$ rpki-client -vvf rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.mft File: BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.mft (raw, json) Hash identifier: kTpRrbECratVts/5qZightGgQ1PgeFWj1sXqTBsfCQ8= Subject key identifier: 2B:96:73:70:75:FE:A8:2C:0C:8D:03:D4:7F:5B:31:63:BD:BD:4C:09 Authority key identifier: BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA Certificate issuer: /CN=BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA Certificate serial: 6A8A8ABA1674DBCBE7003191096A618B15F40245 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer Subject info access: rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.mft Manifest number: 0320 Signing time: Thu 18 Sep 2025 13:00:02 +0000 Manifest this update: Thu 18 Sep 2025 12:55:02 +0000 Manifest next update: Fri 19 Sep 2025 13:00:02 +0000 Files and hashes: 1: 323830343a343166633a3a2f33322d3334203d3e20323637343730.roa (hash: H0ZCtmP1Dp+RgpfdGUFTerRGJ+rvMdxQz9SLs6s599s=) 2: BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.crl (hash: 6c/Kx9N97ebo97Gyu8Fa/sLETKpOCtVW1Ru8AJdX/zM=) 3: 3139322e3134312e37322e302f32322d3234203d3e20323637343730.roa (hash: 2nyA1C/3pQsVksAQff9z0tCApVwd24PShi0vQj0HPK4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.crl rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 13:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:8a:8a:ba:16:74:db:cb:e7:00:31:91:09:6a:61:8b:15:f4:02:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA Validity Not Before: Sep 18 12:55:02 2025 GMT Not After : Sep 19 13:00:02 2025 GMT Subject: CN=3082010A0282010100C4B22988ABE0BDAF83887830D4B55588E6595F44208A58285755FB4CD3CBC4B12CD90CD49D217F9BC7E58C0BD72B8910EE77C2A1DB43A4045E0C0067DAA0C154AC9302B3280630831A7F5515205E1F97B3D5FC1DFD5FAA51E38A743D726511A634E1A5DAE94299418E80A977CCECD1CA5C1D89E61A71DACA27D7A650A669ED1C444F54E6657E721F696BBCB9FC75F23BAD901F32076518E032C00CC6CCE7364F96A67CF631560D7CB9EB8543BAB154597B9B79B73B238CFCD8E6E107FF9FB7AEA9D9A94B5A9D575DAA3342625BF0A3D11D2B371AB89AFFC4248650D4B1C13787317AE003773A1025A5ECBE0028094E2958C6E0736F476D81B14574FD5E48BB5B0203010001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b2:29:88:ab:e0:bd:af:83:88:78:30:d4:b5: 55:88:e6:59:5f:44:20:8a:58:28:57:55:fb:4c:d3: cb:c4:b1:2c:d9:0c:d4:9d:21:7f:9b:c7:e5:8c:0b: d7:2b:89:10:ee:77:c2:a1:db:43:a4:04:5e:0c:00: 67:da:a0:c1:54:ac:93:02:b3:28:06:30:83:1a:7f: 55:15:20:5e:1f:97:b3:d5:fc:1d:fd:5f:aa:51:e3: 8a:74:3d:72:65:11:a6:34:e1:a5:da:e9:42:99:41: 8e:80:a9:77:cc:ec:d1:ca:5c:1d:89:e6:1a:71:da: ca:27:d7:a6:50:a6:69:ed:1c:44:4f:54:e6:65:7e: 72:1f:69:6b:bc:b9:fc:75:f2:3b:ad:90:1f:32:07: 65:18:e0:32:c0:0c:c6:cc:e7:36:4f:96:a6:7c:f6: 31:56:0d:7c:b9:eb:85:43:ba:b1:54:59:7b:9b:79: b7:3b:23:8c:fc:d8:e6:e1:07:ff:9f:b7:ae:a9:d9: a9:4b:5a:9d:57:5d:aa:33:42:62:5b:f0:a3:d1:1d: 2b:37:1a:b8:9a:ff:c4:24:86:50:d4:b1:c1:37:87: 31:7a:e0:03:77:3a:10:25:a5:ec:be:00:28:09:4e: 29:58:c6:e0:73:6f:47:6d:81:b1:45:74:fd:5e:48: bb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:96:73:70:75:FE:A8:2C:0C:8D:03:D4:7F:5B:31:63:BD:BD:4C:09 X509v3 Authority Key Identifier: keyid:BF:D5:65:12:C8:58:0D:0E:6D:2F:D0:5F:5D:13:C3:71:4B:45:AA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/34LKUVp6i31q4FRGhAxf7jac9c1dr8HmdGWNewJYUn8n/1/BFD56512C8580D0E6D2FD05F5D13C3714B45AAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:8a:e8:5f:ab:99:1e:7e:a8:c7:67:63:64:7e:04:95:f9:c4: d6:11:90:94:83:0c:5d:cf:ad:bf:6b:24:fb:ad:ee:ab:d5:2e: 5a:3c:27:8b:41:4f:ac:b1:a2:50:27:f5:3a:7e:2a:7a:73:50: 7c:61:72:53:b2:33:8f:bd:3f:5d:b5:46:61:38:5d:98:b1:0c: ff:ed:5d:e1:07:f0:f5:c2:ec:ca:87:10:54:15:30:63:f2:21: f9:eb:76:c5:e2:ea:c5:5b:48:42:0e:6a:0b:73:b6:08:9e:97: 58:79:a2:7a:fa:cc:28:5e:d6:14:71:b0:21:26:1b:09:e8:77: 93:61:2a:c8:c3:89:57:00:e7:98:77:6a:b1:0f:57:64:49:dd: c3:d2:3b:f8:49:05:24:b5:c9:ed:9c:dc:03:48:ad:b5:71:74: b1:33:92:34:79:38:5e:e6:cd:a7:de:a7:ed:8d:d6:4a:00:49: 1a:db:a9:4b:03:1f:bd:b5:a6:74:6c:68:4a:52:36:67:7d:da: 6b:5d:94:c7:d4:a8:3e:a2:fd:d4:97:d3:f0:40:cb:36:98:2a: ca:de:e4:38:d2:ca:76:2b:b8:02:4a:0e:34:ad:43:15:c8:cb: 51:6d:63:73:62:e9:96:6f:ec:b3:4b:18:86:e7:96:02:d9:8c: 1b:e7:c9:43 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUaoqKuhZ028vnADGRCWphixX0AkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENTY1MTJDODU4MEQwRTZEMkZEMDVGNUQxM0MzNzE0 QjQ1QUFFQTAeFw0yNTA5MTgxMjU1MDJaFw0yNTA5MTkxMzAwMDJaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzRCMjI5ODhBQkUwQkRBRjgz ODg3ODMwRDRCNTU1ODhFNjU5NUY0NDIwOEE1ODI4NTc1NUZCNENEM0NCQzRCMTJD RDkwQ0Q0OUQyMTdGOUJDN0U1OEMwQkQ3MkI4OTEwRUU3N0MyQTFEQjQzQTQwNDVF MEMwMDY3REFBMEMxNTRBQzkzMDJCMzI4MDYzMDgzMUE3RjU1MTUyMDVFMUY5N0Iz RDVGQzFERkQ1RkFBNTFFMzhBNzQzRDcyNjUxMUE2MzRFMUE1REFFOTQyOTk0MThF ODBBOTc3Q0NFQ0QxQ0E1QzFEODlFNjFBNzFEQUNBMjdEN0E2NTBBNjY5RUQxQzQ0 NEY1NEU2NjU3RTcyMUY2OTZCQkNCOUZDNzVGMjNCQUQ5MDFGMzIwNzY1MThFMDMy QzAwQ0M2Q0NFNzM2NEY5NkE2N0NGNjMxNTYwRDdDQjlFQjg1NDNCQUIxNTQ1OTdC OUI3OUI3M0IyMzhDRkNEOEU2RTEwN0ZGOUZCN0FFQTlEOUE5NEI1QTlENTc1REFB MzM0MjYyNUJGMEEzRDExRDJCMzcxQUI4OUFGRkM0MjQ4NjUwRDRCMUMxMzc4NzMx N0FFMDAzNzczQTEwMjVBNUVDQkUwMDI4MDk0RTI5NThDNkUwNzM2RjQ3NkQ4MUIx NDU3NEZENUU0OEJCNUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAxLIpiKvgva+DiHgw1LVViOZZX0QgilgoV1X7TNPLxLEs2QzUnSF/ m8fljAvXK4kQ7nfCodtDpAReDABn2qDBVKyTArMoBjCDGn9VFSBeH5ez1fwd/V+q UeOKdD1yZRGmNOGl2ulCmUGOgKl3zOzRylwdieYacdrKJ9emUKZp7RxET1TmZX5y H2lrvLn8dfI7rZAfMgdlGOAywAzGzOc2T5amfPYxVg18ueuFQ7qxVFl7m3m3OyOM /Njm4Qf/n7euqdmpS1qdV12qM0JiW/Cj0R0rNxq4mv/EJIZQ1LHBN4cxeuADdzoQ JaXsvgAoCU4pWMbgc29HbYGxRXT9Xki7WwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FCuWc3B1/qgsDI0D1H9bMWO9vUwJMB8GA1UdIwQYMBaAFL/VZRLIWA0ObS/QX10T w3FLRarqMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzM0TEtVVnA2aTMxcTRG UkdoQXhmN2phYzljMWRyOEhtZEdXTmV3SllVbjhuLzEvQkZENTY1MTJDODU4MEQw RTZEMkZEMDVGNUQxM0MzNzE0QjQ1QUFFQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9CRkQ1NjUxMkM4NTgwRDBFNkQyRkQwNUY1RDEzQzM3MTRCNDVB QUVBLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzM0TEtVVnA2aTMxcTRGUkdoQXhm N2phYzljMWRyOEhtZEdXTmV3SllVbjhuLzEvQkZENTY1MTJDODU4MEQwRTZEMkZE MDVGNUQxM0MzNzE0QjQ1QUFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACOK6F+rmR5+qMdnY2R+BJX5 xNYRkJSDDF3Prb9rJPut7qvVLlo8J4tBT6yxolAn9Tp+KnpzUHxhclOyM4+9P121 RmE4XZixDP/tXeEH8PXC7MqHEFQVMGPyIfnrdsXi6sVbSEIOagtztgiel1h5onr6 zChe1hRxsCEmGwnod5NhKsjDiVcA55h3arEPV2RJ3cPSO/hJBSS1ye2c3ANIrbVx dLEzkjR5OF7mzafep+2N1koASRrbqUsDH721pnRsaEpSNmd92mtdlMfUqD6i/dSX 0/BAyzaYKsre5DjSynYruAJKDjStQxXIy1FtY3Ni6ZZv7LNLGIbnlgLZjBvnyUM= -----END CERTIFICATE-----Generated at Fri Sep 19 00:22:56 2025 by rpki-client