$ rpki-client -vvf rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft File: BA84972F94DED1627363CADBFA872D5EA75BBC41.mft (raw, json) Hash identifier: h9FmOUl+Xm+ibR0aqNIwUsTM9qD9GZkeSwpg2kJDeRY= Subject key identifier: F8:B8:40:CE:76:4A:75:05:97:6B:6D:BC:4E:31:0F:48:60:94:2E:05 Authority key identifier: BA:84:97:2F:94:DE:D1:62:73:63:CA:DB:FA:87:2D:5E:A7:5B:BC:41 Certificate issuer: /CN=BA84972F94DED1627363CADBFA872D5EA75BBC41 Certificate serial: 676E8E048381243F57D6AD687E0EBE8E3B5F0A51 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.cer Subject info access: rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft Manifest number: 02F3 Signing time: Sun 19 Oct 2025 16:30:00 +0000 Manifest this update: Sun 19 Oct 2025 16:25:00 +0000 Manifest next update: Mon 20 Oct 2025 19:29:00 +0000 Files and hashes: 1: 3230312e3138322e3230382e302f32322d3234203d3e20323637353333.roa (hash: J75ECnCGWT3/QlstX8KFpRGVD+pIEpadI6pQTJRH+bU=) 2: BA84972F94DED1627363CADBFA872D5EA75BBC41.crl (hash: QGeEwr4X5MDqLHYFzHomsbrLkTM9xyR6bG6DbNT9U3A=) 3: 323830343a343265303a3a2f33322d3430203d3e20323637353333.roa (hash: DwVRyItCXzF1NtVNIos708VR3IDVRGGvieLyPzQ1SNM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.crl rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 19:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6e:8e:04:83:81:24:3f:57:d6:ad:68:7e:0e:be:8e:3b:5f:0a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA84972F94DED1627363CADBFA872D5EA75BBC41 Validity Not Before: Oct 19 16:25:00 2025 GMT Not After : Oct 20 19:29:00 2025 GMT Subject: CN=F8B840CE764A7505976B6DBC4E310F4860942E05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:70:fa:f1:f1:53:d7:48:55:1d:88:bc:3d:a9: aa:c4:37:a2:a5:19:b4:6c:73:06:d6:45:28:3b:10: e9:4a:bd:bd:9b:d6:83:9a:61:11:20:d4:e0:2e:23: de:92:06:b6:ae:99:18:2b:51:5b:0b:7f:9e:e1:55: 0c:fc:a7:91:44:53:d6:02:3f:2b:31:60:bf:ef:37: f1:a0:d4:37:85:48:79:00:9b:be:6d:95:f0:7f:05: 30:ef:b1:1b:17:e7:48:ec:ca:e2:1a:0e:d9:c4:3f: af:c3:13:4e:47:17:37:23:39:f6:d3:86:cc:8d:15: d7:42:16:17:5d:33:51:e5:3b:fd:5a:78:3e:4b:f5: 1c:7b:bd:ed:65:a0:43:7b:42:b1:d4:7f:0c:d3:0c: eb:dd:ac:c5:31:a9:40:c5:d4:91:10:31:15:67:6f: e3:9e:73:8f:12:eb:89:58:10:6c:90:cd:0a:31:01: 3b:d3:57:bb:d3:88:52:e1:76:0f:59:a9:12:17:06: 37:83:c2:af:c8:02:ae:dc:fe:72:39:45:11:7e:38: 54:60:c5:37:36:89:d6:3c:b9:98:61:81:89:fa:06: 71:ff:ba:c2:ca:87:7d:1a:52:a9:31:a1:dc:b7:6d: 5d:22:4a:d3:83:0b:2e:a0:0f:2a:de:4b:4d:72:f3: cf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B8:40:CE:76:4A:75:05:97:6B:6D:BC:4E:31:0F:48:60:94:2E:05 X509v3 Authority Key Identifier: keyid:BA:84:97:2F:94:DE:D1:62:73:63:CA:DB:FA:87:2D:5E:A7:5B:BC:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:1a:db:22:7a:70:bb:46:55:b0:45:6e:08:0f:ba:93:85:74: 59:4b:2e:f7:67:b0:bd:87:b9:53:cc:48:13:63:7d:20:55:f5: 3e:09:ad:04:29:fc:9a:13:73:f3:d0:ff:d8:53:aa:d2:98:b4: 2c:fe:12:bd:2a:44:2a:3c:02:f3:a0:24:18:bd:4b:59:6f:d0: da:f2:57:a1:69:8f:e2:8a:93:5c:2c:a6:06:88:0b:46:a7:12: 0a:ea:0e:07:4d:1f:fd:04:f7:79:7c:ee:3d:e5:1a:c9:90:23: db:20:d1:1d:39:51:e0:25:cf:c5:3e:1e:3a:5a:7d:f4:5a:68: 3e:f4:ec:c4:68:58:ff:12:fe:0b:da:fa:d8:fa:b5:17:fa:d3: 76:8a:b3:c2:7c:46:f8:fd:1a:3f:b1:79:da:0f:69:1a:6c:8a: f2:8a:7c:43:8a:6e:ec:f2:09:36:e7:d3:23:9d:5d:69:62:f9: e0:d5:7c:08:4e:aa:74:ac:89:16:dd:c7:8d:15:f7:b3:02:73: 72:0c:3c:8b:f5:14:73:af:77:8e:c2:12:32:8c:5e:14:18:80: 3c:2f:ee:cf:54:66:cc:d8:96:06:ca:e1:77:f1:b6:e4:cb:32: 90:e5:e1:d4:7a:dd:92:e9:07:2b:00:50:e2:5c:4c:cd:f7:6a: cc:bc:03:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ26OBIOBJD9X1q1ofg6+jjtfClEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE4NDk3MkY5NERFRDE2MjczNjNDQURCRkE4NzJENUVB NzVCQkM0MTAeFw0yNTEwMTkxNjI1MDBaFw0yNTEwMjAxOTI5MDBaMDMxMTAvBgNV BAMTKEY4Qjg0MENFNzY0QTc1MDU5NzZCNkRCQzRFMzEwRjQ4NjA5NDJFMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCscPrx8VPXSFUdiLw9qarEN6Kl GbRscwbWRSg7EOlKvb2b1oOaYREg1OAuI96SBraumRgrUVsLf57hVQz8p5FEU9YC PysxYL/vN/Gg1DeFSHkAm75tlfB/BTDvsRsX50jsyuIaDtnEP6/DE05HFzcjOfbT hsyNFddCFhddM1HlO/1aeD5L9Rx7ve1loEN7QrHUfwzTDOvdrMUxqUDF1JEQMRVn b+Oec48S64lYEGyQzQoxATvTV7vTiFLhdg9ZqRIXBjeDwq/IAq7c/nI5RRF+OFRg xTc2idY8uZhhgYn6BnH/usLKh30aUqkxody3bV0iStODCy6gDyreS01y888XAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+LhAznZKdQWXa228TjEPSGCULgUwHwYDVR0j BBgwFoAUuoSXL5Te0WJzY8rb+octXqdbvEEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNTJlMlVqeFNwN0trb0hVRnhkTnFxUTFkUXpMd1pLRUsyUnZucmRLR0pE cGQvMS9CQTg0OTcyRjk0REVEMTYyNzM2M0NBREJGQTg3MkQ1RUE3NUJCQzQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBODQ5NzJGOTRERUQxNjI3 MzYzQ0FEQkZBODcyRDVFQTc1QkJDNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NTJlMlVqeFNwN0trb0hVRnhkTnFxUTFkUXpMd1pLRUsyUnZucmRLR0pEcGQvMS9C QTg0OTcyRjk0REVEMTYyNzM2M0NBREJGQTg3MkQ1RUE3NUJCQzQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3hrbInpwu0ZVsEVuCA+6k4V0WUsu92ewvYe5U8xIE2N9IFX1PgmtBCn8mhNz 89D/2FOq0pi0LP4SvSpEKjwC86AkGL1LWW/Q2vJXoWmP4oqTXCymBogLRqcSCuoO B00f/QT3eXzuPeUayZAj2yDRHTlR4CXPxT4eOlp99FpoPvTsxGhY/xL+C9r62Pq1 F/rTdoqzwnxG+P0aP7F52g9pGmyK8op8Q4pu7PIJNufTI51daWL54NV8CE6qdKyJ Ft3HjRX3swJzcgw8i/UUc693jsISMoxeFBiAPC/uz1RmzNiWBsrhd/G25MsykOXh 1HrdkukHKwBQ4lxMzfdqzLwDPA== -----END CERTIFICATE-----Generated at Mon Oct 20 09:35:01 2025 by rpki-client