$ rpki-client -vvf rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.mft File: BE89F6747B326E779CB3E94906319A8C0A0C1C81.mft (raw, json) Hash identifier: WMCscJXWyBXyAB9jsMBiT2MVweHBnYOCSTJ3VCQmJLY= Subject key identifier: EF:6C:4E:07:A8:F0:67:89:7B:6F:96:2C:B3:FE:82:38:DD:1E:5C:7E Authority key identifier: BE:89:F6:74:7B:32:6E:77:9C:B3:E9:49:06:31:9A:8C:0A:0C:1C:81 Certificate issuer: /CN=BE89F6747B326E779CB3E94906319A8C0A0C1C81 Certificate serial: 3EBAFE1E520BE9B9BBF24B1AB9FCEFA8102476B3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE89F6747B326E779CB3E94906319A8C0A0C1C81.cer Subject info access: rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.mft Manifest number: 0121 Signing time: Mon 03 Nov 2025 11:56:16 +0000 Manifest this update: Mon 03 Nov 2025 11:51:16 +0000 Manifest next update: Tue 04 Nov 2025 14:01:16 +0000 Files and hashes: 1: 323830313a61343a3a2f33322d3335203d3e20323632373432.roa (hash: 9sALlRBEpt1eU9WNPd839gLZYMjKuc14j7wICJkr0c8=) 2: BE89F6747B326E779CB3E94906319A8C0A0C1C81.crl (hash: VLXMptvARJqLPQC4vQX8/l/JJKRYGKdWroQcHe32WxU=) 3: 3137372e3130342e33322e302f31392d3233203d3e20323632373432.roa (hash: uBQGqePca+EVj4eBEBt0Bpreb1WKfnZf7J592qr/+jc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.crl rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE89F6747B326E779CB3E94906319A8C0A0C1C81.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ba:fe:1e:52:0b:e9:b9:bb:f2:4b:1a:b9:fc:ef:a8:10:24:76:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE89F6747B326E779CB3E94906319A8C0A0C1C81 Validity Not Before: Nov 3 11:51:16 2025 GMT Not After : Nov 4 14:01:16 2025 GMT Subject: CN=EF6C4E07A8F067897B6F962CB3FE8238DD1E5C7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:01:c9:49:cc:ae:22:4c:40:50:98:2e:0e:82: 9c:75:25:87:54:4a:ea:b7:50:b8:9b:d5:74:f2:0b: a2:d2:94:47:e8:8f:0d:4a:c6:b8:b7:2a:47:82:72: 0f:a4:bd:9d:6f:55:5c:2d:2b:90:ce:11:d1:eb:16: 5c:9f:d5:4c:91:13:c2:86:d6:ef:3f:7b:1e:bf:7b: 2e:35:47:5c:4e:24:a1:80:b3:6d:75:f3:33:86:cf: df:d4:c4:c9:2f:17:d7:b5:e6:61:33:fd:a5:7f:4e: 5d:c7:30:9d:8a:98:48:f0:10:20:e2:b2:da:49:b5: 42:ce:cf:30:da:c0:92:6d:4a:f0:e4:a9:91:6e:eb: c5:e2:45:b4:4f:80:83:cd:65:04:3a:cf:35:df:de: c8:c1:ab:15:0f:6c:5c:91:26:74:bd:f1:36:0e:7e: 8f:31:da:6d:4a:10:1c:65:4b:ea:c7:66:a1:a2:13: 57:8e:84:d2:86:5e:eb:ad:46:6d:71:6a:83:a0:b2: a9:d5:43:b9:ea:14:97:fc:4b:f4:6b:ab:6a:0e:b8: 8e:b3:1a:ce:39:41:65:1c:80:5b:04:21:29:67:df: 33:1b:ea:f7:61:e5:ed:56:eb:ac:eb:80:f6:c9:a6: 66:73:3b:ba:b3:98:66:7e:e7:db:f5:77:59:2e:ed: 46:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6C:4E:07:A8:F0:67:89:7B:6F:96:2C:B3:FE:82:38:DD:1E:5C:7E X509v3 Authority Key Identifier: keyid:BE:89:F6:74:7B:32:6E:77:9C:B3:E9:49:06:31:9A:8C:0A:0C:1C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE89F6747B326E779CB3E94906319A8C0A0C1C81.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/BE89F6747B326E779CB3E94906319A8C0A0C1C81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:9c:0b:f3:d7:b7:af:b8:b1:e3:84:e5:43:43:3f:1f:78:e9: 72:b1:3f:94:dc:99:7e:e3:39:4f:8a:af:8e:41:36:f4:35:69: d1:c4:c8:de:07:8a:58:4d:1d:1b:04:40:d1:1a:55:af:e8:f8: f5:32:82:c5:a3:2f:1b:39:f8:1f:6b:03:e9:43:15:b2:d8:00: 55:b8:5e:51:9e:e4:59:0c:7f:01:64:20:71:c0:ba:df:b4:76: eb:e4:db:73:86:79:47:10:8d:be:ae:94:bd:e9:54:7a:20:94: 88:15:5c:d5:54:9a:1b:89:02:d7:93:ad:62:3a:72:16:13:ba: ba:bf:12:91:50:56:fb:a3:9c:41:16:28:4c:88:27:fb:be:da: f6:33:6e:f3:93:6d:1b:dd:ed:53:66:60:ab:5b:47:1c:74:16: ce:e1:47:d7:af:09:36:06:40:04:d3:40:6a:05:e8:b6:d6:87: 5c:fb:d4:93:0b:68:49:77:d1:ea:d9:3d:15:4b:6e:bd:5c:ff: 8b:34:bd:6f:39:e6:3d:95:da:0c:f6:83:14:9a:8a:34:a7:c1: cf:e9:9f:58:5b:fa:5e:7d:70:70:27:57:59:0d:be:0b:72:f4: 03:ab:f3:8e:f5:4e:61:4d:73:56:e1:e4:41:54:66:5b:59:aa: 7a:1f:f8:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPrr+HlIL6bm78ksaufzvqBAkdrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU4OUY2NzQ3QjMyNkU3NzlDQjNFOTQ5MDYzMTlBOEMw QTBDMUM4MTAeFw0yNTExMDMxMTUxMTZaFw0yNTExMDQxNDAxMTZaMDMxMTAvBgNV BAMTKEVGNkM0RTA3QThGMDY3ODk3QjZGOTYyQ0IzRkU4MjM4REQxRTVDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfAclJzK4iTEBQmC4Ogpx1JYdU Suq3ULib1XTyC6LSlEfojw1Kxri3KkeCcg+kvZ1vVVwtK5DOEdHrFlyf1UyRE8KG 1u8/ex6/ey41R1xOJKGAs2118zOGz9/UxMkvF9e15mEz/aV/Tl3HMJ2KmEjwECDi stpJtULOzzDawJJtSvDkqZFu68XiRbRPgIPNZQQ6zzXf3sjBqxUPbFyRJnS98TYO fo8x2m1KEBxlS+rHZqGiE1eOhNKGXuutRm1xaoOgsqnVQ7nqFJf8S/Rrq2oOuI6z Gs45QWUcgFsEISln3zMb6vdh5e1W66zrgPbJpmZzO7qzmGZ+59v1d1ku7UYpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU72xOB6jwZ4l7b5Yss/6CON0eXH4wHwYDVR0j BBgwFoAUvon2dHsybnecs+lJBjGajAoMHIEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkdVSGRLYnpHVnM2Zm5Fcm5UMzVSOTcyWHRDNjNiaVhNSlEycmg2cUI5 RGgvMC9CRTg5RjY3NDdCMzI2RTc3OUNCM0U5NDkwNjMxOUE4QzBBMEMxQzgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFODlGNjc0N0IzMjZFNzc5 Q0IzRTk0OTA2MzE5QThDMEEwQzFDODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkdVSGRLYnpHVnM2Zm5Fcm5UMzVSOTcyWHRDNjNiaVhNSlEycmg2cUI5RGgvMC9C RTg5RjY3NDdCMzI2RTc3OUNCM0U5NDkwNjMxOUE4QzBBMEMxQzgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWJwL89e3r7ix44TlQ0M/H3jpcrE/lNyZfuM5T4qvjkE29DVp0cTI3geKWE0d GwRA0RpVr+j49TKCxaMvGzn4H2sD6UMVstgAVbheUZ7kWQx/AWQgccC637R26+Tb c4Z5RxCNvq6UvelUeiCUiBVc1VSaG4kC15OtYjpyFhO6ur8SkVBW+6OcQRYoTIgn +77a9jNu85NtG93tU2Zgq1tHHHQWzuFH168JNgZABNNAagXottaHXPvUkwtoSXfR 6tk9FUtuvVz/izS9bznmPZXaDPaDFJqKNKfBz+mfWFv6Xn1wcCdXWQ2+C3L0A6vz jvVOYU1zVuHkQVRmW1mqeh/4GA== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:58 2025 by rpki-client