$ rpki-client -vvf rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.mft File: BA3AB081D295E5A4F30D6CC1139EA01C1075D542.mft (raw, json) Hash identifier: pjPAFFDvtCd1dYeP9+OTQoXvW7mDzb0vv51aJMmIYAs= Subject key identifier: 65:9E:CA:92:87:92:9D:45:FB:E6:B9:89:74:51:1C:4D:03:53:BC:56 Authority key identifier: BA:3A:B0:81:D2:95:E5:A4:F3:0D:6C:C1:13:9E:A0:1C:10:75:D5:42 Certificate issuer: /CN=BA3AB081D295E5A4F30D6CC1139EA01C1075D542 Certificate serial: 327DACA31C788E4E0E0C2D21922805601880F042 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.mft Manifest number: 1E Signing time: Wed 20 Aug 2025 02:37:05 +0000 Manifest this update: Wed 20 Aug 2025 02:32:05 +0000 Manifest next update: Thu 21 Aug 2025 03:48:05 +0000 Files and hashes: 1: 34352e3137382e3233322e302f32322d3234203d3e20323639303434.roa (hash: /pI9TLhqurlKnJpo1vlGhbC1YrRrAMWE2ACtRSbFuRo=) 2: BA3AB081D295E5A4F30D6CC1139EA01C1075D542.crl (hash: CPr9gItlY6YYuvppjlxKzLZqugwJG+fEz7TgKxOKdfk=) 3: 323830343a356539633a393130303a3a2f34302d3434203d3e20323639303434.roa (hash: qC23nYCwTd0C4aXZLcdu65W8Bw5flpJh/JWkv56NrN0=) 4: 323830343a356539633a3a2f33322d3334203d3e20323639303434.roa (hash: 19p56JkFvGy3d55QCkTPjX1ii+GsYjcKpnMRN9gp7Ts=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.crl rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 03:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:7d:ac:a3:1c:78:8e:4e:0e:0c:2d:21:92:28:05:60:18:80:f0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA3AB081D295E5A4F30D6CC1139EA01C1075D542 Validity Not Before: Aug 20 02:32:05 2025 GMT Not After : Aug 21 03:48:05 2025 GMT Subject: CN=659ECA9287929D45FBE6B98974511C4D0353BC56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:49:ab:a1:77:1c:8d:e8:49:da:dd:22:81: 86:10:c5:80:72:6b:f2:ab:22:6e:5a:b8:36:4b:86: 52:35:31:72:e8:c6:38:a1:57:10:c7:48:fa:38:12: f1:f1:49:01:d2:70:c4:90:e0:06:83:87:05:8d:a8: ce:c5:94:7f:19:d2:87:78:45:65:2d:50:c0:eb:25: 65:44:98:21:8f:9b:48:e9:88:32:fd:53:b2:11:0e: 65:2c:7a:a6:8d:a3:d8:da:12:b6:7a:33:2f:c2:42: 99:fc:96:dc:91:3c:6d:98:68:58:e8:35:03:c6:40: 43:19:d3:52:e0:6b:81:98:e2:1d:53:72:a9:a6:fe: 1a:96:27:d2:40:24:f2:b3:3d:73:87:89:d9:2e:2c: b3:d1:ee:ce:d7:c6:62:3d:cd:17:f0:2a:7f:d3:2a: 3a:cf:25:f5:04:93:11:b0:be:9f:5a:51:73:80:a5: a8:d7:ac:67:5a:6b:21:1f:34:08:06:b6:9f:e6:53: 5c:1a:6a:ed:0c:1f:e2:35:a7:cb:d2:95:85:4b:ac: 64:91:8f:f0:4c:bc:ea:5a:41:2f:95:5e:15:29:8f: 71:c6:f5:2d:5a:5e:94:80:1f:bf:ed:5c:04:15:cf: f7:90:b6:d6:71:3a:81:11:83:a9:69:f4:fb:6d:75: 64:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9E:CA:92:87:92:9D:45:FB:E6:B9:89:74:51:1C:4D:03:53:BC:56 X509v3 Authority Key Identifier: keyid:BA:3A:B0:81:D2:95:E5:A4:F3:0D:6C:C1:13:9E:A0:1C:10:75:D5:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:db:ca:95:02:6a:2d:2b:d6:7e:f0:7c:7d:f0:b0:1d:ed:26: 12:4b:80:62:7a:da:33:2b:99:ec:92:e3:a6:6b:23:6f:bb:4a: 27:a1:3b:21:0a:af:c8:1f:85:f1:36:9b:11:a4:2e:24:6b:34: 84:ba:89:b6:50:bd:e2:0e:38:8b:69:bf:e5:79:d3:c3:ac:77: f1:ed:86:8a:52:88:a4:c4:72:05:01:68:42:b0:5f:d5:7e:53: a6:97:cb:6c:84:8a:82:cf:4a:09:10:b8:77:7c:d5:3a:17:b2: 6d:3a:8d:4f:f3:7a:7c:35:e4:32:ad:a9:d2:ba:66:54:44:e2: 49:db:2e:bb:09:59:3d:d2:1d:4a:db:cb:14:28:af:34:68:df: 73:9e:8f:20:fc:f9:d2:dd:9d:4d:e7:6b:d7:17:21:db:2a:f7: 05:5f:98:4b:23:32:12:cb:5c:87:28:d9:6e:d8:f6:c5:e6:ba: b0:61:e6:e7:cc:d1:78:25:cb:a9:11:e3:e7:9d:b9:29:72:65: 50:a6:fe:4b:65:d7:28:ef:8e:33:fd:aa:ca:fb:de:fd:0f:42: d9:38:53:40:06:e7:72:e3:76:b5:95:d7:1d:c1:3c:c5:37:82: 82:cf:e2:0e:db:4c:29:97:26:48:c1:a9:ed:a2:5f:e3:1f:6e: 53:a5:1d:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMn2soxx4jk4ODC0hkigFYBiA8EIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEzQUIwODFEMjk1RTVBNEYzMEQ2Q0MxMTM5RUEwMUMx MDc1RDU0MjAeFw0yNTA4MjAwMjMyMDVaFw0yNTA4MjEwMzQ4MDVaMDMxMTAvBgNV BAMTKDY1OUVDQTkyODc5MjlENDVGQkU2Qjk4OTc0NTExQzREMDM1M0JDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9akmroXccjehJ2t0igYYQxYBy a/KrIm5auDZLhlI1MXLoxjihVxDHSPo4EvHxSQHScMSQ4AaDhwWNqM7FlH8Z0od4 RWUtUMDrJWVEmCGPm0jpiDL9U7IRDmUseqaNo9jaErZ6My/CQpn8ltyRPG2YaFjo NQPGQEMZ01Lga4GY4h1Tcqmm/hqWJ9JAJPKzPXOHidkuLLPR7s7XxmI9zRfwKn/T KjrPJfUEkxGwvp9aUXOApajXrGdaayEfNAgGtp/mU1waau0MH+I1p8vSlYVLrGSR j/BMvOpaQS+VXhUpj3HG9S1aXpSAH7/tXAQVz/eQttZxOoERg6lp9PttdWQ7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZZ7KkoeSnUX75rmJdFEcTQNTvFYwHwYDVR0j BBgwFoAUujqwgdKV5aTzDWzBE56gHBB11UIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHg1cUZ1V2plSmk2MXF0QXp4MnNZV1VQVTl5R014ektaR1hXMXRIcWo2 ZGgvMC9CQTNBQjA4MUQyOTVFNUE0RjMwRDZDQzExMzlFQTAxQzEwNzVENTQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBM0FCMDgxRDI5NUU1QTRG MzBENkNDMTEzOUVBMDFDMTA3NUQ1NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHg1cUZ1V2plSmk2MXF0QXp4MnNZV1VQVTl5R014ektaR1hXMXRIcWo2ZGgvMC9C QTNBQjA4MUQyOTVFNUE0RjMwRDZDQzExMzlFQTAxQzEwNzVENTQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARtvKlQJqLSvWfvB8ffCwHe0mEkuAYnraMyuZ7JLjpmsjb7tKJ6E7IQqvyB+F 8TabEaQuJGs0hLqJtlC94g44i2m/5XnTw6x38e2GilKIpMRyBQFoQrBf1X5TppfL bISKgs9KCRC4d3zVOheybTqNT/N6fDXkMq2p0rpmVETiSdsuuwlZPdIdStvLFCiv NGjfc56PIPz50t2dTedr1xch2yr3BV+YSyMyEstchyjZbtj2xea6sGHm58zReCXL qRHj5525KXJlUKb+S2XXKO+OM/2qyvve/Q9C2ThTQAbncuN2tZXXHcE8xTeCgs/i DttMKZcmSMGp7aJf4x9uU6Udxw== -----END CERTIFICATE-----Generated at Wed Aug 20 15:39:08 2025 by rpki-client