$ rpki-client -vvf rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft File: BA84972F94DED1627363CADBFA872D5EA75BBC41.mft (raw, json) Hash identifier: 9rpZcuUMUtLmYJMoz/7sonMkJv588smFR4lFwbUHxKI= Subject key identifier: 9A:04:AB:E9:11:20:CD:46:F1:4F:5E:3E:60:3F:84:02:AE:87:6A:1E Authority key identifier: BA:84:97:2F:94:DE:D1:62:73:63:CA:DB:FA:87:2D:5E:A7:5B:BC:41 Certificate issuer: /CN=BA84972F94DED1627363CADBFA872D5EA75BBC41 Certificate serial: 1C429BFE8F1818469BE46B3A211BF0A5652CF846 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.cer Subject info access: rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft Manifest number: 0307 Signing time: Mon 03 Nov 2025 08:40:00 +0000 Manifest this update: Mon 03 Nov 2025 08:35:00 +0000 Manifest next update: Tue 04 Nov 2025 11:59:00 +0000 Files and hashes: 1: 323830343a343265303a3a2f33322d3430203d3e20323637353333.roa (hash: DwVRyItCXzF1NtVNIos708VR3IDVRGGvieLyPzQ1SNM=) 2: BA84972F94DED1627363CADBFA872D5EA75BBC41.crl (hash: VPfbAL5Yn6DRhiW4LtUAJWqanYJJkuEmb8BR7FDMAGc=) 3: 3230312e3138322e3230382e302f32322d3234203d3e20323637353333.roa (hash: J75ECnCGWT3/QlstX8KFpRGVD+pIEpadI6pQTJRH+bU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.crl rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:42:9b:fe:8f:18:18:46:9b:e4:6b:3a:21:1b:f0:a5:65:2c:f8:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA84972F94DED1627363CADBFA872D5EA75BBC41 Validity Not Before: Nov 3 08:35:00 2025 GMT Not After : Nov 4 11:59:00 2025 GMT Subject: CN=9A04ABE91120CD46F14F5E3E603F8402AE876A1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:65:ce:6b:bc:6d:c7:77:ec:b4:50:28:f9: 34:2c:89:0b:9c:37:ea:46:64:52:ea:66:7e:db:ea: b3:61:e1:37:8a:3e:89:01:32:9a:49:26:59:e0:08: cd:4b:c2:94:ed:21:3a:da:75:aa:4e:53:32:6f:55: ea:39:67:d1:24:c5:cc:61:53:77:11:46:e6:6e:15: eb:cc:7e:cf:6e:55:da:9d:33:b8:f9:77:15:37:9f: fe:86:14:5c:fb:72:0d:ce:94:01:6a:8b:7d:8f:94: b4:80:73:c1:b1:e8:d0:c0:4e:72:66:2f:ce:03:42: 9d:d9:4a:3d:7b:f7:b7:a4:17:16:22:6b:23:8e:fc: d3:6d:79:f9:5d:cd:dc:ec:bf:40:8b:78:fe:31:27: aa:16:a3:80:39:7e:4b:6d:6f:ca:3d:b8:ba:e5:d4: 6b:e4:a2:62:44:1d:4b:9c:6e:c1:53:60:ee:f0:88: ce:cc:f6:0d:2e:69:4a:bf:3f:c2:bc:a5:1e:e1:d3: 5c:cc:03:a2:b7:e0:2c:bf:5a:b0:e3:69:ef:b9:36: d9:dc:ae:ce:3d:b3:05:30:ce:d0:c7:15:e5:c9:93: 35:44:3a:01:50:fa:13:4d:e6:95:43:3e:0e:1f:d8: 4f:33:6e:25:51:d9:43:0c:17:f9:76:a1:c2:75:7b: 8c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:04:AB:E9:11:20:CD:46:F1:4F:5E:3E:60:3F:84:02:AE:87:6A:1E X509v3 Authority Key Identifier: keyid:BA:84:97:2F:94:DE:D1:62:73:63:CA:DB:FA:87:2D:5E:A7:5B:BC:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b7:4f:64:82:10:14:84:2e:1c:80:31:4b:d4:8a:81:48:29: 78:bb:f4:6b:dd:ed:02:e2:d1:15:a3:d8:d3:d8:03:93:88:2e: 53:11:68:b4:25:21:8b:2d:5c:11:c8:0c:fc:65:4d:4b:ea:97: 0e:c7:12:de:61:ee:34:6b:b3:81:a1:e8:f9:15:b4:de:5b:58: fd:bc:db:fd:4a:13:c0:5e:4c:99:d4:f6:f5:df:0a:41:9c:77: b4:78:48:47:92:6f:69:f1:10:8d:41:32:03:19:e4:9b:f1:40: 65:7b:23:93:ba:1f:86:e7:35:01:07:09:96:07:fd:3b:75:14: 8e:82:a8:e5:52:18:2b:a6:b8:3c:fe:e1:30:8a:5d:5a:f9:29: fc:9c:61:2c:86:a9:b5:02:98:7e:08:aa:76:ca:3f:0d:66:81: 0f:41:c7:26:be:16:55:11:b6:41:25:15:a3:69:1b:5f:4f:6d: 23:e1:88:25:d9:22:86:9a:7c:07:a3:5b:3b:47:36:f4:07:91: ac:3f:07:5d:2a:7e:a0:ad:d0:fb:27:c7:40:19:12:8e:2b:db: 27:2b:c1:dd:f6:1b:c7:e0:b9:82:c6:b3:95:3f:5b:3b:4c:b4: 01:16:05:a1:44:7c:de:db:b0:98:c5:9f:6e:6a:03:fa:22:7a: 54:00:c8:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHEKb/o8YGEab5Gs6IRvwpWUs+EYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE4NDk3MkY5NERFRDE2MjczNjNDQURCRkE4NzJENUVB NzVCQkM0MTAeFw0yNTExMDMwODM1MDBaFw0yNTExMDQxMTU5MDBaMDMxMTAvBgNV BAMTKDlBMDRBQkU5MTEyMENENDZGMTRGNUUzRTYwM0Y4NDAyQUU4NzZBMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmWXOa7xtx3fstFAo+TQsiQuc N+pGZFLqZn7b6rNh4TeKPokBMppJJlngCM1LwpTtITradapOUzJvVeo5Z9Ekxcxh U3cRRuZuFevMfs9uVdqdM7j5dxU3n/6GFFz7cg3OlAFqi32PlLSAc8Gx6NDATnJm L84DQp3ZSj1797ekFxYiayOO/NNtefldzdzsv0CLeP4xJ6oWo4A5fkttb8o9uLrl 1GvkomJEHUucbsFTYO7wiM7M9g0uaUq/P8K8pR7h01zMA6K34Cy/WrDjae+5Ntnc rs49swUwztDHFeXJkzVEOgFQ+hNN5pVDPg4f2E8zbiVR2UMMF/l2ocJ1e4yBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmgSr6REgzUbxT14+YD+EAq6Hah4wHwYDVR0j BBgwFoAUuoSXL5Te0WJzY8rb+octXqdbvEEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNTJlMlVqeFNwN0trb0hVRnhkTnFxUTFkUXpMd1pLRUsyUnZucmRLR0pE cGQvMS9CQTg0OTcyRjk0REVEMTYyNzM2M0NBREJGQTg3MkQ1RUE3NUJCQzQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBODQ5NzJGOTRERUQxNjI3 MzYzQ0FEQkZBODcyRDVFQTc1QkJDNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NTJlMlVqeFNwN0trb0hVRnhkTnFxUTFkUXpMd1pLRUsyUnZucmRLR0pEcGQvMS9C QTg0OTcyRjk0REVEMTYyNzM2M0NBREJGQTg3MkQ1RUE3NUJCQzQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWLdPZIIQFIQuHIAxS9SKgUgpeLv0a93tAuLRFaPY09gDk4guUxFotCUhiy1c EcgM/GVNS+qXDscS3mHuNGuzgaHo+RW03ltY/bzb/UoTwF5MmdT29d8KQZx3tHhI R5JvafEQjUEyAxnkm/FAZXsjk7ofhuc1AQcJlgf9O3UUjoKo5VIYK6a4PP7hMIpd Wvkp/JxhLIaptQKYfgiqdso/DWaBD0HHJr4WVRG2QSUVo2kbX09tI+GIJdkihpp8 B6NbO0c29AeRrD8HXSp+oK3Q+yfHQBkSjivbJyvB3fYbx+C5gsazlT9bO0y0ARYF oUR83tuwmMWfbmoD+iJ6VADItA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:37:02 2025 by rpki-client