$ rpki-client -vvf rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft File: BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft (raw, json) Hash identifier: TQhEVy2U/AZ6accmc3rOWibgE6g0SdKXIUix8KAsjY0= Subject key identifier: 98:1F:63:72:6F:90:8B:D9:1A:98:9D:96:C0:E0:E9:F6:2A:F0:D0:44 Authority key identifier: BD:23:F2:E8:71:C9:F5:E6:13:8D:25:45:01:FB:E2:AC:35:AA:73:26 Certificate issuer: /CN=BD23F2E871C9F5E6138D254501FBE2AC35AA7326 Certificate serial: 3DED3F2E9C5B832B70441818F18C7EE81CF442BF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer Subject info access: rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft Manifest number: 0135 Signing time: Tue 04 Nov 2025 19:33:36 +0000 Manifest this update: Tue 04 Nov 2025 19:28:36 +0000 Manifest next update: Wed 05 Nov 2025 21:47:36 +0000 Files and hashes: 1: 323830343a363930383a3a2f33322d3438203d3e20323730323434.roa (hash: LfJ27fny3HxOEf2E3+cUrLvQbGwB+jGu3gHJ5S1w/cY=) 2: BD23F2E871C9F5E6138D254501FBE2AC35AA7326.crl (hash: 3SGgZENYeA7Ui10jjLVXzQGgSQ0pxm7JwJcLVK4BZ2s=) 3: 3138372e36322e3130302e302f32322d3234203d3e20323730323434.roa (hash: 70BJQu4PLqi9KdVVab9jANTw7cydloTHwzKtBuGLFtM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.crl rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 21:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ed:3f:2e:9c:5b:83:2b:70:44:18:18:f1:8c:7e:e8:1c:f4:42:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD23F2E871C9F5E6138D254501FBE2AC35AA7326 Validity Not Before: Nov 4 19:28:36 2025 GMT Not After : Nov 5 21:47:36 2025 GMT Subject: CN=981F63726F908BD91A989D96C0E0E9F62AF0D044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:48:9c:63:3e:86:50:74:cc:f9:dc:aa:b3: 48:67:13:d9:79:1b:cc:f5:39:86:84:96:ce:61:a9: ae:2d:45:69:eb:f7:56:2f:f3:b8:c5:f1:17:82:5c: 26:2d:9e:56:df:37:17:8c:13:24:ba:c4:4c:fc:e1: 49:85:fd:1e:1a:99:79:0d:09:38:d6:a2:88:b9:41: da:65:a4:9a:cc:0d:b0:2c:4d:41:8e:83:49:73:cf: c4:23:76:99:06:21:27:c8:39:37:a1:8d:10:7f:8b: df:17:f5:64:26:95:84:df:1a:2e:67:e8:7a:1a:19: d2:e8:b3:f1:94:4f:89:c5:d5:81:63:f0:06:4d:fc: 54:51:2d:42:55:9a:6b:39:f7:2a:d1:81:f4:29:72: 3f:08:5b:15:75:11:71:1a:0c:fc:e7:a8:f0:97:50: 98:21:9d:d6:90:15:77:b3:11:ea:6d:95:3d:f9:61: 92:09:a7:95:53:c1:a8:50:aa:64:78:e0:97:b8:bb: 35:95:79:0c:93:5f:28:d9:04:23:97:8c:17:dc:6d: 99:49:d0:84:d1:da:33:a8:75:91:c1:da:11:3a:62: 07:9f:96:a6:68:d4:39:94:76:f7:e4:8e:0a:2b:d6: fb:f0:f8:02:31:e4:40:95:ac:6c:de:e3:f9:66:da: 43:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1F:63:72:6F:90:8B:D9:1A:98:9D:96:C0:E0:E9:F6:2A:F0:D0:44 X509v3 Authority Key Identifier: keyid:BD:23:F2:E8:71:C9:F5:E6:13:8D:25:45:01:FB:E2:AC:35:AA:73:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:18:6b:8b:34:c7:03:ae:11:13:2e:26:9d:21:1c:14:0f:e3: ec:4e:f7:71:ba:ee:66:eb:4b:ff:72:77:b7:b0:3e:d0:6b:bf: 3c:e5:d5:09:ae:40:45:7a:06:1d:e2:66:8c:36:2c:63:5a:29: c1:7d:ad:67:5b:b5:35:e8:fa:13:13:ed:e6:f8:d3:33:e2:ca: 33:16:aa:cd:40:29:5f:b5:67:99:d8:bd:da:84:33:d1:cf:d9: 48:be:50:ff:87:d3:42:90:14:9d:d2:16:54:7d:81:d0:e7:64: 01:bd:3c:c9:98:c5:ec:22:96:87:22:9d:19:ae:f7:4e:8a:68: c8:5e:c6:25:1b:ae:3d:2d:9c:b2:ba:d5:a2:86:2e:62:cd:8d: 44:85:03:0f:bb:e7:25:66:92:42:de:b8:f5:0f:f5:02:23:88: 27:a4:50:ec:8d:3f:73:3a:6d:bf:b6:c5:41:d6:02:2b:49:63: 1d:a8:87:51:b9:2a:de:aa:cd:e5:5a:a0:b3:fb:b3:c9:74:7d: 93:47:fe:58:a4:f1:5e:5d:51:37:11:28:98:7a:76:33:51:df: 02:10:c7:ba:86:9e:ed:ac:7a:13:35:0e:9e:27:d8:0a:f1:15: 6c:55:d8:df:4e:9e:a7:22:ce:8f:de:e1:10:15:e4:a1:fc:8f: 70:64:3d:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPe0/LpxbgytwRBgY8Yx+6Bz0Qr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQyM0YyRTg3MUM5RjVFNjEzOEQyNTQ1MDFGQkUyQUMz NUFBNzMyNjAeFw0yNTExMDQxOTI4MzZaFw0yNTExMDUyMTQ3MzZaMDMxMTAvBgNV BAMTKDk4MUY2MzcyNkY5MDhCRDkxQTk4OUQ5NkMwRTBFOUY2MkFGMEQwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9o0icYz6GUHTM+dyqs0hnE9l5 G8z1OYaEls5hqa4tRWnr91Yv87jF8ReCXCYtnlbfNxeMEyS6xEz84UmF/R4amXkN CTjWooi5QdplpJrMDbAsTUGOg0lzz8QjdpkGISfIOTehjRB/i98X9WQmlYTfGi5n 6HoaGdLos/GUT4nF1YFj8AZN/FRRLUJVmms59yrRgfQpcj8IWxV1EXEaDPznqPCX UJghndaQFXezEeptlT35YZIJp5VTwahQqmR44Je4uzWVeQyTXyjZBCOXjBfcbZlJ 0ITR2jOodZHB2hE6YgeflqZo1DmUdvfkjgor1vvw+AIx5ECVrGze4/lm2kOHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmB9jcm+Qi9kamJ2WwODp9irw0EQwHwYDVR0j BBgwFoAUvSPy6HHJ9eYTjSVFAfvirDWqcyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRnlERTJBRGhmOFB5QXlDRG9BVUw1RVV6eHJVMWRjOEpYSmVWWVE5Nk5S eUEvMC9CRDIzRjJFODcxQzlGNUU2MTM4RDI1NDUwMUZCRTJBQzM1QUE3MzI2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEMjNGMkU4NzFDOUY1RTYx MzhEMjU0NTAxRkJFMkFDMzVBQTczMjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RnlERTJBRGhmOFB5QXlDRG9BVUw1RVV6eHJVMWRjOEpYSmVWWVE5Nk5SeUEvMC9C RDIzRjJFODcxQzlGNUU2MTM4RDI1NDUwMUZCRTJBQzM1QUE3MzI2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYhhrizTHA64REy4mnSEcFA/j7E73cbruZutL/3J3t7A+0Gu/POXVCa5ARXoG HeJmjDYsY1opwX2tZ1u1Nej6ExPt5vjTM+LKMxaqzUApX7Vnmdi92oQz0c/ZSL5Q /4fTQpAUndIWVH2B0OdkAb08yZjF7CKWhyKdGa73TopoyF7GJRuuPS2csrrVooYu Ys2NRIUDD7vnJWaSQt649Q/1AiOIJ6RQ7I0/czptv7bFQdYCK0ljHaiHUbkq3qrN 5Vqgs/uzyXR9k0f+WKTxXl1RNxEomHp2M1HfAhDHuoae7ax6EzUOnifYCvEVbFXY 306epyLOj97hEBXkofyPcGQ9HA== -----END CERTIFICATE-----Generated at Wed Nov 5 05:05:11 2025 by rpki-client