$ rpki-client -vvvf rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft File: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft (raw, json) Hash identifier: IDzUv6ylMmWyLlqGzXeL4UUDUYkTHk9Y1HYsnmTSZgI= Subject key identifier: 41:FE:7B:F9:CA:8C:3B:F4:4D:07:2C:E3:B4:9B:0C:FE:47:8B:7B:59 Authority key identifier: BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46 Certificate issuer: /CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46 Certificate serial: 45D40A0F62DBA61645ED076E270B90DED4FFC7F4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer Subject info access: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft Manifest number: 0220 Signing time: Mon 24 Aug 2026 18:23:41 +0000 Manifest this update: Mon 24 Aug 2026 18:18:41 +0000 Manifest next update: Tue 25 Aug 2026 19:13:41 +0000 Files and hashes: 1: 3133382e3138362e31362e302f32322d3234203d3e203631363233.roa (hash: JWwJnqFVLfb7s0xn8ymrfclHa6+SS+4LbQrsuCJSidU=) 2: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl (hash: bRU+D8vW75fbgvcb75J8+XvgQbwc2SDa8xrXnahcGd0=) 3: 323830343a393339303a3a2f33322d3438203d3e203631363233.roa (hash: 0mBVU5bm7ldkU6cYtpxhWg0AeGhrGxzEpD8Dgrk4UDk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 25 Aug 2026 19:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d4:0a:0f:62:db:a6:16:45:ed:07:6e:27:0b:90:de:d4:ff:c7:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46 Validity Not Before: Aug 24 18:18:41 2026 GMT Not After : Aug 25 19:13:41 2026 GMT Subject: CN=41FE7BF9CA8C3BF44D072CE3B49B0CFE478B7B59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:02:78:65:09:dd:16:d3:35:39:a9:62:b5: 89:98:d4:5f:da:60:0e:a6:2c:ab:c0:cf:3e:83:b7: 43:03:06:97:3b:19:6d:45:a2:46:6a:60:68:34:27: b3:8d:51:cc:df:45:27:cd:84:c5:c3:ef:14:6a:3e: 55:6c:1b:68:7f:55:a4:f8:82:c6:0a:d8:cc:be:5a: ae:82:8f:25:fa:18:9a:66:85:a9:6f:45:bc:93:b0: f9:c1:e5:5b:c3:20:f9:c4:0f:8a:b5:aa:a4:1f:4a: 3c:e9:6c:80:42:fe:ef:17:4d:2a:ec:a5:4d:2a:8c: 51:f7:bb:40:15:6b:cb:32:86:fc:c5:81:0d:fc:2a: fc:2d:37:2d:a9:4a:08:2a:39:53:92:aa:30:84:65: 79:49:4c:0c:96:0f:a5:eb:7a:40:e9:5a:e4:1f:b4: 55:ce:8b:f0:4e:25:35:e8:d6:42:65:6c:b4:ea:dc: cc:a4:4d:d4:29:80:99:27:95:67:c8:b3:ba:61:80: 16:bd:7a:d5:a4:0a:81:1c:21:65:65:30:73:41:04: 08:2a:fd:8f:de:cb:ca:e5:81:cd:3c:50:7d:6e:1a: 3d:3c:0c:80:a6:5c:04:51:3c:aa:d9:c3:10:0a:e2: 5e:ed:8c:52:65:31:9c:76:e4:e4:ea:b7:e0:f2:10: 4e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FE:7B:F9:CA:8C:3B:F4:4D:07:2C:E3:B4:9B:0C:FE:47:8B:7B:59 X509v3 Authority Key Identifier: keyid:BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:94:6d:94:dc:31:d2:2a:22:49:b1:43:42:ba:f9:70:6f:ee: 7e:80:dd:c2:ef:75:55:8d:81:07:d5:46:2c:d8:21:5d:d0:b6: 07:6a:3a:58:5e:0b:40:73:f9:89:6e:4c:cd:d4:77:77:05:ba: 3d:b0:67:38:8b:cf:93:0a:c9:3c:da:b0:56:49:d4:08:bf:46: c5:a1:97:34:5b:2d:48:75:4f:51:18:7d:30:a1:50:06:8c:9c: 13:9d:38:da:ab:37:a9:5c:a2:1d:41:4b:64:c5:92:ec:15:77: 7c:9d:8d:fa:4c:87:1b:99:20:63:30:f3:df:2e:f8:68:f7:7d: 2f:7c:91:cb:6d:84:79:f0:c0:92:77:26:3e:89:e8:c0:5d:70: 31:08:e0:9b:11:d3:24:fc:d7:2a:e4:95:35:2c:24:8d:b8:c6: 33:1e:fc:a7:83:80:4f:3b:8b:bb:a1:cc:e7:b5:cf:ce:15:10: 46:2e:fd:05:eb:e8:09:44:a6:0f:17:f3:dd:64:e7:24:94:aa: 3c:11:17:06:b4:1d:c2:af:ab:88:00:9e:ce:7f:3f:b1:61:95: 58:1b:5d:f6:a9:10:c0:91:4a:77:46:19:31:ea:47:c7:f2:6f: 2c:02:9e:b8:88:5a:b1:37:3e:b9:4c:b0:43:f4:64:04:82:39: f4:d7:e7:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURdQKD2LbphZF7QduJwuQ3tT/x/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1N0QyMzlEMkRDMEFDMjU3MzczQTdCQkFENTE4ODZB QTVENEM0NjAeFw0yNjA4MjQxODE4NDFaFw0yNjA4MjUxOTEzNDFaMDMxMTAvBgNV BAMTKDQxRkU3QkY5Q0E4QzNCRjQ0RDA3MkNFM0I0OUIwQ0ZFNDc4QjdCNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJQJ4ZQndFtM1OalitYmY1F/a YA6mLKvAzz6Dt0MDBpc7GW1FokZqYGg0J7ONUczfRSfNhMXD7xRqPlVsG2h/VaT4 gsYK2My+Wq6CjyX6GJpmhalvRbyTsPnB5VvDIPnED4q1qqQfSjzpbIBC/u8XTSrs pU0qjFH3u0AVa8syhvzFgQ38KvwtNy2pSggqOVOSqjCEZXlJTAyWD6XrekDpWuQf tFXOi/BOJTXo1kJlbLTq3MykTdQpgJknlWfIs7phgBa9etWkCoEcIWVlMHNBBAgq /Y/ey8rlgc08UH1uGj08DICmXARRPKrZwxAK4l7tjFJlMZx25OTqt+DyEE4JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQf57+cqMO/RNByzjtJsM/keLe1kwHwYDVR0j BBgwFoAUulfSOdLcCsJXNzp7utUYhqpdTEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGRCS2JHaU5vN0YyWjdiR0JRTXNlM3JySk5YZ2pOVjVLVlIyRGhHV1NL YTUvMC9CQTU3RDIzOUQyREMwQUMyNTczNzNBN0JCQUQ1MTg4NkFBNUQ0QzQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNTdEMjM5RDJEQzBBQzI1 NzM3M0E3QkJBRDUxODg2QUE1RDRDNDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGRCS2JHaU5vN0YyWjdiR0JRTXNlM3JySk5YZ2pOVjVLVlIyRGhHV1NLYTUvMC9C QTU3RDIzOUQyREMwQUMyNTczNzNBN0JCQUQ1MTg4NkFBNUQ0QzQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiJRtlNwx0ioiSbFDQrr5cG/ufoDdwu91VY2BB9VGLNghXdC2B2o6WF4LQHP5 iW5MzdR3dwW6PbBnOIvPkwrJPNqwVknUCL9GxaGXNFstSHVPURh9MKFQBoycE504 2qs3qVyiHUFLZMWS7BV3fJ2N+kyHG5kgYzDz3y74aPd9L3yRy22EefDAkncmPono wF1wMQjgmxHTJPzXKuSVNSwkjbjGMx78p4OATzuLu6HM57XPzhUQRi79BevoCUSm Dxfz3WTnJJSqPBEXBrQdwq+riACezn8/sWGVWBtd9qkQwJFKd0YZMepHx/JvLAKe uIhasTc+uUywQ/RkBII59Nfn7A== -----END CERTIFICATE-----Generated at Tue Aug 25 09:14:19 2026 by rpki-client