$ rpki-client -vvf rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.mft File: BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.mft (raw, json) Hash identifier: rqv07DKd1C/BB0mN/xayhR5Z0sVEelZCfGdZqMV5geg= Subject key identifier: D8:0A:78:6B:F0:68:95:08:B0:84:F8:0C:1B:80:B5:CA:87:29:B5:3F Authority key identifier: BA:52:32:3C:04:B0:A7:0C:E8:E3:19:19:CE:6C:C8:BF:DA:3D:25:71 Certificate issuer: /CN=BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571 Certificate serial: 34D184E6EB7FBD75058171340BFF99D56A1FAC3C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.cer Subject info access: rsync://rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.mft Manifest number: 58 Signing time: Wed 05 Nov 2025 12:48:05 +0000 Manifest this update: Wed 05 Nov 2025 12:43:04 +0000 Manifest next update: Thu 06 Nov 2025 16:23:04 +0000 Files and hashes: 1: 3138372e31392e302e302f32302d3234203d3e20323733373732.roa (hash: rBUcPreq8zbepd40IAQI6yE4iKA5Qln5t14lwCFVkBo=) 2: 3137372e3132352e3132382e302f32322d3234203d3e20323632333434.roa (hash: u9UeKbx4FcpGTjJ1bJCBWQFeQp6MwY/Kx450+8R+jTw=) 3: 3138392e3131332e3230382e302f32312d3234203d3e20323632333434.roa (hash: Gw0w6/XHY5uXKKoYqHsoCvzCsfCKEZbo5G7i3zFpGms=) 4: 323830343a386266633a3a2f33322d3438203d3e20323733373732.roa (hash: hPLGbkZpq6Hh/FzDP3WLvcuRJVW4ZgPLFOTAGf4jPrQ=) 5: BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.crl (hash: e4MqeCP7LJyhIGVT9yKs5KwzZbX0rV92XL2vlhJZnlk=) 6: 323830343a3831303a3a2f33322d3438203d3e20323632333434.roa (hash: aUfa68wfYSWsbQ60Z5lQBS/ZV9FGI7Y3i3goDCLHiQU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.crl rsync://rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 16:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d1:84:e6:eb:7f:bd:75:05:81:71:34:0b:ff:99:d5:6a:1f:ac:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571 Validity Not Before: Nov 5 12:43:04 2025 GMT Not After : Nov 6 16:23:04 2025 GMT Subject: CN=D80A786BF0689508B084F80C1B80B5CA8729B53F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:38:d1:c3:83:8e:e8:e7:67:4f:b0:d0:7e:22: e9:02:c9:2a:fa:2e:27:96:4d:0e:fd:e5:d3:ec:30: 49:a6:c4:75:f7:64:a7:7e:e5:77:a4:20:a0:c5:36: 2a:03:c7:ca:95:56:68:c9:64:8a:7f:14:9d:e4:1c: 1b:d6:6c:d6:b3:10:01:a8:75:68:40:a3:99:05:ba: 86:ff:93:cc:b0:e5:4d:49:f6:04:37:56:db:00:9f: 54:cf:1e:7b:e1:0b:15:d7:f9:a1:7e:02:18:7d:b6: 8a:70:79:16:88:f2:10:67:ec:3d:4d:28:bc:89:63: 26:9a:54:f8:12:4e:f7:e6:e0:46:94:9c:0d:d0:96: 48:44:36:d9:79:57:14:9e:c7:04:1a:1b:f3:20:61: 5d:15:81:a3:1d:01:a1:1c:c2:70:b1:e8:56:c1:09: 9f:d4:ad:3d:a8:0b:b9:5b:54:8e:35:eb:87:ca:92: ca:96:66:8d:ee:03:86:98:92:7d:38:32:d5:98:22: fd:a9:3b:6c:cf:c9:60:84:03:4e:ca:df:f2:ea:4e: 6e:8f:50:b8:7e:b5:d2:c7:e3:e4:1e:74:8e:1c:d8: 9e:72:db:ef:70:48:2c:60:cc:07:ca:f4:3f:b0:d2: d6:31:d2:24:8e:12:84:22:da:96:ba:10:94:85:ee: 07:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0A:78:6B:F0:68:95:08:B0:84:F8:0C:1B:80:B5:CA:87:29:B5:3F X509v3 Authority Key Identifier: keyid:BA:52:32:3C:04:B0:A7:0C:E8:E3:19:19:CE:6C:C8:BF:DA:3D:25:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/86sMsC1MCUCJao8dkGkW6SjACZcQwMXf8Ser1VejreFm/0/BA52323C04B0A70CE8E31919CE6CC8BFDA3D2571.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b5:ee:26:86:d8:81:4d:53:d8:5f:72:5c:09:8d:97:3f:dc: 89:2f:ff:ed:b1:fd:74:2b:8e:c8:45:6e:74:02:b6:a4:c1:82: 95:b1:1e:c4:b9:3a:b1:06:7d:6d:6a:e6:a5:51:f0:39:01:32: c4:91:86:64:be:50:53:99:d6:1b:4d:43:c5:2c:c2:fc:7a:f7: 7a:75:4d:56:34:35:cd:43:71:fa:20:62:80:9b:85:ab:e1:e7: ee:02:83:3d:ec:a4:b5:8f:12:2b:7f:99:fc:b8:f7:62:f8:9c: ca:ce:a3:b5:b4:75:a6:af:48:c5:08:51:2b:c9:2a:70:47:6e: 6b:a6:23:74:56:c0:88:47:3d:13:4b:84:99:60:07:e5:5c:61: fd:6b:f1:31:0e:0a:5a:90:fc:8b:8e:ed:31:cd:8d:d8:21:ee: b9:be:59:d9:bb:32:b6:c6:3e:d8:27:ba:9c:49:b8:da:52:60: 3e:8f:ad:fc:85:27:ab:81:87:ab:5b:71:bb:95:04:68:6a:c5: 4a:2b:d3:8f:0a:38:1c:90:3a:ad:08:27:fe:92:a2:ec:cc:f0: e6:73:9e:d3:c2:cd:e7:6c:87:88:b2:02:53:1f:24:0f:f6:07: 94:7c:7e:c4:1d:71:ac:fd:df:7b:b1:5b:cb:78:b3:8b:ba:df: 35:ac:55:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNNGE5ut/vXUFgXE0C/+Z1WofrDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1MjMyM0MwNEIwQTcwQ0U4RTMxOTE5Q0U2Q0M4QkZE QTNEMjU3MTAeFw0yNTExMDUxMjQzMDRaFw0yNTExMDYxNjIzMDRaMDMxMTAvBgNV BAMTKEQ4MEE3ODZCRjA2ODk1MDhCMDg0RjgwQzFCODBCNUNBODcyOUI1M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdONHDg47o52dPsNB+IukCySr6 LieWTQ795dPsMEmmxHX3ZKd+5XekIKDFNioDx8qVVmjJZIp/FJ3kHBvWbNazEAGo dWhAo5kFuob/k8yw5U1J9gQ3VtsAn1TPHnvhCxXX+aF+Ahh9topweRaI8hBn7D1N KLyJYyaaVPgSTvfm4EaUnA3QlkhENtl5VxSexwQaG/MgYV0VgaMdAaEcwnCx6FbB CZ/UrT2oC7lbVI4164fKksqWZo3uA4aYkn04MtWYIv2pO2zPyWCEA07K3/LqTm6P ULh+tdLH4+QedI4c2J5y2+9wSCxgzAfK9D+w0tYx0iSOEoQi2pa6EJSF7gfjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2Ap4a/BolQiwhPgMG4C1yocptT8wHwYDVR0j BBgwFoAUulIyPASwpwzo4xkZzmzIv9o9JXEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODZzTXNDMU1DVUNKYW84ZGtHa1c2U2pBQ1pjUXdNWGY4U2VyMVZlanJl Rm0vMC9CQTUyMzIzQzA0QjBBNzBDRThFMzE5MTlDRTZDQzhCRkRBM0QyNTcxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNTIzMjNDMDRCMEE3MENF OEUzMTkxOUNFNkNDOEJGREEzRDI1NzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODZzTXNDMU1DVUNKYW84ZGtHa1c2U2pBQ1pjUXdNWGY4U2VyMVZlanJlRm0vMC9C QTUyMzIzQzA0QjBBNzBDRThFMzE5MTlDRTZDQzhCRkRBM0QyNTcxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABrXuJobYgU1T2F9yXAmNlz/ciS//7bH9dCuOyEVudAK2pMGClbEexLk6sQZ9 bWrmpVHwOQEyxJGGZL5QU5nWG01DxSzC/Hr3enVNVjQ1zUNx+iBigJuFq+Hn7gKD PeyktY8SK3+Z/Lj3Yvicys6jtbR1pq9IxQhRK8kqcEdua6YjdFbAiEc9E0uEmWAH 5Vxh/WvxMQ4KWpD8i47tMc2N2CHuub5Z2bsytsY+2Ce6nEm42lJgPo+t/IUnq4GH q1txu5UEaGrFSivTjwo4HJA6rQgn/pKi7Mzw5nOe08LN52yHiLICUx8kD/YHlHx+ xB1xrP3fe7Fby3izi7rfNaxVfg== -----END CERTIFICATE-----Generated at Thu Nov 6 04:45:17 2025 by rpki-client