$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft File: BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft (raw, json) Hash identifier: FnWDlCRiHvejNxdcgvrn1SSskqxMBEaEhbfjziBPlzo= Subject key identifier: C1:CE:EA:F6:FF:D3:42:BF:1B:5F:44:5C:11:08:76:58:18:96:3A:C9 Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C Certificate issuer: /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C Certificate serial: 462ADDD9B5E0B10207B93C4C90FDE4BC617433F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft Manifest number: 0308 Signing time: Wed 05 Nov 2025 06:49:44 +0000 Manifest this update: Wed 05 Nov 2025 06:44:44 +0000 Manifest next update: Thu 06 Nov 2025 08:56:44 +0000 Files and hashes: 1: 323830343a353261633a343030303a3a2f33342d3334203d3e20323638353333.roa (hash: mqy8b9GeFOuJat8npSCtdNaMsEv+mc/f5yfeDuhXnYY=) 2: 34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa (hash: JpCO4M6N05dDszkPP+IB3KMtveMRN/h0JLU2Pd3nWww=) 3: BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl (hash: mY9TlNS+EAqILZnsoUbTcRQrUEUBdKpTYw/rEKfwTbk=) 4: 323830343a353261633a383030303a3a2f33342d3334203d3e20323638353333.roa (hash: G9Gop5zvToflO/2gpfor+zrNq42K6WPewb3L6fpm6hc=) 5: 34352e3136322e3232342e302f32332d3233203d3e20323638353333.roa (hash: cOFomrq0u7uWaAdwHhxcYiXZVFUXmPTmjP3yNM2i3R4=) 6: 323830343a353261633a3a2f33322d3332203d3e20323638353333.roa (hash: 2QGqbscxEv91g94RnqkqrOoDAGPsowqCHy2js+JYcQM=) 7: 323830343a353261633a3a2f33342d3334203d3e20323638353333.roa (hash: q4zgkyKtFDn2O0A5TEaDzEsRkWK7zaVWPz1XfL9ig6Q=) 8: 323830343a353261633a633030303a3a2f33342d3334203d3e20323638353333.roa (hash: TDmWOgpLRKpDDiL9IkKzagHfIzq66JLQS5+JyHVQCVc=) 9: 34352e3136322e3232362e302f32332d3233203d3e20323638353333.roa (hash: I+Ww78nrqDFQJeSUCTyBI5VULHKBcS0W9+lh0BWLpDE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 08:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:2a:dd:d9:b5:e0:b1:02:07:b9:3c:4c:90:fd:e4:bc:61:74:33:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C Validity Not Before: Nov 5 06:44:44 2025 GMT Not After : Nov 6 08:56:44 2025 GMT Subject: CN=C1CEEAF6FFD342BF1B5F445C1108765818963AC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:57:6b:2d:39:05:c6:57:01:51:80:fd:1c:a2: 82:59:28:7c:a0:8b:a1:55:fc:9c:12:b6:fb:24:8d: 3b:5a:7f:f6:11:c9:ac:b2:34:69:3d:0d:cf:4b:7c: 66:75:7d:f6:18:79:73:5c:28:51:08:8d:3a:12:3c: 93:ae:f9:28:4f:dd:61:87:3a:c0:5b:ea:ca:d1:d3: 61:81:f0:f4:b6:da:3e:7b:48:16:23:f9:ce:72:39: 91:39:c2:87:3f:a3:a3:b5:e3:0e:98:b3:3d:90:fe: a9:c1:53:7e:7a:be:28:c2:0d:98:e7:80:b2:f3:21: 97:97:76:0d:8d:03:3a:5d:56:47:46:6f:9b:c1:cc: 7c:02:2b:ec:44:3c:d5:7a:96:c8:6c:2a:f8:c2:91: 67:6c:ba:63:4d:40:4f:a3:6f:c3:37:ac:9b:4d:07: e5:62:44:e0:cc:65:dc:5a:e2:f5:fe:72:7f:75:30: 5b:0f:40:7f:25:38:34:2c:83:f4:b1:e6:56:d4:cc: c3:cf:7a:f5:97:ed:37:23:c5:73:7a:0c:bc:a9:f0: 4c:00:9f:84:33:8d:04:53:64:96:7e:75:49:1f:3f: 3d:eb:f1:f7:9b:82:43:82:d7:a6:be:22:4b:ba:b6: 62:a8:ff:68:7f:7d:53:c2:a4:8b:28:ae:b1:bf:10: 2b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CE:EA:F6:FF:D3:42:BF:1B:5F:44:5C:11:08:76:58:18:96:3A:C9 X509v3 Authority Key Identifier: keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6a:71:5b:ee:ca:2b:a7:ca:a4:e3:fd:3f:c9:c3:f4:0d:5d: b9:2a:7f:9b:60:6a:b0:98:0b:16:f8:41:b1:9d:9a:7e:c9:b8: 1a:78:59:18:0c:0b:d2:6e:41:c7:e8:e8:1d:bf:6a:58:28:8b: 04:64:16:e0:cf:a8:16:08:81:94:c5:09:24:9e:f2:da:a9:88: 6e:97:3f:de:86:8c:51:cd:ef:89:2f:f6:36:a8:4d:81:e5:db: f8:96:dc:3b:6a:2b:29:b3:e8:c5:09:03:7d:ef:0c:79:dd:e6: 6e:83:fb:80:2e:ef:33:3c:2b:b8:e9:4c:cd:61:18:16:85:bf: 7a:e3:d2:d6:5a:25:7e:f2:2c:14:7c:d0:bc:e7:0e:cf:fc:74: c8:ec:64:58:95:0c:a9:24:ff:e3:fc:ed:bb:33:88:39:83:aa: 1c:a4:e6:b8:d1:8c:47:66:43:93:53:e2:d6:dd:6c:c9:4c:3b: d7:7d:12:e5:64:76:86:7e:66:1e:e2:3c:ab:8c:36:03:9b:99: a2:9b:eb:fa:08:e1:f7:d2:d6:35:e4:53:b1:99:9d:a3:e7:4d: c1:13:c1:e1:74:52:10:06:4e:3a:7b:dd:9f:68:74:e8:08:5e: 99:bf:69:ec:0a:11:a0:7b:58:ad:43:87:1d:8e:b3:77:5d:27: 40:10:b2:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURird2bXgsQIHuTxMkP3kvGF0M/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIxNThGMUY5ODNEOEYyMUNBRUI5M0M5MjhBQzZBQjUy QjUxQ0IxQzAeFw0yNTExMDUwNjQ0NDRaFw0yNTExMDYwODU2NDRaMDMxMTAvBgNV BAMTKEMxQ0VFQUY2RkZEMzQyQkYxQjVGNDQ1QzExMDg3NjU4MTg5NjNBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDV2stOQXGVwFRgP0cooJZKHyg i6FV/JwStvskjTtaf/YRyayyNGk9Dc9LfGZ1ffYYeXNcKFEIjToSPJOu+ShP3WGH OsBb6srR02GB8PS22j57SBYj+c5yOZE5woc/o6O14w6Ysz2Q/qnBU356vijCDZjn gLLzIZeXdg2NAzpdVkdGb5vBzHwCK+xEPNV6lshsKvjCkWdsumNNQE+jb8M3rJtN B+ViRODMZdxa4vX+cn91MFsPQH8lODQsg/Sx5lbUzMPPevWX7TcjxXN6DLyp8EwA n4QzjQRTZJZ+dUkfPz3r8febgkOC16a+Iku6tmKo/2h/fVPCpIsorrG/ECtNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwc7q9v/TQr8bX0RcEQh2WBiWOskwHwYDVR0j BBgwFoAUuxWPH5g9jyHK65PJKKxqtStRyxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2RlaGU2OEsydWVSNGhXUTVVNWJwQ2daY1gyN3BSSlJKWVBGRG5BMmQ0 S1IvMS9CQjE1OEYxRjk4M0Q4RjIxQ0FFQjkzQzkyOEFDNkFCNTJCNTFDQjFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMTU4RjFGOTgzRDhGMjFD QUVCOTNDOTI4QUM2QUI1MkI1MUNCMUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2RlaGU2OEsydWVSNGhXUTVVNWJwQ2daY1gyN3BSSlJKWVBGRG5BMmQ0S1IvMS9C QjE1OEYxRjk4M0Q4RjIxQ0FFQjkzQzkyOEFDNkFCNTJCNTFDQjFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASmpxW+7KK6fKpOP9P8nD9A1duSp/m2BqsJgLFvhBsZ2afsm4GnhZGAwL0m5B x+joHb9qWCiLBGQW4M+oFgiBlMUJJJ7y2qmIbpc/3oaMUc3viS/2NqhNgeXb+Jbc O2orKbPoxQkDfe8Med3mboP7gC7vMzwruOlMzWEYFoW/euPS1lolfvIsFHzQvOcO z/x0yOxkWJUMqST/4/ztuzOIOYOqHKTmuNGMR2ZDk1Pi1t1syUw7130S5WR2hn5m HuI8q4w2A5uZopvr+gjh99LWNeRTsZmdo+dNwRPB4XRSEAZOOnvdn2h06Ahemb9p 7AoRoHtYrUOHHY6zd10nQBCynw== -----END CERTIFICATE-----Generated at Wed Nov 5 19:15:53 2025 by rpki-client