$ rpki-client -vvf rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft File: BC834F1ADC6997F0F8557889193E5B0D17827E29.mft (raw, json) Hash identifier: cGjP7INvDBeNjsfOjOj65GlSCFkg8LN23jzQzU0otEg= Subject key identifier: 56:37:2E:ED:12:25:35:8D:8E:D8:86:66:3F:1E:06:28:0E:6E:DA:6D Authority key identifier: BC:83:4F:1A:DC:69:97:F0:F8:55:78:89:19:3E:5B:0D:17:82:7E:29 Certificate issuer: /CN=BC834F1ADC6997F0F8557889193E5B0D17827E29 Certificate serial: 42C55DA856A3DC472A9673B1083D19ADFA49655A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC834F1ADC6997F0F8557889193E5B0D17827E29.cer Subject info access: rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft Manifest number: 0128 Signing time: Tue 04 Nov 2025 20:45:09 +0000 Manifest this update: Tue 04 Nov 2025 20:40:09 +0000 Manifest next update: Wed 05 Nov 2025 23:23:09 +0000 Files and hashes: 1: 323830343a363630633a3a2f33322d313238203d3e20323639353330.roa (hash: /iaFLxHNFA2V3TjOBiv0XpcHZofInDeTZKuOoA3EzQg=) 2: BC834F1ADC6997F0F8557889193E5B0D17827E29.crl (hash: 3ufekNyZF7CU0tEnSbp3kx6QrzQzLBqOdj4RFHN+ZXE=) 3: 34352e3138382e3138342e302f32322d3332203d3e20323639353330.roa (hash: QcqAb0+DtgjszqLRzX2mepAq4Zax3JRnI7HvdGOdaug=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.crl rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC834F1ADC6997F0F8557889193E5B0D17827E29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 23:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c5:5d:a8:56:a3:dc:47:2a:96:73:b1:08:3d:19:ad:fa:49:65:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC834F1ADC6997F0F8557889193E5B0D17827E29 Validity Not Before: Nov 4 20:40:09 2025 GMT Not After : Nov 5 23:23:09 2025 GMT Subject: CN=56372EED1225358D8ED886663F1E06280E6EDA6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:b3:56:d5:52:fb:73:f6:78:5a:e9:b4:47: c7:3a:e2:e6:35:46:fe:61:73:b8:a9:97:9c:c0:75: a6:73:ce:15:b9:c3:4b:fb:71:01:23:7d:cf:9b:96: a0:f6:c6:0c:5e:1d:83:39:46:a2:a1:09:cb:73:07: ed:3b:d5:f9:11:a6:77:a0:1f:66:04:70:a8:43:82: 67:8a:0e:40:81:9e:0b:23:bf:01:80:07:d6:ff:e2: 28:2c:0a:fe:a3:05:b0:33:17:fb:af:66:9b:78:f6: f1:eb:61:ef:66:48:fd:ec:1d:28:a3:13:7b:51:b0: bb:88:c1:e1:36:ba:18:21:f3:19:fb:e2:19:db:0a: 1d:f8:b2:6b:39:36:65:05:71:6c:d8:a8:30:2c:0f: d8:61:c6:fa:4f:f3:06:e5:72:ed:e1:fd:37:8d:83: ad:c0:d9:5b:ce:ae:42:9f:8d:1b:b2:7d:8d:74:62: 59:76:e8:5a:2c:c8:6e:14:29:96:a2:a6:a2:d6:da: 38:b8:f3:1c:66:8c:ef:eb:26:36:60:2a:63:dc:49: 32:7d:29:64:04:49:eb:6e:ce:99:ab:b6:89:4a:bb: 2b:a3:53:bc:18:42:dd:11:53:82:80:cb:c1:71:d9: 27:ad:38:a0:df:91:7e:f6:2f:a3:e0:98:02:08:82: e1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:37:2E:ED:12:25:35:8D:8E:D8:86:66:3F:1E:06:28:0E:6E:DA:6D X509v3 Authority Key Identifier: keyid:BC:83:4F:1A:DC:69:97:F0:F8:55:78:89:19:3E:5B:0D:17:82:7E:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC834F1ADC6997F0F8557889193E5B0D17827E29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4c:5b:6a:82:1e:3d:8d:c0:79:44:a7:ab:5f:b4:f0:f6:f4: 1e:e1:d0:ec:d2:17:61:49:d1:19:e2:4b:96:f1:d2:09:00:47: f9:4f:29:3c:bb:c5:47:41:41:6b:84:50:1e:2e:b2:bc:56:4a: ce:27:8b:ae:70:c6:7c:24:11:2e:b2:96:21:e9:fc:6b:08:e2: f3:8a:fb:55:d4:56:5d:e5:4f:b9:ff:56:e4:c3:68:05:4e:7a: 38:fd:e0:6e:0e:99:11:ad:ea:9f:f5:a4:49:aa:29:3f:d5:8d: 1d:88:95:9e:dd:55:ef:5c:b4:99:36:a2:07:57:a8:43:b5:c2: 27:61:e1:17:62:1f:75:b0:f6:56:33:9d:1f:96:ad:d4:14:83: 6d:8c:bf:da:6b:03:71:b9:08:72:bf:a8:8b:92:41:47:b3:5a: 6f:10:b0:e0:82:21:0d:76:6d:06:e6:b6:b1:c9:0b:c1:12:a5: 3d:0e:02:d2:55:db:54:8e:15:1e:a9:21:15:72:ce:be:7f:2a: 8d:80:fc:fc:d5:7f:9d:69:7d:38:18:ea:45:af:5d:38:b5:ba: 12:25:02:e1:9f:3d:53:2d:8c:de:80:08:43:c5:e5:46:95:bd: d9:40:de:bb:ad:d0:6f:26:e7:44:b1:55:80:02:90:5a:9d:c6: 75:05:26:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQsVdqFaj3EcqlnOxCD0ZrfpJZVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4MzRGMUFEQzY5OTdGMEY4NTU3ODg5MTkzRTVCMEQx NzgyN0UyOTAeFw0yNTExMDQyMDQwMDlaFw0yNTExMDUyMzIzMDlaMDMxMTAvBgNV BAMTKDU2MzcyRUVEMTIyNTM1OEQ4RUQ4ODY2NjNGMUUwNjI4MEU2RURBNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/N7NW1VL7c/Z4Wum0R8c64uY1 Rv5hc7ipl5zAdaZzzhW5w0v7cQEjfc+blqD2xgxeHYM5RqKhCctzB+071fkRpneg H2YEcKhDgmeKDkCBngsjvwGAB9b/4igsCv6jBbAzF/uvZpt49vHrYe9mSP3sHSij E3tRsLuIweE2uhgh8xn74hnbCh34sms5NmUFcWzYqDAsD9hhxvpP8wblcu3h/TeN g63A2VvOrkKfjRuyfY10Yll26FosyG4UKZaipqLW2ji48xxmjO/rJjZgKmPcSTJ9 KWQESetuzpmrtolKuyujU7wYQt0RU4KAy8Fx2SetOKDfkX72L6PgmAIIguF9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVjcu7RIlNY2O2IZmPx4GKA5u2m0wHwYDVR0j BBgwFoAUvINPGtxpl/D4VXiJGT5bDReCfikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREp5S0h3Wks3a3RMd0p2NEZ5NHR3YnloTEVEOGQ2bW1lWVRySk50blNo RVAvMC9CQzgzNEYxQURDNjk5N0YwRjg1NTc4ODkxOTNFNUIwRDE3ODI3RTI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDODM0RjFBREM2OTk3RjBG ODU1Nzg4OTE5M0U1QjBEMTc4MjdFMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REp5S0h3Wks3a3RMd0p2NEZ5NHR3YnloTEVEOGQ2bW1lWVRySk50blNoRVAvMC9C QzgzNEYxQURDNjk5N0YwRjg1NTc4ODkxOTNFNUIwRDE3ODI3RTI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADExbaoIePY3AeUSnq1+08Pb0HuHQ7NIXYUnRGeJLlvHSCQBH+U8pPLvFR0FB a4RQHi6yvFZKzieLrnDGfCQRLrKWIen8awji84r7VdRWXeVPuf9W5MNoBU56OP3g bg6ZEa3qn/WkSaopP9WNHYiVnt1V71y0mTaiB1eoQ7XCJ2HhF2IfdbD2VjOdH5at 1BSDbYy/2msDcbkIcr+oi5JBR7NabxCw4IIhDXZtBua2sckLwRKlPQ4C0lXbVI4V HqkhFXLOvn8qjYD8/NV/nWl9OBjqRa9dOLW6EiUC4Z89Uy2M3oAIQ8XlRpW92UDe u63QbybnRLFVgAKQWp3GdQUmEg== -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:07 2025 by rpki-client