$ rpki-client -vvf rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft File: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft (raw, json) Hash identifier: 8VB0pxg34kuaLBTvTzS4BHsq9hf49BVeqY0g4OblBBs= Subject key identifier: 27:42:26:4E:DB:4A:C5:46:42:4D:80:3C:ED:FA:08:C6:68:87:3D:C7 Authority key identifier: BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F Certificate issuer: /CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F Certificate serial: 0E87C067771B17FBD499742EFA10FF0D221FB339 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft Manifest number: 02FB Signing time: Sun 02 Nov 2025 23:44:01 +0000 Manifest this update: Sun 02 Nov 2025 23:39:01 +0000 Manifest next update: Tue 04 Nov 2025 02:22:01 +0000 Files and hashes: 1: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl (hash: sC7eBqS2DenGqVmE1rKcy9l0aXVwylAvZHYiVMYPa3o=) 2: 323830343a333931383a3a2f33322d3438203d3e20323636353234.roa (hash: 6DURpCCZNXr4RssgY5+U5SCdw8QuLPJEOyNu8nBAHHM=) 3: 3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa (hash: ZkBeX0WWJCwewIHrZef0h3RxLAXUNroMdptDFjYWcME=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 02:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:87:c0:67:77:1b:17:fb:d4:99:74:2e:fa:10:ff:0d:22:1f:b3:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F Validity Not Before: Nov 2 23:39:01 2025 GMT Not After : Nov 4 02:22:01 2025 GMT Subject: CN=2742264EDB4AC546424D803CEDFA08C668873DC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a4:8f:74:ea:fb:db:28:31:73:4f:b0:16:39: 5b:b0:c4:3f:ea:9f:7b:c5:43:ca:0c:3f:6f:84:ed: ce:06:84:c3:44:89:23:a6:c9:6f:57:59:6a:5f:df: 20:85:c5:83:11:82:d1:61:1b:0b:33:1b:a5:da:65: 3c:eb:d2:f2:a2:dd:6b:20:77:73:90:2b:ed:38:e6: d3:e9:ae:ef:99:9f:3a:7f:4e:91:05:16:98:7f:83: 5e:d9:36:c4:53:26:b1:a6:01:1b:da:37:38:7b:27: 0e:ca:67:c8:d8:3e:c6:ca:54:6d:be:41:c3:35:bb: c7:4c:9c:5b:17:14:e6:8f:77:7d:3f:22:46:e8:5a: 1f:ec:ff:c3:b3:ba:cd:10:f2:2a:19:5a:5b:18:d2: d3:47:5e:ca:6a:cb:d0:d9:13:4c:90:82:f7:be:11: 74:c4:34:b5:72:35:54:1a:11:67:bd:6e:22:61:c3: a8:b2:6f:be:de:39:b1:56:26:78:ec:04:f7:be:ec: 7e:50:af:4e:b2:7b:06:28:37:99:63:eb:ea:0b:a3: d7:89:12:de:b7:70:76:dd:4e:0f:c0:9a:8e:7e:c2: f8:a5:9a:15:7a:1c:4e:25:f0:08:0d:11:f9:84:84: 89:c4:6e:0f:e9:85:10:2d:79:2f:c6:b5:3a:a8:2c: 23:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:42:26:4E:DB:4A:C5:46:42:4D:80:3C:ED:FA:08:C6:68:87:3D:C7 X509v3 Authority Key Identifier: keyid:BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:20:83:c9:e5:9d:3e:12:61:f4:9d:22:6a:74:b3:b2:2f:31: df:6c:c8:db:3f:b3:66:9e:42:06:84:05:71:74:8c:91:24:f5: 32:4c:72:03:68:73:82:e4:75:07:aa:8e:dd:d6:6f:15:7e:a8: e8:70:04:f1:df:13:07:11:4a:a7:46:69:7b:b3:d1:2b:4b:54: c0:a9:f7:33:cc:5d:ae:67:50:24:14:4c:3d:df:f2:c9:e1:c8: 4e:67:f6:5e:71:98:0d:77:3f:a2:c6:b3:28:e0:b8:81:fc:c0: 33:d7:fe:6e:8d:94:c7:2c:bd:99:aa:a0:f3:3a:98:2c:e7:5e: 58:c1:61:57:a6:78:1f:31:21:41:11:56:52:32:8b:fd:3d:f3: d3:c4:6b:27:9a:65:f2:f6:87:15:68:1a:64:88:36:8e:24:23: 5a:5c:ad:1a:17:fb:16:af:c1:78:9a:77:30:72:a4:60:46:ed: 33:c8:ab:dd:ef:eb:fa:40:31:bc:b4:27:6d:0d:fc:70:1a:a2: f4:b6:98:c9:f3:61:2a:9f:f3:46:3d:8b:01:e9:b4:0a:1a:54: ea:d4:47:11:30:9d:54:ba:22:c7:28:1a:88:7e:e0:80:2a:7b: 03:ac:3f:e0:00:f8:28:98:55:56:fa:32:77:d9:0f:26:f2:3f: 5c:ff:37:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDofAZ3cbF/vUmXQu+hD/DSIfszkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDBCRDc1Q0FEM0EzMDNFQzcyRjFBRDBCMjM2NUVF OTVEMzkwRjAeFw0yNTExMDIyMzM5MDFaFw0yNTExMDQwMjIyMDFaMDMxMTAvBgNV BAMTKDI3NDIyNjRFREI0QUM1NDY0MjREODAzQ0VERkEwOEM2Njg4NzNEQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJpI906vvbKDFzT7AWOVuwxD/q n3vFQ8oMP2+E7c4GhMNEiSOmyW9XWWpf3yCFxYMRgtFhGwszG6XaZTzr0vKi3Wsg d3OQK+045tPpru+Znzp/TpEFFph/g17ZNsRTJrGmARvaNzh7Jw7KZ8jYPsbKVG2+ QcM1u8dMnFsXFOaPd30/IkboWh/s/8Ozus0Q8ioZWlsY0tNHXspqy9DZE0yQgve+ EXTENLVyNVQaEWe9biJhw6iyb77eObFWJnjsBPe+7H5Qr06yewYoN5lj6+oLo9eJ Et63cHbdTg/Amo5+wvilmhV6HE4l8AgNEfmEhInEbg/phRAteS/GtTqoLCORAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJ0ImTttKxUZCTYA87foIxmiHPccwHwYDVR0j BBgwFoAUu+0L11ytOjA+xy8a0LI2XuldOQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3pKYTRjYXN2aGNqRDJobkhtNWpBYXdjdFJrTmFnR25MQjY1M3VxOEhE Y04vMS9CQkVEMEJENzVDQUQzQTMwM0VDNzJGMUFEMEIyMzY1RUU5NUQzOTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCRUQwQkQ3NUNBRDNBMzAz RUM3MkYxQUQwQjIzNjVFRTk1RDM5MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3pKYTRjYXN2aGNqRDJobkhtNWpBYXdjdFJrTmFnR25MQjY1M3VxOEhEY04vMS9C QkVEMEJENzVDQUQzQTMwM0VDNzJGMUFEMEIyMzY1RUU5NUQzOTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmSCDyeWdPhJh9J0ianSzsi8x32zI2z+zZp5CBoQFcXSMkST1MkxyA2hzguR1 B6qO3dZvFX6o6HAE8d8TBxFKp0Zpe7PRK0tUwKn3M8xdrmdQJBRMPd/yyeHITmf2 XnGYDXc/osazKOC4gfzAM9f+bo2Uxyy9maqg8zqYLOdeWMFhV6Z4HzEhQRFWUjKL /T3z08RrJ5pl8vaHFWgaZIg2jiQjWlytGhf7Fq/BeJp3MHKkYEbtM8ir3e/r+kAx vLQnbQ38cBqi9LaYyfNhKp/zRj2LAem0ChpU6tRHETCdVLoixygaiH7ggCp7A6w/ 4AD4KJhVVvoyd9kPJvI/XP83+w== -----END CERTIFICATE-----Generated at Mon Nov 3 12:35:04 2025 by rpki-client