:e9:e2:de:9f: 7f:6d:a9:15:53:ad:61:5b:a2:c2:e8:75:98:33:1d: d5:6e:d4:95:f5:33:30:4d:2b:f0:61:03:3d:db:e3: 73:e0:77:f6:a7:ab:df:67:ff:9e:18:79:79:1f:91: a1:1f:3c:60:0b:21:ad:4d:c7:bd:ed:b0:fc:f9:44: 06:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6C:B9:81:9B:D6:D8:8A:F2:42:FC:FB:E6:B1:9C:EF:FD:8E:B2:CD X509v3 Authority Key Identifier: keyid:BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d7:f7:27:6f:e6:27:a2:c6:27:66:e7:86:15:2a:9f:f9:1f: 13:50:8c:2a:c6:81:e7:9c:16:54:cf:6d:38:58:6d:4f:54:e8: 2e:24:4a:2e:0c:fe:c2:ac:9d:e6:c0:8e:55:5c:fe:9c:f2:6b: ea:46:0e:b4:04:cf:c6:72:d6:ea:c4:2e:9d:9d:37:be:45:08: e1:63:83:be:76:62:bc:90:aa:50:93:28:23:90:2a:33:32:8e: 64:43:53:c3:88:c1:e7:47:cd:cf:37:ed:49:3a:fe:12:60:3a: 93:4b:6c:19:3c:d4:16:81:b9:0e:9b:43:fb:e6:92:9d:8c:7c: bd:91:e7:bd:c2:8d:88:7a:ac:12:df:e6:0a:8d:cb:97:31:59: 88:7c:cb:28:32:65:fc:98:8f:e6:59:52:41:b5:fe:7e:3c:06: 8b:ff:f3:40:8a:17:4d:5a:37:a5:76:38:5b:6e:99:3d:a9:45: e7:ea:e7:0b:ff:74:16:d4:60:90:3f:28:2d:1e:cf:34:2e:5b: 7f:b8:d1:33:34:57:4e:85:a1:b6:db:0c:37:12:44:72:a5:7d: 88:bb:9d:b4:6f:60:9b:41:ba:ef:f5:47:1b:7f:34:f1:84:38: ed:5d:e9:10:13:e5:0e:87:99:bc:dc:7a:42:41:e6:1b:90:90: a2:60:b7:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHLp3q4hV2b/a+QUUoCT4SSwKmAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRFNkUwQ0RDREQ3QzMzN0Q2NDUxQTZCRTk0QjMyMUMy MkNGMDhFQTAeFw0yNTExMDUxNzI1MDlaFw0yNTExMDYyMTEwMDlaMDMxMTAvBgNV BAMTKDk4NkNCOTgxOUJENkQ4OEFGMjQyRkNGQkU2QjE5Q0VGRkQ4RUIyQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3amDRXI8c45++KoZC1PuIG0U TBAO2F/FFnh55lcfB53Y+POsVDbb17MKoPChP8Zo+BAAScVqU0v2CQT6GdS6AohL k4kTlzWhB+5oahsNgjzokFhotPlntMCMdRviImxYCT+/NLj8jfIKpB8aNLP7Oy9m fJQQL3tnX3XYHp3fKE7bop5CcqynC9xO4IDPtWvDfohVgkZCAj80gvyJ1qkD2ceN j2FMcPm9mg0cHeIAQaDuggJ+150Tn8aisOT+6eLen39tqRVTrWFbosLodZgzHdVu 1JX1MzBNK/BhAz3b43Pgd/anq99n/54YeXkfkaEfPGALIa1Nx73tsPz5RAb/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmGy5gZvW2IryQvz75rGc7/2Oss0wHwYDVR0j BBgwFoAUvebgzc3XwzfWRRpr6UsyHCLPCOowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDFKY0VBR3dVdkVCbThEYzRqQXRZZFBjYkdEZXVNWmhHUEh2eGZSbjRU blMvMS9CREU2RTBDRENERDdDMzM3RDY0NTFBNkJFOTRCMzIxQzIyQ0YwOEVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERTZFMENEQ0REN0MzMzdE NjQ1MUE2QkU5NEIzMjFDMjJDRjA4RUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDFKY0VBR3dVdkVCbThEYzRqQXRZZFBjYkdEZXVNWmhHUEh2eGZSbjRUblMvMS9C REU2RTBDRENERDdDMzM3RDY0NTFBNkJFOTRCMzIxQzIyQ0YwOEVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADNf3J2/mJ6LGJ2bnhhUqn/kfE1CMKsaB55wWVM9tOFhtT1ToLiRKLgz+wqyd 5sCOVVz+nPJr6kYOtATPxnLW6sQunZ03vkUI4WODvnZivJCqUJMoI5AqMzKOZENT w4jB50fNzzftSTr+EmA6k0tsGTzUFoG5DptD++aSnYx8vZHnvcKNiHqsEt/mCo3L lzFZiHzLKDJl/JiP5llSQbX+fjwGi//zQIoXTVo3pXY4W26ZPalF5+rnC/90FtRg kD8oLR7PNC5bf7jRMzRXToWhttsMNxJEcqV9iLudtG9gm0G67/VHG3808YQ47V3p EBPlDoeZvNx6QkHmG5CQomC3QQ== -----END CERTIFICATE-----Generated at Wed Nov 5 20:49:23 2025 by rpki-client