$ rpki-client -vvf rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft File: BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft (raw, json) Hash identifier: qvcfJA5/XMNf6z6UScyMC6kCKUDMPkLEfo2Qyd6MAcM= Subject key identifier: D3:88:38:D9:27:D0:49:40:D1:CF:83:4E:3D:AC:9B:A7:A2:A4:DB:44 Authority key identifier: BE:C2:FF:1E:C8:AC:86:D3:B2:25:2C:93:7D:13:CB:8E:9D:51:FF:33 Certificate issuer: /CN=BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33 Certificate serial: 2DEE62003623BB6FDDCE22E6C26CE70D87FA7621 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer Subject info access: rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft Manifest number: 0156 Signing time: Wed 05 Nov 2025 00:36:01 +0000 Manifest this update: Wed 05 Nov 2025 00:31:01 +0000 Manifest next update: Thu 06 Nov 2025 02:41:01 +0000 Files and hashes: 1: 323830343a363363633a3a2f33322d3438203d3e20323639333834.roa (hash: AXHystB3eqZMIj2Yh1MFxyYntNHwew/Ipuy4kde4+ZQ=) 2: 3139322e3134312e3231362e302f32322d3234203d3e20323634323231.roa (hash: sQMywHn8sBgDuSJdCgP3ZE8Dd7ypTbbu6Dlqz0Yno7k=) 3: BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.crl (hash: s6YnJAW7SY23M4qUGvsMW6RULrHhzXR9Gm7ihOCn9o8=) 4: 323830343a323436383a3a2f33322d3438203d3e20323634323231.roa (hash: QGDwcQEqCT7btwVyIGdgyY62zgT7pMJk3TEqaOeRqUI=) 5: 3133382e3131372e33362e302f32322d3234203d3e20323634323231.roa (hash: dc2zzkPt/FrTmrlMWfPw/bh9Y+qsTsLgI5TLRMS0UTM=) 6: 34352e3138352e3135362e302f32322d3234203d3e20323634323231.roa (hash: fyjWBO/MWv6WWiZ2ttqDhCoXHXgNM5nEzN5rFhcHSsA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.crl rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 02:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ee:62:00:36:23:bb:6f:dd:ce:22:e6:c2:6c:e7:0d:87:fa:76:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33 Validity Not Before: Nov 5 00:31:01 2025 GMT Not After : Nov 6 02:41:01 2025 GMT Subject: CN=D38838D927D04940D1CF834E3DAC9BA7A2A4DB44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c8:9a:8c:78:f4:14:95:2d:0f:77:77:1a:5b: f1:2b:54:13:bf:c2:b6:4d:40:d9:6c:98:a3:fb:e9: 8f:83:73:ba:77:a5:13:83:f7:ca:69:67:ee:d2:05: 4d:51:6c:49:bb:bf:93:62:a6:7f:42:c6:68:5a:fa: 5e:e6:bf:85:17:ca:63:44:cb:5f:ea:bc:2f:f2:56: 43:df:e1:d9:32:47:af:02:d5:e8:13:b5:19:76:4a: a8:cf:62:c7:e7:2f:c5:dd:0c:44:d0:86:fd:15:27: bd:dc:22:56:37:e6:1c:c7:10:89:95:df:56:39:15: 00:58:1a:a6:87:3e:17:8e:13:00:9a:ce:4c:7a:ab: 42:d7:3c:f9:c6:73:ec:90:e2:1b:2a:d4:a1:84:73: 29:4c:5c:31:4d:9a:ec:51:4f:ca:7d:77:ee:58:45: 8a:cb:cf:eb:5d:4e:62:82:14:3e:fa:03:7c:66:4d: 30:c8:56:68:78:8a:34:eb:71:af:34:59:19:9e:bf: a9:57:57:c6:ff:8b:45:c9:54:23:d1:e5:61:cb:2d: cf:44:bc:c1:ac:dc:ab:1b:19:78:b2:fe:5e:81:0c: b0:28:bb:cb:cc:3a:be:81:64:9b:7e:d6:2f:1c:6f: 45:19:54:da:c5:a8:c2:46:c6:44:26:f2:8f:a3:49: d8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:88:38:D9:27:D0:49:40:D1:CF:83:4E:3D:AC:9B:A7:A2:A4:DB:44 X509v3 Authority Key Identifier: keyid:BE:C2:FF:1E:C8:AC:86:D3:B2:25:2C:93:7D:13:CB:8E:9D:51:FF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f9:94:b8:9e:d8:4f:62:fb:01:c6:64:89:8b:18:c5:bb:ba: de:c9:bb:99:a5:dd:92:97:08:5b:42:cb:e9:0c:09:fe:25:fc: b5:f1:6e:ad:97:6e:3a:d6:27:a2:05:5f:98:04:c8:12:34:a0: 73:f9:7a:a5:6d:a1:7c:3a:4e:19:92:dc:8f:ce:0c:45:36:4c: bd:f8:4f:fe:4b:ed:df:c7:1f:38:75:0d:22:1d:e9:e7:95:c1: cc:50:57:0d:44:8f:c1:32:90:a7:cd:fd:53:a0:28:b7:ec:7e: c3:34:2f:9f:90:34:4d:84:31:9c:a6:a2:23:c5:2b:b9:55:ce: 3f:18:99:48:d7:b8:8e:f4:9a:83:da:e9:62:7d:f5:28:3b:2a: 06:a0:ed:2f:ef:e3:90:bb:5e:d2:32:23:fe:be:05:df:9f:11: 96:e9:ef:52:98:62:6b:a2:bf:bc:54:cc:31:a3:31:29:56:11: e6:ce:5a:30:fc:80:8c:66:9d:7d:12:e0:d3:5a:73:1e:8c:ec: 9f:0b:3e:5f:fe:ec:f3:f5:78:46:10:b4:e7:bd:6d:45:e9:6f: 98:a5:7a:20:81:91:e0:f0:b8:99:ef:66:02:c7:22:c3:d8:57: 0b:2c:f4:6e:a3:e0:1c:52:a1:0a:b2:24:c9:39:12:03:28:a5: ba:05:80:8a -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIULe5iADYju2/dziLmwmznDYf6diEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDMkZGMUVDOEFDODZEM0IyMjUyQzkzN0QxM0NCOEU5 RDUxRkYzMzAeFw0yNTExMDUwMDMxMDFaFw0yNTExMDYwMjQxMDFaMDMxMTAvBgNV BAMTKEQzODgzOEQ5MjdEMDQ5NDBEMUNGODM0RTNEQUM5QkE3QTJBNERCNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwyJqMePQUlS0Pd3caW/ErVBO/ wrZNQNlsmKP76Y+Dc7p3pROD98ppZ+7SBU1RbEm7v5Nipn9Cxmha+l7mv4UXymNE y1/qvC/yVkPf4dkyR68C1egTtRl2SqjPYsfnL8XdDETQhv0VJ73cIlY35hzHEImV 31Y5FQBYGqaHPheOEwCazkx6q0LXPPnGc+yQ4hsq1KGEcylMXDFNmuxRT8p9d+5Y RYrLz+tdTmKCFD76A3xmTTDIVmh4ijTrca80WRmev6lXV8b/i0XJVCPR5WHLLc9E vMGs3KsbGXiy/l6BDLAou8vMOr6BZJt+1i8cb0UZVNrFqMJGxkQm8o+jSdjrAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU04g42SfQSUDRz4NOPaybp6Kk20QwHwYDVR0j BBgwFoAUvsL/HsishtOyJSyTfRPLjp1R/zMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9FZW5uUlRTWWZ3R3VEZ1NSVHcydEZMS1NNYkU3ZTZNWGg4V2VoR0NFOVRh LzAvQkVDMkZGMUVDOEFDODZEM0IyMjUyQzkzN0QxM0NCOEU5RDUxRkYzMy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CRUMyRkYxRUM4QUM4NkQzQjIy NTJDOTM3RDEzQ0I4RTlENTFGRjMzLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vl bm5SVFNZZndHdURnU1JUdzJ0RkxLU01iRTdlNk1YaDhXZWhHQ0U5VGEvMC9CRUMy RkYxRUM4QUM4NkQzQjIyNTJDOTM3RDEzQ0I4RTlENTFGRjMzLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA Z/mUuJ7YT2L7AcZkiYsYxbu63sm7maXdkpcIW0LL6QwJ/iX8tfFurZduOtYnogVf mATIEjSgc/l6pW2hfDpOGZLcj84MRTZMvfhP/kvt38cfOHUNIh3p55XBzFBXDUSP wTKQp839U6Aot+x+wzQvn5A0TYQxnKaiI8UruVXOPxiZSNe4jvSag9rpYn31KDsq BqDtL+/jkLte0jIj/r4F358RlunvUphia6K/vFTMMaMxKVYR5s5aMPyAjGadfRLg 01pzHozsnws+X/7s8/V4RhC0571tRelvmKV6IIGR4PC4me9mAsciw9hXCyz0bqPg HFKhCrIkyTkSAyilugWAig== -----END CERTIFICATE-----Generated at Wed Nov 5 13:01:58 2025 by rpki-client