$ rpki-client -vvf rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.mft File: BA3AB081D295E5A4F30D6CC1139EA01C1075D542.mft (raw, json) Hash identifier: xfLVYPBIyW5TqNZ1T8IS73ZNsvbULYpM+P3KE3djy5o= Subject key identifier: F9:6F:F5:32:7B:EC:54:C1:AA:F1:F0:FA:F7:28:00:0B:8D:CF:80:62 Authority key identifier: BA:3A:B0:81:D2:95:E5:A4:F3:0D:6C:C1:13:9E:A0:1C:10:75:D5:42 Certificate issuer: /CN=BA3AB081D295E5A4F30D6CC1139EA01C1075D542 Certificate serial: 35F48BB8E83584D58227A01466BB20B46B42CD65 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.mft Manifest number: 81 Signing time: Mon 03 Nov 2025 02:06:32 +0000 Manifest this update: Mon 03 Nov 2025 02:01:32 +0000 Manifest next update: Tue 04 Nov 2025 04:04:32 +0000 Files and hashes: 1: 323830343a356539633a3a2f33322d3334203d3e20323639303434.roa (hash: 19p56JkFvGy3d55QCkTPjX1ii+GsYjcKpnMRN9gp7Ts=) 2: BA3AB081D295E5A4F30D6CC1139EA01C1075D542.crl (hash: 3dorkgpWC6rJGJ3xxFAH7x8ptGAEhxWbuV8XFZsRLRE=) 3: 34352e3137382e3233322e302f32322d3234203d3e20323639303434.roa (hash: /pI9TLhqurlKnJpo1vlGhbC1YrRrAMWE2ACtRSbFuRo=) 4: 323830343a356539633a393130303a3a2f34302d3434203d3e20323639303434.roa (hash: qC23nYCwTd0C4aXZLcdu65W8Bw5flpJh/JWkv56NrN0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.crl rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 04:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f4:8b:b8:e8:35:84:d5:82:27:a0:14:66:bb:20:b4:6b:42:cd:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA3AB081D295E5A4F30D6CC1139EA01C1075D542 Validity Not Before: Nov 3 02:01:32 2025 GMT Not After : Nov 4 04:04:32 2025 GMT Subject: CN=F96FF5327BEC54C1AAF1F0FAF728000B8DCF8062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e2:3d:11:7f:ea:54:01:2a:26:70:e9:fd:fc: 4b:f4:b2:ad:cc:d0:71:e5:7b:63:1e:af:09:2a:0e: 66:36:c8:69:50:37:2f:51:84:9d:f7:d9:48:a1:80: 87:b1:da:3c:61:b0:a2:c1:0a:5c:ac:87:ce:c4:14: cb:21:22:3c:b7:c9:a5:7e:05:52:70:d9:65:1e:ce: bd:84:c6:13:99:b7:06:84:14:f3:d6:ec:4c:ea:c8: 93:ef:4b:41:61:3d:53:4e:dc:4b:5f:d3:26:c0:2f: 64:5f:78:c9:95:99:a9:5c:e5:aa:5e:ba:c2:e3:c6: ae:4b:ee:bd:0a:82:f0:08:fd:dd:17:8f:44:2c:bc: a0:a4:62:2e:38:6b:af:90:9d:2c:55:53:e0:9e:97: 2e:38:74:ee:1e:7b:0b:b1:95:6f:67:c6:73:8c:d1: 1b:b8:dd:85:6d:81:c2:74:4c:49:58:c2:0e:9c:1a: ee:1e:f5:b8:3b:cb:85:a2:fc:df:59:41:e5:17:6f: 72:7f:9d:8a:74:cf:a5:95:2f:f1:ae:f6:31:22:03: 9f:b7:0b:ab:59:3e:cd:a3:77:d8:db:73:39:23:e8: 71:d5:14:c1:43:56:ee:01:5f:a2:7b:0d:6b:d6:04: 8b:b1:ea:54:46:30:bb:52:e2:dd:82:9e:98:73:9e: ee:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6F:F5:32:7B:EC:54:C1:AA:F1:F0:FA:F7:28:00:0B:8D:CF:80:62 X509v3 Authority Key Identifier: keyid:BA:3A:B0:81:D2:95:E5:A4:F3:0D:6C:C1:13:9E:A0:1C:10:75:D5:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dx5qFuWjeJi61qtAzx2sYWUPU9yGMxzKZGXW1tHqj6dh/0/BA3AB081D295E5A4F30D6CC1139EA01C1075D542.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:ee:75:04:b1:e6:a2:4f:6d:43:8b:d9:66:06:ef:98:30:7d: 61:5a:3d:55:05:0f:36:b6:c3:06:a4:e7:a9:cc:5d:7a:65:ff: d4:89:8d:92:98:25:12:5d:37:33:8f:c3:f8:39:63:1f:58:cf: 5a:f4:37:88:1f:fa:0b:7a:29:ee:a6:f2:37:bc:ad:d9:ea:d0: aa:8a:37:90:c8:16:47:f8:c9:1f:6b:a2:71:a9:84:8d:ae:50: bb:41:7d:b8:b9:7b:49:51:94:3a:74:1b:ae:52:33:65:78:68: 3c:9a:03:59:45:ca:b1:13:b5:65:aa:ec:cc:d8:dc:1c:5a:b7: ce:d0:6d:33:50:cc:1e:06:fb:27:c3:95:46:3c:a3:bd:f4:b4: 01:6a:5e:ac:20:67:f8:44:1b:ce:dd:04:64:9b:88:9b:d8:d7: 8f:35:be:ca:a2:30:b9:54:da:cd:0e:ab:9a:07:96:2c:a9:e5: 54:60:e4:15:be:6e:bb:fd:7f:90:a9:b3:b6:d6:10:7b:6a:91: 39:c7:b1:29:af:ed:bb:72:85:a2:9e:4c:16:97:26:10:6d:90: b4:de:ac:04:47:94:45:2b:e2:49:27:46:2e:6a:1a:59:f8:00: 9b:ec:b1:1e:f0:4a:60:d2:62:2e:d8:80:9a:59:64:7a:8f:5a: 2c:b6:4a:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNfSLuOg1hNWCJ6AUZrsgtGtCzWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEzQUIwODFEMjk1RTVBNEYzMEQ2Q0MxMTM5RUEwMUMx MDc1RDU0MjAeFw0yNTExMDMwMjAxMzJaFw0yNTExMDQwNDA0MzJaMDMxMTAvBgNV BAMTKEY5NkZGNTMyN0JFQzU0QzFBQUYxRjBGQUY3MjgwMDBCOERDRjgwNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN4j0Rf+pUASomcOn9/Ev0sq3M 0HHle2MerwkqDmY2yGlQNy9RhJ332UihgIex2jxhsKLBClysh87EFMshIjy3yaV+ BVJw2WUezr2ExhOZtwaEFPPW7EzqyJPvS0FhPVNO3Etf0ybAL2RfeMmVmalc5ape usLjxq5L7r0KgvAI/d0Xj0QsvKCkYi44a6+QnSxVU+Cely44dO4eewuxlW9nxnOM 0Ru43YVtgcJ0TElYwg6cGu4e9bg7y4Wi/N9ZQeUXb3J/nYp0z6WVL/Gu9jEiA5+3 C6tZPs2jd9jbczkj6HHVFMFDVu4BX6J7DWvWBIux6lRGMLtS4t2Cnphznu6PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+W/1MnvsVMGq8fD69ygAC43PgGIwHwYDVR0j BBgwFoAUujqwgdKV5aTzDWzBE56gHBB11UIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHg1cUZ1V2plSmk2MXF0QXp4MnNZV1VQVTl5R014ektaR1hXMXRIcWo2 ZGgvMC9CQTNBQjA4MUQyOTVFNUE0RjMwRDZDQzExMzlFQTAxQzEwNzVENTQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBM0FCMDgxRDI5NUU1QTRG MzBENkNDMTEzOUVBMDFDMTA3NUQ1NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHg1cUZ1V2plSmk2MXF0QXp4MnNZV1VQVTl5R014ektaR1hXMXRIcWo2ZGgvMC9C QTNBQjA4MUQyOTVFNUE0RjMwRDZDQzExMzlFQTAxQzEwNzVENTQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4e51BLHmok9tQ4vZZgbvmDB9YVo9VQUPNrbDBqTnqcxdemX/1ImNkpglEl03 M4/D+DljH1jPWvQ3iB/6C3op7qbyN7yt2erQqoo3kMgWR/jJH2uicamEja5Qu0F9 uLl7SVGUOnQbrlIzZXhoPJoDWUXKsRO1ZarszNjcHFq3ztBtM1DMHgb7J8OVRjyj vfS0AWperCBn+EQbzt0EZJuIm9jXjzW+yqIwuVTazQ6rmgeWLKnlVGDkFb5uu/1/ kKmzttYQe2qROcexKa/tu3KFop5MFpcmEG2QtN6sBEeURSviSSdGLmoaWfgAm+yx HvBKYNJiLtiAmllkeo9aLLZKiQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:29:37 2025 by rpki-client