$ rpki-client -vvf rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft File: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft (raw, json) Hash identifier: IRtAIbGMYuN2VjpheL94TbDN5P25oT7egaFMJZGb/eo= Subject key identifier: DE:20:FD:4C:E0:BC:5E:81:74:7A:04:50:85:D6:DD:B3:54:10:C7:C5 Authority key identifier: BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46 Certificate issuer: /CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46 Certificate serial: 41034C8623D2589335A1FE5191A15666786BFED3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer Subject info access: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft Manifest number: 17 Signing time: Sat 09 Aug 2025 18:13:24 +0000 Manifest this update: Sat 09 Aug 2025 18:08:24 +0000 Manifest next update: Sun 10 Aug 2025 21:27:24 +0000 Files and hashes: 1: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl (hash: kKTMOCqKageO/tbT2VioXh7sOORvHJn2Wi0PlFMsWeg=) 2: 323830343a393339303a3a2f33322d3438203d3e203631363233.roa (hash: LG7owg69fyxfKV8rigMC7sBkP5B19iTBtW4UQCyl/2Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 21:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:03:4c:86:23:d2:58:93:35:a1:fe:51:91:a1:56:66:78:6b:fe:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46 Validity Not Before: Aug 9 18:08:24 2025 GMT Not After : Aug 10 21:27:24 2025 GMT Subject: CN=DE20FD4CE0BC5E81747A045085D6DDB35410C7C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3b:62:22:94:8a:5c:0e:bd:8e:a6:61:c0:1c: e2:85:b4:3b:de:a8:7b:a7:d6:e1:79:e2:78:43:29: a6:9f:7d:75:0d:33:9b:ee:0e:2e:58:56:b3:99:31: 2a:79:b1:9e:5f:1b:f8:4f:e8:1b:9c:77:aa:60:01: c1:d1:61:c3:a3:a0:32:26:34:0b:03:cb:4e:5a:cf: c1:6f:49:a0:cd:13:74:82:f9:f4:8d:45:4b:cf:29: ae:04:6b:7f:25:10:1f:de:a5:28:12:44:1a:a8:b8: 97:d9:1a:c9:12:a7:6b:5f:56:30:b3:2c:8e:b2:35: 96:6f:93:ac:9e:05:8d:2d:9e:97:5d:16:9f:e8:c1: 77:57:7e:b4:d0:1f:32:d5:fa:af:5b:9e:db:d6:1f: 07:ac:40:e9:91:57:f5:ac:33:f5:2c:61:06:c5:5c: aa:53:8a:70:e7:f7:3a:8a:df:94:7a:2c:e9:89:64: 51:7b:9a:e1:cc:c3:ac:ec:0d:77:7a:bc:43:c9:99: 70:2e:eb:c9:6f:e7:f2:71:e3:70:a4:f4:7e:38:35: 45:83:f8:26:3b:05:a7:05:10:e0:71:d7:39:32:ea: 43:20:7d:59:b8:0c:b9:2f:9e:69:3a:62:37:74:37: e3:89:b1:24:58:cf:f3:bd:f8:b0:99:80:a3:4b:cf: 6b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:20:FD:4C:E0:BC:5E:81:74:7A:04:50:85:D6:DD:B3:54:10:C7:C5 X509v3 Authority Key Identifier: keyid:BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:73:12:9b:71:e7:4c:c6:3a:32:dc:46:11:8c:57:b0:6b:f4: 7d:67:aa:7e:a1:fb:e5:39:df:e3:db:61:b3:5c:01:76:d8:3f: 3d:7e:4a:24:f9:e0:9f:d4:22:e2:a2:72:0c:e1:82:ae:2a:23: 33:6e:1b:ee:b1:7f:fb:2e:8a:4b:67:64:2c:aa:3b:21:b5:25: 2b:0f:d7:89:b1:c7:df:c4:51:fd:33:45:59:69:61:5a:58:1c: d8:43:b3:89:52:f6:1e:08:cb:75:a5:de:f2:31:20:92:50:ee: 63:8a:6b:d2:a2:d5:6e:f9:c1:f4:66:af:d7:31:89:a7:9a:36: 4b:40:0e:c7:d6:27:fa:3e:f6:4d:80:1f:88:84:5b:77:9a:68: ab:f8:45:79:dc:ae:12:4b:a9:0e:07:42:b8:84:70:a7:c9:34: 9c:25:80:a4:17:72:8e:37:c1:a6:7b:61:29:2b:bc:23:35:6d: 8b:a9:47:3f:23:1a:23:54:9b:81:4b:52:36:2f:6d:73:f9:85: 94:88:5d:e2:73:4a:76:d6:7d:b6:dd:a0:e6:2f:3f:45:06:b9: d3:10:92:bc:b4:af:0e:08:11:37:bd:f8:6e:75:d3:14:24:98: b1:cc:ca:51:4b:72:8d:21:50:e0:22:6f:25:40:8b:6f:33:f3: 9c:e6:36:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQQNMhiPSWJM1of5RkaFWZnhr/tMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1N0QyMzlEMkRDMEFDMjU3MzczQTdCQkFENTE4ODZB QTVENEM0NjAeFw0yNTA4MDkxODA4MjRaFw0yNTA4MTAyMTI3MjRaMDMxMTAvBgNV BAMTKERFMjBGRDRDRTBCQzVFODE3NDdBMDQ1MDg1RDZEREIzNTQxMEM3QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLO2IilIpcDr2OpmHAHOKFtDve qHun1uF54nhDKaaffXUNM5vuDi5YVrOZMSp5sZ5fG/hP6Bucd6pgAcHRYcOjoDIm NAsDy05az8FvSaDNE3SC+fSNRUvPKa4Ea38lEB/epSgSRBqouJfZGskSp2tfVjCz LI6yNZZvk6yeBY0tnpddFp/owXdXfrTQHzLV+q9bntvWHwesQOmRV/WsM/UsYQbF XKpTinDn9zqK35R6LOmJZFF7muHMw6zsDXd6vEPJmXAu68lv5/Jx43Ck9H44NUWD +CY7BacFEOBx1zky6kMgfVm4DLkvnmk6Yjd0N+OJsSRYz/O9+LCZgKNLz2s3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3iD9TOC8XoF0egRQhdbds1QQx8UwHwYDVR0j BBgwFoAUulfSOdLcCsJXNzp7utUYhqpdTEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGRCS2JHaU5vN0YyWjdiR0JRTXNlM3JySk5YZ2pOVjVLVlIyRGhHV1NL YTUvMC9CQTU3RDIzOUQyREMwQUMyNTczNzNBN0JCQUQ1MTg4NkFBNUQ0QzQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNTdEMjM5RDJEQzBBQzI1 NzM3M0E3QkJBRDUxODg2QUE1RDRDNDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGRCS2JHaU5vN0YyWjdiR0JRTXNlM3JySk5YZ2pOVjVLVlIyRGhHV1NLYTUvMC9C QTU3RDIzOUQyREMwQUMyNTczNzNBN0JCQUQ1MTg4NkFBNUQ0QzQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgHMSm3HnTMY6MtxGEYxXsGv0fWeqfqH75Tnf49ths1wBdtg/PX5KJPngn9Qi 4qJyDOGCriojM24b7rF/+y6KS2dkLKo7IbUlKw/XibHH38RR/TNFWWlhWlgc2EOz iVL2HgjLdaXe8jEgklDuY4pr0qLVbvnB9Gav1zGJp5o2S0AOx9Yn+j72TYAfiIRb d5poq/hFedyuEkupDgdCuIRwp8k0nCWApBdyjjfBpnthKSu8IzVti6lHPyMaI1Sb gUtSNi9tc/mFlIhd4nNKdtZ9tt2g5i8/RQa50xCSvLSvDggRN734bnXTFCSYsczK UUtyjSFQ4CJvJUCLbzPznOY2+A== -----END CERTIFICATE-----Generated at Sun Aug 10 13:53:35 2025 by rpki-client