$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft File: 2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft (raw, json) Hash identifier: Z9eyd77oyo/dvafOTf7AaFf5LJptbWDXZAIxSahu8zA= Subject key identifier: BA:A0:9A:E4:AE:8A:F4:2F:A9:38:58:84:A8:08:BD:4F:3C:6D:44:C5 Authority key identifier: 2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8 Certificate issuer: /CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8 Certificate serial: 60FBD2EA275C0428BE68E672D891CF17AA641919 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer Subject info access: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft Manifest number: 0289 Signing time: Tue 05 Aug 2025 17:10:00 +0000 Manifest this update: Tue 05 Aug 2025 17:05:00 +0000 Manifest next update: Wed 06 Aug 2025 20:21:00 +0000 Files and hashes: 1: 323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa (hash: RDB8qhHDtEJH43hz9XAz3ZX43R7IUeRH/63LhcdomFk=) 2: 323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa (hash: iu9KhdvHQ9wBTV5rJlpedJZjb7HAwInZBQdkD2j7ZU0=) 3: 323830343a316635343a3a2f33322d3332203d3e20323732323230.roa (hash: ETxIJeAD+Mu+7r+AWo3Nm9UhNL8Bg/5nxFe6vkKlSOE=) 4: 323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa (hash: iYQXb3D7VJdAmtZ75LPUk4nCA8FrcSl0FcHXsYzDgzA=) 5: 323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa (hash: TrStuRI8tf6D7pJ701olCeb0YQELq0gHQuPH4Ji39gU=) 6: 323830343a316635343a663030303a3a2f34302d3430203d3e20323732323230.roa (hash: rwqPq3e3cIfTJi1yHcLF7YzVNns2BpAaoaon/GDyOgs=) 7: 2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl (hash: QPGsSAN8fVPrEFvAY6H4qoDX+ogl56j0dZ/PsQwOZX8=) 8: 323830343a316635343a666630303a3a2f34302d3430203d3e20323732323230.roa (hash: 4i7bGHdxVTMkuS5qYVQ3ZZqO6DS7azDaJ1e2cCNQZQM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 20:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fb:d2:ea:27:5c:04:28:be:68:e6:72:d8:91:cf:17:aa:64:19:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8 Validity Not Before: Aug 5 17:05:00 2025 GMT Not After : Aug 6 20:21:00 2025 GMT Subject: CN=BAA09AE4AE8AF42FA9385884A808BD4F3C6D44C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ef:17:19:b1:f6:8c:28:91:76:92:5c:e5:78: d5:08:60:8e:73:7c:a9:4b:a4:da:ad:04:e0:3d:a5: 43:67:e2:f8:ea:29:14:c1:67:64:03:a3:3d:b9:b5: 45:db:a8:74:40:07:ff:36:c0:d1:d3:47:7a:ab:f3: 58:3e:25:3f:45:73:b5:eb:16:d4:71:ba:26:c6:41: 20:f2:fc:b8:21:6d:8a:5b:ff:ec:64:03:6d:8e:b1: 70:33:31:4b:26:12:bb:6e:07:cb:f3:39:f8:66:db: db:86:a3:93:ce:bf:ce:30:68:3d:51:f5:c5:c0:10: d3:cb:e5:fd:b4:47:c4:46:04:8c:07:9d:e0:8f:47: 5b:97:dc:a9:4c:c8:d5:a5:9e:46:9a:00:21:46:99: 81:4f:54:69:da:27:95:25:fd:95:d3:a7:83:58:c6: a8:8a:73:6f:2d:75:33:66:b4:53:05:f0:c0:0a:a4: 70:f4:5f:5b:2c:89:bb:3f:b2:8e:1d:b8:4f:33:cb: f6:f0:04:63:59:d5:6d:a0:a5:e8:95:93:fc:22:f7: c2:70:c2:07:98:89:b7:d4:80:6f:df:83:88:7e:ef: 78:d4:8d:3a:95:61:5a:63:26:e6:20:69:88:29:4e: 0e:c0:32:36:3e:64:9b:8f:b0:d1:71:15:2c:a8:60: f1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A0:9A:E4:AE:8A:F4:2F:A9:38:58:84:A8:08:BD:4F:3C:6D:44:C5 X509v3 Authority Key Identifier: keyid:2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b0:87:24:86:b9:2e:5b:b6:73:f9:bf:b1:91:b1:84:0c:29: ad:9a:b3:b3:83:01:48:35:01:5f:98:4e:54:3d:2c:8a:ae:7d: 46:a9:ff:f3:95:74:a8:a9:89:b7:9a:cd:4b:dd:bb:af:d0:9b: 51:cf:76:c0:75:39:06:ec:b2:99:ba:ee:ea:ba:9d:10:22:cc: f8:97:a9:ef:d7:29:d9:41:32:58:ff:28:2d:3e:fb:df:8f:e5: e2:f0:6a:39:ad:48:23:05:67:b7:fc:26:be:08:5f:3b:5d:6e: 33:e9:61:38:67:e2:1c:ac:19:65:2a:d8:33:e4:73:91:22:33: 9a:d5:c0:cf:f9:b6:fa:45:3d:3e:21:02:1f:47:40:f5:8e:52: cf:b3:e8:3b:d7:e1:5c:06:14:69:ca:74:76:ca:14:91:92:aa: 8a:8b:4f:4f:f9:ad:da:71:91:39:7a:70:5b:49:e3:04:d7:33: 75:14:09:75:6f:fa:5a:b4:c5:fa:89:63:fc:04:2e:b6:6e:b2: cd:5c:58:20:91:1a:57:90:f4:69:b5:37:43:23:af:72:bf:42: 91:0f:84:ca:e7:88:d4:77:cb:e9:b6:1b:7a:f7:c1:9f:43:e6: 13:2c:74:de:d8:2a:b9:6b:8b:d6:c6:5a:27:77:85:55:c9:90: f2:d4:e4:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYPvS6idcBCi+aOZy2JHPF6pkGRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEzNzhGM0ZDM0FDNUFGRkQyQUVGNTg5Mzk4OTU2N0Uy REM0MERCODAeFw0yNTA4MDUxNzA1MDBaFw0yNTA4MDYyMDIxMDBaMDMxMTAvBgNV BAMTKEJBQTA5QUU0QUU4QUY0MkZBOTM4NTg4NEE4MDhCRDRGM0M2RDQ0QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr7xcZsfaMKJF2klzleNUIYI5z fKlLpNqtBOA9pUNn4vjqKRTBZ2QDoz25tUXbqHRAB/82wNHTR3qr81g+JT9Fc7Xr FtRxuibGQSDy/LghbYpb/+xkA22OsXAzMUsmErtuB8vzOfhm29uGo5POv84waD1R 9cXAENPL5f20R8RGBIwHneCPR1uX3KlMyNWlnkaaACFGmYFPVGnaJ5Ul/ZXTp4NY xqiKc28tdTNmtFMF8MAKpHD0X1ssibs/so4duE8zy/bwBGNZ1W2gpeiVk/wi98Jw wgeYibfUgG/fg4h+73jUjTqVYVpjJuYgaYgpTg7AMjY+ZJuPsNFxFSyoYPHTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuqCa5K6K9C+pOFiEqAi9TzxtRMUwHwYDVR0j BBgwFoAUKjePP8OsWv/SrvWJOYlWfi3EDbgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmFkRDRXMkF5b25wRDRGTVZveENFQ2Z2c2VnN3hESGlrYUFqc2R0WEFj RXUvMS8yQTM3OEYzRkMzQUM1QUZGRDJBRUY1ODkzOTg5NTY3RTJEQzQwREI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMzc4RjNGQzNBQzVBRkZE MkFFRjU4OTM5ODk1NjdFMkRDNDBEQjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmFkRDRXMkF5b25wRDRGTVZveENFQ2Z2c2VnN3hESGlrYUFqc2R0WEFjRXUvMS8y QTM3OEYzRkMzQUM1QUZGRDJBRUY1ODkzOTg5NTY3RTJEQzQwREI4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANrCHJIa5Llu2c/m/sZGxhAwprZqzs4MBSDUBX5hOVD0siq59Rqn/85V0qKmJ t5rNS927r9CbUc92wHU5Buyymbru6rqdECLM+Jep79cp2UEyWP8oLT7734/l4vBq Oa1IIwVnt/wmvghfO11uM+lhOGfiHKwZZSrYM+RzkSIzmtXAz/m2+kU9PiECH0dA 9Y5Sz7PoO9fhXAYUacp0dsoUkZKqiotPT/mt2nGROXpwW0njBNczdRQJdW/6WrTF +olj/AQutm6yzVxYIJEaV5D0abU3QyOvcr9CkQ+EyueI1HfL6bYbevfBn0PmEyx0 3tgquWuL1sZaJ3eFVcmQ8tTkPA== -----END CERTIFICATE-----Generated at Wed Aug 6 00:46:23 2025 by rpki-client