$ rpki-client -vvf rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.mft File: B838C46840DE2B5CF4614820A0D12EFEF2960C8D.mft (raw, json) Hash identifier: sgWSBXs5LOwT2YusPiqo+Zw6wrE6EiaNqMDi40tEsa0= Subject key identifier: 38:28:CF:24:3A:68:00:7E:CA:A2:07:E7:60:5D:BB:23:4E:1A:DF:A6 Authority key identifier: B8:38:C4:68:40:DE:2B:5C:F4:61:48:20:A0:D1:2E:FE:F2:96:0C:8D Certificate issuer: /CN=B838C46840DE2B5CF4614820A0D12EFEF2960C8D Certificate serial: 4FB763AD7FC52D230BDD739A4AD79C14BE130134 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.cer Subject info access: rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.mft Manifest number: BC Signing time: Sun 02 Nov 2025 21:56:05 +0000 Manifest this update: Sun 02 Nov 2025 21:51:05 +0000 Manifest next update: Mon 03 Nov 2025 23:29:05 +0000 Files and hashes: 1: B838C46840DE2B5CF4614820A0D12EFEF2960C8D.crl (hash: k6Uy4Nn+wI4NEqRli3j+/ipNNwZFRoie4wgRvwtybRI=) 2: 323830343a316162633a3a2f33322d3438203d3e203631383832.roa (hash: N9ruoGLMhy36IxoZsmaBHKvteHLr0b7Ia/kj800MKVY=) 3: 3133312e302e34382e302f32322d3234203d3e203631383832.roa (hash: iC+mP1s4X7tJ5HnSNAK4a84YI8CW5Z/ggvAjPtN6k2Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.crl rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 23:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b7:63:ad:7f:c5:2d:23:0b:dd:73:9a:4a:d7:9c:14:be:13:01:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B838C46840DE2B5CF4614820A0D12EFEF2960C8D Validity Not Before: Nov 2 21:51:05 2025 GMT Not After : Nov 3 23:29:05 2025 GMT Subject: CN=3828CF243A68007ECAA207E7605DBB234E1ADFA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:be:85:14:4b:9f:22:90:bc:a6:45:56:99:fb: e9:2c:c4:d9:77:7d:9a:8d:74:e5:d8:74:d9:fd:ba: 47:45:01:1d:71:92:87:69:74:4c:0b:a2:50:70:33: f0:e4:d9:11:04:e2:96:59:0b:60:f6:9b:cb:77:9b: 94:55:8f:b9:f2:03:1e:26:a7:bf:a8:db:74:c2:de: c3:b5:7c:fd:27:bd:e5:bf:b5:5c:e6:d4:7e:37:7e: e8:cd:f0:a1:a4:4e:89:5f:3c:8c:93:ad:f9:cb:bd: 09:fc:d4:71:80:c8:57:0b:65:37:da:64:5b:49:d8: 6f:a5:dd:b6:49:9f:11:fd:88:ec:90:93:62:4f:09: 1f:5e:9f:69:99:84:10:82:e3:a3:45:05:ac:34:91: 9b:e5:42:0d:4c:90:d8:de:2b:bb:3b:36:23:b0:ab: 4d:28:1b:a8:57:6b:c9:c1:4a:5a:31:88:df:f9:52: 44:80:01:d9:ae:7f:41:93:41:61:85:5f:dd:e8:ff: b1:9c:c6:08:23:25:86:55:a4:da:c6:67:0d:d5:e8: eb:88:8d:4b:01:a7:13:c2:a7:13:fa:70:fb:9a:89: 66:b5:df:0e:3c:13:cc:23:c1:30:22:87:25:4f:72: 2c:e3:32:0b:73:52:2b:1c:8a:db:95:c0:5e:7f:66: 96:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:28:CF:24:3A:68:00:7E:CA:A2:07:E7:60:5D:BB:23:4E:1A:DF:A6 X509v3 Authority Key Identifier: keyid:B8:38:C4:68:40:DE:2B:5C:F4:61:48:20:A0:D1:2E:FE:F2:96:0C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d8:4d:00:01:45:b9:1b:fb:8a:67:af:0d:f6:f9:5e:06:78: 8e:29:6e:59:64:20:9c:43:e0:5a:66:dc:bf:25:88:c8:69:d0: 2d:29:05:45:8f:41:b3:3c:2c:80:03:66:13:b4:a3:4a:d7:46: ba:2b:1c:38:55:15:71:85:be:eb:63:87:a8:b6:e5:77:d2:81: 3e:be:a8:a8:01:fe:a0:a0:2c:c0:df:57:ff:89:f6:85:2b:3c: 4a:42:1a:c5:6e:91:f4:c3:51:1d:c3:06:c0:06:a7:c4:89:28: d1:91:92:3f:dd:e8:0d:f0:2e:ca:67:86:27:01:39:8c:40:45: 3e:30:2e:dd:bc:2c:cb:08:99:8f:ec:d0:10:d2:47:dc:0a:5a: 0b:b1:f6:2e:37:d1:9a:b8:cb:82:0f:3d:de:bb:19:91:3d:4f: 29:ec:ed:86:97:50:fc:ca:2c:1b:b2:59:d7:45:fe:48:35:1d: c9:ad:19:4e:00:ea:c7:1e:1d:55:e0:05:0d:88:bd:32:eb:9c: 71:c2:01:4d:58:53:95:57:14:6d:8c:9a:bb:68:80:18:ad:a9: 93:32:2e:91:fc:70:17:8f:80:64:26:01:66:14:a8:02:c0:c6: 50:38:5c:1e:d4:02:5b:6a:56:6c:5d:52:8f:bb:55:37:9e:9f: e7:62:b2:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT7djrX/FLSML3XOaStecFL4TATQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgzOEM0Njg0MERFMkI1Q0Y0NjE0ODIwQTBEMTJFRkVG Mjk2MEM4RDAeFw0yNTExMDIyMTUxMDVaFw0yNTExMDMyMzI5MDVaMDMxMTAvBgNV BAMTKDM4MjhDRjI0M0E2ODAwN0VDQUEyMDdFNzYwNURCQjIzNEUxQURGQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOvoUUS58ikLymRVaZ++ksxNl3 fZqNdOXYdNn9ukdFAR1xkodpdEwLolBwM/Dk2REE4pZZC2D2m8t3m5RVj7nyAx4m p7+o23TC3sO1fP0nveW/tVzm1H43fujN8KGkTolfPIyTrfnLvQn81HGAyFcLZTfa ZFtJ2G+l3bZJnxH9iOyQk2JPCR9en2mZhBCC46NFBaw0kZvlQg1MkNjeK7s7NiOw q00oG6hXa8nBSloxiN/5UkSAAdmuf0GTQWGFX93o/7GcxggjJYZVpNrGZw3V6OuI jUsBpxPCpxP6cPuaiWa13w48E8wjwTAihyVPcizjMgtzUiscituVwF5/ZpYlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOCjPJDpoAH7KogfnYF27I04a36YwHwYDVR0j BBgwFoAUuDjEaEDeK1z0YUggoNEu/vKWDI0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnpUSHBFWWE0eVJpMWZSTnFMekNUTG9GQ1RvNDRlUXdYU3JZTVBLQXY0 dUQvMC9CODM4QzQ2ODQwREUyQjVDRjQ2MTQ4MjBBMEQxMkVGRUYyOTYwQzhELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4MzhDNDY4NDBERTJCNUNG NDYxNDgyMEEwRDEyRUZFRjI5NjBDOEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnpUSHBFWWE0eVJpMWZSTnFMekNUTG9GQ1RvNDRlUXdYU3JZTVBLQXY0dUQvMC9C ODM4QzQ2ODQwREUyQjVDRjQ2MTQ4MjBBMEQxMkVGRUYyOTYwQzhELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf9hNAAFFuRv7imevDfb5XgZ4jiluWWQgnEPgWmbcvyWIyGnQLSkFRY9Bszws gANmE7SjStdGuiscOFUVcYW+62OHqLbld9KBPr6oqAH+oKAswN9X/4n2hSs8SkIa xW6R9MNRHcMGwAanxIko0ZGSP93oDfAuymeGJwE5jEBFPjAu3bwsywiZj+zQENJH 3ApaC7H2LjfRmrjLgg893rsZkT1PKezthpdQ/MosG7JZ10X+SDUdya0ZTgDqxx4d VeAFDYi9MuucccIBTVhTlVcUbYyau2iAGK2pkzIukfxwF4+AZCYBZhSoAsDGUDhc HtQCW2pWbF1Sj7tVN56f52KyQg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:25 2025 by rpki-client