$ rpki-client -vvf rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft File: BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft (raw, json) Hash identifier: mn1+5Q5EYDgJAcYbzpoUtMTTZEvdKd82SUkcvNVO9Yw= Subject key identifier: 7D:3E:D4:44:4A:85:4A:B2:01:43:A7:4D:60:DE:39:BF:9C:B6:76:B8 Authority key identifier: BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E Certificate issuer: /CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E Certificate serial: 1F973A57EA0AE3392D707D804965C0885A2D9E59 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft Manifest number: 14 Signing time: Tue 04 Nov 2025 14:03:56 +0000 Manifest this update: Tue 04 Nov 2025 13:58:56 +0000 Manifest next update: Wed 05 Nov 2025 14:20:56 +0000 Files and hashes: 1: 34352e37312e34382e302f32322d3234203d3e203631353836.roa (hash: 50nfXV1vfz6ixz96BZYaoDznaTp9SqqgyXgtQ8vAMVM=) 2: BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl (hash: BHJSf5aYh6g2B5Af5ooUi0ChIXodTBNochQ1ifpjBI8=) 3: 323830343a343465303a3a2f33322d3438203d3e203631353836.roa (hash: EE+epePHX3kApXSOd4NEAz7bQWCJ2iABI0JjgleyzM0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:97:3a:57:ea:0a:e3:39:2d:70:7d:80:49:65:c0:88:5a:2d:9e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E Validity Not Before: Nov 4 13:58:56 2025 GMT Not After : Nov 5 14:20:56 2025 GMT Subject: CN=7D3ED4444A854AB20143A74D60DE39BF9CB676B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:66:26:88:2a:16:76:bc:7d:72:8a:3c:46:8b: cb:4e:ce:4c:32:6b:d9:e1:ba:20:70:fb:fb:6a:c3: 98:fa:e5:20:d7:12:d6:16:2b:1c:36:c1:e3:87:5a: 09:c7:cc:09:5d:e0:40:60:ee:d7:19:9f:31:b4:ec: 21:9b:24:a1:84:a8:d3:22:2c:1f:b4:d9:09:f6:c0: de:d8:ef:31:14:fd:0c:ce:7f:51:97:59:cd:d9:2d: be:cd:17:46:6e:7d:f0:b2:df:20:6e:74:6d:1a:ba: 8b:de:13:88:0c:33:48:3b:ae:eb:fc:31:dc:ae:e0: cc:ce:cb:7e:a5:ab:1a:19:2d:93:c1:43:ce:26:3a: 9a:97:76:1e:16:20:1d:ed:59:b9:ac:84:31:8e:82: 99:9a:55:b6:1c:c7:8e:64:41:e8:7c:78:87:fe:d8: 77:dd:72:af:4f:27:c6:af:75:93:fe:72:04:4c:53: 70:26:87:11:a9:2d:d6:0c:dc:02:8c:0f:ae:3e:d9: 3c:a4:19:27:16:b1:79:28:93:92:cb:cc:cd:ef:d7: a5:83:e2:15:15:e7:ee:f5:07:3f:ad:08:51:5f:4b: 19:e7:bf:39:19:d4:50:02:be:d1:a5:7f:51:e6:d3: eb:0a:63:75:0e:d8:89:0c:6f:18:c9:03:4c:b8:fc: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3E:D4:44:4A:85:4A:B2:01:43:A7:4D:60:DE:39:BF:9C:B6:76:B8 X509v3 Authority Key Identifier: keyid:BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:fc:fa:1b:e3:90:b2:6d:96:9b:37:09:47:eb:24:ce:59:4d: ee:25:c2:b3:fa:6a:c5:7b:9c:f1:58:f4:5e:da:55:a4:10:b8: 49:10:44:5b:a1:95:cc:41:f9:89:f3:d0:6f:9e:d1:27:9c:67: 18:5d:ec:45:95:8c:3d:e9:c4:b0:81:3c:e6:06:81:6f:46:60: 31:4e:df:75:68:ff:26:5e:5a:16:0d:86:74:27:aa:a5:ef:73: 5c:13:fc:37:d1:40:97:e8:c4:34:a7:cf:2c:74:96:b0:63:90: 35:82:84:7c:4b:4d:42:a0:3b:b3:1a:42:98:32:64:f8:8e:15: 7d:05:ea:5c:df:b0:4d:0a:76:68:96:e2:a8:d7:3a:ce:63:a9: 8f:27:d6:ab:dc:be:50:af:74:2b:5d:a0:34:20:cd:b7:47:c3: 36:32:d9:d9:fc:e9:11:df:c2:00:42:87:c6:3e:74:12:46:0c: a2:67:d4:21:86:74:b7:98:a4:52:a2:2b:39:4b:c6:3e:21:aa: c1:3a:16:3b:f8:b9:a5:08:58:dd:c3:b2:42:4e:a0:ad:ed:c1: a2:4a:b3:cc:02:7b:b1:4c:18:19:fc:26:1e:76:8b:5a:3f:04: 41:06:5d:e6:e5:53:ad:aa:fc:6c:56:c2:22:45:b8:12:70:e9: 14:2f:bf:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUH5c6V+oK4zktcH2ASWXAiFotnlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyNUMxNTJCQUNGRDJERDk4OEUyM0U5Qzk3QUExQUVC NEJBNUIzRTAeFw0yNTExMDQxMzU4NTZaFw0yNTExMDUxNDIwNTZaMDMxMTAvBgNV BAMTKDdEM0VENDQ0NEE4NTRBQjIwMTQzQTc0RDYwREUzOUJGOUNCNjc2QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ZiaIKhZ2vH1yijxGi8tOzkwy a9nhuiBw+/tqw5j65SDXEtYWKxw2weOHWgnHzAld4EBg7tcZnzG07CGbJKGEqNMi LB+02Qn2wN7Y7zEU/QzOf1GXWc3ZLb7NF0ZuffCy3yBudG0auoveE4gMM0g7ruv8 Mdyu4MzOy36lqxoZLZPBQ84mOpqXdh4WIB3tWbmshDGOgpmaVbYcx45kQeh8eIf+ 2Hfdcq9PJ8avdZP+cgRMU3AmhxGpLdYM3AKMD64+2TykGScWsXkok5LLzM3v16WD 4hUV5+71Bz+tCFFfSxnnvzkZ1FACvtGlf1Hm0+sKY3UO2IkMbxjJA0y4/NN5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfT7UREqFSrIBQ6dNYN45v5y2drgwHwYDVR0j BBgwFoAUviXBUrrP0t2YjiPpyXqhrrS6Wz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGM3SzJVdjVEejFieGlIWG5NTW1vR2RnZlhyb1E2Y1V3Y045dFVBbUdo cHYvMC9CRTI1QzE1MkJBQ0ZEMkREOTg4RTIzRTlDOTdBQTFBRUI0QkE1QjNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFMjVDMTUyQkFDRkQyREQ5 ODhFMjNFOUM5N0FBMUFFQjRCQTVCM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGM3SzJVdjVEejFieGlIWG5NTW1vR2RnZlhyb1E2Y1V3Y045dFVBbUdocHYvMC9C RTI1QzE1MkJBQ0ZEMkREOTg4RTIzRTlDOTdBQTFBRUI0QkE1QjNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmfz6G+OQsm2WmzcJR+skzllN7iXCs/pqxXuc8Vj0XtpVpBC4SRBEW6GVzEH5 ifPQb57RJ5xnGF3sRZWMPenEsIE85gaBb0ZgMU7fdWj/Jl5aFg2GdCeqpe9zXBP8 N9FAl+jENKfPLHSWsGOQNYKEfEtNQqA7sxpCmDJk+I4VfQXqXN+wTQp2aJbiqNc6 zmOpjyfWq9y+UK90K12gNCDNt0fDNjLZ2fzpEd/CAEKHxj50EkYMomfUIYZ0t5ik UqIrOUvGPiGqwToWO/i5pQhY3cOyQk6gre3BokqzzAJ7sUwYGfwmHnaLWj8EQQZd 5uVTrar8bFbCIkW4EnDpFC+/ow== -----END CERTIFICATE-----Generated at Wed Nov 5 03:37:58 2025 by rpki-client