$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft File: BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft (raw, json) Hash identifier: USj+N0zfBjRoLQYgN3puLIJf0kBxpr1NZg3di3Mn+Ys= Subject key identifier: 5D:E9:F7:9C:06:8F:8D:AD:20:EA:93:BC:8F:11:E9:93:82:3D:85:0F Authority key identifier: BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46 Certificate issuer: /CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446 Certificate serial: 2521EA1EA36865BCCFC4A52EF2329CBA69CDA712 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer Subject info access: rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft Manifest number: 0301 Signing time: Wed 05 Nov 2025 06:56:38 +0000 Manifest this update: Wed 05 Nov 2025 06:51:38 +0000 Manifest next update: Thu 06 Nov 2025 07:43:38 +0000 Files and hashes: 1: BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl (hash: YtKRilZNhA6XRZesUlh181kZ+2zxQhr7btITOSNNcVQ=) 2: 34352e3233392e302e302f32322d3232203d3e203532383538.roa (hash: M65VDR5KYw9XeZVWCrlotO4EXQohZff3wA4rGwAsTL4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 07:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:21:ea:1e:a3:68:65:bc:cf:c4:a5:2e:f2:32:9c:ba:69:cd:a7:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA54A47E5F910AE921EAEE9B9BE5109C32501446 Validity Not Before: Nov 5 06:51:38 2025 GMT Not After : Nov 6 07:43:38 2025 GMT Subject: CN=5DE9F79C068F8DAD20EA93BC8F11E993823D850F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5e:2d:b2:d2:de:cb:0f:16:ee:4b:30:b9:36: 9a:18:90:02:87:85:35:7c:0a:b9:38:1e:0f:ea:19: 97:62:5c:e3:e2:15:56:4c:e4:41:5a:dd:94:0b:af: b9:35:fa:45:5f:72:99:47:aa:c0:59:d2:64:1c:ea: 0a:7a:54:6a:46:db:88:f6:a5:6a:c6:4f:33:6c:3e: d6:3b:a3:b1:57:f0:38:79:97:67:77:d2:b0:4b:37: cd:76:d9:27:00:3a:db:1e:b1:b4:9e:7a:0e:09:13: 15:86:02:45:3f:c2:18:43:33:b2:eb:3e:9f:f4:b4: ca:17:24:cc:a0:37:7b:5f:61:e6:97:44:9e:f1:84: 1d:32:d7:1a:71:f5:5a:52:3a:cc:9c:ce:d9:a3:c9: ad:fa:8b:7b:87:81:e8:69:e2:64:82:db:a3:cf:67: 1b:3e:1b:cb:fc:cf:5b:a8:4a:7a:b0:11:90:50:10: 98:57:57:89:e9:70:a3:26:39:20:9f:c0:40:a3:01: 59:b3:b7:85:e6:f2:b8:3d:ab:6f:a4:a8:2e:c2:e0: 50:3e:14:e8:f5:09:62:6a:8d:56:e8:b6:be:94:fc: ce:0d:f1:86:32:a1:8f:75:a7:72:ca:be:16:cd:5e: c7:14:91:14:a3:ee:fa:4a:ca:d2:10:f1:f9:bb:6d: 62:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E9:F7:9C:06:8F:8D:AD:20:EA:93:BC:8F:11:E9:93:82:3D:85:0F X509v3 Authority Key Identifier: keyid:BA:54:A4:7E:5F:91:0A:E9:21:EA:EE:9B:9B:E5:10:9C:32:50:14:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/1/BA54A47E5F910AE921EAEE9B9BE5109C32501446.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b0:56:f9:8d:a4:ac:ce:58:71:a5:50:fb:8c:70:de:80:f9: bd:47:15:26:5b:b9:f1:41:c4:c7:b6:be:3e:73:a0:bf:31:bf: a1:34:3a:53:47:b0:89:06:01:db:cd:58:a0:10:34:20:6c:45: 72:bc:4d:e9:41:30:e0:6d:d9:b0:a0:55:d5:41:9d:d5:45:18: 21:3d:47:bb:e4:08:e0:af:4c:0d:e1:fb:9e:c2:83:3b:90:d2: 4f:66:53:26:bb:7d:43:d6:22:a2:d6:03:3b:c4:b5:b2:0b:99: 88:58:32:98:28:25:1a:56:d6:08:29:ba:48:67:ec:a9:73:24: aa:9c:0e:d1:54:fe:ce:e4:3a:50:ff:61:39:6e:b7:25:61:72: 6d:9d:bd:38:31:ad:c5:34:01:b9:5f:1f:04:ec:67:0c:4b:dc: 41:e5:fe:83:bb:ee:69:1d:f1:e3:24:92:2e:45:69:f4:67:ef: 4d:df:0c:58:b5:44:32:fd:4d:7a:f6:21:bf:b2:0c:fd:2e:2c: 32:87:3f:46:9e:c5:4c:a0:b1:bd:59:1b:9d:d5:a8:69:f5:9b: be:58:3a:a0:2b:87:c1:f0:1d:e0:d7:80:61:2b:0a:16:65:f0: 03:2f:ac:4a:b1:c1:eb:45:3f:2d:f8:79:b5:3c:e3:1c:b9:1a: 66:45:8a:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJSHqHqNoZbzPxKUu8jKcumnNpxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1NEE0N0U1RjkxMEFFOTIxRUFFRTlCOUJFNTEwOUMz MjUwMTQ0NjAeFw0yNTExMDUwNjUxMzhaFw0yNTExMDYwNzQzMzhaMDMxMTAvBgNV BAMTKDVERTlGNzlDMDY4RjhEQUQyMEVBOTNCQzhGMTFFOTkzODIzRDg1MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTXi2y0t7LDxbuSzC5NpoYkAKH hTV8Crk4Hg/qGZdiXOPiFVZM5EFa3ZQLr7k1+kVfcplHqsBZ0mQc6gp6VGpG24j2 pWrGTzNsPtY7o7FX8Dh5l2d30rBLN8122ScAOtsesbSeeg4JExWGAkU/whhDM7Lr Pp/0tMoXJMygN3tfYeaXRJ7xhB0y1xpx9VpSOsycztmjya36i3uHgehp4mSC26PP Zxs+G8v8z1uoSnqwEZBQEJhXV4npcKMmOSCfwECjAVmzt4Xm8rg9q2+kqC7C4FA+ FOj1CWJqjVbotr6U/M4N8YYyoY91p3LKvhbNXscUkRSj7vpKytIQ8fm7bWIxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXen3nAaPja0g6pO8jxHpk4I9hQ8wHwYDVR0j BBgwFoAUulSkfl+RCukh6u6bm+UQnDJQFEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVNXcVNZWUFzRmtzTnBjcmhnRER0NW85YzJpWThqb2U1aUdUdXA3Q01V eFQvMS9CQTU0QTQ3RTVGOTEwQUU5MjFFQUVFOUI5QkU1MTA5QzMyNTAxNDQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNTRBNDdFNUY5MTBBRTky MUVBRUU5QjlCRTUxMDlDMzI1MDE0NDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVNXcVNZWUFzRmtzTnBjcmhnRER0NW85YzJpWThqb2U1aUdUdXA3Q01VeFQvMS9C QTU0QTQ3RTVGOTEwQUU5MjFFQUVFOUI5QkU1MTA5QzMyNTAxNDQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFbBW+Y2krM5YcaVQ+4xw3oD5vUcVJlu58UHEx7a+PnOgvzG/oTQ6U0ewiQYB 281YoBA0IGxFcrxN6UEw4G3ZsKBV1UGd1UUYIT1Hu+QI4K9MDeH7nsKDO5DST2ZT Jrt9Q9YiotYDO8S1sguZiFgymCglGlbWCCm6SGfsqXMkqpwO0VT+zuQ6UP9hOW63 JWFybZ29ODGtxTQBuV8fBOxnDEvcQeX+g7vuaR3x4ySSLkVp9GfvTd8MWLVEMv1N evYhv7IM/S4sMoc/Rp7FTKCxvVkbndWoafWbvlg6oCuHwfAd4NeAYSsKFmXwAy+s SrHB60U/Lfh5tTzjHLkaZkWKLQ== -----END CERTIFICATE-----Generated at Wed Nov 5 11:44:25 2025 by rpki-client