$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft File: BA0000290CCA847B173A7D196F03889806E7091A.mft (raw, json) Hash identifier: V0R7eTfeS6rq8YEOKH89Y++M0QBS/+kXT9WYlbNpTkU= Subject key identifier: B8:3D:B3:7C:02:75:FD:2E:88:63:CB:03:A8:E5:21:CC:BC:ED:D0:0A Authority key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A Certificate issuer: /CN=BA0000290CCA847B173A7D196F03889806E7091A Certificate serial: 26CD324CF83A66D32D879F1D8822BFD619570CDC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer Subject info access: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft Manifest number: 0211 Signing time: Wed 20 Aug 2025 08:35:06 +0000 Manifest this update: Wed 20 Aug 2025 08:30:06 +0000 Manifest next update: Thu 21 Aug 2025 09:17:06 +0000 Files and hashes: 1: BA0000290CCA847B173A7D196F03889806E7091A.crl (hash: u85kh+yMHbwTGw3R8ZaLcHKKYCfamgZ3HSUACuNhzPo=) 2: 3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa (hash: GlYV7CMqkMEAod4viUcwiHDE80QdyRhHaF4PZVAn6P4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 09:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:cd:32:4c:f8:3a:66:d3:2d:87:9f:1d:88:22:bf:d6:19:57:0c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0000290CCA847B173A7D196F03889806E7091A Validity Not Before: Aug 20 08:30:06 2025 GMT Not After : Aug 21 09:17:06 2025 GMT Subject: CN=B83DB37C0275FD2E8863CB03A8E521CCBCEDD00A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:37:55:1e:7f:69:a9:5b:c0:2b:36:06:6f: 44:8b:dd:2d:bf:8e:0b:fe:05:35:5b:dd:31:c6:7b: 97:2a:96:52:c2:9b:ce:e4:33:8c:69:33:86:4f:7a: 07:ef:3d:7f:5d:cd:1c:03:50:71:3b:73:a0:94:6c: 62:dd:83:fc:85:24:7c:c1:b9:d3:da:b7:a5:69:6c: d5:4e:dc:db:27:89:2e:77:c1:29:64:57:25:9c:66: 0d:d3:23:a0:f7:69:0e:de:7d:0a:64:47:cd:69:15: 1e:58:87:5d:65:64:87:80:1e:d3:be:63:40:48:46: f0:f5:54:82:f9:aa:52:ef:f7:78:c9:81:a1:fe:49: 91:0e:df:7e:98:1b:f0:4c:8a:ee:46:05:2c:b6:b7: 1a:d6:0a:d1:6a:eb:c1:4b:33:1f:2d:f3:a9:c7:a7: 2e:c6:8b:2f:4a:00:db:7a:e8:21:dd:a3:bc:87:0f: af:f8:a7:df:87:c7:9e:3d:af:0a:8a:2b:25:14:df: ce:62:a1:30:8c:ae:4e:2f:77:ad:c1:d1:45:7e:e7: d9:e8:72:00:98:7e:02:36:50:56:27:ca:db:7c:fa: 1c:96:0f:bf:07:21:f9:c8:a3:af:d7:ae:8d:36:2f: 4e:1a:0b:4e:21:27:9d:bc:90:83:49:29:13:23:5d: 74:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3D:B3:7C:02:75:FD:2E:88:63:CB:03:A8:E5:21:CC:BC:ED:D0:0A X509v3 Authority Key Identifier: keyid:BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:81:18:e0:ea:01:c3:84:e1:b4:1a:15:62:70:1c:61:0c:f8: 42:ce:2a:bf:cf:a9:55:c9:09:df:02:e9:69:ef:b2:30:a8:c7: 3f:a8:0f:69:d0:2a:02:6b:74:d1:90:d7:41:00:f6:03:bc:52: 01:df:63:6c:53:28:69:74:7f:ce:6e:cd:54:bf:f6:8a:7c:5b: dc:33:f3:01:6e:e0:57:3e:d1:67:1b:be:eb:3c:ae:f5:cb:b2: 1b:84:42:50:5c:9d:50:60:4b:53:d0:63:d0:77:56:8a:b7:ce: fc:83:57:93:19:c9:9f:6c:98:89:61:59:dc:dc:48:86:64:d1: 7e:9a:78:b0:f9:7b:33:a0:31:cd:b8:b5:d5:3a:06:66:b8:cd: dc:fa:e4:7f:5a:ac:24:9b:38:11:00:dc:9b:29:d2:1d:f4:21: 5b:4e:78:2e:12:fa:df:7c:fb:c3:c5:ad:d5:ba:37:2b:3e:59: 19:69:7d:ff:24:78:8b:60:2b:3c:48:58:fb:6e:d7:cf:f5:e2: a0:64:6f:96:64:1b:5e:94:8f:d0:bd:4c:e8:93:ec:f2:fc:8e: d0:5d:74:9c:7f:38:66:b3:a8:30:7a:c5:2f:8e:2d:83:8b:ae: 29:4b:f4:1a:93:4c:4a:7b:4d:ee:74:d2:1f:4f:eb:16:fe:2e: 43:02:b9:60 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUJs0yTPg6ZtMth58diCK/1hlXDNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgw NkU3MDkxQTAeFw0yNTA4MjAwODMwMDZaFw0yNTA4MjEwOTE3MDZaMDMxMTAvBgNV BAMTKEI4M0RCMzdDMDI3NUZEMkU4ODYzQ0IwM0E4RTUyMUNDQkNFREQwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnjjdVHn9pqVvAKzYGb0SL3S2/ jgv+BTVb3THGe5cqllLCm87kM4xpM4ZPegfvPX9dzRwDUHE7c6CUbGLdg/yFJHzB udPat6VpbNVO3NsniS53wSlkVyWcZg3TI6D3aQ7efQpkR81pFR5Yh11lZIeAHtO+ Y0BIRvD1VIL5qlLv93jJgaH+SZEO336YG/BMiu5GBSy2txrWCtFq68FLMx8t86nH py7Giy9KANt66CHdo7yHD6/4p9+Hx549rwqKKyUU385ioTCMrk4vd63B0UV+59no cgCYfgI2UFYnytt8+hyWD78HIfnIo6/Xro02L04aC04hJ528kINJKRMjXXS5AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUuD2zfAJ1/S6IY8sDqOUhzLzt0AowHwYDVR0j BBgwFoAUugAAKQzKhHsXOn0ZbwOImAbnCRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby92TEg4S0R1YU5TeEhVdnpjc2txeWp5RXByaXBFRGVHdVZlUmJHUFJkR3A2 LzAvQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgwNkU3MDkxQS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CQTAwMDAyOTBDQ0E4NDdCMTcz QTdEMTk2RjAzODg5ODA2RTcwOTFBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3ZM SDhLRHVhTlN4SFV2emNza3F5anlFcHJpcEVEZUd1VmVSYkdQUmRHcDYvMC9CQTAw MDAyOTBDQ0E4NDdCMTczQTdEMTk2RjAzODg5ODA2RTcwOTFBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA ioEY4OoBw4ThtBoVYnAcYQz4Qs4qv8+pVckJ3wLpae+yMKjHP6gPadAqAmt00ZDX QQD2A7xSAd9jbFMoaXR/zm7NVL/2inxb3DPzAW7gVz7RZxu+6zyu9cuyG4RCUFyd UGBLU9Bj0HdWirfO/INXkxnJn2yYiWFZ3NxIhmTRfpp4sPl7M6Axzbi11ToGZrjN 3Prkf1qsJJs4EQDcmynSHfQhW054LhL633z7w8Wt1bo3Kz5ZGWl9/yR4i2ArPEhY +27Xz/XioGRvlmQbXpSP0L1M6JPs8vyO0F10nH84ZrOoMHrFL44tg4uuKUv0GpNM SntN7nTSH0/rFv4uQwK5YA== -----END CERTIFICATE-----Generated at Wed Aug 20 16:14:14 2025 by rpki-client