$ rpki-client -vvf rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft File: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft (raw, json) Hash identifier: CeNJvuGJ7/ohXPKKgadieszOsI8Lp87D5uXsEHkosNQ= Subject key identifier: CD:D2:7D:50:17:82:04:13:C6:2A:E7:04:AF:48:1A:BE:B1:7D:07:79 Authority key identifier: BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F Certificate issuer: /CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F Certificate serial: 6255158D178FA15634844A5608DF3EE34666B66A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft Manifest number: 028A Signing time: Sun 10 Aug 2025 12:06:23 +0000 Manifest this update: Sun 10 Aug 2025 12:01:23 +0000 Manifest next update: Mon 11 Aug 2025 13:33:23 +0000 Files and hashes: 1: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl (hash: Huep8O6EILCXRxHg4ym9UBiX4GW2OrY7vbUfokjg1W0=) 2: 3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa (hash: ZkBeX0WWJCwewIHrZef0h3RxLAXUNroMdptDFjYWcME=) 3: 323830343a333931383a3a2f33322d3438203d3e20323636353234.roa (hash: 6DURpCCZNXr4RssgY5+U5SCdw8QuLPJEOyNu8nBAHHM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 13:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:55:15:8d:17:8f:a1:56:34:84:4a:56:08:df:3e:e3:46:66:b6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F Validity Not Before: Aug 10 12:01:23 2025 GMT Not After : Aug 11 13:33:23 2025 GMT Subject: CN=CDD27D5017820413C62AE704AF481ABEB17D0779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:1a:f6:78:85:cb:d8:1f:e2:7d:09:25:a3: 60:58:48:d0:4e:4b:c4:dc:07:49:c8:4a:45:98:2f: 5b:5a:56:3b:0b:b4:e2:ba:59:09:df:74:b1:ba:ef: 23:7c:a4:c8:b3:fb:d4:b4:64:ec:28:f2:9c:fd:55: de:51:94:32:41:d4:5d:aa:7c:74:2f:ae:cb:06:b6: 33:2a:37:5e:a3:9b:20:01:9f:e7:54:de:63:8c:c9: 69:84:3b:35:72:2e:bb:61:13:10:4e:c9:71:2c:a4: 95:89:e1:01:10:a4:b3:60:fe:3b:64:9d:63:30:2e: b9:16:49:3c:b6:2c:48:8b:8b:9b:47:26:13:92:94: 01:c7:78:24:42:90:be:28:8e:a5:a3:ec:84:44:41: c1:19:8a:1b:f7:75:2e:09:7e:69:49:f8:53:d3:08: 7a:d7:67:dd:9c:d4:b8:93:47:dd:7d:16:7d:dc:da: 6b:6b:79:06:86:c4:5d:94:a0:e1:77:21:77:80:98: 13:0f:70:ef:82:dc:5a:24:93:35:d9:de:2b:af:59: d8:5c:6c:54:2f:28:0e:43:37:37:b9:bb:e9:20:db: 92:0a:21:bd:bb:3e:88:d1:76:29:cb:dc:ab:8a:0e: 29:c0:57:d5:3c:05:48:9c:da:c9:0b:1c:ae:5d:bb: 4e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D2:7D:50:17:82:04:13:C6:2A:E7:04:AF:48:1A:BE:B1:7D:07:79 X509v3 Authority Key Identifier: keyid:BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:b9:d2:1f:6a:ad:40:aa:6c:e3:7b:e8:a1:17:89:72:f3:c8: de:87:ce:45:b9:0c:0d:36:52:5c:6c:9d:82:44:da:cb:33:88: ac:1a:c5:24:79:1d:1c:63:85:68:bc:54:2d:79:94:aa:12:10: ad:3a:c8:d7:1e:07:b0:ec:3c:ea:a8:d0:bc:d9:bd:cf:91:d9: 01:80:37:1d:1e:87:b8:82:85:6a:49:a9:79:33:47:48:bb:33: 90:c7:0a:71:b7:61:4d:c4:d2:dc:14:dc:82:ea:bc:52:2c:99: 5c:74:89:87:85:18:f0:4f:4b:85:98:12:ec:a8:16:91:f4:6e: 58:63:c2:47:2a:a0:a3:9e:73:03:35:4b:ac:e8:c0:a8:21:e0: fb:40:17:73:79:cd:2f:63:4a:2f:9b:75:7e:d4:e6:72:03:f4: 1c:47:ea:fe:0f:7a:1c:a0:ce:3a:76:6f:ac:d3:77:40:17:1e: af:d5:54:7d:9c:8d:e4:d2:77:4c:ea:4d:e4:c2:6c:af:50:e4: ad:06:f7:58:d5:8b:6c:a5:2c:dd:8a:8b:e9:cc:63:da:cc:1e: aa:ff:ac:1f:f2:c6:85:f8:e6:59:15:e9:85:64:5c:52:14:d0: 7b:06:61:b8:2a:fc:35:cd:cf:b3:07:53:66:b8:92:1a:cb:cb: 28:13:78:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYlUVjRePoVY0hEpWCN8+40ZmtmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDBCRDc1Q0FEM0EzMDNFQzcyRjFBRDBCMjM2NUVF OTVEMzkwRjAeFw0yNTA4MTAxMjAxMjNaFw0yNTA4MTExMzMzMjNaMDMxMTAvBgNV BAMTKENERDI3RDUwMTc4MjA0MTNDNjJBRTcwNEFGNDgxQUJFQjE3RDA3NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn1xr2eIXL2B/ifQklo2BYSNBO S8TcB0nISkWYL1taVjsLtOK6WQnfdLG67yN8pMiz+9S0ZOwo8pz9Vd5RlDJB1F2q fHQvrssGtjMqN16jmyABn+dU3mOMyWmEOzVyLrthExBOyXEspJWJ4QEQpLNg/jtk nWMwLrkWSTy2LEiLi5tHJhOSlAHHeCRCkL4ojqWj7IREQcEZihv3dS4JfmlJ+FPT CHrXZ92c1LiTR919Fn3c2mtreQaGxF2UoOF3IXeAmBMPcO+C3FokkzXZ3iuvWdhc bFQvKA5DNze5u+kg25IKIb27PojRdinL3KuKDinAV9U8BUic2skLHK5du04zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzdJ9UBeCBBPGKucEr0gavrF9B3kwHwYDVR0j BBgwFoAUu+0L11ytOjA+xy8a0LI2XuldOQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3pKYTRjYXN2aGNqRDJobkhtNWpBYXdjdFJrTmFnR25MQjY1M3VxOEhE Y04vMS9CQkVEMEJENzVDQUQzQTMwM0VDNzJGMUFEMEIyMzY1RUU5NUQzOTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCRUQwQkQ3NUNBRDNBMzAz RUM3MkYxQUQwQjIzNjVFRTk1RDM5MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3pKYTRjYXN2aGNqRDJobkhtNWpBYXdjdFJrTmFnR25MQjY1M3VxOEhEY04vMS9C QkVEMEJENzVDQUQzQTMwM0VDNzJGMUFEMEIyMzY1RUU5NUQzOTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAurnSH2qtQKps43vooReJcvPI3ofORbkMDTZSXGydgkTayzOIrBrFJHkdHGOF aLxULXmUqhIQrTrI1x4HsOw86qjQvNm9z5HZAYA3HR6HuIKFakmpeTNHSLszkMcK cbdhTcTS3BTcguq8UiyZXHSJh4UY8E9LhZgS7KgWkfRuWGPCRyqgo55zAzVLrOjA qCHg+0AXc3nNL2NKL5t1ftTmcgP0HEfq/g96HKDOOnZvrNN3QBcer9VUfZyN5NJ3 TOpN5MJsr1DkrQb3WNWLbKUs3YqL6cxj2sweqv+sH/LGhfjmWRXphWRcUhTQewZh uCr8Nc3PswdTZriSGsvLKBN4gA== -----END CERTIFICATE-----Generated at Mon Aug 11 04:31:45 2025 by rpki-client