$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft File: BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft (raw, json) Hash identifier: HnP3xjUJO22msUWIqkKwmL8m3vaaeRWOD+h1X9IF4bQ= Subject key identifier: 98:3A:6D:02:AD:EA:7B:15:3C:42:8E:BA:96:9D:D7:3F:98:DF:60:FA Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C Certificate issuer: /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C Certificate serial: 7A93EF96BD2CBAE58E4C5C8AF28069B03DE06883 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft Manifest number: 0306 Signing time: Mon 03 Nov 2025 18:29:05 +0000 Manifest this update: Mon 03 Nov 2025 18:24:05 +0000 Manifest next update: Tue 04 Nov 2025 22:14:05 +0000 Files and hashes: 1: BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl (hash: X4NcuiFJ276x7x8GtNMS9CTUIuq4j8veBfe/ZNQuBvM=) 2: 34352e3136322e3232362e302f32332d3233203d3e20323638353333.roa (hash: I+Ww78nrqDFQJeSUCTyBI5VULHKBcS0W9+lh0BWLpDE=) 3: 323830343a353261633a3a2f33342d3334203d3e20323638353333.roa (hash: q4zgkyKtFDn2O0A5TEaDzEsRkWK7zaVWPz1XfL9ig6Q=) 4: 323830343a353261633a343030303a3a2f33342d3334203d3e20323638353333.roa (hash: mqy8b9GeFOuJat8npSCtdNaMsEv+mc/f5yfeDuhXnYY=) 5: 34352e3136322e3232342e302f32332d3233203d3e20323638353333.roa (hash: cOFomrq0u7uWaAdwHhxcYiXZVFUXmPTmjP3yNM2i3R4=) 6: 323830343a353261633a633030303a3a2f33342d3334203d3e20323638353333.roa (hash: TDmWOgpLRKpDDiL9IkKzagHfIzq66JLQS5+JyHVQCVc=) 7: 323830343a353261633a383030303a3a2f33342d3334203d3e20323638353333.roa (hash: G9Gop5zvToflO/2gpfor+zrNq42K6WPewb3L6fpm6hc=) 8: 34352e3136322e3232342e302f32322d3232203d3e20323638353333.roa (hash: JpCO4M6N05dDszkPP+IB3KMtveMRN/h0JLU2Pd3nWww=) 9: 323830343a353261633a3a2f33322d3332203d3e20323638353333.roa (hash: 2QGqbscxEv91g94RnqkqrOoDAGPsowqCHy2js+JYcQM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 21:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:93:ef:96:bd:2c:ba:e5:8e:4c:5c:8a:f2:80:69:b0:3d:e0:68:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C Validity Not Before: Nov 3 18:24:05 2025 GMT Not After : Nov 4 22:14:05 2025 GMT Subject: CN=983A6D02ADEA7B153C428EBA969DD73F98DF60FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:3d:ff:e9:f6:74:9d:74:ba:c0:26:79:4d: 3f:c9:29:93:56:bc:a1:9b:56:95:94:86:b8:12:23: 34:9f:66:4f:54:88:e1:9c:74:15:0b:2c:58:11:e6: a1:99:ba:85:c8:7f:9e:31:1c:54:cc:a4:36:37:e5: 30:46:6c:9b:32:d0:41:d9:a0:68:f5:78:8c:72:6f: 1e:2a:5b:6d:c0:ba:64:53:6b:a1:70:5f:59:3b:e6: ec:a8:c7:ef:6a:87:e3:2b:2c:51:cc:23:d9:c0:55: 71:19:ed:3f:6c:52:20:f1:c9:ea:1a:cd:47:2b:80: d0:7f:46:af:a8:16:28:e0:66:b7:b8:27:d3:77:2d: e3:ca:23:5e:1b:a1:4f:0d:13:b2:1c:36:2c:3f:16: be:8e:2d:50:04:e3:8b:2d:51:c1:19:41:ba:e5:c4: 8f:76:a1:90:7a:97:58:6a:5f:17:57:7d:78:60:87: 62:a9:58:25:1f:b6:b9:a3:d2:af:55:86:92:0f:b5: 5a:fa:6a:06:35:c8:9e:28:ea:b1:72:d9:65:9c:bd: 59:80:58:34:48:39:4f:e3:d5:ae:b6:5e:52:67:51: 0a:15:70:45:a2:3b:39:3e:79:da:44:89:b7:dd:b5: 40:d1:9b:44:0b:04:b7:c6:9b:c7:3e:9d:f0:f6:cc: 5d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3A:6D:02:AD:EA:7B:15:3C:42:8E:BA:96:9D:D7:3F:98:DF:60:FA X509v3 Authority Key Identifier: keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:0b:1c:47:df:5b:7a:a8:e3:9e:23:f1:c4:95:ca:44:d1:b6: 81:10:11:c1:1e:76:a9:6d:e4:03:d2:5b:97:ee:7a:4f:64:60: e4:56:a4:f7:ea:7b:e0:20:c8:b9:eb:fd:3e:9e:f0:5d:f2:5c: ea:d8:6c:d4:8a:44:b0:6f:c1:8a:5f:fe:49:37:a5:51:a5:d6: 49:90:6a:f1:45:81:45:63:91:59:ce:11:ce:c1:d0:86:27:39: 21:f2:5f:f0:00:26:a9:38:03:c9:78:ae:dc:38:86:1c:12:9c: 21:ad:6a:ed:7d:2b:59:3c:e0:38:b0:5e:c7:32:32:98:e1:a8: 64:65:40:86:eb:52:5f:6b:89:72:be:3e:6f:46:0d:bc:ca:96: 5c:7b:33:f6:f7:21:de:6d:35:ba:0c:6a:27:25:de:8d:45:2a: 95:e0:7f:fc:72:74:28:96:c5:27:5b:83:00:ee:73:3d:51:d6: fc:0c:d1:e1:fb:ad:08:60:e9:24:d0:18:df:66:c8:5a:5a:45: e7:8e:6f:23:76:49:df:16:72:ad:0f:0e:12:83:65:05:3c:5e: e2:01:6d:28:61:47:8f:5c:d5:ea:ee:f6:22:f2:0a:cd:f4:6c: 3e:f5:d6:8b:01:02:f1:cb:a6:b6:0f:b1:4e:64:b5:5c:a7:99: 4f:16:46:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUepPvlr0suuWOTFyK8oBpsD3gaIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIxNThGMUY5ODNEOEYyMUNBRUI5M0M5MjhBQzZBQjUy QjUxQ0IxQzAeFw0yNTExMDMxODI0MDVaFw0yNTExMDQyMjE0MDVaMDMxMTAvBgNV BAMTKDk4M0E2RDAyQURFQTdCMTUzQzQyOEVCQTk2OURENzNGOThERjYwRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvT3/6fZ0nXS6wCZ5TT/JKZNW vKGbVpWUhrgSIzSfZk9UiOGcdBULLFgR5qGZuoXIf54xHFTMpDY35TBGbJsy0EHZ oGj1eIxybx4qW23AumRTa6FwX1k75uyox+9qh+MrLFHMI9nAVXEZ7T9sUiDxyeoa zUcrgNB/Rq+oFijgZre4J9N3LePKI14boU8NE7IcNiw/Fr6OLVAE44stUcEZQbrl xI92oZB6l1hqXxdXfXhgh2KpWCUftrmj0q9VhpIPtVr6agY1yJ4o6rFy2WWcvVmA WDRIOU/j1a62XlJnUQoVcEWiOzk+edpEibfdtUDRm0QLBLfGm8c+nfD2zF1VAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmDptAq3qexU8Qo66lp3XP5jfYPowHwYDVR0j BBgwFoAUuxWPH5g9jyHK65PJKKxqtStRyxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2RlaGU2OEsydWVSNGhXUTVVNWJwQ2daY1gyN3BSSlJKWVBGRG5BMmQ0 S1IvMS9CQjE1OEYxRjk4M0Q4RjIxQ0FFQjkzQzkyOEFDNkFCNTJCNTFDQjFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMTU4RjFGOTgzRDhGMjFD QUVCOTNDOTI4QUM2QUI1MkI1MUNCMUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2RlaGU2OEsydWVSNGhXUTVVNWJwQ2daY1gyN3BSSlJKWVBGRG5BMmQ0S1IvMS9C QjE1OEYxRjk4M0Q4RjIxQ0FFQjkzQzkyOEFDNkFCNTJCNTFDQjFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZQscR99beqjjniPxxJXKRNG2gRARwR52qW3kA9Jbl+56T2Rg5Fak9+p74CDI uev9Pp7wXfJc6ths1IpEsG/Bil/+STelUaXWSZBq8UWBRWORWc4RzsHQhic5IfJf 8AAmqTgDyXiu3DiGHBKcIa1q7X0rWTzgOLBexzIymOGoZGVAhutSX2uJcr4+b0YN vMqWXHsz9vch3m01ugxqJyXejUUqleB//HJ0KJbFJ1uDAO5zPVHW/AzR4futCGDp JNAY32bIWlpF545vI3ZJ3xZyrQ8OEoNlBTxe4gFtKGFHj1zV6u72IvIKzfRsPvXW iwEC8cumtg+xTmS1XKeZTxZGfQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:56 2025 by rpki-client