$ rpki-client -vvf rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft File: BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft (raw, json) Hash identifier: TP6kpHhRpFgEnJzwd3m0TUmamzjHpu1DstD7AmBsE70= Subject key identifier: 4A:8B:AD:F9:3A:C4:F8:A2:34:F5:26:AA:C4:28:87:A5:6E:A9:47:F5 Authority key identifier: BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E Certificate issuer: /CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E Certificate serial: 23A790376BAAB3B25307A9260C6DB01D8FE57483 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft Manifest number: 12 Signing time: Mon 03 Nov 2025 00:53:52 +0000 Manifest this update: Mon 03 Nov 2025 00:48:52 +0000 Manifest next update: Tue 04 Nov 2025 03:27:52 +0000 Files and hashes: 1: BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl (hash: TB1d65wxtmdKAQIq8yjwml3BRwmuhya54nfsEJG1tZA=) 2: 34352e37312e34382e302f32322d3234203d3e203631353836.roa (hash: 50nfXV1vfz6ixz96BZYaoDznaTp9SqqgyXgtQ8vAMVM=) 3: 323830343a343465303a3a2f33322d3438203d3e203631353836.roa (hash: EE+epePHX3kApXSOd4NEAz7bQWCJ2iABI0JjgleyzM0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a7:90:37:6b:aa:b3:b2:53:07:a9:26:0c:6d:b0:1d:8f:e5:74:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E Validity Not Before: Nov 3 00:48:52 2025 GMT Not After : Nov 4 03:27:52 2025 GMT Subject: CN=4A8BADF93AC4F8A234F526AAC42887A56EA947F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:db:e1:4a:f2:ac:82:57:49:dd:4e:39:cb:13: 6a:74:5e:65:7e:5d:a4:b8:ca:22:52:46:df:ed:5a: 95:18:94:dc:8f:46:58:4c:ea:0a:d3:3a:56:d2:be: 0f:9d:23:21:85:e5:c1:89:0f:05:85:c3:0c:63:d6: ba:a0:7c:f3:d5:90:19:4a:fc:bb:80:11:cf:32:56: a2:08:98:1c:4f:11:b7:74:5a:9d:73:2b:08:34:d8: 47:5e:a8:b4:61:08:36:07:66:76:40:e5:9a:ac:ed: 09:13:2a:f1:19:8c:fe:5e:0e:57:94:30:f1:ee:d4: b0:72:9e:70:4c:7a:8f:2b:ab:0f:f2:9a:58:bb:73: 08:94:b0:b4:1a:7f:14:ea:54:d5:6b:d6:f9:48:b5: 19:c2:e1:39:fc:be:39:3d:b7:56:cc:a8:35:dd:d1: 98:dd:31:d8:17:1c:ad:37:f5:e8:48:26:81:3e:1f: 98:b6:59:af:ee:92:2a:d7:99:0e:5a:fb:64:21:d0: fb:66:97:5d:b9:0c:7f:63:3f:93:51:5d:88:f4:2d: af:a8:8d:f6:ee:55:e7:a6:1d:ed:48:54:60:8f:b6: e2:a9:61:3b:7b:2b:b4:a9:8c:e1:24:53:f2:6c:c5: 45:61:69:bc:ef:8c:3d:dd:20:8e:11:7a:a4:10:ab: 50:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8B:AD:F9:3A:C4:F8:A2:34:F5:26:AA:C4:28:87:A5:6E:A9:47:F5 X509v3 Authority Key Identifier: keyid:BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:48:40:ed:c6:b0:53:17:d9:b3:ee:92:2a:f0:4a:d5:16:0a: d6:5e:8d:d2:82:dc:9e:52:ea:7c:31:98:9c:c7:16:dc:83:ae: a9:b7:43:06:8a:bd:97:96:26:64:4b:4d:e3:9d:0a:e6:de:06: 15:96:3b:29:0c:0f:4c:c9:cb:a7:23:bf:5b:6b:d5:42:89:50: 3a:05:64:4f:75:be:00:c2:92:6f:45:78:1a:84:e4:af:94:87: f0:98:21:2f:72:ce:18:1d:be:08:49:21:17:94:6d:80:9c:cf: d0:0a:70:32:88:91:58:16:a5:dd:b1:ce:66:58:d5:8b:07:6f: 83:4f:36:48:4f:08:9d:a9:83:02:1d:f8:7c:9b:a8:0e:58:58: 45:51:8c:da:37:66:b5:3d:94:33:e3:8a:6b:eb:83:ae:42:f5: 0d:4f:d3:68:5d:b7:49:9c:98:b7:64:a5:56:71:19:84:4f:89: 50:e5:4f:2c:1c:b0:23:6a:9b:e3:f9:d1:7e:d9:3b:b8:e3:87: 96:cd:56:91:b8:cb:3b:db:c0:0c:e8:7e:75:c8:db:0c:d5:34: 74:4f:38:32:e6:fd:10:64:80:07:db:3d:bc:d3:c4:73:88:cc: b0:29:cb:da:46:2b:c0:23:c9:90:d3:d9:11:4f:78:38:5d:7a: 87:14:aa:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI6eQN2uqs7JTB6kmDG2wHY/ldIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyNUMxNTJCQUNGRDJERDk4OEUyM0U5Qzk3QUExQUVC NEJBNUIzRTAeFw0yNTExMDMwMDQ4NTJaFw0yNTExMDQwMzI3NTJaMDMxMTAvBgNV BAMTKDRBOEJBREY5M0FDNEY4QTIzNEY1MjZBQUM0Mjg4N0E1NkVBOTQ3RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU2+FK8qyCV0ndTjnLE2p0XmV+ XaS4yiJSRt/tWpUYlNyPRlhM6grTOlbSvg+dIyGF5cGJDwWFwwxj1rqgfPPVkBlK /LuAEc8yVqIImBxPEbd0Wp1zKwg02EdeqLRhCDYHZnZA5Zqs7QkTKvEZjP5eDleU MPHu1LBynnBMeo8rqw/ymli7cwiUsLQafxTqVNVr1vlItRnC4Tn8vjk9t1bMqDXd 0ZjdMdgXHK039ehIJoE+H5i2Wa/ukirXmQ5a+2Qh0Ptml125DH9jP5NRXYj0La+o jfbuVeemHe1IVGCPtuKpYTt7K7SpjOEkU/JsxUVhabzvjD3dII4ReqQQq1CHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSout+TrE+KI09SaqxCiHpW6pR/UwHwYDVR0j BBgwFoAUviXBUrrP0t2YjiPpyXqhrrS6Wz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGM3SzJVdjVEejFieGlIWG5NTW1vR2RnZlhyb1E2Y1V3Y045dFVBbUdo cHYvMC9CRTI1QzE1MkJBQ0ZEMkREOTg4RTIzRTlDOTdBQTFBRUI0QkE1QjNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFMjVDMTUyQkFDRkQyREQ5 ODhFMjNFOUM5N0FBMUFFQjRCQTVCM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGM3SzJVdjVEejFieGlIWG5NTW1vR2RnZlhyb1E2Y1V3Y045dFVBbUdocHYvMC9C RTI1QzE1MkJBQ0ZEMkREOTg4RTIzRTlDOTdBQTFBRUI0QkE1QjNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFkhA7cawUxfZs+6SKvBK1RYK1l6N0oLcnlLqfDGYnMcW3IOuqbdDBoq9l5Ym ZEtN450K5t4GFZY7KQwPTMnLpyO/W2vVQolQOgVkT3W+AMKSb0V4GoTkr5SH8Jgh L3LOGB2+CEkhF5RtgJzP0ApwMoiRWBal3bHOZljViwdvg082SE8InamDAh34fJuo DlhYRVGM2jdmtT2UM+OKa+uDrkL1DU/TaF23SZyYt2SlVnEZhE+JUOVPLBywI2qb 4/nRftk7uOOHls1WkbjLO9vADOh+dcjbDNU0dE84Mub9EGSAB9s9vNPEc4jMsCnL 2kYrwCPJkNPZEU94OF16hxSqkg== -----END CERTIFICATE-----Generated at Mon Nov 3 18:52:57 2025 by rpki-client