$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft File: BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft (raw, json) Hash identifier: BOU/XekQX35XqLLk/LBb1lgJR+zsvDR8L2ytfh8b/44= Subject key identifier: D4:EF:11:B3:00:BC:FA:EF:6A:73:AF:49:8F:62:69:DB:CA:47:10:16 Authority key identifier: BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46 Certificate issuer: /CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446 Certificate serial: 1AB1A7D1F9A0F8CDA0FBBD1BEB4EC980D1F64AC3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer Subject info access: rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft Manifest number: 029F Signing time: Sat 23 Aug 2025 10:27:11 +0000 Manifest this update: Sat 23 Aug 2025 10:22:11 +0000 Manifest next update: Sun 24 Aug 2025 11:41:11 +0000 Files and hashes: 1: 34352e3233392e302e302f32322d3232203d3e203532383538.roa (hash: M65VDR5KYw9XeZVWCrlotO4EXQohZff3wA4rGwAsTL4=) 2: BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl (hash: k4bHVf23W5LM+eZsVsk0vIbgkzLFZc8ORFu68p5YTUc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 11:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b1:a7:d1:f9:a0:f8:cd:a0:fb:bd:1b:eb:4e:c9:80:d1:f6:4a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446 Validity Not Before: Aug 23 10:22:11 2025 GMT Not After : Aug 24 11:41:11 2025 GMT Subject: CN=D4EF11B300BCFAEF6A73AF498F6269DBCA471016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c9:4c:f2:d9:1a:b9:22:86:ad:ef:02:2e:05: 2b:52:bc:20:b6:31:a1:ec:cc:14:6e:5c:e7:0d:20: 90:59:6d:e7:42:a2:c7:8d:78:dd:de:74:bf:85:8d: 49:19:d3:5d:4c:f3:fa:4f:ac:22:ff:b2:23:67:d5: 6c:35:44:ec:cc:99:4f:20:f6:29:bd:9b:b7:45:3a: 6a:77:56:43:6b:5e:60:f1:a9:62:92:69:bb:61:03: 06:a7:0c:cf:b5:5c:b4:12:c4:c3:2d:c3:65:9f:56: ea:fb:10:55:5d:2d:2c:2a:ba:9c:7a:93:2e:06:07: 3b:e4:98:7c:68:8d:81:2b:dc:1b:09:75:d2:53:d8: 83:18:21:16:37:bb:a6:d1:46:6a:9b:77:83:23:56: 9a:33:7a:d5:55:5b:10:eb:c1:7e:87:dc:07:4b:44: 29:9a:61:25:a9:56:8a:64:a5:b7:38:36:15:4a:92: 94:2b:58:75:45:06:1b:cf:da:b7:27:14:d6:35:05: 32:a3:40:4a:46:12:61:58:7d:5b:fc:57:a8:9e:fe: d0:cf:09:86:65:af:b5:5e:32:c6:f3:d5:e7:04:39: 45:dd:dc:65:2e:a7:fb:91:41:48:fe:e2:b0:85:b4: 42:e9:d1:73:68:df:cf:49:b4:88:fd:27:17:bb:aa: 33:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EF:11:B3:00:BC:FA:EF:6A:73:AF:49:8F:62:69:DB:CA:47:10:16 X509v3 Authority Key Identifier: keyid:BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:36:e1:b6:9c:0a:ee:6a:e2:10:c3:55:06:78:e0:41:11:af: dc:21:4c:c5:d8:c3:8b:91:be:d8:4e:55:b5:f8:d3:a9:b9:c9: d2:fd:d5:15:9c:43:2f:56:fa:8c:40:b1:c7:3d:c5:7d:a5:5c: 44:ea:39:d9:59:67:06:26:01:1a:8f:63:67:48:a3:eb:fb:54: 8b:b8:06:a4:b5:b4:ee:2f:5a:d6:92:c0:9d:1a:a0:e7:d7:75: c1:c6:63:51:01:1d:66:60:57:9a:fc:be:51:e4:4f:fe:4a:bd: aa:2d:69:5c:2c:00:53:5c:8c:7d:f6:f3:79:b4:4c:38:ca:83: 7c:b6:08:c6:49:95:50:1f:88:66:3c:bb:2c:1e:70:9a:f4:de: 94:78:3c:87:95:5a:ad:ab:5a:24:f8:be:5a:47:19:c0:b4:36: c0:3b:73:6f:28:bb:ab:b5:04:e8:ea:8d:50:ad:f2:15:01:ab: 51:70:ae:38:1d:4c:40:b9:e1:ea:43:e1:af:38:ca:d3:3d:01: 67:4c:49:28:bf:ef:39:72:99:fa:e5:b0:d9:c6:89:af:58:12: 02:28:e1:b6:2d:27:a9:43:e7:98:8e:ad:57:dd:44:5a:50:32: d8:c6:a0:cc:1b:0a:6b:ea:76:c4:1d:1d:e2:15:c0:5e:e0:6e: 88:c3:56:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGrGn0fmg+M2g+70b607JgNH2SsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1NEE0N0U1RjkxMEFFOTIxRUFFRTlCOUJFNTEwOUMz MjUwMTQ0NjAeFw0yNTA4MjMxMDIyMTFaFw0yNTA4MjQxMTQxMTFaMDMxMTAvBgNV BAMTKEQ0RUYxMUIzMDBCQ0ZBRUY2QTczQUY0OThGNjI2OURCQ0E0NzEwMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCryUzy2Rq5Ioat7wIuBStSvCC2 MaHszBRuXOcNIJBZbedCoseNeN3edL+FjUkZ011M8/pPrCL/siNn1Ww1ROzMmU8g 9im9m7dFOmp3VkNrXmDxqWKSabthAwanDM+1XLQSxMMtw2WfVur7EFVdLSwqupx6 ky4GBzvkmHxojYEr3BsJddJT2IMYIRY3u6bRRmqbd4MjVpozetVVWxDrwX6H3AdL RCmaYSWpVopkpbc4NhVKkpQrWHVFBhvP2rcnFNY1BTKjQEpGEmFYfVv8V6ie/tDP CYZlr7VeMsbz1ecEOUXd3GUup/uRQUj+4rCFtELp0XNo389JtIj9Jxe7qjNHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1O8RswC8+u9qc69Jj2Jp28pHEBYwHwYDVR0j BBgwFoAUulSkfl+RCukh6u6bm+UQnDJQFEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVNXcVNZWUFzRmtzTnBjcmhnRER0NW85YzJpWThqb2U1aUdUdXA3Q01V eFQvMS9CQTU0QTQ3RTVGOTEwQUU5MjFFQUVFOUI5QkU1MTA5QzMyNTAxNDQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNTRBNDdFNUY5MTBBRTky MUVBRUU5QjlCRTUxMDlDMzI1MDE0NDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVNXcVNZWUFzRmtzTnBjcmhnRER0NW85YzJpWThqb2U1aUdUdXA3Q01VeFQvMS9C QTU0QTQ3RTVGOTEwQUU5MjFFQUVFOUI5QkU1MTA5QzMyNTAxNDQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtDbhtpwK7mriEMNVBnjgQRGv3CFMxdjDi5G+2E5VtfjTqbnJ0v3VFZxDL1b6 jECxxz3FfaVcROo52VlnBiYBGo9jZ0ij6/tUi7gGpLW07i9a1pLAnRqg59d1wcZj UQEdZmBXmvy+UeRP/kq9qi1pXCwAU1yMffbzebRMOMqDfLYIxkmVUB+IZjy7LB5w mvTelHg8h5VarataJPi+WkcZwLQ2wDtzbyi7q7UE6OqNUK3yFQGrUXCuOB1MQLnh 6kPhrzjK0z0BZ0xJKL/vOXKZ+uWw2caJr1gSAijhti0nqUPnmI6tV91EWlAy2Mag zBsKa+p2xB0d4hXAXuBuiMNWYw== -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:28 2025 by rpki-client