$ rpki-client -vvf rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft File: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft (raw, json) Hash identifier: G7aHjjilENKc1v0sfkXVM/nTpA9tMdRehg2InPoB0g0= Subject key identifier: A7:8B:11:C3:4C:DA:54:11:62:16:9E:08:04:71:33:A8:6F:7C:34:B9 Authority key identifier: 1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 Certificate issuer: /CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Certificate serial: 09A139265FDE283324B7F04E16DE6069CF84784F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft Manifest number: 02FC Signing time: Mon 03 Nov 2025 00:06:32 +0000 Manifest this update: Mon 03 Nov 2025 00:01:32 +0000 Manifest next update: Tue 04 Nov 2025 03:53:32 +0000 Files and hashes: 1: 34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa (hash: 1C/jOWt5ZHfKspqIFOUeY8exgTDIPGSvNHULSTIuARE=) 2: 323830343a346566383a3a2f33322d3335203d3e20323638323935.roa (hash: BstW0UlvH2wEHgaNKCbfIv8DXJSe7M/kYqDRbvgjc5k=) 3: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl (hash: fsexxbyREhszrpZcOMw71MjuexdV3+kuW8uUqMdFxj0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a1:39:26:5f:de:28:33:24:b7:f0:4e:16:de:60:69:cf:84:78:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Validity Not Before: Nov 3 00:01:32 2025 GMT Not After : Nov 4 03:53:32 2025 GMT Subject: CN=A78B11C34CDA541162169E08047133A86F7C34B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:a8:c2:ee:ef:f4:89:d1:14:bf:6a:52:f3: 77:2c:ec:1a:c2:6b:8d:50:5f:5a:e2:30:fe:d3:8c: 28:77:07:04:96:ae:6a:3e:ab:17:be:25:4a:6d:70: 67:2f:b4:ba:20:ae:37:10:c9:c7:ab:0a:87:a6:03: a9:e2:e8:84:b8:7c:a5:c4:26:e3:b6:9d:90:73:53: 60:94:42:08:d6:13:5f:be:57:7c:14:d7:11:3c:e3: 1f:7b:87:f7:b9:0b:28:ae:96:9e:c9:0c:8c:07:8b: c4:79:df:18:9a:0f:56:62:e4:c5:ba:21:d2:5c:66: 06:db:78:9a:09:91:bc:3e:95:a4:24:8d:33:c4:8f: e9:38:ea:c4:66:e1:a5:9c:77:f4:b3:d2:53:3e:5c: d0:ad:78:31:9d:b2:8f:f4:51:c0:b5:bf:57:d2:f3: c6:29:f3:75:3e:32:9d:cf:38:d9:48:66:2a:7f:d8: 7e:8b:0a:d7:4a:23:de:bd:a4:e1:b2:cf:41:dc:2d: 81:11:c7:e6:a7:24:64:72:64:e4:29:1f:78:4b:c5: 4c:0a:36:09:f5:d1:0c:8c:b2:7d:02:9a:ce:aa:58: 3e:26:69:42:c1:af:f1:7d:7b:85:de:da:63:4e:02: c9:23:47:19:63:fd:1e:9a:16:26:82:f2:78:9c:ad: 68:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8B:11:C3:4C:DA:54:11:62:16:9E:08:04:71:33:A8:6F:7C:34:B9 X509v3 Authority Key Identifier: keyid:1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:78:16:b5:cd:a4:c1:d6:af:6e:14:c3:e4:95:9b:28:e9:38: 51:e8:43:c2:11:04:76:fb:d5:48:8d:9b:be:51:86:84:a1:a0: 3e:38:b2:bb:1f:b8:42:cb:c0:b0:ae:68:d5:23:5d:b9:3a:c4: dc:49:a8:7a:19:dc:7c:56:45:2b:9a:be:cb:0a:29:1a:55:74: 38:c4:c3:ad:75:0d:80:91:16:d5:62:01:de:0c:23:50:b2:91: ba:c9:50:1d:ac:0c:65:fb:d6:64:df:22:86:78:5c:41:9e:7e: da:c9:cc:2f:ff:77:3c:2b:1c:38:fd:cc:28:b1:f7:5d:ee:07: 87:79:87:1d:b0:6a:7e:7c:57:fa:25:25:8e:cf:94:63:a0:c9: 73:35:c3:a9:ae:b3:4f:29:e0:f7:99:5b:9e:0b:af:15:ee:e6: 23:e6:59:32:e9:74:42:50:53:7a:9a:a9:59:bb:9c:2b:d4:a9: a3:31:6a:05:6e:3f:4c:ab:fb:8a:62:5e:aa:22:af:0f:41:f8: 57:9a:59:ea:26:84:3d:8e:7e:3e:7a:4b:48:84:05:80:84:44: d1:c0:de:33:c3:af:c5:ed:82:a7:11:6a:af:87:09:1f:e8:7d: db:d8:b9:0b:e3:34:30:cc:5f:8e:04:ac:b3:de:e3:f2:0d:60: b0:b9:3d:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCaE5Jl/eKDMkt/BOFt5gac+EeE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMzYwOUQ5NjZERDhCMjJFNUZENTY2N0U0QkFDQUNF RkY4RDFGMDAeFw0yNTExMDMwMDAxMzJaFw0yNTExMDQwMzUzMzJaMDMxMTAvBgNV BAMTKEE3OEIxMUMzNENEQTU0MTE2MjE2OUUwODA0NzEzM0E4NkY3QzM0QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/QajC7u/0idEUv2pS83cs7BrC a41QX1riMP7TjCh3BwSWrmo+qxe+JUptcGcvtLogrjcQycerCoemA6ni6IS4fKXE JuO2nZBzU2CUQgjWE1++V3wU1xE84x97h/e5Cyiulp7JDIwHi8R53xiaD1Zi5MW6 IdJcZgbbeJoJkbw+laQkjTPEj+k46sRm4aWcd/Sz0lM+XNCteDGdso/0UcC1v1fS 88Yp83U+Mp3PONlIZip/2H6LCtdKI969pOGyz0HcLYERx+anJGRyZOQpH3hLxUwK Ngn10QyMsn0Cms6qWD4maULBr/F9e4Xe2mNOAskjRxlj/R6aFiaC8nicrWjVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUp4sRw0zaVBFiFp4IBHEzqG98NLkwHwYDVR0j BBgwFoAUG6NgnZZt2LIuX9VmfkusrO/40fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FI cm8vMS8xQkEzNjA5RDk2NkREOEIyMkU1RkQ1NjY3RTRCQUNBQ0VGRjhEMUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCQTM2MDlEOTY2REQ4QjIy RTVGRDU2NjdFNEJBQ0FDRUZGOEQxRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FIcm8vMS8x QkEzNjA5RDk2NkREOEIyMkU1RkQ1NjY3RTRCQUNBQ0VGRjhEMUYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqngWtc2kwdavbhTD5JWbKOk4UehDwhEEdvvVSI2bvlGGhKGgPjiyux+4QsvA sK5o1SNduTrE3EmoehncfFZFK5q+ywopGlV0OMTDrXUNgJEW1WIB3gwjULKRuslQ HawMZfvWZN8ihnhcQZ5+2snML/93PCscOP3MKLH3Xe4Hh3mHHbBqfnxX+iUljs+U Y6DJczXDqa6zTyng95lbnguvFe7mI+ZZMul0QlBTepqpWbucK9SpozFqBW4/TKv7 imJeqiKvD0H4V5pZ6iaEPY5+PnpLSIQFgIRE0cDeM8Ovxe2CpxFqr4cJH+h929i5 C+M0MMxfjgSss97j8g1gsLk9jQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:08:50 2025 by rpki-client