$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft File: BA0000290CCA847B173A7D196F03889806E7091A.mft (raw, json) Hash identifier: vQ/4s/xUmZhxTNnP0zlRAKtYTTdwOySHFc27QZrzDSw= Subject key identifier: B6:81:DA:63:EF:34:11:0A:DB:CD:CB:A5:9F:4C:FC:D4:8A:BA:08:56 Authority key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A Certificate issuer: /CN=BA0000290CCA847B173A7D196F03889806E7091A Certificate serial: 6A694A2F92E222C2CA0D22DEBDDB09B4160229D5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer Subject info access: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft Manifest number: 0273 Signing time: Sun 02 Nov 2025 20:49:02 +0000 Manifest this update: Sun 02 Nov 2025 20:44:02 +0000 Manifest next update: Mon 03 Nov 2025 23:55:02 +0000 Files and hashes: 1: BA0000290CCA847B173A7D196F03889806E7091A.crl (hash: mgxtlszhyZ3lrp+PxJ8XQ45WV4n+Pt3DFO+7z+tYu5E=) 2: 3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa (hash: GlYV7CMqkMEAod4viUcwiHDE80QdyRhHaF4PZVAn6P4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 23:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:69:4a:2f:92:e2:22:c2:ca:0d:22:de:bd:db:09:b4:16:02:29:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0000290CCA847B173A7D196F03889806E7091A Validity Not Before: Nov 2 20:44:02 2025 GMT Not After : Nov 3 23:55:02 2025 GMT Subject: CN=B681DA63EF34110ADBCDCBA59F4CFCD48ABA0856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:04:4b:78:9c:00:1b:cd:f1:c7:49:2d:bc:46: 6d:a7:16:c5:a0:ab:fd:22:86:96:ca:12:eb:f1:6d: c1:f4:6f:b7:58:8b:7f:d7:d8:ec:13:d9:5b:8c:fd: 33:d7:b1:c5:13:49:4f:51:82:2f:7a:2b:4b:f9:fd: 17:2f:8f:6f:e8:b0:9a:3e:1b:36:23:b0:51:79:c2: 7a:af:7b:9e:68:48:39:82:d5:81:97:d8:69:73:c2: ad:df:f3:50:d5:b6:c3:15:7f:31:cd:09:89:60:2e: 39:d4:d7:be:d2:bc:43:bb:9e:65:13:28:f3:81:ac: e4:33:c9:03:8f:fc:6c:61:bf:94:3d:76:58:c4:c0: e7:29:66:28:e9:df:3d:db:92:29:6d:c2:a0:63:92: 4e:5b:7e:6d:98:dc:46:cf:07:4e:54:ff:fb:67:62: 93:53:83:52:df:d7:17:fa:90:d8:8b:5e:9b:bd:10: 67:7d:9f:23:24:73:cb:af:2d:c6:5e:4a:cf:78:a4: 10:9b:fb:3e:72:ad:0e:d5:9f:13:33:40:5e:f8:b9: ec:01:34:68:37:e8:ec:54:5e:70:54:72:6f:95:c3: b0:c8:cb:e4:2c:dc:1c:e2:34:7b:8b:70:33:0d:54: 4c:8a:b6:d1:6c:7f:e9:0f:fd:6d:a9:b8:2a:e0:90: cc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:81:DA:63:EF:34:11:0A:DB:CD:CB:A5:9F:4C:FC:D4:8A:BA:08:56 X509v3 Authority Key Identifier: keyid:BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:fd:c9:ed:f7:9c:39:65:1e:13:9a:33:9c:ae:5e:73:10:78: 3c:ff:42:80:c0:58:8e:fe:c8:d5:e1:df:7e:6b:51:04:7f:d1: 56:e5:2c:8e:d7:6d:bf:6a:a7:b4:8b:73:25:ad:ec:78:49:8b: a4:a2:e6:60:cb:3a:fa:a1:31:a6:fc:b4:f7:58:be:e5:9f:1b: f6:b4:95:6e:03:12:83:fe:57:ee:8e:e2:62:22:ac:94:75:75: c7:12:31:37:37:1c:dd:aa:29:70:ec:95:e7:51:ad:55:65:86: 09:95:10:b2:5e:06:49:d2:89:1c:17:db:f7:ff:fb:e8:05:fe: c4:97:4a:9a:f2:9a:fa:1f:7e:e2:87:78:d8:6f:26:a7:b8:c2: e8:1a:c4:b0:32:9b:48:5e:d8:98:cf:6a:53:ea:a1:27:bc:7f: be:0a:69:0c:36:ae:61:f4:84:41:ca:c9:fe:1f:fe:ed:98:5a: e3:e3:14:4a:3f:f4:2d:8c:5d:9f:e8:d5:26:cc:43:9a:fc:45: 31:29:09:56:34:a2:16:29:f8:2a:95:80:55:ce:6f:d9:78:fa: ac:64:a0:d9:bc:aa:a2:1d:5c:8f:ca:d7:65:75:5e:80:4f:b7: 6e:d7:c8:c6:7d:23:1d:d5:69:df:c5:38:68:6e:fa:2e:57:d7: 3c:2e:78:3a -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUamlKL5LiIsLKDSLevdsJtBYCKdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgw NkU3MDkxQTAeFw0yNTExMDIyMDQ0MDJaFw0yNTExMDMyMzU1MDJaMDMxMTAvBgNV BAMTKEI2ODFEQTYzRUYzNDExMEFEQkNEQ0JBNTlGNENGQ0Q0OEFCQTA4NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUBEt4nAAbzfHHSS28Rm2nFsWg q/0ihpbKEuvxbcH0b7dYi3/X2OwT2VuM/TPXscUTSU9Rgi96K0v5/Rcvj2/osJo+ GzYjsFF5wnqve55oSDmC1YGX2Glzwq3f81DVtsMVfzHNCYlgLjnU177SvEO7nmUT KPOBrOQzyQOP/Gxhv5Q9dljEwOcpZijp3z3bkiltwqBjkk5bfm2Y3EbPB05U//tn YpNTg1Lf1xf6kNiLXpu9EGd9nyMkc8uvLcZeSs94pBCb+z5yrQ7VnxMzQF74uewB NGg36OxUXnBUcm+Vw7DIy+Qs3BziNHuLcDMNVEyKttFsf+kP/W2puCrgkMz9AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUtoHaY+80EQrbzculn0z81Iq6CFYwHwYDVR0j BBgwFoAUugAAKQzKhHsXOn0ZbwOImAbnCRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby92TEg4S0R1YU5TeEhVdnpjc2txeWp5RXByaXBFRGVHdVZlUmJHUFJkR3A2 LzAvQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgwNkU3MDkxQS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CQTAwMDAyOTBDQ0E4NDdCMTcz QTdEMTk2RjAzODg5ODA2RTcwOTFBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3ZM SDhLRHVhTlN4SFV2emNza3F5anlFcHJpcEVEZUd1VmVSYkdQUmRHcDYvMC9CQTAw MDAyOTBDQ0E4NDdCMTczQTdEMTk2RjAzODg5ODA2RTcwOTFBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA R/3J7fecOWUeE5oznK5ecxB4PP9CgMBYjv7I1eHffmtRBH/RVuUsjtdtv2qntItz Ja3seEmLpKLmYMs6+qExpvy091i+5Z8b9rSVbgMSg/5X7o7iYiKslHV1xxIxNzcc 3aopcOyV51GtVWWGCZUQsl4GSdKJHBfb9//76AX+xJdKmvKa+h9+4od42G8mp7jC 6BrEsDKbSF7YmM9qU+qhJ7x/vgppDDauYfSEQcrJ/h/+7Zha4+MUSj/0LYxdn+jV JsxDmvxFMSkJVjSiFin4KpWAVc5v2Xj6rGSg2byqoh1cj8rXZXVegE+3btfIxn0j HdVp38U4aG76LlfXPC54Og== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:01 2025 by rpki-client