$ rpki-client -vvf rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft File: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft (raw, json) Hash identifier: frovD8X4FN9zsnRihSO9KSwdbnNHOl44axYAqUf4kwI= Subject key identifier: 88:35:1F:24:EF:5C:04:DC:1F:25:A5:75:53:CA:7F:E3:D1:B7:E0:BD Authority key identifier: BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46 Certificate issuer: /CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46 Certificate serial: 43A50ECC159EF097FBF13DF3E6E95CBA7228EA67 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer Subject info access: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft Manifest number: 29 Signing time: Sat 23 Aug 2025 07:36:15 +0000 Manifest this update: Sat 23 Aug 2025 07:31:15 +0000 Manifest next update: Sun 24 Aug 2025 11:09:15 +0000 Files and hashes: 1: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl (hash: CL3YDMm80DSGNKE+MsyWWsmFuylOKVehPzFgw/vmjIY=) 2: 323830343a393339303a3a2f33322d3438203d3e203631363233.roa (hash: LG7owg69fyxfKV8rigMC7sBkP5B19iTBtW4UQCyl/2Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 11:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a5:0e:cc:15:9e:f0:97:fb:f1:3d:f3:e6:e9:5c:ba:72:28:ea:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46 Validity Not Before: Aug 23 07:31:15 2025 GMT Not After : Aug 24 11:09:15 2025 GMT Subject: CN=88351F24EF5C04DC1F25A57553CA7FE3D1B7E0BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d8:2a:b4:d8:84:8c:db:2e:e9:ab:3d:8c:58: 5f:87:2f:7a:42:cc:63:16:e8:cd:0e:2c:68:77:db: 92:6f:9f:6a:44:6a:59:1c:7a:41:0c:1e:c9:9a:64: e4:cc:18:b4:d9:ce:8d:1d:09:6f:8e:01:cd:03:e1: 70:47:08:ec:53:cb:52:df:8d:24:8c:cb:6a:9b:21: 21:35:00:81:6e:0b:cf:ff:1c:08:79:3b:a9:2d:93: eb:49:50:d7:df:b7:b8:24:d3:72:a2:21:a1:e3:c2: 54:90:80:21:74:2b:a6:8c:41:b3:ce:20:ae:90:1a: 71:79:4d:38:58:f3:13:50:46:9c:67:b4:bd:af:24: 68:2d:e0:af:36:17:51:30:ee:a7:b9:eb:a3:59:1b: 7d:84:9d:1c:be:d7:e4:55:cb:96:7a:66:09:2d:2e: 72:ec:5b:42:94:d8:c8:38:7e:77:82:4e:9e:58:c0: f8:87:c3:cd:4e:c3:b6:46:33:cd:cc:2c:d4:87:43: 4e:81:8e:5a:8c:fd:05:ea:4b:be:2e:2c:a9:04:96: 39:c1:2c:6f:41:8b:58:0d:c6:4d:cf:ac:15:7a:67: b8:97:38:8d:d8:95:00:e8:80:4b:54:ab:c3:7f:29: a7:18:4f:07:2c:c6:f7:d1:36:1f:16:41:29:fd:cd: 2a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:35:1F:24:EF:5C:04:DC:1F:25:A5:75:53:CA:7F:E3:D1:B7:E0:BD X509v3 Authority Key Identifier: keyid:BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f2:7e:27:28:92:04:1e:54:af:b2:c9:d8:e6:cb:49:d2:90: 11:95:92:c6:2b:fe:24:0a:e3:e2:bb:38:56:14:cb:58:0b:f3: c1:93:15:03:a4:9b:b4:6f:77:a3:3f:59:dc:d1:bb:57:23:bc: f0:5d:a2:f2:66:bf:c8:09:d3:86:05:70:72:74:75:db:26:89: 11:ff:5e:24:4f:d9:41:b7:5d:ec:bf:9b:b1:b9:ea:a7:42:91: fb:f6:a4:e2:c0:a7:31:ce:63:d7:3a:46:33:f6:3e:1b:fc:2d: e7:c1:80:f4:8f:39:3a:58:f6:c5:82:61:be:97:b3:60:58:0b: 08:80:55:9b:f8:38:48:03:aa:92:47:e0:f8:bd:5a:da:c6:9f: 87:d9:f4:78:65:08:a4:d1:21:5b:48:0a:f6:9d:52:25:ab:5b: 49:a3:39:ec:ba:da:10:be:d0:da:dd:41:a7:e5:59:c8:77:9f: 87:b5:46:6d:a8:38:d6:d0:20:ae:bd:7a:b6:92:7d:a6:b3:07: 28:a8:a2:41:a6:a3:f9:77:c4:f0:93:17:87:dd:2a:53:ce:2d: 82:00:d5:1a:44:77:58:21:b6:42:ef:8f:7a:5e:95:ed:5c:ae: d3:cc:28:d2:1a:d7:6d:22:dd:9b:c3:8d:20:48:fd:d2:d1:39: 52:88:16:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ6UOzBWe8Jf78T3z5ulcunIo6mcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1N0QyMzlEMkRDMEFDMjU3MzczQTdCQkFENTE4ODZB QTVENEM0NjAeFw0yNTA4MjMwNzMxMTVaFw0yNTA4MjQxMTA5MTVaMDMxMTAvBgNV BAMTKDg4MzUxRjI0RUY1QzA0REMxRjI1QTU3NTUzQ0E3RkUzRDFCN0UwQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2Cq02ISM2y7pqz2MWF+HL3pC zGMW6M0OLGh325Jvn2pEalkcekEMHsmaZOTMGLTZzo0dCW+OAc0D4XBHCOxTy1Lf jSSMy2qbISE1AIFuC8//HAh5O6ktk+tJUNfft7gk03KiIaHjwlSQgCF0K6aMQbPO IK6QGnF5TThY8xNQRpxntL2vJGgt4K82F1Ew7qe566NZG32EnRy+1+RVy5Z6Zgkt LnLsW0KU2Mg4fneCTp5YwPiHw81Ow7ZGM83MLNSHQ06BjlqM/QXqS74uLKkEljnB LG9Bi1gNxk3PrBV6Z7iXOI3YlQDogEtUq8N/KacYTwcsxvfRNh8WQSn9zSqTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiDUfJO9cBNwfJaV1U8p/49G34L0wHwYDVR0j BBgwFoAUulfSOdLcCsJXNzp7utUYhqpdTEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGRCS2JHaU5vN0YyWjdiR0JRTXNlM3JySk5YZ2pOVjVLVlIyRGhHV1NL YTUvMC9CQTU3RDIzOUQyREMwQUMyNTczNzNBN0JCQUQ1MTg4NkFBNUQ0QzQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNTdEMjM5RDJEQzBBQzI1 NzM3M0E3QkJBRDUxODg2QUE1RDRDNDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGRCS2JHaU5vN0YyWjdiR0JRTXNlM3JySk5YZ2pOVjVLVlIyRGhHV1NLYTUvMC9C QTU3RDIzOUQyREMwQUMyNTczNzNBN0JCQUQ1MTg4NkFBNUQ0QzQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKvJ+JyiSBB5Ur7LJ2ObLSdKQEZWSxiv+JArj4rs4VhTLWAvzwZMVA6SbtG93 oz9Z3NG7VyO88F2i8ma/yAnThgVwcnR12yaJEf9eJE/ZQbdd7L+bsbnqp0KR+/ak 4sCnMc5j1zpGM/Y+G/wt58GA9I85Olj2xYJhvpezYFgLCIBVm/g4SAOqkkfg+L1a 2safh9n0eGUIpNEhW0gK9p1SJatbSaM57LraEL7Q2t1Bp+VZyHefh7VGbag41tAg rr16tpJ9prMHKKiiQaaj+XfE8JMXh90qU84tggDVGkR3WCG2Qu+Pel6V7Vyu08wo 0hrXbSLdm8ONIEj90tE5UogWow== -----END CERTIFICATE-----Generated at Sat Aug 23 19:07:55 2025 by rpki-client