$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft File: BA0000290CCA847B173A7D196F03889806E7091A.mft (raw, json) Hash identifier: 1LN514mHFWuVzHSO824G0J1f8rtmD3Jg/8/CHlnkDD0= Subject key identifier: D5:E9:5F:24:21:D0:C0:74:57:F7:60:3F:1B:90:31:BB:1A:DB:90:33 Authority key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A Certificate issuer: /CN=BA0000290CCA847B173A7D196F03889806E7091A Certificate serial: 30A5B1CAADACCE509F57278C883760F29CF8A5A8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer Subject info access: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft Manifest number: 0261 Signing time: Mon 20 Oct 2025 07:43:03 +0000 Manifest this update: Mon 20 Oct 2025 07:38:03 +0000 Manifest next update: Tue 21 Oct 2025 08:05:03 +0000 Files and hashes: 1: BA0000290CCA847B173A7D196F03889806E7091A.crl (hash: CmvcF1NoggmxhBFWCD87EvcBMKnhPdhp84iw5iaq0t0=) 2: 3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa (hash: GlYV7CMqkMEAod4viUcwiHDE80QdyRhHaF4PZVAn6P4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a5:b1:ca:ad:ac:ce:50:9f:57:27:8c:88:37:60:f2:9c:f8:a5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0000290CCA847B173A7D196F03889806E7091A Validity Not Before: Oct 20 07:38:03 2025 GMT Not After : Oct 21 08:05:03 2025 GMT Subject: CN=D5E95F2421D0C07457F7603F1B9031BB1ADB9033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:19:a0:d8:66:8a:0f:df:ce:f9:0b:43:96:d7: b6:e5:a3:5b:f3:5b:34:3c:66:65:a9:6f:b7:7f:45: bb:52:e8:95:b6:82:44:ba:c8:68:47:d7:60:fb:60: be:b6:ab:39:d9:2c:26:c3:c6:3b:d3:08:ed:87:77: bf:17:05:f6:d0:d9:1c:51:49:9b:f0:5c:92:68:b8: b9:26:7c:e3:66:7a:aa:c9:81:30:54:a9:8e:db:86: d4:8d:bf:1d:29:db:c9:58:2c:2c:07:09:33:bd:70: 66:23:ce:7d:1a:61:cc:0a:a7:78:c3:07:0c:33:34: 8b:9e:00:cc:ab:1a:b4:4d:af:61:24:0d:af:1f:8e: 2d:bb:23:cc:e9:29:74:33:a3:86:9e:52:39:9b:bd: 9e:59:89:e5:b6:86:a3:5e:cb:2b:13:0f:66:b4:07: 97:c3:8e:c0:a1:22:36:e8:68:97:b9:aa:5f:e3:90: 8b:20:5f:59:27:82:c8:ae:90:63:67:27:26:8a:bd: 23:b0:be:54:c3:bd:d4:d4:52:ee:2a:6e:4c:26:2c: d2:35:42:37:e0:60:61:63:b4:d7:77:47:42:7d:c5: 03:98:77:56:46:dc:6d:bc:d5:bc:a9:c9:bd:4a:1d: 8f:76:d4:3b:8f:81:24:50:76:e6:c9:a6:e3:e4:ef: be:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E9:5F:24:21:D0:C0:74:57:F7:60:3F:1B:90:31:BB:1A:DB:90:33 X509v3 Authority Key Identifier: keyid:BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:02:a6:9d:89:e7:21:e5:d9:f0:da:47:ad:9d:a4:a1:0e:c6: 50:b7:b7:f6:4c:cd:79:26:14:db:37:5c:78:53:ce:4a:4e:8b: a9:01:7c:db:b2:af:0f:98:33:b6:86:9d:7b:0a:e8:70:ae:46: 07:a0:77:03:89:b9:fd:3a:98:69:88:3f:ef:6f:e6:d4:5e:76: 71:7d:6a:74:e5:25:ad:c9:28:ec:0d:c3:26:49:52:d0:e5:3d: b2:db:b5:bd:7c:4c:ac:a5:f2:b2:50:c7:15:5d:47:71:b8:f7: e1:d2:31:66:b0:86:ee:77:ee:2d:44:56:ee:d9:36:b0:bb:30: fc:9a:dc:8d:90:e9:50:2e:8d:1a:44:1d:48:d4:25:13:49:a9: 31:84:4b:54:e7:5a:9c:2f:05:18:16:eb:8f:9c:8f:f3:ed:72: 51:3c:04:9a:69:fe:d5:73:82:d3:69:79:33:bb:c6:f6:e3:dc: 8a:76:02:2d:58:dc:c5:d6:fb:82:04:26:2a:7a:8a:bc:dc:26: 36:41:18:89:ea:50:d0:e9:79:3d:25:83:f8:b3:6a:5a:87:b1: d1:5c:34:2a:33:e3:92:89:74:a3:92:ff:ba:e8:a2:dd:fa:01: c1:61:89:05:42:42:ed:3e:be:d9:4a:3c:27:5b:3f:b6:71:e8: 28:d8:56:e7 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUMKWxyq2szlCfVyeMiDdg8pz4pagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgw NkU3MDkxQTAeFw0yNTEwMjAwNzM4MDNaFw0yNTEwMjEwODA1MDNaMDMxMTAvBgNV BAMTKEQ1RTk1RjI0MjFEMEMwNzQ1N0Y3NjAzRjFCOTAzMUJCMUFEQjkwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvGaDYZooP3875C0OW17blo1vz WzQ8ZmWpb7d/RbtS6JW2gkS6yGhH12D7YL62qznZLCbDxjvTCO2Hd78XBfbQ2RxR SZvwXJJouLkmfONmeqrJgTBUqY7bhtSNvx0p28lYLCwHCTO9cGYjzn0aYcwKp3jD BwwzNIueAMyrGrRNr2EkDa8fji27I8zpKXQzo4aeUjmbvZ5ZieW2hqNeyysTD2a0 B5fDjsChIjboaJe5ql/jkIsgX1kngsiukGNnJyaKvSOwvlTDvdTUUu4qbkwmLNI1 QjfgYGFjtNd3R0J9xQOYd1ZG3G281bypyb1KHY921DuPgSRQdubJpuPk7753AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU1elfJCHQwHRX92A/G5AxuxrbkDMwHwYDVR0j BBgwFoAUugAAKQzKhHsXOn0ZbwOImAbnCRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby92TEg4S0R1YU5TeEhVdnpjc2txeWp5RXByaXBFRGVHdVZlUmJHUFJkR3A2 LzAvQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgwNkU3MDkxQS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CQTAwMDAyOTBDQ0E4NDdCMTcz QTdEMTk2RjAzODg5ODA2RTcwOTFBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3ZM SDhLRHVhTlN4SFV2emNza3F5anlFcHJpcEVEZUd1VmVSYkdQUmRHcDYvMC9CQTAw MDAyOTBDQ0E4NDdCMTczQTdEMTk2RjAzODg5ODA2RTcwOTFBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA rwKmnYnnIeXZ8NpHrZ2koQ7GULe39kzNeSYU2zdceFPOSk6LqQF827KvD5gztoad ewrocK5GB6B3A4m5/TqYaYg/72/m1F52cX1qdOUlrcko7A3DJklS0OU9stu1vXxM rKXyslDHFV1Hcbj34dIxZrCG7nfuLURW7tk2sLsw/JrcjZDpUC6NGkQdSNQlE0mp MYRLVOdanC8FGBbrj5yP8+1yUTwEmmn+1XOC02l5M7vG9uPcinYCLVjcxdb7ggQm KnqKvNwmNkEYiepQ0Ol5PSWD+LNqWoex0Vw0KjPjkol0o5L/uuii3foBwWGJBUJC 7T6+2Uo8J1s/tnHoKNhW5w== -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:27 2025 by rpki-client