$ rpki-client -vvf rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft File: BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft (raw, json) Hash identifier: zPs1ufC1bKZo0YMiPCpMFx0mHwzdlQcV+E6M3EOHYc0= Subject key identifier: C6:12:02:7F:64:64:49:1A:A4:DC:52:37:0F:98:EF:23:F1:64:00:00 Authority key identifier: BD:F7:80:A1:AD:20:03:1A:92:18:6F:4B:5C:02:F0:49:FB:8A:7D:26 Certificate issuer: /CN=BDF780A1AD20031A92186F4B5C02F049FB8A7D26 Certificate serial: 53633F4798A5702FBE5BAE53193BF17FA235A674 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer Subject info access: rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft Manifest number: 02D0 Signing time: Mon 03 Nov 2025 08:35:43 +0000 Manifest this update: Mon 03 Nov 2025 08:30:43 +0000 Manifest next update: Tue 04 Nov 2025 09:06:43 +0000 Files and hashes: 1: 34352e3138332e3138382e302f32322d3234203d3e20323639323938.roa (hash: XUloOVfsOzPPxyik/iHPBmw4bQxk/7eIdcUdi8kEcuc=) 2: 323830343a363237343a3a2f33322d3438203d3e20323639323938.roa (hash: i3cBezF8IApSQaQqjUBcgOAnsqNsV9UdV/mGucW8iO4=) 3: BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl (hash: R3XFy+/PyV7bep+JzOvfWx9McXUuegBrvzJwvUNaxM8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:63:3f:47:98:a5:70:2f:be:5b:ae:53:19:3b:f1:7f:a2:35:a6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDF780A1AD20031A92186F4B5C02F049FB8A7D26 Validity Not Before: Nov 3 08:30:43 2025 GMT Not After : Nov 4 09:06:43 2025 GMT Subject: CN=C612027F6464491AA4DC52370F98EF23F1640000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:4f:97:e1:8a:62:0a:2a:a6:e9:46:34:84: 41:97:e0:33:ce:c6:b9:eb:dc:a2:74:19:7f:9e:5f: f9:6b:8c:2f:f6:a5:5e:54:ef:72:58:32:d0:bf:d2: 6a:8c:e8:38:94:a8:44:1b:91:ed:4b:17:e3:d0:2b: e1:d1:96:1d:0d:ea:b2:6f:c5:be:74:37:7c:8d:34: 2d:15:68:52:25:a6:b2:30:22:99:17:8f:ee:99:0d: 42:64:51:ff:2f:c7:9d:29:d9:6b:98:45:30:7e:0b: a0:01:6d:fc:13:3f:5a:8d:a6:b9:3a:cb:26:c5:3c: e0:e3:e6:56:42:77:e9:88:c2:0d:dc:67:0e:a8:62: 65:bd:93:f9:1a:92:0d:97:29:57:ac:62:6f:b2:99: 94:63:54:1c:25:b2:46:b3:75:35:34:ed:80:a4:d9: bd:16:26:e4:93:c1:12:15:5e:fd:18:b0:f7:02:42: 00:f1:70:b0:cd:d4:80:56:c2:d4:dd:f0:6e:2b:99: 86:09:e7:dd:27:9b:b5:d2:a4:72:d6:e2:58:a6:0d: d5:34:2e:bc:8d:25:52:b6:7d:63:fd:dc:de:12:79: 74:e8:92:e5:82:55:8a:60:78:93:20:b3:82:23:ac: d2:46:8d:24:55:b2:63:13:d6:3b:55:b9:01:b1:80: f7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:12:02:7F:64:64:49:1A:A4:DC:52:37:0F:98:EF:23:F1:64:00:00 X509v3 Authority Key Identifier: keyid:BD:F7:80:A1:AD:20:03:1A:92:18:6F:4B:5C:02:F0:49:FB:8A:7D:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:1a:e1:cd:b2:fb:e1:5e:a7:f3:e3:c8:0d:84:06:7a:4e:ee: 27:a5:44:9e:6f:77:0c:b7:24:af:e0:05:c4:9d:04:ac:98:f8: 26:d5:e8:1f:a7:51:9a:b7:e8:c3:ed:71:1f:4f:ac:41:77:a6: bf:8d:a8:9c:f6:4e:a0:e1:85:58:80:3d:88:36:03:ee:18:6b: 7b:67:66:59:b8:82:65:bf:aa:61:25:6c:c5:c0:10:c5:b9:b2: e4:2b:93:a7:a0:49:21:b5:88:5f:3c:13:8c:d2:da:99:e4:e3: 95:75:18:cb:18:3f:dc:bb:4b:3f:88:47:e7:bd:d7:93:c5:92: 85:bf:6a:a3:5c:a7:7b:56:64:6e:92:89:46:eb:3e:3d:b5:f9: df:58:78:bd:67:b6:41:d6:64:52:0b:eb:7c:bf:09:cf:23:2f: 0e:2c:ee:63:36:6b:67:5c:04:1a:04:e8:46:18:8b:76:f4:3b: 91:39:12:15:06:dc:68:0d:02:bb:c7:03:7b:67:3d:4b:74:0b: dc:63:66:c2:9f:50:d5:62:21:54:c6:f0:72:f6:40:88:dc:c8: 98:9e:2c:db:1e:a0:5f:21:02:ad:27:d0:6b:54:14:38:ed:00: 6d:09:a0:33:d2:5b:5b:f8:67:a4:04:29:14:56:4a:0b:07:93: 48:ba:f9:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUU2M/R5ilcC++W65TGTvxf6I1pnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRGNzgwQTFBRDIwMDMxQTkyMTg2RjRCNUMwMkYwNDlG QjhBN0QyNjAeFw0yNTExMDMwODMwNDNaFw0yNTExMDQwOTA2NDNaMDMxMTAvBgNV BAMTKEM2MTIwMjdGNjQ2NDQ5MUFBNERDNTIzNzBGOThFRjIzRjE2NDAwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAIE+X4YpiCiqm6UY0hEGX4DPO xrnr3KJ0GX+eX/lrjC/2pV5U73JYMtC/0mqM6DiUqEQbke1LF+PQK+HRlh0N6rJv xb50N3yNNC0VaFIlprIwIpkXj+6ZDUJkUf8vx50p2WuYRTB+C6ABbfwTP1qNprk6 yybFPODj5lZCd+mIwg3cZw6oYmW9k/kakg2XKVesYm+ymZRjVBwlskazdTU07YCk 2b0WJuSTwRIVXv0YsPcCQgDxcLDN1IBWwtTd8G4rmYYJ590nm7XSpHLW4limDdU0 LryNJVK2fWP93N4SeXTokuWCVYpgeJMgs4IjrNJGjSRVsmMT1jtVuQGxgPe9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxhICf2RkSRqk3FI3D5jvI/FkAAAwHwYDVR0j BBgwFoAUvfeAoa0gAxqSGG9LXALwSfuKfSYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkZkWW9Db2tnbXBGdERUb2loRm9zRm5hOEZDdmRiQ2U4bm84UlF1Nmll RzgvMC9CREY3ODBBMUFEMjAwMzFBOTIxODZGNEI1QzAyRjA0OUZCOEE3RDI2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERjc4MEExQUQyMDAzMUE5 MjE4NkY0QjVDMDJGMDQ5RkI4QTdEMjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkZkWW9Db2tnbXBGdERUb2loRm9zRm5hOEZDdmRiQ2U4bm84UlF1NmllRzgvMC9C REY3ODBBMUFEMjAwMzFBOTIxODZGNEI1QzAyRjA0OUZCOEE3RDI2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqRrhzbL74V6n8+PIDYQGek7uJ6VEnm93DLckr+AFxJ0ErJj4JtXoH6dRmrfo w+1xH0+sQXemv42onPZOoOGFWIA9iDYD7hhre2dmWbiCZb+qYSVsxcAQxbmy5CuT p6BJIbWIXzwTjNLameTjlXUYyxg/3LtLP4hH573Xk8WShb9qo1yne1ZkbpKJRus+ PbX531h4vWe2QdZkUgvrfL8JzyMvDizuYzZrZ1wEGgToRhiLdvQ7kTkSFQbcaA0C u8cDe2c9S3QL3GNmwp9Q1WIhVMbwcvZAiNzImJ4s2x6gXyECrSfQa1QUOO0AbQmg M9JbW/hnpAQpFFZKCweTSLr5cg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:31:23 2025 by rpki-client