$ rpki-client -vvf rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft File: BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft (raw, json) Hash identifier: BvHuGBCrxFTOGj5xZaMWyB2iAQ7IKX2QfSIYDQlf2kM= Subject key identifier: B9:29:76:D4:1B:A0:B6:52:08:75:04:71:72:D2:D7:74:2F:91:BC:FA Authority key identifier: BE:C2:FF:1E:C8:AC:86:D3:B2:25:2C:93:7D:13:CB:8E:9D:51:FF:33 Certificate issuer: /CN=BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33 Certificate serial: 74D2FC09C90BD1060F03F85E3115BB1677E28708 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer Subject info access: rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft Manifest number: 0155 Signing time: Tue 04 Nov 2025 06:26:01 +0000 Manifest this update: Tue 04 Nov 2025 06:21:01 +0000 Manifest next update: Wed 05 Nov 2025 08:33:01 +0000 Files and hashes: 1: 3133382e3131372e33362e302f32322d3234203d3e20323634323231.roa (hash: dc2zzkPt/FrTmrlMWfPw/bh9Y+qsTsLgI5TLRMS0UTM=) 2: BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.crl (hash: KPg2LT/YR7OvuwiE72Ip/mYk+qc6ncHMCIJHuXAAzTg=) 3: 3139322e3134312e3231362e302f32322d3234203d3e20323634323231.roa (hash: sQMywHn8sBgDuSJdCgP3ZE8Dd7ypTbbu6Dlqz0Yno7k=) 4: 323830343a363363633a3a2f33322d3438203d3e20323639333834.roa (hash: AXHystB3eqZMIj2Yh1MFxyYntNHwew/Ipuy4kde4+ZQ=) 5: 34352e3138352e3135362e302f32322d3234203d3e20323634323231.roa (hash: fyjWBO/MWv6WWiZ2ttqDhCoXHXgNM5nEzN5rFhcHSsA=) 6: 323830343a323436383a3a2f33322d3438203d3e20323634323231.roa (hash: QGDwcQEqCT7btwVyIGdgyY62zgT7pMJk3TEqaOeRqUI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.crl rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 08:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d2:fc:09:c9:0b:d1:06:0f:03:f8:5e:31:15:bb:16:77:e2:87:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33 Validity Not Before: Nov 4 06:21:01 2025 GMT Not After : Nov 5 08:33:01 2025 GMT Subject: CN=B92976D41BA0B6520875047172D2D7742F91BCFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:f2:db:41:7b:c5:90:70:b0:f6:56:de:a2: a4:76:51:fb:11:64:0e:ed:71:30:06:37:f4:09:f4: fb:77:01:5f:1e:4e:6b:88:65:21:af:be:8d:15:eb: 6e:c0:11:81:0b:9b:e6:a3:59:5d:4f:e4:58:78:10: 72:2b:0e:4e:88:1c:bb:ec:66:a5:70:64:e0:ec:96: 2b:42:a2:08:04:6f:a1:74:7b:3c:9c:9a:db:9d:39: 9e:56:fc:f1:e3:da:75:5a:6f:f7:f9:3d:25:cb:55: b9:60:95:88:3a:6e:67:7f:ee:3b:a2:40:65:83:72: 31:cc:0c:3d:01:1d:1e:ce:d1:46:6f:ae:81:dc:50: ce:f2:29:2a:0e:d9:ee:d1:9f:9d:fe:9f:fa:85:33: 57:7a:32:69:39:6d:fd:39:4c:00:ec:b4:c1:61:98: 9b:3d:07:37:d9:43:e1:08:85:44:d6:eb:33:f0:9c: f0:e5:37:8b:a0:59:e8:83:5b:53:3b:d5:69:2d:df: e7:fc:2b:22:75:2b:b4:b6:d8:d3:5e:e4:1a:af:d3: 2d:dd:ef:bf:34:ee:76:e6:cd:99:16:7a:aa:2c:58: f9:6f:a1:3f:98:73:be:11:da:e0:91:4c:8a:a7:75: 0d:41:8c:3f:00:1d:72:e9:96:a3:48:58:73:df:ef: af:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:29:76:D4:1B:A0:B6:52:08:75:04:71:72:D2:D7:74:2F:91:BC:FA X509v3 Authority Key Identifier: keyid:BE:C2:FF:1E:C8:AC:86:D3:B2:25:2C:93:7D:13:CB:8E:9D:51:FF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EennRTSYfwGuDgSRTw2tFLKSMbE7e6MXh8WehGCE9Ta/0/BEC2FF1EC8AC86D3B2252C937D13CB8E9D51FF33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:46:31:30:03:23:87:43:6b:b7:2b:52:06:19:1b:fe:69:ac: 7c:d6:e1:2b:a0:e5:bc:1d:30:e4:d8:bd:8e:34:52:28:67:ec: 66:23:e0:34:7c:68:9f:51:fc:fd:1c:4d:d4:ab:eb:b7:de:60: 9c:ca:e3:38:7e:b9:a3:93:76:af:2a:24:f4:ae:15:cf:90:9b: d3:5f:df:ae:78:84:b0:a8:d3:e5:e5:75:37:18:dc:bf:4f:f1: c7:54:1d:e4:0d:c5:93:01:33:a1:8b:d4:b1:9c:9b:61:16:82: dc:30:fa:d6:02:65:0c:3e:76:2b:5e:6b:79:91:ad:86:45:53: d3:17:92:b8:c4:af:3a:24:9f:1e:77:0f:a8:c0:97:1e:fd:d2: f0:94:fc:32:de:a8:ac:3a:9c:2a:7f:8e:06:db:bd:7a:b8:c8: e3:de:37:26:be:5f:d4:8e:2c:e2:67:bc:88:ba:44:a2:56:05: 4b:21:05:d2:21:1c:d0:12:2d:00:54:f8:e0:1b:3b:7c:98:06: aa:b6:13:4c:9b:62:10:a1:b6:5a:8b:fd:5d:49:8b:0c:ea:96: be:71:05:ae:31:d6:7e:01:1c:29:81:4e:1b:c1:27:fc:61:08: 65:e6:78:b7:80:6b:b1:b1:bc:a9:46:a9:6f:20:c5:e1:bc:bd: ae:b3:c3:69 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUdNL8CckL0QYPA/heMRW7FnfihwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDMkZGMUVDOEFDODZEM0IyMjUyQzkzN0QxM0NCOEU5 RDUxRkYzMzAeFw0yNTExMDQwNjIxMDFaFw0yNTExMDUwODMzMDFaMDMxMTAvBgNV BAMTKEI5Mjk3NkQ0MUJBMEI2NTIwODc1MDQ3MTcyRDJENzc0MkY5MUJDRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZ/LbQXvFkHCw9lbeoqR2UfsR ZA7tcTAGN/QJ9Pt3AV8eTmuIZSGvvo0V627AEYELm+ajWV1P5Fh4EHIrDk6IHLvs ZqVwZODslitCoggEb6F0ezycmtudOZ5W/PHj2nVab/f5PSXLVblglYg6bmd/7jui QGWDcjHMDD0BHR7O0UZvroHcUM7yKSoO2e7Rn53+n/qFM1d6Mmk5bf05TADstMFh mJs9BzfZQ+EIhUTW6zPwnPDlN4ugWeiDW1M71Wkt3+f8KyJ1K7S22NNe5Bqv0y3d 77807nbmzZkWeqosWPlvoT+Yc74R2uCRTIqndQ1BjD8AHXLplqNIWHPf7681AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUuSl21BugtlIIdQRxctLXdC+RvPowHwYDVR0j BBgwFoAUvsL/HsishtOyJSyTfRPLjp1R/zMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9FZW5uUlRTWWZ3R3VEZ1NSVHcydEZMS1NNYkU3ZTZNWGg4V2VoR0NFOVRh LzAvQkVDMkZGMUVDOEFDODZEM0IyMjUyQzkzN0QxM0NCOEU5RDUxRkYzMy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CRUMyRkYxRUM4QUM4NkQzQjIy NTJDOTM3RDEzQ0I4RTlENTFGRjMzLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Vl bm5SVFNZZndHdURnU1JUdzJ0RkxLU01iRTdlNk1YaDhXZWhHQ0U5VGEvMC9CRUMy RkYxRUM4QUM4NkQzQjIyNTJDOTM3RDEzQ0I4RTlENTFGRjMzLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA REYxMAMjh0NrtytSBhkb/mmsfNbhK6DlvB0w5Ni9jjRSKGfsZiPgNHxon1H8/RxN 1Kvrt95gnMrjOH65o5N2ryok9K4Vz5Cb01/frniEsKjT5eV1Nxjcv0/xx1Qd5A3F kwEzoYvUsZybYRaC3DD61gJlDD52K15reZGthkVT0xeSuMSvOiSfHncPqMCXHv3S 8JT8Mt6orDqcKn+OBtu9erjI4943Jr5f1I4s4me8iLpEolYFSyEF0iEc0BItAFT4 4Bs7fJgGqrYTTJtiEKG2Wov9XUmLDOqWvnEFrjHWfgEcKYFOG8En/GEIZeZ4t4Br sbG8qUapbyDF4by9rrPDaQ== -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:09 2025 by rpki-client