$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft File: BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft (raw, json) Hash identifier: QKisJLfARbSR/UByUSMIZ9hv1+rEWsrEkDcUu8GC5qo= Subject key identifier: E6:4A:37:16:05:14:B9:35:4C:14:25:21:26:CE:85:78:90:E6:56:58 Authority key identifier: BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46 Certificate issuer: /CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446 Certificate serial: 3C063821FD247BDE89E68E0BCE503284B63427C3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer Subject info access: rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft Manifest number: 0302 Signing time: Wed 05 Nov 2025 23:46:50 +0000 Manifest this update: Wed 05 Nov 2025 23:41:50 +0000 Manifest next update: Fri 07 Nov 2025 01:26:50 +0000 Files and hashes: 1: 34352e3233392e302e302f32322d3232203d3e203532383538.roa (hash: M65VDR5KYw9XeZVWCrlotO4EXQohZff3wA4rGwAsTL4=) 2: BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl (hash: yqbmURH1+iObzEVVrHfl2bPsGmlJroD7k7Pendh2u04=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 07 Nov 2025 01:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:06:38:21:fd:24:7b:de:89:e6:8e:0b:ce:50:32:84:b6:34:27:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446 Validity Not Before: Nov 5 23:41:50 2025 GMT Not After : Nov 7 01:26:50 2025 GMT Subject: CN=E64A37160514B9354C14252126CE857890E65658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4a:00:47:c6:67:78:22:f6:ea:9d:45:23:9a: 24:86:30:31:ac:61:e8:18:b4:ce:6b:a5:ef:7a:d2: c1:e3:99:11:df:62:ab:53:cf:8d:62:44:a5:b0:62: 5e:4d:42:33:5c:1d:98:05:9c:ea:18:96:fc:d4:6f: 00:e7:d0:c0:f3:15:da:b5:90:d8:45:1a:25:07:13: e7:7b:5b:bd:18:e0:c9:bc:76:43:45:df:bc:ae:2e: f1:8b:ce:c7:36:ab:29:0f:68:82:f9:97:c5:8e:41: e6:ed:f6:4a:a4:84:08:e0:28:26:30:9b:c0:97:4e: be:a5:de:d0:0b:4d:d5:67:01:11:22:70:ae:32:b3: 28:e1:0c:c4:3b:b3:aa:62:38:b7:07:df:9c:12:a8: 09:e2:f9:19:80:af:f2:62:8e:e3:b9:f3:9f:f3:ee: 99:53:be:70:12:37:21:af:aa:44:cc:78:be:d0:38: 92:60:a6:dc:41:7d:1b:29:07:52:81:af:8d:c6:6c: ae:72:f8:dc:4c:79:d1:37:e4:63:26:ac:ad:11:da: 4b:af:43:e8:e2:48:5b:2d:c8:ab:f1:2d:99:26:b7: c1:1a:e2:ba:27:a2:1b:19:9d:16:35:fa:1b:e0:7b: f7:cf:70:e0:c7:d9:d5:fe:93:17:6e:43:77:70:7c: a1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4A:37:16:05:14:B9:35:4C:14:25:21:26:CE:85:78:90:E6:56:58 X509v3 Authority Key Identifier: keyid:BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a8:eb:1b:7c:60:a3:c5:f2:61:c8:a1:4e:3d:27:f0:14:74: 1c:40:c6:fd:91:60:77:9d:c7:dc:9b:ac:a1:c9:6c:c1:b9:d2: 4b:90:d3:68:0d:c4:33:e1:2b:ba:26:f2:ef:2b:eb:69:e0:dc: 5b:84:8b:0a:04:63:a7:ba:42:85:fe:2f:15:72:8d:ce:17:4b: ec:b3:34:5f:ad:2f:bf:8c:86:2f:f6:f7:24:60:5f:a4:b1:14: 2d:05:9d:bf:3a:04:c5:c7:fc:0d:6e:1d:da:81:45:d0:f6:a9: 6d:e4:26:b0:d0:b1:85:41:4f:d8:7e:f8:42:68:69:7f:2f:e6: f1:d3:2c:c5:1d:61:0d:19:ed:03:a4:96:ba:ea:d1:74:ca:71: 95:9e:9f:76:04:60:1b:d1:ed:99:0e:f8:5f:9b:2a:55:fa:ec: 91:d9:3f:58:9c:70:04:03:97:17:e8:82:09:5e:02:a1:3e:20: c7:7e:55:4c:f9:04:64:44:3e:db:7a:48:7b:5d:39:26:aa:3a: 1f:63:7d:d3:2a:15:91:ae:4e:6c:0f:e9:15:97:04:34:58:1b: 6d:78:2d:0f:eb:01:16:5a:81:08:a2:49:f8:e3:32:64:8c:3f: de:d0:9c:71:05:73:66:37:d4:a8:ea:df:92:73:77:ca:ee:60: 71:8d:b0:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPAY4If0ke96J5o4LzlAyhLY0J8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1NEE0N0U1RjkxMEFFOTIxRUFFRTlCOUJFNTEwOUMz MjUwMTQ0NjAeFw0yNTExMDUyMzQxNTBaFw0yNTExMDcwMTI2NTBaMDMxMTAvBgNV BAMTKEU2NEEzNzE2MDUxNEI5MzU0QzE0MjUyMTI2Q0U4NTc4OTBFNjU2NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSgBHxmd4IvbqnUUjmiSGMDGs YegYtM5rpe960sHjmRHfYqtTz41iRKWwYl5NQjNcHZgFnOoYlvzUbwDn0MDzFdq1 kNhFGiUHE+d7W70Y4Mm8dkNF37yuLvGLzsc2qykPaIL5l8WOQebt9kqkhAjgKCYw m8CXTr6l3tALTdVnAREicK4ysyjhDMQ7s6piOLcH35wSqAni+RmAr/JijuO585/z 7plTvnASNyGvqkTMeL7QOJJgptxBfRspB1KBr43GbK5y+NxMedE35GMmrK0R2kuv Q+jiSFstyKvxLZkmt8Ea4ronohsZnRY1+hvge/fPcODH2dX+kxduQ3dwfKE9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5ko3FgUUuTVMFCUhJs6FeJDmVlgwHwYDVR0j BBgwFoAUulSkfl+RCukh6u6bm+UQnDJQFEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVNXcVNZWUFzRmtzTnBjcmhnRER0NW85YzJpWThqb2U1aUdUdXA3Q01V eFQvMS9CQTU0QTQ3RTVGOTEwQUU5MjFFQUVFOUI5QkU1MTA5QzMyNTAxNDQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNTRBNDdFNUY5MTBBRTky MUVBRUU5QjlCRTUxMDlDMzI1MDE0NDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVNXcVNZWUFzRmtzTnBjcmhnRER0NW85YzJpWThqb2U1aUdUdXA3Q01VeFQvMS9C QTU0QTQ3RTVGOTEwQUU5MjFFQUVFOUI5QkU1MTA5QzMyNTAxNDQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMqjrG3xgo8XyYcihTj0n8BR0HEDG/ZFgd53H3JusoclswbnSS5DTaA3EM+Er uiby7yvraeDcW4SLCgRjp7pChf4vFXKNzhdL7LM0X60vv4yGL/b3JGBfpLEULQWd vzoExcf8DW4d2oFF0PapbeQmsNCxhUFP2H74Qmhpfy/m8dMsxR1hDRntA6SWuurR dMpxlZ6fdgRgG9HtmQ74X5sqVfrskdk/WJxwBAOXF+iCCV4CoT4gx35VTPkEZEQ+ 23pIe105Jqo6H2N90yoVka5ObA/pFZcENFgbbXgtD+sBFlqBCKJJ+OMyZIw/3tCc cQVzZjfUqOrfknN3yu5gcY2wuA== -----END CERTIFICATE-----Generated at Thu Nov 6 04:44:13 2025 by rpki-client