$ rpki-client -vvf rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.mft File: BA19CE12E965E20D169A9F9481AC6C8F31644D3E.mft (raw, json) Hash identifier: nBayCWlHRA4BbZ1UonDomkDTKAfkIcBTqqa3M4YRBVQ= Subject key identifier: 59:07:28:90:A7:81:1C:93:74:89:1D:E2:31:C3:09:4A:A9:24:3F:DE Authority key identifier: BA:19:CE:12:E9:65:E2:0D:16:9A:9F:94:81:AC:6C:8F:31:64:4D:3E Certificate issuer: /CN=BA19CE12E965E20D169A9F9481AC6C8F31644D3E Certificate serial: 5FA9ECBDDBD306DAE4F0EF98385BB16D5AC9A748 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.cer Subject info access: rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.mft Manifest number: 0290 Signing time: Sun 01 Mar 2026 22:09:50 +0000 Manifest this update: Sun 01 Mar 2026 22:04:50 +0000 Manifest next update: Tue 03 Mar 2026 00:10:50 +0000 Files and hashes: 1: BA19CE12E965E20D169A9F9481AC6C8F31644D3E.crl (hash: bokdeeOiKx31dN3XMyWEDiraxI4rmAkCLvylxANan6I=) 2: 323830343a323431343a3a2f33322d3332203d3e20323634323030.roa (hash: l1bxXWpQalCMNnNo8et6dLA39vN6VrXExxi00CE4CMs=) 3: 3133382e39372e3139322e302f32322d3232203d3e20323634323030.roa (hash: lyptdHgc5LAwz7D5PHQXeUW+ibpMYXQ5YinRPWpT63I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.crl rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 00:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a9:ec:bd:db:d3:06:da:e4:f0:ef:98:38:5b:b1:6d:5a:c9:a7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA19CE12E965E20D169A9F9481AC6C8F31644D3E Validity Not Before: Mar 1 22:04:50 2026 GMT Not After : Mar 3 00:10:50 2026 GMT Subject: CN=59072890A7811C9374891DE231C3094AA9243FDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fa:dc:0c:d4:f1:62:87:5c:6f:c1:66:18:8c: ae:4c:c1:be:7e:4f:41:1f:bf:d4:c5:b1:c3:09:cf: 1f:75:3c:d1:1c:b0:b3:1b:36:29:d5:76:65:d1:26: 92:45:d8:f2:03:c8:6a:88:96:18:0a:69:7e:c3:c6: 58:fb:97:47:1b:2a:83:4b:82:f4:81:6c:42:51:f4: 50:60:e7:15:da:76:62:6e:58:8e:e8:af:ef:ca:c3: c2:9f:5b:b2:df:4e:9a:7b:f8:c3:8d:e2:90:89:7a: d7:69:64:ba:ff:52:c3:c2:49:3c:cc:dd:3d:9d:dc: 62:e4:48:63:2d:9a:fa:2f:2f:b0:d9:c8:16:d1:f8: 53:73:e0:c8:a7:75:2d:e9:03:9e:71:b9:d0:6b:06: 3f:7f:4c:9c:ff:ce:7f:e3:f5:d8:39:f8:8b:a2:89: 61:a4:86:f4:96:56:8a:1f:74:d0:36:29:6c:08:9a: 6f:06:f1:7c:88:09:15:14:12:71:4f:46:19:d8:dc: ab:79:09:69:b4:67:37:f0:dd:5d:73:48:fa:b8:46: fb:88:ce:3b:b8:9b:98:7c:97:47:81:72:ba:db:c3: 9b:c8:5c:f9:98:5a:09:f5:8e:c8:26:fd:51:48:83: 89:2b:3d:cc:41:95:7d:2f:de:af:bb:30:e8:de:f2: 41:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:07:28:90:A7:81:1C:93:74:89:1D:E2:31:C3:09:4A:A9:24:3F:DE X509v3 Authority Key Identifier: keyid:BA:19:CE:12:E9:65:E2:0D:16:9A:9F:94:81:AC:6C:8F:31:64:4D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/1/BA19CE12E965E20D169A9F9481AC6C8F31644D3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d3:ce:43:c8:8d:c9:91:98:ad:57:e1:02:e4:ee:d1:98:1d: dc:55:4a:0e:a4:f2:95:af:fb:5f:4a:29:e4:01:4a:b5:71:c3: 91:3d:f5:79:b1:52:5e:39:c6:1d:83:8f:f6:8c:ca:2a:bb:f3: 30:1e:76:61:b7:ee:18:39:ee:95:0f:bd:bd:96:a3:b4:63:97: c3:cd:57:3d:7a:e6:bb:08:01:8f:eb:c6:06:48:e4:ac:be:81: fb:1f:cb:91:e0:6b:fc:62:b6:e2:52:3b:73:01:c5:6f:8b:7c: 91:4a:69:d0:59:5a:7e:ea:d5:af:0c:7a:fb:d2:84:7c:41:15: a0:bf:60:3d:00:c2:2f:81:c5:f9:68:0e:a6:ad:58:a9:60:18: 8e:c9:ea:58:a0:55:2d:d5:6d:76:00:5c:5a:ca:4c:68:1d:28: a4:b1:62:37:38:7e:63:d0:b5:03:c2:4f:a9:41:ab:e5:d6:c9: a9:81:13:2d:24:63:4c:60:e9:bf:e3:4b:c0:20:09:d6:5d:5e: c7:08:9d:8b:ca:01:0e:b1:4d:57:1d:08:73:95:be:62:55:9a: ec:b4:92:39:fa:e8:6d:15:e3:c2:82:0d:7a:63:7e:59:65:d0: 05:fc:77:eb:09:b0:35:82:1c:68:c1:35:c1:0f:71:99:f3:e1: ed:86:da:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX6nsvdvTBtrk8O+YOFuxbVrJp0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExOUNFMTJFOTY1RTIwRDE2OUE5Rjk0ODFBQzZDOEYz MTY0NEQzRTAeFw0yNjAzMDEyMjA0NTBaFw0yNjAzMDMwMDEwNTBaMDMxMTAvBgNV BAMTKDU5MDcyODkwQTc4MTFDOTM3NDg5MURFMjMxQzMwOTRBQTkyNDNGREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi+twM1PFih1xvwWYYjK5Mwb5+ T0Efv9TFscMJzx91PNEcsLMbNinVdmXRJpJF2PIDyGqIlhgKaX7Dxlj7l0cbKoNL gvSBbEJR9FBg5xXadmJuWI7or+/Kw8KfW7LfTpp7+MON4pCJetdpZLr/UsPCSTzM 3T2d3GLkSGMtmvovL7DZyBbR+FNz4MindS3pA55xudBrBj9/TJz/zn/j9dg5+Iui iWGkhvSWVoofdNA2KWwImm8G8XyICRUUEnFPRhnY3Kt5CWm0Zzfw3V1zSPq4RvuI zju4m5h8l0eBcrrbw5vIXPmYWgn1jsgm/VFIg4krPcxBlX0v3q+7MOje8kHnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWQcokKeBHJN0iR3iMcMJSqkkP94wHwYDVR0j BBgwFoAUuhnOEull4g0Wmp+UgaxsjzFkTT4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR1BNTlRTYVlHWWlzelVqcldQb2Z4ZXM4N0ZxYmNlNlhLNEVkYWFISHNO SmEvMS9CQTE5Q0UxMkU5NjVFMjBEMTY5QTlGOTQ4MUFDNkM4RjMxNjQ0RDNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBMTlDRTEyRTk2NUUyMEQx NjlBOUY5NDgxQUM2QzhGMzE2NDREM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R1BNTlRTYVlHWWlzelVqcldQb2Z4ZXM4N0ZxYmNlNlhLNEVkYWFISHNOSmEvMS9C QTE5Q0UxMkU5NjVFMjBEMTY5QTlGOTQ4MUFDNkM4RjMxNjQ0RDNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACtPOQ8iNyZGYrVfhAuTu0Zgd3FVKDqTyla/7X0op5AFKtXHDkT31ebFSXjnG HYOP9ozKKrvzMB52YbfuGDnulQ+9vZajtGOXw81XPXrmuwgBj+vGBkjkrL6B+x/L keBr/GK24lI7cwHFb4t8kUpp0FlafurVrwx6+9KEfEEVoL9gPQDCL4HF+WgOpq1Y qWAYjsnqWKBVLdVtdgBcWspMaB0opLFiNzh+Y9C1A8JPqUGr5dbJqYETLSRjTGDp v+NLwCAJ1l1exwidi8oBDrFNVx0Ic5W+YlWa7LSSOfrobRXjwoINemN+WWXQBfx3 6wmwNYIcaME1wQ9xmfPh7YbaRA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:59:58 2026 by rpki-client