$ rpki-client -vvf rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.mft File: BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.mft (raw, json) Hash identifier: PEn1DM52XbKKcmWTaD2Xk1ADcNJp7qLvu3SSy4ZPoqY= Subject key identifier: 24:D6:D9:C8:88:84:DE:CF:C7:C2:B9:B9:2B:28:04:4C:C8:50:68:AC Authority key identifier: BF:AF:13:24:A2:3F:DC:87:B7:12:AD:D2:18:46:CB:1B:F3:CF:ED:F2 Certificate issuer: /CN=BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2 Certificate serial: 4BA72823ECDBD191EE39970B56B27EDD1E52670B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.mft Manifest number: 1B Signing time: Sat 09 Aug 2025 20:06:58 +0000 Manifest this update: Sat 09 Aug 2025 20:01:58 +0000 Manifest next update: Sun 10 Aug 2025 20:29:58 +0000 Files and hashes: 1: BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.crl (hash: 6bILD/K3VTtTI6Y1pt5YH9m8R8PukFURKecKfAXulfQ=) 2: 323830343a356162383a3a2f33322d3334203d3e20323638373931.roa (hash: IF17TOnucz3eEhEG7pqk96MKlsI9afVTvw2Ilw7esBE=) 3: 3230302e392e32382e302f32322d3234203d3e20323638373931.roa (hash: b9Lk2HKPVAwl88t/aO7v/kvwU0g4h4TtO520VveoY3I=) 4: 34352e3137322e36342e302f32322d3234203d3e20323638373931.roa (hash: cgmX45fTd+k4EKTWQqOEXQbR7n7gtUEsd2uY8VwYX/s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.crl rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 14:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a7:28:23:ec:db:d1:91:ee:39:97:0b:56:b2:7e:dd:1e:52:67:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2 Validity Not Before: Aug 9 20:01:58 2025 GMT Not After : Aug 10 20:29:58 2025 GMT Subject: CN=24D6D9C88884DECFC7C2B9B92B28044CC85068AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3f:fb:f2:f5:01:2a:b3:89:90:33:b3:c8:6f: c2:e0:14:1f:c8:eb:c6:7b:78:0d:65:ce:23:5f:37: e0:db:60:a5:da:d2:19:3e:b6:75:76:ef:76:a4:5e: 32:50:e5:fe:00:f2:3f:d4:74:62:f4:ef:7f:ed:c8: 31:73:b7:1f:11:41:89:23:08:44:08:99:da:8c:50: 7a:c6:d6:7c:86:48:fa:da:ea:18:51:ff:0f:ea:2e: 78:79:43:cc:ec:d8:cb:a8:f1:a4:18:59:ca:e7:ba: 0b:81:8d:aa:1d:b6:d4:27:73:67:51:07:5d:99:6d: 98:c4:8c:de:60:13:16:c9:3d:a2:62:84:b3:a3:1a: 37:f1:3d:ca:1e:08:04:30:2f:a4:4c:f0:e5:8b:00: 4c:5d:98:e3:b9:6a:7c:9e:97:05:e2:60:83:84:ce: cb:ae:0e:6a:24:f2:28:07:67:11:bb:79:78:69:9e: 45:24:23:ea:a4:82:a1:3d:76:0e:e3:2a:35:42:6f: f5:19:c4:0a:48:0a:99:cf:94:c8:bd:ef:fe:6c:aa: 7b:f0:46:86:5e:c6:9f:79:50:2b:4f:a0:e5:9a:94: ab:78:86:41:70:da:14:df:76:6f:08:62:92:81:37: cb:80:ec:06:db:ef:aa:1c:b8:01:2a:a4:73:fb:1f: bc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D6:D9:C8:88:84:DE:CF:C7:C2:B9:B9:2B:28:04:4C:C8:50:68:AC X509v3 Authority Key Identifier: keyid:BF:AF:13:24:A2:3F:DC:87:B7:12:AD:D2:18:46:CB:1B:F3:CF:ED:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h9swLui8pZhZSVMz1mTZWCUcgu56D1pN864yJ95zHJ7/0/BFAF1324A23FDC87B712ADD21846CB1BF3CFEDF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:4f:18:9e:7c:4f:2e:08:78:02:5b:4c:f8:5c:bf:3d:a1:d2: 75:ae:cb:54:a4:95:ff:03:60:0c:c5:5d:e5:0f:b4:08:85:3b: 70:8b:b0:fa:ec:a0:00:5e:e6:0c:e3:ac:b0:b5:6f:c6:21:b7: cf:d2:a9:54:8e:ef:02:57:54:e0:ae:87:ae:8b:76:b2:7c:9f: 50:a7:cf:cf:1f:ab:de:b0:45:76:05:d3:fa:a7:4c:21:aa:16: 7a:fb:17:6a:79:62:1f:74:2e:4c:43:78:a4:78:b0:0c:7a:00: 6a:8f:ea:a1:d6:bb:6b:6c:a0:03:6c:f6:cd:f0:a3:0a:a7:f8: 2d:fb:d2:7a:1d:00:e6:3e:97:fd:f3:82:74:39:02:3a:0d:34: 1a:2b:2f:1d:c1:72:b2:13:fb:27:42:9b:eb:ba:c2:c0:18:c5: 04:85:a4:5f:52:c3:3e:2f:88:67:3f:5c:ca:ec:2b:01:cc:70: 82:dd:a0:ed:5d:f8:05:d8:f1:1c:3b:21:5f:30:e5:36:a5:66: a1:99:74:6d:c5:80:20:e7:88:fe:c8:73:6b:a4:2b:86:0c:b1: dc:79:19:8a:8b:7f:eb:4a:b6:90:15:65:36:3e:0c:4a:f4:b0: 71:f9:eb:47:14:9a:1b:4a:ac:e8:9c:53:5f:59:64:5f:27:10: a9:e6:4b:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS6coI+zb0ZHuOZcLVrJ+3R5SZwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZBRjEzMjRBMjNGREM4N0I3MTJBREQyMTg0NkNCMUJG M0NGRURGMjAeFw0yNTA4MDkyMDAxNThaFw0yNTA4MTAyMDI5NThaMDMxMTAvBgNV BAMTKDI0RDZEOUM4ODg4NERFQ0ZDN0MyQjlCOTJCMjgwNDRDQzg1MDY4QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4P/vy9QEqs4mQM7PIb8LgFB/I 68Z7eA1lziNfN+DbYKXa0hk+tnV273akXjJQ5f4A8j/UdGL073/tyDFztx8RQYkj CEQImdqMUHrG1nyGSPra6hhR/w/qLnh5Q8zs2Muo8aQYWcrnuguBjaodttQnc2dR B12ZbZjEjN5gExbJPaJihLOjGjfxPcoeCAQwL6RM8OWLAExdmOO5anyelwXiYIOE zsuuDmok8igHZxG7eXhpnkUkI+qkgqE9dg7jKjVCb/UZxApICpnPlMi97/5sqnvw RoZexp95UCtPoOWalKt4hkFw2hTfdm8IYpKBN8uA7Abb76ocuAEqpHP7H7zFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJNbZyIiE3s/Hwrm5KygETMhQaKwwHwYDVR0j BBgwFoAUv68TJKI/3Ie3Eq3SGEbLG/PP7fIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2g5c3dMdWk4cFpoWlNWTXoxbVRaV0NVY2d1NTZEMXBOODY0eUo5NXpI SjcvMC9CRkFGMTMyNEEyM0ZEQzg3QjcxMkFERDIxODQ2Q0IxQkYzQ0ZFREYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQUYxMzI0QTIzRkRDODdC NzEyQUREMjE4NDZDQjFCRjNDRkVERjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2g5c3dMdWk4cFpoWlNWTXoxbVRaV0NVY2d1NTZEMXBOODY0eUo5NXpISjcvMC9C RkFGMTMyNEEyM0ZEQzg3QjcxMkFERDIxODQ2Q0IxQkYzQ0ZFREYyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdE8YnnxPLgh4AltM+Fy/PaHSda7LVKSV/wNgDMVd5Q+0CIU7cIuw+uygAF7m DOOssLVvxiG3z9KpVI7vAldU4K6Hrot2snyfUKfPzx+r3rBFdgXT+qdMIaoWevsX anliH3QuTEN4pHiwDHoAao/qoda7a2ygA2z2zfCjCqf4LfvSeh0A5j6X/fOCdDkC Og00GisvHcFyshP7J0Kb67rCwBjFBIWkX1LDPi+IZz9cyuwrAcxwgt2g7V34Bdjx HDshXzDlNqVmoZl0bcWAIOeI/shza6Qrhgyx3HkZiot/60q2kBVlNj4MSvSwcfnr RxSaG0qs6JxTX1lkXycQqeZL6A== -----END CERTIFICATE-----Generated at Sun Aug 10 04:29:30 2025 by rpki-client