$ rpki-client -vvf rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft File: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft (raw, json) Hash identifier: TI+LN4ap45Kq99XXSRkL3YPZhR/aA3fg64oD7fZ28aI= Subject key identifier: 57:41:F1:97:C2:AF:BE:BC:CB:15:3B:1D:8A:E6:FE:1F:B9:76:9B:89 Authority key identifier: 1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 Certificate issuer: /CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Certificate serial: 06DE4D206C929CF59833787B8265C3C7B08580F6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft Manifest number: 0300 Signing time: Thu 06 Nov 2025 01:16:50 +0000 Manifest this update: Thu 06 Nov 2025 01:11:50 +0000 Manifest next update: Fri 07 Nov 2025 02:11:50 +0000 Files and hashes: 1: 323830343a346566383a3a2f33322d3335203d3e20323638323935.roa (hash: BstW0UlvH2wEHgaNKCbfIv8DXJSe7M/kYqDRbvgjc5k=) 2: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl (hash: iQNDNuT4c+TnPyx9563lKhNgOQROnMVt52vPj02xMw0=) 3: 34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa (hash: 1C/jOWt5ZHfKspqIFOUeY8exgTDIPGSvNHULSTIuARE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 07 Nov 2025 02:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:de:4d:20:6c:92:9c:f5:98:33:78:7b:82:65:c3:c7:b0:85:80:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Validity Not Before: Nov 6 01:11:50 2025 GMT Not After : Nov 7 02:11:50 2025 GMT Subject: CN=5741F197C2AFBEBCCB153B1D8AE6FE1FB9769B89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:59:67:b3:1e:72:cf:c8:f1:a3:5e:2e:dc:f4: 69:e9:b9:b3:d1:11:b5:8c:95:3d:67:68:41:b8:bf: 8f:e6:54:7f:3b:9b:4d:0a:5b:83:44:b9:e7:92:53: ea:a6:f7:fe:18:4f:af:d7:47:ff:bd:9b:90:3a:86: 51:9f:61:3e:c0:e2:7e:dc:50:b1:9a:72:49:5c:e0: e1:89:b0:49:f9:cb:8c:c9:fc:b5:08:52:3c:89:21: aa:f1:91:c0:e1:f3:de:1d:5f:02:d3:2b:38:d9:97: f8:e6:d6:7c:c2:85:6a:87:e0:38:62:5f:6b:ab:4e: 02:59:78:d5:ea:bd:b5:3a:45:33:1e:9a:96:92:fb: 08:7c:10:c0:51:0e:46:3f:f2:04:e3:83:83:93:4c: 6c:1e:08:9d:8c:b7:1b:e5:17:03:e1:7f:c9:46:5f: 6f:77:80:5b:e0:a1:f0:a2:15:93:46:f2:9d:8a:60: d5:c5:3b:20:4c:72:14:ee:b7:a4:9e:91:58:26:c8: aa:dc:57:f1:dd:e8:4e:34:36:db:4f:dd:a6:68:5d: 36:2e:62:bb:9c:5d:8c:f2:f9:33:be:c5:08:df:a9: 0f:f5:b0:29:f9:b2:b1:3a:24:cc:88:93:f8:b2:39: dd:a5:5f:ee:1d:99:77:16:21:c1:02:dd:64:9a:8c: 9d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:41:F1:97:C2:AF:BE:BC:CB:15:3B:1D:8A:E6:FE:1F:B9:76:9B:89 X509v3 Authority Key Identifier: keyid:1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ef:db:df:87:db:c5:a9:25:94:1e:b8:a4:cc:10:a4:28:96: db:6a:38:28:19:af:41:61:fd:f6:68:7d:d7:76:fa:0a:c9:7b: dd:0b:5c:96:3d:3f:28:22:fa:43:8f:05:bb:14:9c:c5:20:7a: c9:c4:16:d3:e1:d3:bd:be:e7:8c:a1:63:9d:8d:7c:ff:fc:01: d5:19:14:a7:b4:2b:d8:8c:c8:35:4d:82:a6:48:f6:bf:f5:6b: b2:0d:75:eb:3b:32:c6:79:44:ab:84:25:5c:31:0f:57:d2:59: 7f:b9:05:1e:f2:ee:a9:de:e8:9b:1e:fa:3b:fe:20:4d:47:e6: 06:c0:c7:c5:49:a0:d9:c6:21:e7:df:5a:cc:eb:3f:fc:88:ac: af:82:1b:bb:a3:ea:d8:b2:c1:a1:dd:b3:9f:5e:97:f9:36:88: 25:23:bc:66:f7:23:0c:ae:65:2a:be:ad:f9:16:9d:e8:94:6b: 84:ef:f8:0b:cf:09:ac:9f:58:1a:fe:6a:e3:92:bc:ea:75:4d: 6d:7d:03:df:30:2d:d2:38:37:d1:36:73:55:40:dc:9e:3b:69: 51:3c:90:cc:f7:bc:c1:e1:ab:f8:f6:12:f5:37:5b:bd:3a:77: 04:c6:27:e3:63:49:c1:ff:01:da:bf:ab:54:63:70:c0:a1:6f: 9f:22:d9:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBt5NIGySnPWYM3h7gmXDx7CFgPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMzYwOUQ5NjZERDhCMjJFNUZENTY2N0U0QkFDQUNF RkY4RDFGMDAeFw0yNTExMDYwMTExNTBaFw0yNTExMDcwMjExNTBaMDMxMTAvBgNV BAMTKDU3NDFGMTk3QzJBRkJFQkNDQjE1M0IxRDhBRTZGRTFGQjk3NjlCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClWWezHnLPyPGjXi7c9GnpubPR EbWMlT1naEG4v4/mVH87m00KW4NEueeSU+qm9/4YT6/XR/+9m5A6hlGfYT7A4n7c ULGacklc4OGJsEn5y4zJ/LUIUjyJIarxkcDh894dXwLTKzjZl/jm1nzChWqH4Dhi X2urTgJZeNXqvbU6RTMempaS+wh8EMBRDkY/8gTjg4OTTGweCJ2MtxvlFwPhf8lG X293gFvgofCiFZNG8p2KYNXFOyBMchTut6SekVgmyKrcV/Hd6E40NttP3aZoXTYu YrucXYzy+TO+xQjfqQ/1sCn5srE6JMyIk/iyOd2lX+4dmXcWIcEC3WSajJ2FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUV0Hxl8KvvrzLFTsdiub+H7l2m4kwHwYDVR0j BBgwFoAUG6NgnZZt2LIuX9VmfkusrO/40fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FI cm8vMS8xQkEzNjA5RDk2NkREOEIyMkU1RkQ1NjY3RTRCQUNBQ0VGRjhEMUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCQTM2MDlEOTY2REQ4QjIy RTVGRDU2NjdFNEJBQ0FDRUZGOEQxRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FIcm8vMS8x QkEzNjA5RDk2NkREOEIyMkU1RkQ1NjY3RTRCQUNBQ0VGRjhEMUYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATO/b34fbxakllB64pMwQpCiW22o4KBmvQWH99mh913b6Csl73Qtclj0/KCL6 Q48FuxScxSB6ycQW0+HTvb7njKFjnY18//wB1RkUp7Qr2IzINU2Cpkj2v/Vrsg11 6zsyxnlEq4QlXDEPV9JZf7kFHvLuqd7omx76O/4gTUfmBsDHxUmg2cYh599azOs/ /Iisr4Ibu6Pq2LLBod2zn16X+TaIJSO8ZvcjDK5lKr6t+Rad6JRrhO/4C88JrJ9Y Gv5q45K86nVNbX0D3zAt0jg30TZzVUDcnjtpUTyQzPe8weGr+PYS9TdbvTp3BMYn 42NJwf8B2r+rVGNwwKFvnyLZcA== -----END CERTIFICATE-----Generated at Thu Nov 6 05:59:42 2025 by rpki-client