$ rpki-client -vvf rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft File: BC834F1ADC6997F0F8557889193E5B0D17827E29.mft (raw, json) Hash identifier: AExcf03p8wesGCzAmaM8i/+0+CsdIPwGMyuQCmP68Ww= Subject key identifier: DB:2A:9B:8B:65:24:F7:B5:C1:B6:B8:0D:7E:B1:CC:25:C5:FA:6C:DA Authority key identifier: BC:83:4F:1A:DC:69:97:F0:F8:55:78:89:19:3E:5B:0D:17:82:7E:29 Certificate issuer: /CN=BC834F1ADC6997F0F8557889193E5B0D17827E29 Certificate serial: 4A7D827F559DD0DC43697825E7BB4235DBD9365F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC834F1ADC6997F0F8557889193E5B0D17827E29.cer Subject info access: rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft Manifest number: 0127 Signing time: Tue 04 Nov 2025 03:05:09 +0000 Manifest this update: Tue 04 Nov 2025 03:00:09 +0000 Manifest next update: Wed 05 Nov 2025 04:44:09 +0000 Files and hashes: 1: 323830343a363630633a3a2f33322d313238203d3e20323639353330.roa (hash: /iaFLxHNFA2V3TjOBiv0XpcHZofInDeTZKuOoA3EzQg=) 2: BC834F1ADC6997F0F8557889193E5B0D17827E29.crl (hash: 7eIwJ5W0+mnRv2omhmqA3wrMDUnghdwE7mI150T+mTo=) 3: 34352e3138382e3138342e302f32322d3332203d3e20323639353330.roa (hash: QcqAb0+DtgjszqLRzX2mepAq4Zax3JRnI7HvdGOdaug=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.crl rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC834F1ADC6997F0F8557889193E5B0D17827E29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 04:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:7d:82:7f:55:9d:d0:dc:43:69:78:25:e7:bb:42:35:db:d9:36:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC834F1ADC6997F0F8557889193E5B0D17827E29 Validity Not Before: Nov 4 03:00:09 2025 GMT Not After : Nov 5 04:44:09 2025 GMT Subject: CN=DB2A9B8B6524F7B5C1B6B80D7EB1CC25C5FA6CDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6f:f8:35:43:25:ae:90:d0:b4:42:9a:12:12: b2:f2:1a:0c:1c:cb:28:2a:2d:06:cb:cf:f4:f6:d9: ad:3d:19:ab:be:51:77:14:36:ce:c6:88:56:a7:04: 97:34:62:7c:89:d6:af:6d:77:6a:d6:13:fd:7a:14: b8:a6:0c:14:fa:32:59:9d:dc:68:55:a3:e1:b6:14: 49:69:3d:1a:82:80:53:b1:77:8f:62:0e:2c:49:0f: 51:66:f4:83:4c:94:29:d8:79:46:d3:79:c5:8a:4a: 47:d2:23:8e:01:ee:ad:82:c3:eb:bb:0c:0a:20:68: 2b:b2:11:0d:58:b1:40:fa:95:01:3c:8e:5b:cb:aa: c5:9a:01:a1:2c:d6:4d:34:1e:9b:17:c2:da:77:41: d3:dd:ee:9f:5c:9c:7e:97:39:1a:79:27:8c:73:e3: 68:0a:43:1b:f9:f6:02:8c:2d:18:c4:29:87:1a:2e: b0:70:6c:61:69:be:ad:83:96:36:e5:27:0a:29:54: cc:80:b7:f3:30:5c:90:ec:db:a0:1d:2d:b3:90:6f: 35:da:d8:7b:a7:41:cd:17:19:2d:a6:9b:87:a9:21: ac:38:d3:2a:37:af:7e:ca:3e:44:24:85:55:f8:63: 50:41:fd:4b:a7:98:d0:bc:cf:55:f3:01:6b:e0:7b: 77:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2A:9B:8B:65:24:F7:B5:C1:B6:B8:0D:7E:B1:CC:25:C5:FA:6C:DA X509v3 Authority Key Identifier: keyid:BC:83:4F:1A:DC:69:97:F0:F8:55:78:89:19:3E:5B:0D:17:82:7E:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC834F1ADC6997F0F8557889193E5B0D17827E29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:06:72:15:95:ba:60:ab:01:3c:30:dc:40:66:18:19:43:93: dc:25:70:45:d7:5d:4f:fc:48:0e:7f:9b:73:15:e5:e6:26:ec: 31:e5:43:db:b1:ea:1f:0c:48:59:cb:ac:5c:82:25:4f:23:e0: 71:82:cd:fb:91:8c:0e:81:e1:c6:07:78:0e:82:9b:b6:61:6f: 76:d0:93:93:2c:e8:35:e6:71:e7:f9:bb:d2:1a:49:6b:10:d9: 65:6d:42:6e:5b:a4:45:da:e3:25:84:25:cb:a9:eb:20:41:48: 0f:94:4d:c0:83:80:70:76:23:b5:fd:42:cd:b5:8c:99:26:34: 48:9a:e4:33:fe:aa:32:42:81:47:c4:4f:0c:b1:48:ba:41:73: 73:e5:68:0c:e1:1e:01:61:23:4d:1f:93:b3:37:57:15:4b:6f: 4d:da:1f:4b:17:23:d4:82:26:c9:ac:f6:62:4c:dd:f9:55:41: f9:a8:e3:97:ed:cc:c8:ba:0f:cc:fb:20:c1:37:b9:f0:32:46: c1:e5:d9:93:b4:01:26:7f:50:1d:c1:95:f7:62:16:0b:de:b0: 29:b7:4f:e1:39:6d:95:49:79:5c:a8:39:19:51:4e:8b:4b:5a: ec:bb:b7:e8:25:84:99:97:6f:59:ec:92:54:27:6a:a0:0f:91: f5:36:69:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSn2Cf1Wd0NxDaXgl57tCNdvZNl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4MzRGMUFEQzY5OTdGMEY4NTU3ODg5MTkzRTVCMEQx NzgyN0UyOTAeFw0yNTExMDQwMzAwMDlaFw0yNTExMDUwNDQ0MDlaMDMxMTAvBgNV BAMTKERCMkE5QjhCNjUyNEY3QjVDMUI2QjgwRDdFQjFDQzI1QzVGQTZDREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmb/g1QyWukNC0QpoSErLyGgwc yygqLQbLz/T22a09Gau+UXcUNs7GiFanBJc0YnyJ1q9td2rWE/16FLimDBT6Mlmd 3GhVo+G2FElpPRqCgFOxd49iDixJD1Fm9INMlCnYeUbTecWKSkfSI44B7q2Cw+u7 DAogaCuyEQ1YsUD6lQE8jlvLqsWaAaEs1k00HpsXwtp3QdPd7p9cnH6XORp5J4xz 42gKQxv59gKMLRjEKYcaLrBwbGFpvq2DljblJwopVMyAt/MwXJDs26AdLbOQbzXa 2HunQc0XGS2mm4epIaw40yo3r37KPkQkhVX4Y1BB/UunmNC8z1XzAWvge3fnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2yqbi2Uk97XBtrgNfrHMJcX6bNowHwYDVR0j BBgwFoAUvINPGtxpl/D4VXiJGT5bDReCfikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREp5S0h3Wks3a3RMd0p2NEZ5NHR3YnloTEVEOGQ2bW1lWVRySk50blNo RVAvMC9CQzgzNEYxQURDNjk5N0YwRjg1NTc4ODkxOTNFNUIwRDE3ODI3RTI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDODM0RjFBREM2OTk3RjBG ODU1Nzg4OTE5M0U1QjBEMTc4MjdFMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REp5S0h3Wks3a3RMd0p2NEZ5NHR3YnloTEVEOGQ2bW1lWVRySk50blNoRVAvMC9C QzgzNEYxQURDNjk5N0YwRjg1NTc4ODkxOTNFNUIwRDE3ODI3RTI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASgZyFZW6YKsBPDDcQGYYGUOT3CVwRdddT/xIDn+bcxXl5ibsMeVD27HqHwxI WcusXIIlTyPgcYLN+5GMDoHhxgd4DoKbtmFvdtCTkyzoNeZx5/m70hpJaxDZZW1C blukRdrjJYQly6nrIEFID5RNwIOAcHYjtf1CzbWMmSY0SJrkM/6qMkKBR8RPDLFI ukFzc+VoDOEeAWEjTR+TszdXFUtvTdofSxcj1IImyaz2Ykzd+VVB+ajjl+3MyLoP zPsgwTe58DJGweXZk7QBJn9QHcGV92IWC96wKbdP4TltlUl5XKg5GVFOi0ta7Lu3 6CWEmZdvWeySVCdqoA+R9TZpJw== -----END CERTIFICATE-----Generated at Tue Nov 4 19:03:36 2025 by rpki-client