$ rpki-client -vvf rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft File: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft (raw, json) Hash identifier: un28ZmrUNrHrvggKcP6IbhlffNkAE2Vl0foxKz39jA8= Subject key identifier: 2B:60:DF:23:C7:28:76:EE:BD:96:E1:02:DA:E2:4B:D3:C2:E9:19:1B Authority key identifier: BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F Certificate issuer: /CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F Certificate serial: 672FED15ED30173C742820BFDFE3A4A7B2763178 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft Manifest number: 0297 Signing time: Wed 20 Aug 2025 08:22:50 +0000 Manifest this update: Wed 20 Aug 2025 08:17:50 +0000 Manifest next update: Thu 21 Aug 2025 11:16:50 +0000 Files and hashes: 1: 323830343a333931383a3a2f33322d3438203d3e20323636353234.roa (hash: 6DURpCCZNXr4RssgY5+U5SCdw8QuLPJEOyNu8nBAHHM=) 2: 3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa (hash: ZkBeX0WWJCwewIHrZef0h3RxLAXUNroMdptDFjYWcME=) 3: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl (hash: kVCdHYlef9vgGEJOLdaeNz/RtrhwmfRhoOLiXDcwKkw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 11:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2f:ed:15:ed:30:17:3c:74:28:20:bf:df:e3:a4:a7:b2:76:31:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F Validity Not Before: Aug 20 08:17:50 2025 GMT Not After : Aug 21 11:16:50 2025 GMT Subject: CN=2B60DF23C72876EEBD96E102DAE24BD3C2E9191B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:de:79:9c:98:2c:57:2a:2b:b8:9a:e1:fe:db: 5b:c5:9a:dc:5a:e1:7c:4f:ef:83:73:46:80:af:df: ba:56:b8:a5:13:6b:da:e5:be:20:33:92:da:27:ee: 55:28:32:ba:f0:80:19:50:7f:9e:91:e6:22:3a:da: eb:ea:c1:a8:78:ea:c3:02:4e:fd:45:d7:ce:af:de: 34:d2:c5:39:0b:8d:4b:16:92:c2:65:97:f9:f3:95: e9:38:01:f2:32:cf:0a:2e:65:c3:7a:43:51:86:81: b4:93:65:70:53:05:bb:88:3b:d1:71:e3:30:97:3e: 22:10:90:4e:e8:96:34:28:b9:b5:91:a7:3d:3f:2d: 0e:94:75:92:24:a6:3f:ab:0b:bb:a5:58:01:01:14: 4c:3a:7a:5f:4e:9f:42:a7:7d:d0:88:5c:8c:ce:4c: de:db:1b:53:5d:33:da:f2:76:61:0e:98:da:f1:57: 47:ee:1f:3a:4c:96:09:a0:f4:f4:16:7e:cc:4c:a3: 71:c2:0b:2d:ba:6d:60:0d:03:9c:95:4b:92:70:3d: 4f:ab:ee:bd:21:ef:e0:06:10:fb:dd:d9:82:ae:8c: 7a:e6:45:6c:39:81:f8:d8:d1:0c:05:48:13:7c:cf: 35:a5:6f:07:8e:ad:4a:b2:02:fb:f7:9f:f5:98:3d: fc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:60:DF:23:C7:28:76:EE:BD:96:E1:02:DA:E2:4B:D3:C2:E9:19:1B X509v3 Authority Key Identifier: keyid:BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:bc:56:ff:40:5c:c0:ed:b1:a5:83:e1:95:76:76:c4:50:4c: 15:e7:52:b1:8d:34:c7:f8:e8:39:4c:24:8d:0e:dc:84:75:ad: 4a:71:da:e5:b4:4d:cc:cf:c4:08:0d:53:85:32:9b:9c:f4:ca: b4:c2:b3:18:fb:1d:ab:dd:04:c5:4a:06:6f:f9:33:65:88:38: 9a:88:8e:9d:c3:0c:30:5a:76:26:46:79:54:35:11:ed:0e:fc: 56:3a:a4:8c:39:48:16:e2:5f:a6:6f:c9:e6:fe:27:90:75:11: 10:70:ab:6f:55:ad:2c:f5:66:cf:c4:7f:6b:e0:e4:ba:d6:ac: 56:ea:f4:71:0b:5c:e1:39:d7:44:5b:11:aa:d7:9d:16:d9:e0: 79:8a:8f:1f:56:a6:ce:20:3d:3a:bb:5c:14:c7:60:48:36:e2: 5b:e6:4e:78:2e:59:35:de:05:82:58:6b:be:b6:b7:2e:7e:73: ea:59:7f:95:f9:f8:40:a1:03:30:f0:0f:31:13:d0:a7:ab:55: f6:21:91:e7:99:74:2b:98:5a:3f:0d:ce:14:a2:f2:6b:1e:d3: bb:23:6f:81:41:74:d7:36:5e:ff:70:44:02:df:08:38:a2:88: 75:e0:0d:90:27:86:b4:ae:2d:12:56:1a:9e:4c:1a:31:99:a2: e4:c3:d9:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZy/tFe0wFzx0KCC/3+Okp7J2MXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDBCRDc1Q0FEM0EzMDNFQzcyRjFBRDBCMjM2NUVF OTVEMzkwRjAeFw0yNTA4MjAwODE3NTBaFw0yNTA4MjExMTE2NTBaMDMxMTAvBgNV BAMTKDJCNjBERjIzQzcyODc2RUVCRDk2RTEwMkRBRTI0QkQzQzJFOTE5MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ3nmcmCxXKiu4muH+21vFmtxa 4XxP74NzRoCv37pWuKUTa9rlviAzkton7lUoMrrwgBlQf56R5iI62uvqwah46sMC Tv1F186v3jTSxTkLjUsWksJll/nzlek4AfIyzwouZcN6Q1GGgbSTZXBTBbuIO9Fx 4zCXPiIQkE7oljQoubWRpz0/LQ6UdZIkpj+rC7ulWAEBFEw6el9On0KnfdCIXIzO TN7bG1NdM9rydmEOmNrxV0fuHzpMlgmg9PQWfsxMo3HCCy26bWANA5yVS5JwPU+r 7r0h7+AGEPvd2YKujHrmRWw5gfjY0QwFSBN8zzWlbweOrUqyAvv3n/WYPfyTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUK2DfI8codu69luEC2uJL08LpGRswHwYDVR0j BBgwFoAUu+0L11ytOjA+xy8a0LI2XuldOQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3pKYTRjYXN2aGNqRDJobkhtNWpBYXdjdFJrTmFnR25MQjY1M3VxOEhE Y04vMS9CQkVEMEJENzVDQUQzQTMwM0VDNzJGMUFEMEIyMzY1RUU5NUQzOTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCRUQwQkQ3NUNBRDNBMzAz RUM3MkYxQUQwQjIzNjVFRTk1RDM5MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3pKYTRjYXN2aGNqRDJobkhtNWpBYXdjdFJrTmFnR25MQjY1M3VxOEhEY04vMS9C QkVEMEJENzVDQUQzQTMwM0VDNzJGMUFEMEIyMzY1RUU5NUQzOTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ7xW/0BcwO2xpYPhlXZ2xFBMFedSsY00x/joOUwkjQ7chHWtSnHa5bRNzM/E CA1ThTKbnPTKtMKzGPsdq90ExUoGb/kzZYg4moiOncMMMFp2JkZ5VDUR7Q78Vjqk jDlIFuJfpm/J5v4nkHUREHCrb1WtLPVmz8R/a+DkutasVur0cQtc4TnXRFsRqted FtngeYqPH1amziA9OrtcFMdgSDbiW+ZOeC5ZNd4Fglhrvra3Ln5z6ll/lfn4QKED MPAPMRPQp6tV9iGR55l0K5haPw3OFKLyax7TuyNvgUF01zZe/3BEAt8IOKKIdeAN kCeGtK4tElYankwaMZmi5MPZ2Q== -----END CERTIFICATE-----Generated at Wed Aug 20 18:31:19 2025 by rpki-client