$ rpki-client -vvf rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft File: BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft (raw, json) Hash identifier: eOi+qdHFX3cfr25G+yrxWXiDqborp7TXZ5zTs8TOYTU= Subject key identifier: 2D:0B:60:FC:36:98:EE:24:7C:B2:90:84:4F:80:BC:2F:C7:86:3C:47 Authority key identifier: BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25 Certificate issuer: /CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25 Certificate serial: 67D0CBC152F0EF1D81ED2730911993782A487A8F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer Subject info access: rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft Manifest number: 0303 Signing time: Sun 02 Nov 2025 23:59:53 +0000 Manifest this update: Sun 02 Nov 2025 23:54:53 +0000 Manifest next update: Tue 04 Nov 2025 00:23:53 +0000 Files and hashes: 1: 34352e3136352e3136362e302f32332d3332203d3e20323638363833.roa (hash: 5bSUPkODUWs9/kJhkVx3i4fO1qFGfYEB0H4MohPcXH8=) 2: 34352e3136352e3136342e302f32332d3332203d3e20323638363833.roa (hash: SFgnoC9b6XsOBWOxtYvSuXC8DcOSjBAvZ5UdN6KIgQ0=) 3: 323830343a353530303a3a2f33342d313238203d3e20323638363833.roa (hash: CY1cgckh5LfihHbyiE5qbTbYicOGwA3cdqSQfEjeJok=) 4: BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl (hash: ncpqXP6B+rGjSOK5YOzL9rTn6oY3rtTn0Daksd8ZDsY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 00:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d0:cb:c1:52:f0:ef:1d:81:ed:27:30:91:19:93:78:2a:48:7a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25 Validity Not Before: Nov 2 23:54:53 2025 GMT Not After : Nov 4 00:23:53 2025 GMT Subject: CN=2D0B60FC3698EE247CB290844F80BC2FC7863C47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b7:09:55:08:7a:9c:02:11:fb:4c:be:99:7d: d9:f9:c2:26:5b:3e:62:2d:df:b3:c7:ac:b3:2f:ba: d1:e0:4a:cf:98:b2:c9:56:c1:1e:64:cc:6c:2c:c0: f8:57:81:cf:25:23:91:9c:6f:35:58:e4:68:bc:4e: 19:83:2c:b9:b6:c1:46:14:01:97:0c:b9:04:7f:db: be:e2:c7:fa:02:94:fc:ec:b0:ae:e4:5a:20:3b:04: 8e:3c:c7:ba:b1:9f:38:c5:7c:a3:b8:a2:67:6a:3e: 52:62:5a:9b:40:77:03:ed:d4:01:0f:37:dd:3a:02: 3f:99:c3:fa:b3:7e:3f:aa:1c:76:b1:c1:3a:a7:66: 14:3d:43:9e:c1:78:49:17:5b:fc:bf:b1:cd:44:e8: ee:2a:c3:ea:01:be:9e:51:06:9f:c6:01:57:8e:71: 0c:6c:db:4b:5c:43:56:c0:e0:41:98:f2:9d:a4:43: 67:97:51:9c:79:6e:06:50:72:9d:b3:61:e4:6b:3e: 63:8a:c6:19:03:72:61:ab:62:21:41:cb:5c:85:86: c2:13:e7:0a:40:83:4a:3a:3b:77:d5:a4:8c:b3:ef: 16:3d:ca:0d:40:ab:1d:82:01:37:7b:93:c1:c4:ac: 80:6d:2f:b2:28:f4:61:1d:fa:19:67:5b:22:b3:50: bd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0B:60:FC:36:98:EE:24:7C:B2:90:84:4F:80:BC:2F:C7:86:3C:47 X509v3 Authority Key Identifier: keyid:BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:5b:1f:d1:93:87:e8:f2:ea:b9:47:94:88:3a:a1:cf:a4:9e: 36:c8:3f:6d:09:05:d0:47:f7:f6:00:5b:da:b0:e7:e3:a5:07: 48:b1:02:59:f4:0f:93:01:05:47:92:4a:8f:b8:d9:e5:9f:97: fd:b2:d2:62:6b:17:88:92:e9:99:0d:7d:fe:f5:eb:f4:73:f7: 51:71:84:05:60:61:9b:eb:a8:4b:b8:29:f6:7a:c9:51:40:df: 9e:02:03:6c:a7:37:e6:18:2e:5f:42:c4:d0:a8:23:e4:b6:e6: e6:b8:12:6c:81:93:39:06:d4:c1:d3:9c:ec:72:95:da:8c:9c: 01:4c:ce:a3:da:47:a7:85:94:d5:e6:79:a4:9c:04:93:0e:6d: 6f:04:3d:08:d7:9c:58:8a:6f:62:47:8a:61:df:54:c3:18:04: 6d:5f:f6:8e:f8:e7:c1:1f:19:44:1e:89:39:44:c4:6e:f4:52: 7e:d7:c8:f0:6a:fd:57:0d:54:19:77:89:e0:cb:ef:47:98:a9: cd:18:76:62:99:f8:68:29:6d:f9:98:26:d6:bb:70:ea:79:c8: 6e:e8:66:3f:b0:5f:b0:15:1b:68:ee:11:67:ef:9c:1c:19:b1: 8d:f5:ad:be:87:9f:f4:cb:6c:17:8f:83:23:7b:2d:43:91:4c: c6:58:73:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ9DLwVLw7x2B7ScwkRmTeCpIeo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU5MTkxRjIyMkQzNkZGN0VEOTQwQTJCNUU0OTFFMkE4 MDIxREEyNTAeFw0yNTExMDIyMzU0NTNaFw0yNTExMDQwMDIzNTNaMDMxMTAvBgNV BAMTKDJEMEI2MEZDMzY5OEVFMjQ3Q0IyOTA4NDRGODBCQzJGQzc4NjNDNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDetwlVCHqcAhH7TL6Zfdn5wiZb PmIt37PHrLMvutHgSs+YsslWwR5kzGwswPhXgc8lI5GcbzVY5Gi8ThmDLLm2wUYU AZcMuQR/277ix/oClPzssK7kWiA7BI48x7qxnzjFfKO4omdqPlJiWptAdwPt1AEP N906Aj+Zw/qzfj+qHHaxwTqnZhQ9Q57BeEkXW/y/sc1E6O4qw+oBvp5RBp/GAVeO cQxs20tcQ1bA4EGY8p2kQ2eXUZx5bgZQcp2zYeRrPmOKxhkDcmGrYiFBy1yFhsIT 5wpAg0o6O3fVpIyz7xY9yg1Aqx2CATd7k8HErIBtL7Io9GEd+hlnWyKzUL2dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULQtg/DaY7iR8spCET4C8L8eGPEcwHwYDVR0j BBgwFoAUvpGR8iLTb/ftlAorXkkeKoAh2iUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1lMRXd3c0Q4UXF3ZkxUaXN3UXFlZHZ2TVJTeWVyVlpyY0JkS1dCd0t2 eGsvMS9CRTkxOTFGMjIyRDM2RkY3RUQ5NDBBMkI1RTQ5MUUyQTgwMjFEQTI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFOTE5MUYyMjJEMzZGRjdF RDk0MEEyQjVFNDkxRTJBODAyMURBMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1lMRXd3c0Q4UXF3ZkxUaXN3UXFlZHZ2TVJTeWVyVlpyY0JkS1dCd0t2eGsvMS9C RTkxOTFGMjIyRDM2RkY3RUQ5NDBBMkI1RTQ5MUUyQTgwMjFEQTI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiVsf0ZOH6PLquUeUiDqhz6SeNsg/bQkF0Ef39gBb2rDn46UHSLECWfQPkwEF R5JKj7jZ5Z+X/bLSYmsXiJLpmQ19/vXr9HP3UXGEBWBhm+uoS7gp9nrJUUDfngID bKc35hguX0LE0Kgj5Lbm5rgSbIGTOQbUwdOc7HKV2oycAUzOo9pHp4WU1eZ5pJwE kw5tbwQ9CNecWIpvYkeKYd9UwxgEbV/2jvjnwR8ZRB6JOUTEbvRSftfI8Gr9Vw1U GXeJ4MvvR5ipzRh2Ypn4aClt+Zgm1rtw6nnIbuhmP7BfsBUbaO4RZ++cHBmxjfWt voef9MtsF4+DI3stQ5FMxlhzQg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:31:35 2025 by rpki-client