$ rpki-client -vvf rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft File: BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft (raw, json) Hash identifier: u2zyRJYhGEQGViiItotFAlR5kZKsphCB6mpTusI85lg= Subject key identifier: 7F:F7:76:65:60:D8:3E:88:F8:DE:A3:C4:E9:0D:99:FB:9B:31:71:05 Authority key identifier: BD:A4:8C:2C:C1:06:4B:F3:E6:05:3C:15:DD:28:16:FE:57:74:B3:CA Certificate issuer: /CN=BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA Certificate serial: 5883920F06722A5AD479537138D75F208F551311 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft Manifest number: 04 Signing time: Mon 03 Nov 2025 05:17:57 +0000 Manifest this update: Mon 03 Nov 2025 05:12:57 +0000 Manifest next update: Tue 04 Nov 2025 08:41:57 +0000 Files and hashes: 1: 323830343a383736633a3a2f33322d313238203d3e20323732373038.roa (hash: YWHryjSdFBEBKqKmB1KLsmWcfwbalA7VAy9fcp5yQ3o=) 2: BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.crl (hash: 3Z1kYKiD8j/6P3v5zpongm0WFv/eULjvNggvIYDRJzg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.crl rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 08:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:83:92:0f:06:72:2a:5a:d4:79:53:71:38:d7:5f:20:8f:55:13:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA Validity Not Before: Nov 3 05:12:57 2025 GMT Not After : Nov 4 08:41:57 2025 GMT Subject: CN=7FF7766560D83E88F8DEA3C4E90D99FB9B317105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:30:f8:5c:c1:bb:5c:69:18:a2:cd:3d:d2: 6f:8e:45:69:12:59:98:4d:75:56:29:01:9f:0e:78: 8f:2c:e5:3a:10:47:97:6c:17:ee:bd:b7:e4:91:e1: 48:0b:61:33:91:c7:69:ab:47:fe:23:9b:2c:8d:95: c2:bc:02:52:50:76:d2:f9:79:0f:28:f3:90:10:66: a2:8f:33:bf:ef:58:0a:91:2c:bc:cb:3b:96:3a:ac: 65:c3:5e:a8:59:dd:d0:99:d7:eb:9f:4c:0d:e2:28: 32:42:01:8f:a4:80:2e:47:2a:c9:d7:49:32:20:ee: ef:fe:df:c3:e2:94:5d:ee:70:a3:1f:bd:32:eb:ec: ed:0e:d5:17:45:ea:14:3a:2d:01:8c:12:6d:ce:0a: 03:d9:8e:56:73:2f:ab:25:a5:30:3e:b4:5a:56:05: 69:91:95:14:bd:a7:8c:88:d4:d5:89:7d:d0:dc:e0: 31:a2:98:ac:32:06:89:78:4c:76:0b:0a:05:52:a9: ae:38:66:f3:b7:59:40:2a:c5:7b:9b:51:1f:5a:bd: b3:42:88:b6:58:52:20:2c:26:fc:dc:b1:c0:91:e8: 1f:55:3b:79:0d:48:12:d0:06:76:55:02:74:29:6c: 37:a5:23:59:b8:7a:5c:80:3d:00:ca:c4:ab:1b:a4: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F7:76:65:60:D8:3E:88:F8:DE:A3:C4:E9:0D:99:FB:9B:31:71:05 X509v3 Authority Key Identifier: keyid:BD:A4:8C:2C:C1:06:4B:F3:E6:05:3C:15:DD:28:16:FE:57:74:B3:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn3YhRekQgC4zYpRkXxwXw9qyHnGnLZ4Cq8gATvpCSfB/0/BDA48C2CC1064BF3E6053C15DD2816FE5774B3CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:2c:2f:8a:38:a4:b7:6b:86:5b:f8:6d:d0:7a:ff:ea:28:52: 84:2a:92:05:98:ad:0f:a3:d9:41:44:02:89:e0:7e:d7:5e:f5: 3d:79:b2:0e:18:3b:be:6f:00:f1:f2:a9:51:1e:ae:ed:87:9b: e9:fd:a5:2d:71:79:45:87:d1:ed:91:aa:be:a5:f9:b0:d9:9f: 89:ef:bc:2d:bc:56:99:ce:a2:61:43:29:e5:17:5e:d3:3a:cc: d2:9d:68:65:a5:38:62:34:56:32:50:68:9e:29:cb:9a:33:d4: 0d:83:e8:1a:df:a1:2d:b6:c6:15:6c:3c:e8:19:7b:cf:21:e6: a4:ff:d8:42:53:09:14:00:c6:5d:b1:98:9f:14:12:4f:df:c7: c7:02:88:9a:35:1c:24:bf:0f:6e:0c:46:c2:6e:76:11:aa:aa: a1:1f:58:bf:32:11:b6:b7:bf:9e:ee:42:23:63:69:d7:7e:8d: 12:18:19:01:a5:47:c3:3a:52:1c:7d:e1:ef:49:f5:3a:54:94: d3:4f:17:24:49:74:36:d7:a6:f3:b5:81:0d:09:8a:f3:ae:73: 97:ee:f2:2a:4c:ea:3a:da:2e:b7:03:ba:f1:3a:74:97:2c:53: bd:02:0c:ef:50:43:2d:68:1a:6a:ab:f8:5f:26:ff:e7:f8:bb: 30:b9:f1:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWIOSDwZyKlrUeVNxONdfII9VExEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRBNDhDMkNDMTA2NEJGM0U2MDUzQzE1REQyODE2RkU1 Nzc0QjNDQTAeFw0yNTExMDMwNTEyNTdaFw0yNTExMDQwODQxNTdaMDMxMTAvBgNV BAMTKDdGRjc3NjY1NjBEODNFODhGOERFQTNDNEU5MEQ5OUZCOUIzMTcxMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMdTD4XMG7XGkYos090m+ORWkS WZhNdVYpAZ8OeI8s5ToQR5dsF+69t+SR4UgLYTORx2mrR/4jmyyNlcK8AlJQdtL5 eQ8o85AQZqKPM7/vWAqRLLzLO5Y6rGXDXqhZ3dCZ1+ufTA3iKDJCAY+kgC5HKsnX STIg7u/+38PilF3ucKMfvTLr7O0O1RdF6hQ6LQGMEm3OCgPZjlZzL6slpTA+tFpW BWmRlRS9p4yI1NWJfdDc4DGimKwyBol4THYLCgVSqa44ZvO3WUAqxXubUR9avbNC iLZYUiAsJvzcscCR6B9VO3kNSBLQBnZVAnQpbDelI1m4elyAPQDKxKsbpDpbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUf/d2ZWDYPoj43qPE6Q2Z+5sxcQUwHwYDVR0j BBgwFoAUvaSMLMEGS/PmBTwV3SgW/ld0s8owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR24zWWhSZWtRZ0M0ellwUmtYeHdYdzlxeUhuR25MWjRDcThnQVR2cENT ZkIvMC9CREE0OEMyQ0MxMDY0QkYzRTYwNTNDMTVERDI4MTZGRTU3NzRCM0NBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEQTQ4QzJDQzEwNjRCRjNF NjA1M0MxNUREMjgxNkZFNTc3NEIzQ0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R24zWWhSZWtRZ0M0ellwUmtYeHdYdzlxeUhuR25MWjRDcThnQVR2cENTZkIvMC9C REE0OEMyQ0MxMDY0QkYzRTYwNTNDMTVERDI4MTZGRTU3NzRCM0NBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARSwvijikt2uGW/ht0Hr/6ihShCqSBZitD6PZQUQCieB+1171PXmyDhg7vm8A 8fKpUR6u7Yeb6f2lLXF5RYfR7ZGqvqX5sNmfie+8LbxWmc6iYUMp5Rde0zrM0p1o ZaU4YjRWMlBoninLmjPUDYPoGt+hLbbGFWw86Bl7zyHmpP/YQlMJFADGXbGYnxQS T9/HxwKImjUcJL8PbgxGwm52EaqqoR9YvzIRtre/nu5CI2Np136NEhgZAaVHwzpS HH3h70n1OlSU008XJEl0Ntem87WBDQmK865zl+7yKkzqOtoutwO68Tp0lyxTvQIM 71BDLWgaaqv4Xyb/5/i7MLnxtA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:15:38 2025 by rpki-client