$ rpki-client -vvf rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft File: BAA91B8729924B4E8155B81952688BEC004DD0B7.mft (raw, json) Hash identifier: OPV28COhRZjotZhjN2xrXd0Zlr70GoG01vXmeAEcgFc= Subject key identifier: B1:97:1C:FD:5E:29:67:48:F3:2A:91:72:A5:B7:30:D6:D4:9D:EC:A9 Authority key identifier: BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7 Certificate issuer: /CN=BAA91B8729924B4E8155B81952688BEC004DD0B7 Certificate serial: 0340B60BA7EA6F8E9A33FCBA750E54788F0315E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer Subject info access: rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft Manifest number: 02D1 Signing time: Thu 18 Sep 2025 07:42:53 +0000 Manifest this update: Thu 18 Sep 2025 07:37:53 +0000 Manifest next update: Fri 19 Sep 2025 10:57:53 +0000 Files and hashes: 1: 323830343a363532633a633030303a3a2f33342d3334203d3e20323639343733.roa (hash: 1tj7f6UEdSuSX+xzAfE3glMzsuwy0R2doswMaI5qeZM=) 2: 323830343a363532633a3a2f33342d3334203d3e20323639343733.roa (hash: X5MXmZvX84QOjHDMm5hGtXTanpvg6jMd48H1sof9q60=) 3: 34352e3138372e3136382e302f32332d3233203d3e20323639343733.roa (hash: LU8Mv1K4W9NjY1Ph3Xc32UCFbzgnlyOyJCLoDeuE47s=) 4: 323830343a363532633a343030303a3a2f33342d3334203d3e20323639343733.roa (hash: cq+TY6RGuTPnXqe6GmwhfS349yibSTDnBR9W+e3J9uo=) 5: BAA91B8729924B4E8155B81952688BEC004DD0B7.crl (hash: Fg8s/oZ5zaFlZR71sGqoKukJ4l/vLijLwuab2ertnbQ=) 6: 323830343a363532633a383030303a3a2f33342d3334203d3e20323639343733.roa (hash: pO92ZTA6JgI7SZJqWBqtXgNp8h8anIZBL3tkPi+xJ8U=) 7: 34352e3138372e3136382e302f32342d3234203d3e20323639343733.roa (hash: Aa284McDfTPmjic3mysbGGpbN5J63jS24v2FD6iYht0=) 8: 34352e3138372e3137312e302f32342d3234203d3e20323639343733.roa (hash: E9plHt7RLLvmbvHaG4OTDwGPfwEIE4mC0sfU15Aoajs=) 9: 34352e3138372e3137302e302f32342d3234203d3e20323639343733.roa (hash: DoIheMfS2BngMQ+JdTJaqcKZM72QCyWpqlcxhcNcg/8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 10:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:40:b6:0b:a7:ea:6f:8e:9a:33:fc:ba:75:0e:54:78:8f:03:15:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA91B8729924B4E8155B81952688BEC004DD0B7 Validity Not Before: Sep 18 07:37:53 2025 GMT Not After : Sep 19 10:57:53 2025 GMT Subject: CN=B1971CFD5E296748F32A9172A5B730D6D49DECA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:be:b9:a5:20:6b:7c:cb:ca:cf:33:14:2f: fd:da:77:ee:8d:58:f5:6a:6f:94:53:c4:20:72:c1: 41:18:a1:5e:68:4f:7c:89:9c:99:a8:6c:a6:d4:c0: 05:c5:f1:c7:65:2e:d2:4d:02:a5:ca:ce:6b:ef:35: eb:18:bd:eb:0f:f7:f9:ab:b7:92:f8:ba:f3:06:fe: a9:ad:a8:09:54:9d:c4:a3:5d:a3:1b:d0:c0:4d:a0: 30:39:84:9e:55:66:89:d5:b9:ef:8f:10:f2:f4:4a: 1d:c6:53:41:ab:35:c5:6b:cd:3d:c0:03:38:33:64: 02:00:79:e5:8a:3f:f0:b7:16:49:f9:a2:8d:1e:04: fb:5c:f5:70:9a:12:44:d5:bb:c4:5b:54:43:ff:0f: 27:23:79:e1:58:b3:45:16:24:54:b5:15:f4:2b:f9: bc:cc:96:d4:84:eb:91:52:13:2f:f8:61:fd:e1:78: 73:cd:c1:f6:1b:e4:f0:36:51:56:f3:86:bc:b2:68: 32:b6:c4:96:73:3b:5e:76:52:c1:e7:e9:71:cb:f8: a2:dd:21:ae:66:1c:44:01:1a:c8:56:22:1d:64:c2: 7d:90:6e:8e:fb:d1:06:dd:c5:99:20:4a:24:6f:6c: 69:70:02:13:3f:8a:27:da:d7:b0:f7:1a:15:88:af: 3b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:97:1C:FD:5E:29:67:48:F3:2A:91:72:A5:B7:30:D6:D4:9D:EC:A9 X509v3 Authority Key Identifier: keyid:BA:A9:1B:87:29:92:4B:4E:81:55:B8:19:52:68:8B:EC:00:4D:D0:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrvTxa2YNxYyPp3c5Pq51uo3WGnjxMhnMjHsBvd7eXF9/1/BAA91B8729924B4E8155B81952688BEC004DD0B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:cf:de:ff:88:1d:7c:fb:24:2a:1e:6a:aa:fa:bd:48:e6:c9: 02:85:3b:6a:88:44:6c:33:dd:a5:3d:fc:05:d8:81:59:47:64: 97:a4:34:c9:fa:2b:82:b3:1d:50:ad:60:31:b6:71:ad:5f:24: 7a:8d:96:3f:40:c6:55:ad:88:8b:ff:94:7c:7b:59:88:aa:3f: c6:5c:c2:6b:4f:84:e2:4b:14:1a:5b:9b:29:3f:be:63:87:1c: 1e:4c:3b:fd:6a:75:50:67:5a:b7:28:7e:06:19:78:fa:34:aa: 3d:14:be:fc:2e:ca:6c:ce:65:99:58:0c:44:4a:e4:00:29:51: 97:87:68:16:16:12:4e:3a:ba:c5:15:6c:c9:8f:14:c8:41:59: 8a:a9:55:17:a9:09:f2:4d:5c:23:25:02:29:f8:a6:3c:8b:d2: 48:fb:03:d2:a8:70:a7:ad:0a:18:71:99:c6:f1:88:f3:e7:6f: 4c:45:bc:c4:75:91:bf:89:1e:ce:37:33:fc:61:94:f2:16:b5: bf:e0:ce:59:a9:e1:bb:95:ca:31:fe:1f:99:b8:e9:6c:e8:61: e8:0f:e0:a1:38:d6:40:1b:2c:df:40:30:ce:d4:2b:d7:ee:12: 24:ff:78:6d:fd:23:aa:57:10:3f:50:80:dc:db:32:0f:dd:94: db:45:3e:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA0C2C6fqb46aM/y6dQ5UeI8DFeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBOTFCODcyOTkyNEI0RTgxNTVCODE5NTI2ODhCRUMw MDRERDBCNzAeFw0yNTA5MTgwNzM3NTNaFw0yNTA5MTkxMDU3NTNaMDMxMTAvBgNV BAMTKEIxOTcxQ0ZENUUyOTY3NDhGMzJBOTE3MkE1QjczMEQ2RDQ5REVDQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTr65pSBrfMvKzzMUL/3ad+6N WPVqb5RTxCBywUEYoV5oT3yJnJmobKbUwAXF8cdlLtJNAqXKzmvvNesYvesP9/mr t5L4uvMG/qmtqAlUncSjXaMb0MBNoDA5hJ5VZonVue+PEPL0Sh3GU0GrNcVrzT3A AzgzZAIAeeWKP/C3Fkn5oo0eBPtc9XCaEkTVu8RbVEP/DycjeeFYs0UWJFS1FfQr +bzMltSE65FSEy/4Yf3heHPNwfYb5PA2UVbzhryyaDK2xJZzO152UsHn6XHL+KLd Ia5mHEQBGshWIh1kwn2Qbo770QbdxZkgSiRvbGlwAhM/iifa17D3GhWIrzsJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsZcc/V4pZ0jzKpFypbcw1tSd7KkwHwYDVR0j BBgwFoAUuqkbhymSS06BVbgZUmiL7ABN0LcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHJ2VHhhMllOeFl5UHAzYzVQcTUxdW8zV0duanhNaG5NakhzQnZkN2VY RjkvMS9CQUE5MUI4NzI5OTI0QjRFODE1NUI4MTk1MjY4OEJFQzAwNEREMEI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBQTkxQjg3Mjk5MjRCNEU4 MTU1QjgxOTUyNjg4QkVDMDA0REQwQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHJ2VHhhMllOeFl5UHAzYzVQcTUxdW8zV0duanhNaG5NakhzQnZkN2VYRjkvMS9C QUE5MUI4NzI5OTI0QjRFODE1NUI4MTk1MjY4OEJFQzAwNEREMEI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgs/e/4gdfPskKh5qqvq9SObJAoU7aohEbDPdpT38BdiBWUdkl6Q0yforgrMd UK1gMbZxrV8keo2WP0DGVa2Ii/+UfHtZiKo/xlzCa0+E4ksUGlubKT++Y4ccHkw7 /Wp1UGdatyh+Bhl4+jSqPRS+/C7KbM5lmVgMRErkAClRl4doFhYSTjq6xRVsyY8U yEFZiqlVF6kJ8k1cIyUCKfimPIvSSPsD0qhwp60KGHGZxvGI8+dvTEW8xHWRv4ke zjcz/GGU8ha1v+DOWanhu5XKMf4fmbjpbOhh6A/goTjWQBss30AwztQr1+4SJP94 bf0jqlcQP1CA3NsyD92U20U+XQ== -----END CERTIFICATE-----Generated at Thu Sep 18 15:14:04 2025 by rpki-client