$ rpki-client -vvf rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/1/00BF168648CA2E0C65B74CD398740220B6FF16CD.mft File: 00BF168648CA2E0C65B74CD398740220B6FF16CD.mft (raw, json) Hash identifier: qh2chFVB5OH3be65cjZQJjRIkL+oSekdBF5XYpJwUls= Subject key identifier: 2C:78:9D:A1:D8:3C:CD:86:48:F1:95:C3:81:DE:9B:54:86:1B:94:FE Authority key identifier: 00:BF:16:86:48:CA:2E:0C:65:B7:4C:D3:98:74:02:20:B6:FF:16:CD Certificate issuer: /CN=00BF168648CA2E0C65B74CD398740220B6FF16CD Certificate serial: 11CFC1068DA9D066CA8A4A3EB2DCC765E77C47A8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00BF168648CA2E0C65B74CD398740220B6FF16CD.cer Subject info access: rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/1/00BF168648CA2E0C65B74CD398740220B6FF16CD.mft Manifest number: 0164 Signing time: Wed 05 Nov 2025 00:18:13 +0000 Manifest this update: Wed 05 Nov 2025 00:13:12 +0000 Manifest next update: Thu 06 Nov 2025 00:45:12 +0000 Files and hashes: 1: 323830343a366535303a3a2f33322d313238203d3e20323730353838.roa (hash: ps2WQKTwY1hDtYuQ4ssmtadZ3KNHd2HMYvHtNQ9fWLQ=) 2: 3137372e3132392e33362e302f32322d3332203d3e20323730353838.roa (hash: B/dObIn/29CSFO4MqNmjNqk9Su4kk+jBL83oPg8K5yo=) 3: 00BF168648CA2E0C65B74CD398740220B6FF16CD.crl (hash: zDSvHvDMdFWn65IxQjzqHhmGoLHBVpF+dEmgmQ2c6/Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/1/00BF168648CA2E0C65B74CD398740220B6FF16CD.crl rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/1/00BF168648CA2E0C65B74CD398740220B6FF16CD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00BF168648CA2E0C65B74CD398740220B6FF16CD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:cf:c1:06:8d:a9:d0:66:ca:8a:4a:3e:b2:dc:c7:65:e7:7c:47:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00BF168648CA2E0C65B74CD398740220B6FF16CD Validity Not Before: Nov 5 00:13:12 2025 GMT Not After : Nov 6 00:45:12 2025 GMT Subject: CN=2C789DA1D83CCD8648F195C381DE9B54861B94FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9b:0d:f4:f2:49:6c:1c:3b:0d:7a:45:23:b2: 5a:5d:07:f7:9c:22:ad:fc:d9:6d:95:9f:0d:01:b9: 3b:5a:18:9f:03:29:18:a3:8a:e8:8d:e4:c6:13:32: 26:57:ad:b5:ca:ce:46:a9:45:f4:38:9a:00:a8:86: f0:95:52:e6:1d:68:06:1f:e4:1d:26:ea:f9:12:49: 57:0f:ef:ef:3e:7f:bc:4a:5d:b8:00:d1:07:57:12: c2:4b:d4:ec:5e:9e:90:41:23:a4:5d:20:e7:3f:f2: f0:e4:26:ff:fa:54:2f:3b:39:3d:42:a3:44:8c:3b: 15:53:ea:f0:f4:f3:90:52:da:ba:dc:44:06:d1:ad: ba:10:a6:11:e5:2e:40:aa:37:bc:37:af:48:ee:c7: 4b:50:f9:5f:72:e8:61:03:e3:12:ef:b8:2c:80:4f: dd:3d:5a:d5:39:3f:ad:c5:99:17:01:27:b7:80:62: 30:26:21:83:e9:3d:9d:a1:02:9c:71:23:7c:84:24: df:c1:d5:ec:8a:3c:49:59:12:68:41:97:af:4b:75: 20:6e:d4:3d:42:b7:ed:34:be:a4:d0:c8:b2:37:86: d8:85:33:27:26:11:ab:7f:b2:11:91:bc:33:5f:f6: 37:fa:de:04:e7:d6:8c:13:8e:9a:13:65:d5:75:fb: 3b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:78:9D:A1:D8:3C:CD:86:48:F1:95:C3:81:DE:9B:54:86:1B:94:FE X509v3 Authority Key Identifier: keyid:00:BF:16:86:48:CA:2E:0C:65:B7:4C:D3:98:74:02:20:B6:FF:16:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/1/00BF168648CA2E0C65B74CD398740220B6FF16CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00BF168648CA2E0C65B74CD398740220B6FF16CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/JZVbpYuY4fyvoz8BAcJtZn6bNmdm9tXeNaYhXJ8f2Vg/1/00BF168648CA2E0C65B74CD398740220B6FF16CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2d:30:0e:eb:60:9c:8f:72:7d:05:b7:86:0d:48:e1:b0:71: 82:4b:d6:78:d0:c6:1f:6d:07:86:93:cf:82:a1:ab:d5:23:13: 9b:bb:9c:3c:69:a8:0d:9e:28:3f:f6:c8:0d:74:6f:7e:b0:77: 7b:c8:b1:b3:d1:f3:f0:54:26:7e:04:d9:5d:17:48:4a:d4:59: 07:2d:6a:62:84:07:ba:63:e4:2e:20:78:45:d5:44:91:6a:00: 4a:25:f4:83:cc:c4:54:dc:98:35:77:87:36:e7:10:66:fb:a2: 3f:d5:34:b4:de:86:91:24:04:ed:a6:c9:99:e0:52:e2:8d:ad: eb:d5:9b:eb:70:b3:91:27:27:20:b0:c3:1f:e5:1e:d3:37:bb: 91:07:99:a2:bf:dc:56:b7:c2:fa:f5:be:2c:b0:9c:2b:05:34: e5:de:88:d0:8a:a0:c1:72:84:35:05:51:6f:98:05:fd:0e:05: 19:e6:62:f9:fc:b0:75:c9:19:47:35:22:b2:ec:1f:7b:81:50: f9:cd:a4:8e:67:cc:13:8a:b0:58:4d:10:3f:78:eb:85:69:78: 2f:e4:a8:a8:ba:90:88:9a:72:ce:c3:05:03:25:09:06:58:79: 7d:cc:4d:b8:aa:98:08:44:4b:7c:f7:be:7f:90:22:46:1d:eb: c5:8c:f3:60 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUEc/BBo2p0GbKiko+stzHZed8R6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBCRjE2ODY0OENBMkUwQzY1Qjc0Q0QzOTg3NDAyMjBC NkZGMTZDRDAeFw0yNTExMDUwMDEzMTJaFw0yNTExMDYwMDQ1MTJaMDMxMTAvBgNV BAMTKDJDNzg5REExRDgzQ0NEODY0OEYxOTVDMzgxREU5QjU0ODYxQjk0RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcmw308klsHDsNekUjslpdB/ec Iq382W2Vnw0BuTtaGJ8DKRijiuiN5MYTMiZXrbXKzkapRfQ4mgCohvCVUuYdaAYf 5B0m6vkSSVcP7+8+f7xKXbgA0QdXEsJL1OxenpBBI6RdIOc/8vDkJv/6VC87OT1C o0SMOxVT6vD085BS2rrcRAbRrboQphHlLkCqN7w3r0jux0tQ+V9y6GED4xLvuCyA T909WtU5P63FmRcBJ7eAYjAmIYPpPZ2hApxxI3yEJN/B1eyKPElZEmhBl69LdSBu 1D1Ct+00vqTQyLI3htiFMycmEat/shGRvDNf9jf63gTn1owTjpoTZdV1+zsVAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQULHidodg8zYZI8ZXDgd6bVIYblP4wHwYDVR0j BBgwFoAUAL8WhkjKLgxlt0zTmHQCILb/Fs0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9KWlZicFl1WTRmeXZvejhCQWNKdFpuNmJObWRtOXRYZU5hWWhYSjhmMlZn LzEvMDBCRjE2ODY0OENBMkUwQzY1Qjc0Q0QzOTg3NDAyMjBCNkZGMTZDRC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wMEJGMTY4NjQ4Q0EyRTBDNjVC NzRDRDM5ODc0MDIyMEI2RkYxNkNELmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pa VmJwWXVZNGZ5dm96OEJBY0p0Wm42Yk5tZG05dFhlTmFZaFhKOGYyVmcvMS8wMEJG MTY4NjQ4Q0EyRTBDNjVCNzRDRDM5ODc0MDIyMEI2RkYxNkNELm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA Ly0wDutgnI9yfQW3hg1I4bBxgkvWeNDGH20HhpPPgqGr1SMTm7ucPGmoDZ4oP/bI DXRvfrB3e8ixs9Hz8FQmfgTZXRdIStRZBy1qYoQHumPkLiB4RdVEkWoASiX0g8zE VNyYNXeHNucQZvuiP9U0tN6GkSQE7abJmeBS4o2t69Wb63CzkScnILDDH+Ue0ze7 kQeZor/cVrfC+vW+LLCcKwU05d6I0IqgwXKENQVRb5gF/Q4FGeZi+fywdckZRzUi suwfe4FQ+c2kjmfME4qwWE0QP3jrhWl4L+SoqLqQiJpyzsMFAyUJBlh5fcxNuKqY CERLfPe+f5AiRh3rxYzzYA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:46:27 2025 by rpki-client