$ rpki-client -vvf rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft File: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft (raw, json) Hash identifier: NRGhol0WilW2l+IUK+rXJMiKIEt1SLMvbHL8QUKat64= Subject key identifier: 48:82:1D:11:A5:5C:D7:13:59:13:BC:96:55:D0:9B:D1:9B:14:69:E8 Authority key identifier: 1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 Certificate issuer: /CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Certificate serial: 1BAFF2E9A542489AB23FCD6AA6045EC4B3027308 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft Manifest number: 0276 Signing time: Thu 24 Jul 2025 18:14:22 +0000 Manifest this update: Thu 24 Jul 2025 18:09:22 +0000 Manifest next update: Fri 25 Jul 2025 20:52:22 +0000 Files and hashes: 1: 323830343a346566383a3a2f33322d3335203d3e20323638323935.roa (hash: BstW0UlvH2wEHgaNKCbfIv8DXJSe7M/kYqDRbvgjc5k=) 2: 34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa (hash: 1C/jOWt5ZHfKspqIFOUeY8exgTDIPGSvNHULSTIuARE=) 3: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl (hash: rOe8N4tHxvVNJskdHzGDNn3RMwOVwfhCc1Agwi/OYbc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 20:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:af:f2:e9:a5:42:48:9a:b2:3f:cd:6a:a6:04:5e:c4:b3:02:73:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Validity Not Before: Jul 24 18:09:22 2025 GMT Not After : Jul 25 20:52:22 2025 GMT Subject: CN=48821D11A55CD7135913BC9655D09BD19B1469E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ec:bf:ae:b9:df:ee:79:d5:a6:37:86:48:9f: 3e:4f:da:38:55:82:48:47:98:b2:72:d9:96:66:c2: 98:b8:c0:f1:2d:70:1b:76:15:10:83:53:5a:43:94: 20:f4:e5:25:86:f9:01:a3:8e:0e:56:f7:61:29:64: 60:b6:8d:d1:45:e4:b1:45:a1:3b:08:d6:23:32:48: 53:ec:93:d6:b0:e1:c7:de:dc:6e:de:86:16:0d:65: cc:ba:09:84:11:b6:8e:3f:b9:df:33:5a:5c:c9:56: 58:a2:8f:40:75:af:33:01:52:9e:d4:f5:e4:b1:24: 0e:aa:a9:f7:e2:42:ad:5a:72:24:e1:1d:5f:07:af: eb:d3:d1:6a:1e:12:ba:dc:41:39:17:3e:81:3c:de: 9f:1c:c0:13:8d:1c:76:d0:a1:9e:86:b8:1d:8f:d1: 92:02:e5:20:be:a4:e2:93:d2:b1:a1:3f:fc:72:91: a4:a7:7c:44:53:0f:14:a9:c8:3f:02:b1:0f:c4:1c: b2:74:2a:62:66:d2:18:74:95:d5:68:cf:01:34:c0: 26:6d:19:a6:94:f9:7c:ec:c2:d7:41:aa:63:c6:0f: 17:d5:8c:9f:50:62:7e:50:56:1c:f9:81:a7:d3:8b: 4d:f3:19:84:71:23:3f:85:e0:2a:88:4f:9d:1c:dd: 51:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:82:1D:11:A5:5C:D7:13:59:13:BC:96:55:D0:9B:D1:9B:14:69:E8 X509v3 Authority Key Identifier: keyid:1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:64:d8:7d:7a:fd:8b:71:d6:3f:9f:d4:80:22:cd:11:67:46: 86:ee:ea:b5:8f:8d:03:82:e5:5d:aa:76:e1:5e:b3:2b:2a:9b: 01:7d:47:76:79:1b:07:7e:e1:a9:50:d6:a2:58:38:94:97:4f: 4a:39:12:53:7b:0f:f5:68:6d:a0:1c:26:ab:17:ee:8a:f9:e3: ef:86:af:7e:04:ec:76:e9:79:25:8a:87:a6:20:27:21:af:29: 02:69:60:c3:46:84:4c:3e:af:1b:cd:a7:40:e9:d6:10:a5:25: 92:46:60:7c:03:01:9f:0b:7d:fe:5f:c2:6c:6a:57:6e:b8:7e: 1e:c9:94:1f:18:54:28:94:47:e7:f2:8d:b4:a9:1d:4c:a5:16: 5f:cb:41:ae:a6:d8:4f:30:1d:2c:9d:49:c4:b1:fc:9e:64:4d: 88:5f:fc:31:08:cb:dd:3f:63:55:9f:07:22:16:7b:f6:1f:22: 16:03:c0:b0:eb:24:94:89:14:fd:6c:11:5c:bc:db:61:d9:c2: c9:19:17:fe:92:26:e2:75:a6:d6:97:57:1a:0a:58:c7:13:dc: b8:4a:52:07:b4:22:56:78:5b:e4:fb:e8:d6:07:4a:f6:d8:a1: 38:a6:1a:b4:4f:f7:8c:a0:29:02:01:ee:96:72:a2:49:9e:8c: be:77:ae:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUG6/y6aVCSJqyP81qpgRexLMCcwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMzYwOUQ5NjZERDhCMjJFNUZENTY2N0U0QkFDQUNF RkY4RDFGMDAeFw0yNTA3MjQxODA5MjJaFw0yNTA3MjUyMDUyMjJaMDMxMTAvBgNV BAMTKDQ4ODIxRDExQTU1Q0Q3MTM1OTEzQkM5NjU1RDA5QkQxOUIxNDY5RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT7L+uud/uedWmN4ZInz5P2jhV gkhHmLJy2ZZmwpi4wPEtcBt2FRCDU1pDlCD05SWG+QGjjg5W92EpZGC2jdFF5LFF oTsI1iMySFPsk9aw4cfe3G7ehhYNZcy6CYQRto4/ud8zWlzJVliij0B1rzMBUp7U 9eSxJA6qqffiQq1aciThHV8Hr+vT0WoeErrcQTkXPoE83p8cwBONHHbQoZ6GuB2P 0ZIC5SC+pOKT0rGhP/xykaSnfERTDxSpyD8CsQ/EHLJ0KmJm0hh0ldVozwE0wCZt GaaU+XzswtdBqmPGDxfVjJ9QYn5QVhz5gafTi03zGYRxIz+F4CqIT50c3VGFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSIIdEaVc1xNZE7yWVdCb0ZsUaegwHwYDVR0j BBgwFoAUG6NgnZZt2LIuX9VmfkusrO/40fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FI cm8vMS8xQkEzNjA5RDk2NkREOEIyMkU1RkQ1NjY3RTRCQUNBQ0VGRjhEMUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCQTM2MDlEOTY2REQ4QjIy RTVGRDU2NjdFNEJBQ0FDRUZGOEQxRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FIcm8vMS8x QkEzNjA5RDk2NkREOEIyMkU1RkQ1NjY3RTRCQUNBQ0VGRjhEMUYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ2TYfXr9i3HWP5/UgCLNEWdGhu7qtY+NA4LlXap24V6zKyqbAX1HdnkbB37h qVDWolg4lJdPSjkSU3sP9WhtoBwmqxfuivnj74avfgTsdul5JYqHpiAnIa8pAmlg w0aETD6vG82nQOnWEKUlkkZgfAMBnwt9/l/CbGpXbrh+HsmUHxhUKJRH5/KNtKkd TKUWX8tBrqbYTzAdLJ1JxLH8nmRNiF/8MQjL3T9jVZ8HIhZ79h8iFgPAsOsklIkU /WwRXLzbYdnCyRkX/pIm4nWm1pdXGgpYxxPcuEpSB7QiVnhb5Pvo1gdK9tihOKYa tE/3jKApAgHulnKiSZ6Mvneuvw== -----END CERTIFICATE-----Generated at Fri Jul 25 12:55:59 2025 by rpki-client