$ rpki-client -vvf rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft File: BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft (raw, json) Hash identifier: ggHc5I16MtNFQC+bztVWo00TkVePjKRHn4v+QDEMQ/4= Subject key identifier: 8F:F5:1C:8D:D2:3F:12:EB:97:09:44:2A:35:7F:E0:14:CB:1E:E2:1B Authority key identifier: BD:23:F2:E8:71:C9:F5:E6:13:8D:25:45:01:FB:E2:AC:35:AA:73:26 Certificate issuer: /CN=BD23F2E871C9F5E6138D254501FBE2AC35AA7326 Certificate serial: 1869D000C08026688B99D4B056BCC6832B222565 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer Subject info access: rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft Manifest number: 0133 Signing time: Mon 03 Nov 2025 07:28:34 +0000 Manifest this update: Mon 03 Nov 2025 07:23:34 +0000 Manifest next update: Tue 04 Nov 2025 08:44:34 +0000 Files and hashes: 1: 323830343a363930383a3a2f33322d3438203d3e20323730323434.roa (hash: LfJ27fny3HxOEf2E3+cUrLvQbGwB+jGu3gHJ5S1w/cY=) 2: BD23F2E871C9F5E6138D254501FBE2AC35AA7326.crl (hash: 3UCFH7zaI7fywCJkc0OU2IXA/vYqVm/TqCfIDIsjlpE=) 3: 3138372e36322e3130302e302f32322d3234203d3e20323730323434.roa (hash: 70BJQu4PLqi9KdVVab9jANTw7cydloTHwzKtBuGLFtM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.crl rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 08:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:69:d0:00:c0:80:26:68:8b:99:d4:b0:56:bc:c6:83:2b:22:25:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD23F2E871C9F5E6138D254501FBE2AC35AA7326 Validity Not Before: Nov 3 07:23:34 2025 GMT Not After : Nov 4 08:44:34 2025 GMT Subject: CN=8FF51C8DD23F12EB9709442A357FE014CB1EE21B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:98:6f:85:10:21:6e:6f:f9:cc:bc:60:4e:a9: a3:eb:ff:94:3d:ce:e4:b9:cf:42:9c:52:0c:b3:36: 83:e9:24:96:ef:c5:b1:4a:e7:ed:2f:d4:14:e9:c4: be:25:7c:6a:e4:e7:7e:a8:5c:30:62:5f:9d:89:8f: ec:69:31:5f:44:f2:e2:0c:65:85:49:d7:32:07:b5: 2c:0a:33:4f:0e:a5:df:66:9b:89:b8:d6:7e:7d:3c: 0a:15:04:18:a3:c8:3d:f2:09:41:8b:93:af:fc:c5: 05:86:c4:d6:0e:ce:28:83:6c:cc:cf:ef:21:0a:c7: 79:08:9e:62:75:8a:89:94:16:db:6d:0e:43:5b:c5: 55:44:81:1b:07:8b:6c:42:2c:cd:82:04:fd:f6:26: 9a:9e:a4:04:75:05:82:a2:a2:b6:1e:d3:62:3a:4f: 7e:dd:59:b9:18:5f:ea:c7:09:8e:c5:11:63:1f:7c: 69:61:ee:7a:0c:4c:f3:00:cd:31:6b:0d:98:a7:b3: 83:2d:ac:66:c4:3f:5b:4e:69:12:c3:b1:7b:b3:94: 39:6f:c2:aa:0a:ed:af:5a:be:6f:e9:fa:21:21:fc: a9:7d:48:7e:c4:75:82:c0:57:e7:3f:9f:f7:60:54: 63:45:45:e9:f5:c5:d4:5f:ef:a6:90:43:1c:37:fe: 07:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F5:1C:8D:D2:3F:12:EB:97:09:44:2A:35:7F:E0:14:CB:1E:E2:1B X509v3 Authority Key Identifier: keyid:BD:23:F2:E8:71:C9:F5:E6:13:8D:25:45:01:FB:E2:AC:35:AA:73:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:49:e8:b3:74:23:dc:a1:1d:9f:67:30:92:14:5c:b6:25:1b: 63:8c:94:ac:5b:18:e7:6d:13:cb:52:73:17:e8:f1:d5:21:df: 75:5d:ec:78:b6:30:31:1b:82:c7:f9:9a:6a:45:3f:a5:fc:1c: 8d:90:bd:50:1f:de:51:49:29:5c:86:13:f7:dd:e8:6b:b3:b5: 6d:85:df:72:04:5e:09:c1:e5:24:fc:bf:e1:28:f8:e7:02:1c: 40:74:0a:92:67:b7:86:b7:3e:4f:3f:03:17:a4:b6:e5:4a:7f: dc:5f:e5:e3:d7:78:fa:d1:34:df:87:12:1c:9c:bb:09:01:b5: a2:c2:61:0b:24:fc:61:bf:41:47:3e:25:bf:30:ac:29:62:aa: 10:4d:a9:df:3c:46:aa:85:45:21:52:3d:b9:9a:98:7d:63:49: 5a:e7:6f:c1:f7:47:b9:cd:6d:32:f8:53:d1:28:c4:10:b3:54: 6a:61:79:66:62:2e:1a:25:4a:9f:2a:85:c9:8f:ee:e1:7b:eb: 5c:2f:28:32:71:ff:45:3b:ee:7d:1d:79:e6:7f:c0:f0:73:9c: 3a:2c:0a:cc:65:5a:4c:5f:55:ff:d3:04:e8:8b:28:f1:da:95: d5:61:1a:14:bd:93:05:08:5f:c9:fb:09:ad:16:78:6c:ea:21: 2c:67:81:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGGnQAMCAJmiLmdSwVrzGgysiJWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQyM0YyRTg3MUM5RjVFNjEzOEQyNTQ1MDFGQkUyQUMz NUFBNzMyNjAeFw0yNTExMDMwNzIzMzRaFw0yNTExMDQwODQ0MzRaMDMxMTAvBgNV BAMTKDhGRjUxQzhERDIzRjEyRUI5NzA5NDQyQTM1N0ZFMDE0Q0IxRUUyMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCymG+FECFub/nMvGBOqaPr/5Q9 zuS5z0KcUgyzNoPpJJbvxbFK5+0v1BTpxL4lfGrk536oXDBiX52Jj+xpMV9E8uIM ZYVJ1zIHtSwKM08Opd9mm4m41n59PAoVBBijyD3yCUGLk6/8xQWGxNYOziiDbMzP 7yEKx3kInmJ1iomUFtttDkNbxVVEgRsHi2xCLM2CBP32JpqepAR1BYKiorYe02I6 T37dWbkYX+rHCY7FEWMffGlh7noMTPMAzTFrDZins4MtrGbEP1tOaRLDsXuzlDlv wqoK7a9avm/p+iEh/Kl9SH7EdYLAV+c/n/dgVGNFRen1xdRf76aQQxw3/gdDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUj/UcjdI/EuuXCUQqNX/gFMse4hswHwYDVR0j BBgwFoAUvSPy6HHJ9eYTjSVFAfvirDWqcyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRnlERTJBRGhmOFB5QXlDRG9BVUw1RVV6eHJVMWRjOEpYSmVWWVE5Nk5S eUEvMC9CRDIzRjJFODcxQzlGNUU2MTM4RDI1NDUwMUZCRTJBQzM1QUE3MzI2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEMjNGMkU4NzFDOUY1RTYx MzhEMjU0NTAxRkJFMkFDMzVBQTczMjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RnlERTJBRGhmOFB5QXlDRG9BVUw1RVV6eHJVMWRjOEpYSmVWWVE5Nk5SeUEvMC9C RDIzRjJFODcxQzlGNUU2MTM4RDI1NDUwMUZCRTJBQzM1QUE3MzI2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoknos3Qj3KEdn2cwkhRctiUbY4yUrFsY520Ty1JzF+jx1SHfdV3seLYwMRuC x/maakU/pfwcjZC9UB/eUUkpXIYT993oa7O1bYXfcgReCcHlJPy/4Sj45wIcQHQK kme3hrc+Tz8DF6S25Up/3F/l49d4+tE034cSHJy7CQG1osJhCyT8Yb9BRz4lvzCs KWKqEE2p3zxGqoVFIVI9uZqYfWNJWudvwfdHuc1tMvhT0SjEELNUamF5ZmIuGiVK nyqFyY/u4XvrXC8oMnH/RTvufR155n/A8HOcOiwKzGVaTF9V/9ME6Iso8dqV1WEa FL2TBQhfyfsJrRZ4bOohLGeBHA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:25:00 2025 by rpki-client