$ rpki-client -vvf rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft File: BCF333E032A5E62EC142237F97628D0F131FE30A.mft (raw, json) Hash identifier: 5bke0nWJrYrXB5UdiujUdG3wUWQ76ji347EEZtcpERo= Subject key identifier: A7:F2:72:5C:C2:72:E8:0F:54:32:40:EC:BF:6E:01:0B:97:F4:72:C1 Authority key identifier: BC:F3:33:E0:32:A5:E6:2E:C1:42:23:7F:97:62:8D:0F:13:1F:E3:0A Certificate issuer: /CN=BCF333E032A5E62EC142237F97628D0F131FE30A Certificate serial: 0ECD7B34B0B86255B51BE3304D7B8E83536E874C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF333E032A5E62EC142237F97628D0F131FE30A.cer Subject info access: rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft Manifest number: 2F Signing time: Mon 03 Nov 2025 11:29:35 +0000 Manifest this update: Mon 03 Nov 2025 11:24:35 +0000 Manifest next update: Tue 04 Nov 2025 12:29:35 +0000 Files and hashes: 1: BCF333E032A5E62EC142237F97628D0F131FE30A.crl (hash: lmNcbsqA75CxKpE1GP2rSmULK+qjHV8yPRpfrt5rxpc=) 2: 323830343a326364383a3a2f33322d313238203d3e20323635323437.roa (hash: 2rb73WMTlVULrRQzvfpNjeHdm4DJYAvni4A0ZCBlOH8=) 3: 3136372e3234392e3132342e302f32322d3332203d3e20323635323437.roa (hash: TxYNN5FtYlFE2BefvjhjkJb082YvcmFiVZKFHbUR/qY=) 4: 3137302e3233332e38382e302f32322d3332203d3e20323635323437.roa (hash: tD8bzSd/td4gAgsNMdvjp1tJllIejadsCZsau+IIXHE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.crl rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF333E032A5E62EC142237F97628D0F131FE30A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cd:7b:34:b0:b8:62:55:b5:1b:e3:30:4d:7b:8e:83:53:6e:87:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCF333E032A5E62EC142237F97628D0F131FE30A Validity Not Before: Nov 3 11:24:35 2025 GMT Not After : Nov 4 12:29:35 2025 GMT Subject: CN=A7F2725CC272E80F543240ECBF6E010B97F472C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:4a:6a:7d:74:0c:86:97:06:ea:a7:4d:d6: 3c:b6:e9:77:7e:09:2b:eb:f5:b6:5b:19:b7:80:a2: 38:19:2c:0c:5d:cc:a5:03:57:e0:18:0d:04:c5:24: d0:95:e9:cf:9a:f6:69:7c:fb:00:f3:f0:7f:91:95: fc:1e:c6:75:7e:0f:de:e6:01:c1:e0:85:32:bf:10: ff:a8:6e:dc:0f:6a:91:33:40:93:c9:82:45:75:1f: 43:06:0b:b3:cf:6e:2c:d3:7c:10:26:2d:54:db:f2: c5:d2:6e:f6:a5:0d:2f:e9:57:f4:fa:9b:e6:5e:54: 26:d0:fb:a4:ff:77:5d:a4:a3:2c:8d:ea:fe:ec:16: 69:ce:ff:6c:84:e8:23:70:9f:d9:7a:30:98:e7:02: 6c:8a:c4:57:80:e7:0f:c9:2e:fa:ae:1c:a0:57:88: 35:9e:22:e3:83:0a:b5:46:d8:78:f7:20:49:e9:d2: f0:3e:20:53:3b:b1:2d:05:21:2a:23:ef:dc:c2:a1: 33:2d:e4:26:c5:c6:4c:3d:5e:d7:62:16:63:c6:b2: d1:53:e8:83:51:0c:bc:c7:78:26:b9:88:e4:f3:4c: f0:d1:00:95:aa:a0:5a:9b:d9:08:29:02:b2:1e:a0: fb:63:b4:d4:38:81:5e:7e:c1:5d:d4:b2:82:0b:03: 8f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F2:72:5C:C2:72:E8:0F:54:32:40:EC:BF:6E:01:0B:97:F4:72:C1 X509v3 Authority Key Identifier: keyid:BC:F3:33:E0:32:A5:E6:2E:C1:42:23:7F:97:62:8D:0F:13:1F:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF333E032A5E62EC142237F97628D0F131FE30A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UhG3YmN2VPLZ83jEEha92uNcVDfCiWmxh1CUEfMwJov/0/BCF333E032A5E62EC142237F97628D0F131FE30A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f2:82:d1:7c:dd:a8:58:9a:e9:22:3c:0c:66:d0:01:98:bd: 00:5f:bd:65:51:ee:b9:9f:69:28:a9:2a:bc:16:a4:60:ea:12: eb:2d:22:05:36:e1:a6:be:59:c0:bb:84:8f:63:af:a9:28:4e: a4:38:37:97:d3:50:ff:bf:e5:7a:c1:9d:8a:77:95:f8:e6:db: 38:2e:09:65:c5:29:e9:11:54:7f:77:46:52:fd:02:df:e7:8f: 8a:93:46:32:c1:e0:48:07:03:0c:0d:24:f0:0b:ca:1e:d6:24: a1:d0:be:d7:df:d5:20:50:4a:59:6c:a7:6c:a2:d0:b2:b2:af: 8a:62:51:1f:29:68:e8:6c:21:a3:4d:2a:20:c2:89:c5:d3:d8: 02:25:0d:d3:8d:79:59:40:85:4a:36:5f:d7:8c:e2:fb:2d:8e: 8c:e7:a1:9d:10:1f:d0:e7:7e:ba:0e:4c:39:4d:1e:91:46:4c: 30:ea:23:90:26:d5:6f:6c:33:aa:18:38:ac:3f:65:2e:ee:13: bd:ce:99:6f:d6:bf:fd:3f:94:53:0d:8e:79:71:f9:70:9a:c1: 18:96:c2:b0:45:53:da:f2:db:d6:4f:e9:f4:3e:28:8f:f2:7f: a4:a1:56:bc:92:23:64:2b:c2:97:0e:1b:0c:c8:b7:cc:55:57: 21:c7:af:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDs17NLC4YlW1G+MwTXuOg1Nuh0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNGMzMzRTAzMkE1RTYyRUMxNDIyMzdGOTc2MjhEMEYx MzFGRTMwQTAeFw0yNTExMDMxMTI0MzVaFw0yNTExMDQxMjI5MzVaMDMxMTAvBgNV BAMTKEE3RjI3MjVDQzI3MkU4MEY1NDMyNDBFQ0JGNkUwMTBCOTdGNDcyQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBQ0pqfXQMhpcG6qdN1jy26Xd+ CSvr9bZbGbeAojgZLAxdzKUDV+AYDQTFJNCV6c+a9ml8+wDz8H+RlfwexnV+D97m AcHghTK/EP+obtwPapEzQJPJgkV1H0MGC7PPbizTfBAmLVTb8sXSbvalDS/pV/T6 m+ZeVCbQ+6T/d12koyyN6v7sFmnO/2yE6CNwn9l6MJjnAmyKxFeA5w/JLvquHKBX iDWeIuODCrVG2Hj3IEnp0vA+IFM7sS0FISoj79zCoTMt5CbFxkw9XtdiFmPGstFT 6INRDLzHeCa5iOTzTPDRAJWqoFqb2QgpArIeoPtjtNQ4gV5+wV3UsoILA49rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUp/JyXMJy6A9UMkDsv24BC5f0csEwHwYDVR0j BBgwFoAUvPMz4DKl5i7BQiN/l2KNDxMf4wowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1VoRzNZbU4yVlBMWjgzakVFaGE5MnVOY1ZEZkNpV214aDFDVUVmTXdK b3YvMC9CQ0YzMzNFMDMyQTVFNjJFQzE0MjIzN0Y5NzYyOEQwRjEzMUZFMzBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDRjMzM0UwMzJBNUU2MkVD MTQyMjM3Rjk3NjI4RDBGMTMxRkUzMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1VoRzNZbU4yVlBMWjgzakVFaGE5MnVOY1ZEZkNpV214aDFDVUVmTXdKb3YvMC9C Q0YzMzNFMDMyQTVFNjJFQzE0MjIzN0Y5NzYyOEQwRjEzMUZFMzBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALfKC0XzdqFia6SI8DGbQAZi9AF+9ZVHuuZ9pKKkqvBakYOoS6y0iBTbhpr5Z wLuEj2OvqShOpDg3l9NQ/7/lesGdineV+ObbOC4JZcUp6RFUf3dGUv0C3+ePipNG MsHgSAcDDA0k8AvKHtYkodC+19/VIFBKWWynbKLQsrKvimJRHylo6Gwho00qIMKJ xdPYAiUN0415WUCFSjZf14zi+y2OjOehnRAf0Od+ug5MOU0ekUZMMOojkCbVb2wz qhg4rD9lLu4Tvc6Zb9a//T+UUw2OeXH5cJrBGJbCsEVT2vLb1k/p9D4oj/J/pKFW vJIjZCvClw4bDMi3zFVXIcevdQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:01:15 2025 by rpki-client