$ rpki-client -vvf rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft File: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft (raw, json) Hash identifier: KH4bgQ39zxs+XSKwfs9/e6zYELJ2ItwPXmOI1qU4RYg= Subject key identifier: B2:18:B9:6E:56:4A:02:66:70:A0:A1:91:1E:1C:57:2F:2A:2C:D0:79 Authority key identifier: BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4 Certificate issuer: /CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4 Certificate serial: 7689A38D39B39AF325E9CEAA79686FE3FA7195E4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer Subject info access: rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft Manifest number: 02A8 Signing time: Wed 17 Sep 2025 22:14:21 +0000 Manifest this update: Wed 17 Sep 2025 22:09:21 +0000 Manifest next update: Thu 18 Sep 2025 23:08:21 +0000 Files and hashes: 1: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl (hash: V0+T2pjfy+KIvZlBYP+XXl9z8u9prErx+n+uB3fa7X8=) 2: 3138362e3139352e302e302f32302d3234203d3e20323632373334.roa (hash: DhRxrtfQjT4NB8Bt8sfdP4LqhknKF3f3iI3zG7ssbkg=) 3: 323830343a353738303a3a2f33322d3438203d3e20323632373334.roa (hash: 6PmjmTg0qFj+Vpl+t8ICe23yuGtZx6ZXcO49cR71Yp8=) 4: 3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa (hash: viidz0SzCgYo+ia6nn8hDFdjIUuWSnTz3zW/AEiDL+c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 18 Sep 2025 23:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:89:a3:8d:39:b3:9a:f3:25:e9:ce:aa:79:68:6f:e3:fa:71:95:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4 Validity Not Before: Sep 17 22:09:21 2025 GMT Not After : Sep 18 23:08:21 2025 GMT Subject: CN=B218B96E564A026670A0A1911E1C572F2A2CD079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b2:0d:d4:93:7c:ff:d7:ba:d5:d5:89:fe:8c: 46:c4:4c:e5:27:bf:37:ed:b7:09:5d:a5:49:d6:db: e7:c5:63:6f:ae:57:b9:a3:81:2e:9f:60:74:04:d7: df:0c:3c:6e:c5:be:14:d7:bc:7a:54:f7:e1:ee:50: b8:c6:a1:1c:c8:da:45:2d:f5:d2:e9:5c:7d:3e:84: bd:37:16:89:26:7a:d3:a2:b5:d6:c7:5d:95:0a:bd: 07:2b:9e:57:a8:dd:51:0d:62:0b:a7:c6:ec:92:82: 87:b2:f5:9c:ee:56:38:6b:5f:4f:01:0b:74:24:da: e7:a7:79:2f:1e:22:7c:56:26:2b:5d:c7:91:6a:90: bb:82:4e:52:78:85:5d:b9:2a:15:a6:97:9d:67:72: 99:dc:7d:79:4f:2c:d2:f5:60:4a:d0:e4:a1:10:6e: bb:01:fe:9a:7e:c5:8d:bd:3e:b5:08:85:a2:5e:3c: 26:35:b8:c3:f1:0f:95:77:8d:f0:8b:51:d8:e9:b0: 28:e2:ae:d9:43:e7:ca:e0:40:af:71:03:b2:72:aa: 86:37:54:1a:6b:41:2c:13:27:f1:9b:d1:bc:68:66: ce:5f:f2:cc:a6:61:8d:3b:1f:d5:c4:dd:e7:c7:e8: 76:e6:69:8b:c6:80:ef:cc:0e:13:85:54:65:61:62: 3e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:18:B9:6E:56:4A:02:66:70:A0:A1:91:1E:1C:57:2F:2A:2C:D0:79 X509v3 Authority Key Identifier: keyid:BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c4:fb:5e:7b:23:f6:95:e9:46:16:78:61:0d:e8:59:e8:9d: be:37:c7:65:d5:18:11:58:e9:72:7d:11:ad:f9:a7:d5:b4:e8: 8b:33:4b:f3:ed:72:f2:56:cb:b5:a9:38:30:08:69:79:3e:91: 08:eb:52:31:25:91:27:22:a5:9a:b8:bc:15:af:ab:a5:96:23: 86:24:1e:08:81:ac:a8:d2:27:27:f8:6d:f0:4e:24:f8:06:d5: c6:fa:ca:c4:20:bd:b9:e7:28:08:23:48:9b:01:ce:e5:59:cf: 7d:3c:2c:af:1d:89:50:7a:ad:de:a3:e8:27:fc:23:bd:c3:01: 9c:b3:26:3b:a3:17:fd:9b:1f:99:78:b5:70:52:31:a8:dc:0c: ca:e0:16:22:c3:44:21:48:25:2e:c3:74:23:0d:17:b2:99:29: c7:a9:69:50:3a:ef:c0:4e:e5:6a:3f:ce:67:ce:b4:ab:2b:62: 7e:ea:37:9a:e9:84:f7:64:95:bb:49:3a:05:8d:fd:1e:ad:72: 98:f3:41:23:cb:16:86:f6:bf:8c:61:01:e1:4b:aa:0f:67:55: c5:de:0d:25:03:24:fb:0a:c5:bf:27:62:a9:05:e4:39:2a:d8: 3a:ca:0b:b9:38:90:5e:3b:5f:ed:a3:3f:50:2e:ba:e4:b3:70: 41:5e:9c:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdomjjTmzmvMl6c6qeWhv4/pxleQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRFQTNFMTRDMzJGMjlBQzgyRURBMTVCMkQ0RUQxQUQy NTA0RkZBNDAeFw0yNTA5MTcyMjA5MjFaFw0yNTA5MTgyMzA4MjFaMDMxMTAvBgNV BAMTKEIyMThCOTZFNTY0QTAyNjY3MEEwQTE5MTFFMUM1NzJGMkEyQ0QwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7sg3Uk3z/17rV1Yn+jEbETOUn vzfttwldpUnW2+fFY2+uV7mjgS6fYHQE198MPG7FvhTXvHpU9+HuULjGoRzI2kUt 9dLpXH0+hL03FokmetOitdbHXZUKvQcrnleo3VENYgunxuySgoey9ZzuVjhrX08B C3Qk2ueneS8eInxWJitdx5FqkLuCTlJ4hV25KhWml51ncpncfXlPLNL1YErQ5KEQ brsB/pp+xY29PrUIhaJePCY1uMPxD5V3jfCLUdjpsCjirtlD58rgQK9xA7JyqoY3 VBprQSwTJ/Gb0bxoZs5f8symYY07H9XE3efH6HbmaYvGgO/MDhOFVGVhYj4XAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUshi5blZKAmZwoKGRHhxXLyos0HkwHwYDVR0j BBgwFoAUveo+FMMvKayC7aFbLU7RrSUE/6QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1 UUEvMC9CREVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERUEzRTE0QzMyRjI5QUM4 MkVEQTE1QjJENEVEMUFEMjUwNEZGQTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1UUEvMC9C REVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAMT7Xnsj9pXpRhZ4YQ3oWeidvjfHZdUYEVjpcn0Rrfmn1bToizNL8+1y8lbL tak4MAhpeT6RCOtSMSWRJyKlmri8Fa+rpZYjhiQeCIGsqNInJ/ht8E4k+AbVxvrK xCC9uecoCCNImwHO5VnPfTwsrx2JUHqt3qPoJ/wjvcMBnLMmO6MX/ZsfmXi1cFIx qNwMyuAWIsNEIUglLsN0Iw0Xspkpx6lpUDrvwE7laj/OZ860qytifuo3mumE92SV u0k6BY39Hq1ymPNBI8sWhva/jGEB4UuqD2dVxd4NJQMk+wrFvydiqQXkOSrYOsoL uTiQXjtf7aM/UC665LNwQV6c1A== -----END CERTIFICATE-----Generated at Thu Sep 18 08:54:47 2025 by rpki-client