$ rpki-client -vvf rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft File: BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft (raw, json) Hash identifier: 3LH4cn8us9ICCj0fCJiclRv3QJAcAk5jAsBKstnSCqA= Subject key identifier: 69:16:95:6D:3A:3D:9B:2C:B1:75:33:0B:64:11:20:F5:90:A4:91:13 Authority key identifier: BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3 Certificate issuer: /CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3 Certificate serial: 6240F999A11FC697E88BADFC683634E93D7240EC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer Subject info access: rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft Manifest number: 0306 Signing time: Tue 04 Nov 2025 23:15:20 +0000 Manifest this update: Tue 04 Nov 2025 23:10:20 +0000 Manifest next update: Wed 05 Nov 2025 23:57:20 +0000 Files and hashes: 1: BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl (hash: xid1Va3UrT5esSo9om/AODHoQigCWNaXXjhh9qeNd/A=) 2: 34352e3138342e3133362e302f32322d3234203d3e20323639333832.roa (hash: lOCKM/sQAwSd7fbV32ekt353a4Mylb2zpS9lMCOS1fU=) 3: 323830343a363363343a3a2f33322d3438203d3e20323639333832.roa (hash: w5z1HthZl83Aa957U97ag5iKaSLAiUssy3Tahv7R50E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 23:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:40:f9:99:a1:1f:c6:97:e8:8b:ad:fc:68:36:34:e9:3d:72:40:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEE9B156E0F587C9BA0739286F79A9FB85C80BC3 Validity Not Before: Nov 4 23:10:20 2025 GMT Not After : Nov 5 23:57:20 2025 GMT Subject: CN=6916956D3A3D9B2CB175330B641120F590A49113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:97:98:51:34:52:04:7a:99:ec:6a:08:98:9f: ab:17:5f:40:d5:a1:0c:54:b7:95:62:95:08:0d:b7: c1:24:84:c2:3c:11:cd:90:9e:b7:e6:5a:c2:72:87: c8:b1:9e:9b:67:64:fa:5d:6a:b4:47:c8:c6:59:74: 0c:63:22:1f:1b:24:b8:9e:a4:d3:d1:ba:88:6f:3b: cd:0c:6b:d5:f3:5c:45:0b:35:bc:55:09:bc:56:75: 1c:ff:a0:be:06:72:23:e0:f0:49:5f:f9:5e:36:9a: 20:69:23:3d:a3:3c:aa:cf:64:59:52:9e:7e:0d:f5: 78:fe:fd:a5:d8:9e:cb:08:17:a4:17:14:d2:fa:9b: 4f:20:5a:b4:91:4f:68:55:9c:a7:db:1a:b0:d1:40: 6e:f6:b8:e0:fd:1e:fd:d5:d3:d2:9a:c3:2b:e0:64: 7b:c5:c5:cd:da:1a:70:24:e8:da:a7:fd:15:42:cc: 22:31:ae:01:90:9a:b8:19:f7:b2:49:aa:4e:45:9b: 08:48:b1:1a:20:b6:e7:6b:6f:89:e8:0f:46:98:11: 8a:50:ea:03:6f:44:f9:11:ff:34:1a:b7:49:6a:06: f1:ab:38:7b:20:17:67:1d:a2:19:be:27:09:da:62: 09:54:c6:ac:57:2d:4c:17:04:12:ab:9f:d2:86:8c: f6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:16:95:6D:3A:3D:9B:2C:B1:75:33:0B:64:11:20:F5:90:A4:91:13 X509v3 Authority Key Identifier: keyid:BE:E9:B1:56:E0:F5:87:C9:BA:07:39:28:6F:79:A9:FB:85:C8:0B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/1/BEE9B156E0F587C9BA0739286F79A9FB85C80BC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:89:36:42:32:82:3e:9b:d1:e0:6a:6b:23:c5:76:c2:34:cd: e1:7c:c4:00:c6:2d:32:f0:dc:3e:55:8e:b8:8c:08:c8:f8:df: a4:c5:88:5a:ac:ec:71:c0:39:df:2c:da:6a:2b:e9:1e:c0:63: 69:8b:a5:76:a5:38:1b:ba:01:f4:dd:29:e9:35:e5:3a:88:6d: 56:3d:00:9c:21:9d:f5:b3:ee:c5:72:e1:c5:2d:16:25:65:b5: 24:a7:42:ec:de:e7:b8:70:66:1f:7a:b9:b3:f0:59:16:96:d3: e5:49:5b:0e:49:40:dc:e6:2a:1e:11:4b:30:a4:a5:3c:24:97: 54:6b:1c:b1:35:49:1d:b8:44:61:96:67:58:d8:59:eb:eb:58: 9a:ad:74:de:6c:f2:1c:a2:32:bb:85:f6:2f:72:0d:04:4d:b4: 34:87:07:f5:47:72:99:c1:10:2e:fa:09:04:3e:06:c9:85:a9: ac:98:cf:49:9b:58:80:f1:3a:41:f2:38:45:ce:45:07:21:3f: ee:23:ac:a2:50:63:11:c9:78:59:0d:db:c3:6b:af:f2:c4:71: 25:b8:4e:86:c0:8c:e0:01:2e:f5:9a:0f:25:1b:47:d5:c4:0d: c2:60:40:36:09:05:c5:1f:77:34:1e:24:ab:1d:6d:da:5f:00: ea:7b:ac:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYkD5maEfxpfoi638aDY06T1yQOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVFOUIxNTZFMEY1ODdDOUJBMDczOTI4NkY3OUE5RkI4 NUM4MEJDMzAeFw0yNTExMDQyMzEwMjBaFw0yNTExMDUyMzU3MjBaMDMxMTAvBgNV BAMTKDY5MTY5NTZEM0EzRDlCMkNCMTc1MzMwQjY0MTEyMEY1OTBBNDkxMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6l5hRNFIEepnsagiYn6sXX0DV oQxUt5VilQgNt8EkhMI8Ec2QnrfmWsJyh8ixnptnZPpdarRHyMZZdAxjIh8bJLie pNPRuohvO80Ma9XzXEULNbxVCbxWdRz/oL4GciPg8Elf+V42miBpIz2jPKrPZFlS nn4N9Xj+/aXYnssIF6QXFNL6m08gWrSRT2hVnKfbGrDRQG72uOD9Hv3V09Kawyvg ZHvFxc3aGnAk6Nqn/RVCzCIxrgGQmrgZ97JJqk5FmwhIsRogtudrb4noD0aYEYpQ 6gNvRPkR/zQat0lqBvGrOHsgF2cdohm+JwnaYglUxqxXLUwXBBKrn9KGjPZHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaRaVbTo9myyxdTMLZBEg9ZCkkRMwHwYDVR0j BBgwFoAUvumxVuD1h8m6Bzkob3mp+4XIC8MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRnpBYVZLS2ZQQzNGeldGTFZ2U29DRUVXS01Tek1NOEZLMXdHeWNGd25M TG8vMS9CRUU5QjE1NkUwRjU4N0M5QkEwNzM5Mjg2Rjc5QTlGQjg1QzgwQkMzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFRTlCMTU2RTBGNTg3QzlC QTA3MzkyODZGNzlBOUZCODVDODBCQzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RnpBYVZLS2ZQQzNGeldGTFZ2U29DRUVXS01Tek1NOEZLMXdHeWNGd25MTG8vMS9C RUU5QjE1NkUwRjU4N0M5QkEwNzM5Mjg2Rjc5QTlGQjg1QzgwQkMzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuok2QjKCPpvR4GprI8V2wjTN4XzEAMYtMvDcPlWOuIwIyPjfpMWIWqzsccA5 3yzaaivpHsBjaYuldqU4G7oB9N0p6TXlOohtVj0AnCGd9bPuxXLhxS0WJWW1JKdC 7N7nuHBmH3q5s/BZFpbT5UlbDklA3OYqHhFLMKSlPCSXVGscsTVJHbhEYZZnWNhZ 6+tYmq103mzyHKIyu4X2L3INBE20NIcH9UdymcEQLvoJBD4GyYWprJjPSZtYgPE6 QfI4Rc5FByE/7iOsolBjEcl4WQ3bw2uv8sRxJbhOhsCM4AEu9ZoPJRtH1cQNwmBA NgkFxR93NB4kqx1t2l8A6nus/g== -----END CERTIFICATE-----Generated at Wed Nov 5 11:34:03 2025 by rpki-client